Kata Containers 1.4.3

d5ba949 release: Kata Containers 1.4.3
5d98e66 CODEOWNERS: add group review trigger for proto file changes
6c9b248 pullapprove: remove it
558778e ci: Add a CODEOWNERS file for github ack checks

4be5f67 release: Kata Containers 1.4.3
38b1af2 release: Kata Containers 1.4.3
2347e31 ci: remove pullapprove config file
c6f4394 docs: Add arch link to README file

7fe8d3b versions: use clear linux latest rootfs.
d5706f3 release: Kata Containers 1.4.3
1d3f5e8 versions: Update kernel to 4.14.102
677c51c ci: remove pullapprove file

faa598b release: Kata Containers 1.4.3
77c7448 release: Kata Containers 1.4.3
79be4e3 pullapprove: remove it
a6a1f8b ci: Add a CODEOWNERS file for github ack checks

Kata Containers 1.4.3 is compatible with Docker v18.06-ce

Kata Containers 1.4.3 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Kata Containers 1.4.3 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

Kata Containers 1.4.3 support the OCI Runtime Specification v1.0.0-rc5

Kata Containers 1.4.3 is compatible with Kubernetes 1.12.2-00

Agent version: 1.4.3

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Containers 1.4.3 suggest to use the Linux kernel v4.14.102
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Follow the Kata installation instructions:

More information Limitations

Kata Containers 1.6.0-rc1

Release 1.6.0-rc1

Initial pre-release for 1.6

agent Changes

Shortlog

94b601b release: Kata Containers 1.6.0-rc1
e6006cc CODEOWNERS: add group review trigger for proto file changes
ae9ce6e network: Remove grpc AddInterface and RemoveInterface api
67b2559 cpuset: update parents with all cpus from guest.
201c487 cgroup: ignore cpuset if can not be applied.
00f0cf9 pullapprove: remove it
0cb5f22 agent: refine unit test for func GetGuestDetails
96d7acb agent: add interface memHotplugByProbe for memory hotplug
6007523 agent: add memory hotplug probe interface check in GetGuestDetails
44d8478 ci: Add a CODEOWNERS file for github ack checks

proxy Changes

Shortlog

15b8ddf release: Kata Containers 1.6.0-rc1
773f73a ci: remove pullapprove config file
b8f067a docs: Add arch link to README file

runtime Changes

Shortlog

105dc2b release: Kata Containers 1.6.0-rc1
4357e85 doc: Fix invalid URLs
dc26508 virtcontainers: fix vCPU calculation errors
36141d2 Network: add ipvlan unmarshal
f540a80 store: Add SetLogger API
768658f versions: Update kernel version to 4.19.24
454775f cgroups: fix failed to remove sandbox cgroup
46e2f88 devices: fix attach count for vhost-user-blk
6daefdb qemu: Cleanup Vm paths irrespective of Sandbox stop pass/fail
58d2785 virtcontainers: don't try to talk with the proxy when it's not running
62c393c virtcontainers: change container's state to stop asap
5201860 virtcontainers: reimplement sandbox cgroup
9758cdb virtcontainers: move cpu cgroup implementation
a1c8590 virtcontainers: add method to get hypervisor PID
c78d6b0 delete: force: Do not fail on non exiting container
a136999 vendor: Add missing comma to Gopkg.lock and dep ensure
23c554e unit-test: refine func TestGetCPUDetails
1b967a4 unit-test: add nolint comment to avoid unused warning
3ec56ea runtime: add appendBridges for arm64
e93fb0b unit-test: test func for RunningOnVMM should be arch-dependent
0679f6f unit-test: refine qemu_arm64_test.go
44e2b9a unit-test: struct TestDataa should be included in arch-indenpedent .go file
409a8a5 versions: update k8s, cri-o and containerd
c17dd11 versions: Update qemu-lite hash
a614273 virtcontainers: Improve debug when create/delete files
84b7165 versions: use clear linux latest rootfs.
96e524d shimv2: Send task events to containerd/cri
81c7a96 Makefile: Set ARCH in GOPATH not set mode
bb99e41 virtcontainers: Fix Store related vm factory leak
7b0376f virtcontainers: Fix container.go cyclomatic complexity
f8e7e30 virtcontainers: Remove the resource storage original implementation
fad23ea virtcontainers: Conversion to Stores
2ecffda virtcontainers: store: Add a ItemLock API
6e9256f virtcontainers: store: Add a Raw API
c25c608 virtcontainers: store: Add a VC specific Store
ef11bf5 virtcontainers: store: Add a Delete API
f2ab58d virtcontainers: store: Implement the filesystem backend
d22cdf2 virtcontainers: store: Add an internal backend interface
6b87ecf virtcontainers: store: Keep track of newly created Stores
efd50ec virtcontainers: Add a Store manager
4be76e9 virtcontainers: Initial Store implementation
be0726c runtime: Do not error if only initrd/rootfs image installed
962e1e6 pullapprove: remove it
2affa1f virtcontainers: Reduce hyperstart agent test noise
a3eff87 virtcontainers: Make proxy startup sequence less noisy
f0312f6 virtcontainers: Reduce filesystem test noise
e402601 virtcontainers: Reduce sandbox test noise
799ac6e virtcontainers: Reduce qemu test noise
560902c virtcontainers: Reduce kata_agent test noise
2093fe6 virtcontainers: Reduce cc_proxy mock test noise
79ed088 virtcontainers: Reduce hyperstart mock test noise
7222f53 snap: add snapcraft store banner
4f51687 kata-env: kata-env error out when there is no VERSION_ID.
b1c6667 vendor: Update govmm vendoring
b0986a5 ppc64le: Fix vCPU hotplug issue
18dcd2c virtcontainers: Decouple the network API from the sandbox one
b39cb1d virtcontainers: Remove the network interface
a02c39e Makefile: Set arch regardless of GOPATH state
a48e614 ci: Add a CODEOWNERS file for github ack checks
f1a12ce shimv2: use the runtime config file passed from containerd/cri
68043b5 cli: set config options before showing config paths
718488b makefile: honor DESDIR on install
d78a62d factory: do not destroy vm factory when checking status
c93aa53 runtime: Check SMT=on/off only for P8 or lesser

shim Changes

Shortlog

1c18f2a release: Kata Containers 1.6.0-rc1
9c857bd pullapprove: remove it
574dac6 ci: Add a CODEOWNERS file for github ack checks

Compatibility with Docker

Kata Containers 1.6.0-rc1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.6.0-rc1 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.6.0-rc1 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.6.0-rc1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.6.0-rc1 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.6.0-rc1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.6.0-rc1 suggest to use the Linux kernel v4.14.102
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations

Release 1.5.1

agent Changes

Minor changes for repository management

Shortlog

08f391a release: Kata Containers 1.5.1
4951ea0 CODEOWNERS: add group review trigger for proto file changes
f2db85b pullapprove: remove it
7d9d2b9 ci: Add a CODEOWNERS file for github ack checks

proxy Changes

Minor changes for repository management

Shortlog

78d27f4 release: Kata Containers 1.5.1
a5663a9 ci: remove pullapprove config file
d8e29d7 docs: Add arch link to README file

runtime Changes

Minor changes for repository management
DESTDIR installation fixed
Fixed issue to do not destroy VM factory when checking status

Shortlog

d7c6e51 release: Kata Containers 1.5.1
d53a481 virtcontainers: fix vCPU calculation errors
23d1dfc versions: use clear linux latest rootfs.
b7588dc unit-test: refine func TestGetCPUDetails
e770e6a unit-test: add nolint comment to avoid unused warning
e1c5445 runtime: add appendBridges for arm64
ce29252 unit-test: test func for RunningOnVMM should be arch-dependent
b074797 unit-test: refine qemu_arm64_test.go
e2a6373 unit-test: struct TestDataa should be included in arch-indenpedent .go file
efe96e8 devices: fix attach count for vhost-user-blk
3d7a9b0 qemu: Cleanup Vm paths irrespective of Sandbox stop pass/fail
c4eb180 delete: force: Do not fail on non exiting container
847d940 Makefile: Set ARCH in GOPATH not set mode
1cff8cb pullapprove: remove it
09eb012 Makefile: Set arch regardless of GOPATH state
70c27ac ci: Add a CODEOWNERS file for github ack checks
6c9325d cli: set config options before showing config paths
41b9093 makefile: honor DESDIR on install
6277418 factory: do not destroy vm factory when checking status
d647fba versions: Update kernel to 4.14.102

shim Changes

Minor changes for repository management

Shortlog

615d384 release: Kata Containers 1.5.1
79833c1 pullapprove: remove it
a0a172e ci: Add a CODEOWNERS file for github ack checks

Compatibility with Docker

Kata Containers 1.5.1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.5.1 is compatible with CRI-O v1.13.0

Compatibility with cri-containerd

Kata Containers 1.5.1 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.5.1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.5.1 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.5.1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.5.1 suggest to use the Linux kernel v4.14.102
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations

Kata Containers 1.5.0

Release 1.5.0

This is an exciting release for Kata, which includes support for the Firecracker* hypervisor, the s390x* architecture as well as a new method for integrated with the containerd* project. New hypervisors, new CPU architectures and significant integration improvements!

https://medium.com/kata-containers/kata-containers-1-5-release-99acbaf7cf34

agent Changes

Shortlog

b4dae5c release: Kata Containers 1.5.0
56a779e release: Kata Containers 1.5.0-rc2
169d755 protocols/grpc: implement function to copy files
ff87c26 virtio-mmio: Add support for virtio-mmio blk devices
b9c5d5b libcontainer: use /run as root containers path
092f1a0 block: add support of block storage driver "nvdimm"
31c6b6e grpc: add SetGuestDateTime API
df822eb grpc: support rlimits
87ad0a8 release: Kata Containers 1.5.0-rc1
34b7454 grpc: sandbox: add container when is fully created.
4eca13b client: do cleanup after UT stop mock server
c25288a Makefile: Decide if agent will be built by seccomp tag

proxy Changes

Shortlog

ac75b33 release: Kata Containers 1.5.0
3be7e68 CI: add a CODEOWNERS file
fcbcb2f release: Kata Containers 1.5.0-rc2
5bf3df6 release: Kata Containers 1.5.0-rc1

runtime Changes

Shortlog

6875d3f release: Kata Containers 1.5.0
02261f9 s390x: change pci bridge type
d75f26d vc: set detach flag when umounting rootfs
d314e2d agent: clean up share path created by the agent
36762c7 qemu: cleanup vm template path properly
f542233 s390x: root parameter is missing
a5a74f6 vc: qemu: fix error message on hotplug.
d4dd5f1 qemu: fix gofmt import order.
b029e44 virtcontainers: set private propagation in rootfs
18c7aa4 virtcontainers: ppc64le qemu does not have nvdimm capabilities yet
5ee838d shimv2: use the UnmarshalAny() to unmarshal Protobuf.Any
5329a71 runtime-v2: Make sure Shutdown() only shuts the server down
6c3e0a9 build: Add support for building firecracker hypervisor
6fcb76c build: Handle qemu explicitly
933b16f build: Improve quiet install
a07b4cd virtcontainers: Fix unit test typo
5ba30fd shimv2: multi wait support for wait service
7228bab container: update: Allow updates once container is created
08f1c05 Module: fix parameter order error in cli/ps.go
2e1ddbc virtcontainers: Add Bridge to the types package
b25f43e virtcontainers: Add Capabilities to the types package
67e696b virtcontainers: Add Asset to the types package
42a89d0 katautils: Move SetKernelParams from CreateSandbox to updateRuntimeConfig
abcc2d5 Versions: Add firecracker version
a02fd59 virtcontainers: Remove code duplication in the test setup
cf22f40 virtcontainers: Remove the hypervisor waitSandbox method
763bf18 virtcontainers: Remove the hypervisor init method
db33d71 Kata-runtime: Use correct model name for TestGetCPUDetails
11e24aa kata-runtime: Return correct kata-env on ppc64le
fb149ce katautils: Remove unused argument containerID of function SetKernelParams
2c1b15d kernel: Revert "versions: Bump to kernel 4.19.10"
802bfa2 versions: Bump to kernel 4.19.10
b05dbe3 runtime: Convert to the new internal types package
701afe9 virtcontainers: First types package
3ab7d07 virtcontainers: Alias for pkg/types
bf2813f cli: allow to kill a stopped container and sandbox
c2c9c84 virtcontainers: Conditionally pass seccomp profile
09168cc virtcontainers: Call stopVM() from sandbox.Stop()
acf833c virtcontainers: Call agent startSandbox from startVM
ebf8547 virtcontainers: Remove useless startSandbox wrapper
0b28ab9 shimv2: get the kata configure file from env KATA_CONF_FILE
5c6d94d firecracker: Revendor firecracker go sdk to 0.12.0
ec5cf18 firecracker: Network API update
c099be5 container: Use lazy unmount
dd28ff5 memory: Add new option memory_offset
ef75c3d block: Add new block storage driver "nvdimm"
0f2c5bc release: Kata Containers 1.5.0-rc2
bf1a5ce sandbox: cleanup sandbox if creation failed
83e38c9 mounts: Ignore existing mounts if they cannot be honored
353564a config: Reorganize the code to fix code complexity
d6c1f53 config: Add firecracker configuration support
0d84d79 virtio-mmio: Add support for virtio-mmio
b4c3a2f virtcontainers: fc: Stop the VM by killing the process
fba2379 firecracker: Add support for pseudo hotplug
22ebc09 firecracker: Close the vsock vhostfd
e65bafa virtcontainers: Add firecracker as a supported hypervisor
c1d3f1a firecracker: VMM API support
c34b045 firecracker: vendor in all firecracker dependencies
05be5bf shimv2: discard log before shim init log output
a21d1e6 virtcontainers: cgroups: Don't error if no thread ID
378d815 virtcontainers: copy or bind mount shared file
bc31844 virtcontainers: Check file sharing support
6291762 virtcontainers: copy files form host to guest
dcd48a9 vc: capabilities: add capability flags for filesystem sharing
e776380 vendor: update kata agent
e4e7c3a katautils: check config template and vsock
f63a18d virtcontainers: Add context when creating tests sandboxes
2535844 make: Add "GOPATH not set"
0f1fde4 virtcontainers: network: Use multiqueue flag only when appropriate
573b73e katautils: fix the issue of shimv2 boot failed with vsock enabled
e98dee6 docs: drop 's in architecture names for consistency
1892102 docs: add IBM Z in the README
c8c564b qemu-arm64: refactor 'console=hvc0,hvc1' for kata-agent debugging
a1af1cb virtcontainers: network: Rely on hypervisor capabilities for multi queues
a227ab8 virtcontainers: hypervisor: Add capability regarding multiqueue support
0bcd221 virtcontainers: network: Rename numCPUs to queues
2cb4bb9 virtcontainers: network: Reorganize endpoints interconnection
d4586d4 test: remove TestHotplugRemoveMemory
0d80202 vc:sandbox: rename newcontainer to fetchcontainer.
618cfbf vc: sandbox: Let sandbox manage VM resources.
8444a7a factory: set guest time after resuming
f813708 vendor: update agent vendor for SetGuestDateTime
df8b7db shimv2: fix the issue of reaping child mistakenly
e4a3fd5 vendors: upgrade the containerd vendors
6f83061 s390x: add support for s390x
6024088 config: Add cache-related options for block devices
20f2d30 virtcontainers: share the agent's client between factory's VM and sandbox
d4104bf release: Kata Containers 1.5.0-rc1
7d0be36 versions: refactor configuration of qemu in version.yaml
617e5e4 vendor: Update govmm vendoring
f651147 block: Add cache-related options for block devices
2af240b versions: Add nemu
deb6f16 virtcontainers: update context id of vsock to uint64
ea74b98 shim: Add trace config option
018c8c1 vendor: Update govmm vendoring
7093eec git: Add containerd-shim-kata-v2 to .gitignore
96ed6c5 git: Sort .gitignore entries
04ce4c0 virtcontainers: change uint32 to uint64 for ioctl
fa9b15d virtcontainers: Return the appropriate container status
0bf29c8 config: Check factory config
fe784c1 config: Create function to check config options
70e4dc5 config: Move check code to end of LoadConfiguration
02f8b29 containerd-shim-kata-v2: add building of shimv2 into Makefile
8199d10 containerd-shim-kata: add unit test cases
7951041 containerd-shim-kata-v2: add the service Stats support
5cc016c containerd-shim-kata-v2: add the service Kill support
9ee53be containerd-shim-kata-v2: add the service Resume support
8df33d3 containerd-shim-kata-v2: add the service Pause support
cd321a3 containerd-shim-kata-v2: add the service ResizePty support
47326f5 containerd-shim-kata-v2: add the service Update support
642231b containerd-shim-kata-v2: add the service Shutdown support
87f591a containerd-shim-kata-v2: add the service Connect support
ec4f27b containerd-shim-kata-v2: add the service CloseIO support
8c95b75 containerd-shim-kata-v2: add the service Pids support
709bc9a containerd-shim-kata-v2: add the service Cleanup support
a0e6456 containerd-shim-kata-v2: add the service Delete support
fd18b22 containerd-shim-kata-v2: add the service State support
fbaefc9 containerd-shim-kata-v2: add the service wait support
269c940 containerd-shim-kata-v2: add the exec service support
4c5b296 containerd-shim-kata-v2: add the start service support
72fd6e0 containerd-shim-kata-v2: add the create service support
d6c4ca5 container-shim-kata-v2: The init containerd shim v2 support
5e6cd00 containerd-shim-v2: add the shim v2 required vendors
f0cb0c7 cli: refactor to align with katautils package
ca58bb4 ppc64le: kata-env fails due to missing vendor field
8cfb06f kata-check: optionally require kvm-intel unrestricted_guest
acbcde3 kata-check: do not require nested vt
ea9ecd7 kata-check: modprobe missing kernel modules
9984636 kata-env: Show runtime trace setting

shim Changes

Shortlog

8028cf7 release: Kata Containers 1.5.0
25aa726 release: Kata Containers 1.5.0-rc2
40282c9 logger: log to std logger if shimLog is not yet inited
94cd0d4 release: Kata Containers 1.5.0-rc1
da529a9 tracing: Add opentracing support
e155d22 main: Return exitcode rather than exiting
87efb54 docs: Add debug info to README
9e5adde docs: Improve README
10addb9 vendor: Re-vendor agent and gRPC packages

Compatibility with Docker

Kata Containers 1.5.0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.5.0 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.5.0 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.5.0 support the OCI Runtime Specification [v1.0.0-rc5][ocispec]

Compatibility with Kubernetes

Kata Containers 1.5.0 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.5.0

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name:...

Kata Containers 1.4.2

Kata Containers release 1.4.2

Kata Containers 1.5.0-rc2

Release 1.5.0-rc2

This is an exciting release for Kata, which includes support for the Firecracker hypervisor,
the s390x architecture as well as multiple fixes for shimv2 support.

Firecracker has been tested with CRIO+Kubernetes as well as Docker, with support for multiple
network interfaces as well as (block based) volumes. A block based storage driver, such as devicemapper,
is required when using Kata with Firecracker. See this issue for details on current volume limitations.

agent Changes

Added support for virtio-mmio as well as "nvdimm" block storage. Two new
gRPC functions have been added for the agent API:

• SetGuestDateTime: Allow the runtime to set the guest time when needed
• copyFiles: Helpful for copying static files, such as /etc/hosts and
  /etc/resolv.conf from the host to the guest without necessitating
  usage of 9pfs or other filesharing system.

Shortlog

56a779e release: Kata Containers 1.5.0-rc2
169d755 protocols/grpc: implement function to copy files
ff87c26 virtio-mmio: Add support for virtio-mmio blk devices
b9c5d5b libcontainer: use /run as root containers path
092f1a0 block: add support of block storage driver "nvdimm"
31c6b6e grpc: add SetGuestDateTime API

proxy Changes

No changes.

runtime Changes

Added s390x support, a client for communicating with Firecracker VMM over a rest API, initial Firecracker hypervisor support as well as fixes for shimv2

Shortlog

0f2c5bc release: Kata Containers 1.5.0-rc2
bf1a5ce sandbox: cleanup sandbox if creation failed
83e38c9 mounts: Ignore existing mounts if they cannot be honored
353564a config: Reorganize the code to fix code complexity
d6c1f53 config: Add firecracker configuration support
0d84d79 virtio-mmio: Add support for virtio-mmio
b4c3a2f virtcontainers: fc: Stop the VM by killing the process
fba2379 firecracker: Add support for pseudo hotplug
22ebc09 firecracker: Close the vsock vhostfd
e65bafa virtcontainers: Add firecracker as a supported hypervisor
c1d3f1a firecracker: VMM API support
c34b045 firecracker: vendor in all firecracker dependencies
05be5bf shimv2: discard log before shim init log output
a21d1e6 virtcontainers: cgroups: Don't error if no thread ID
378d815 virtcontainers: copy or bind mount shared file
bc31844 virtcontainers: Check file sharing support
6291762 virtcontainers: copy files form host to guest
dcd48a9 vc: capabilities: add capability flags for filesystem sharing
e776380 vendor: update kata agent
e4e7c3a katautils: check config template and vsock
f63a18d virtcontainers: Add context when creating tests sandboxes
2535844 make: Add "GOPATH not set"
0f1fde4 virtcontainers: network: Use multiqueue flag only when appropriate
573b73e katautils: fix the issue of shimv2 boot failed with vsock enabled
e98dee6 docs: drop 's in architecture names for consistency
1892102 docs: add IBM Z in the README
c8c564b qemu-arm64: refactor 'console=hvc0,hvc1' for kata-agent debugging
a1af1cb virtcontainers: network: Rely on hypervisor capabilities for multi queues
a227ab8 virtcontainers: hypervisor: Add capability regarding multiqueue support
0bcd221 virtcontainers: network: Rename numCPUs to queues
2cb4bb9 virtcontainers: network: Reorganize endpoints interconnection
d4586d4 test: remove TestHotplugRemoveMemory
0d80202 vc:sandbox: rename newcontainer to fetchcontainer.
618cfbf vc: sandbox: Let sandbox manage VM resources.
8444a7a factory: set guest time after resuming
f813708 vendor: update agent vendor for SetGuestDateTime
df8b7db shimv2: fix the issue of reaping child mistakenly
e4a3fd5 vendors: upgrade the containerd vendors
6f83061 s390x: add support for s390x
6024088 config: Add cache-related options for block devices

shim Changes

No major changes

Shortlog

25aa726 release: Kata Containers 1.5.0-rc2
40282c9 logger: log to std logger if shimLog is not yet inited

Compatibility with Docker

Kata Containers 1.5.0-rc2 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.5.0-rc2 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.5.0-rc2 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.5.0-rc2 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.5.0-rc2 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.5.0-rc2

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: "20640"
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.5.0-rc2 suggest to use the Linux kernel v4.14.67
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations

Kata Containers 1.5.0-rc1

Release 1.5.0-rc1

agent Changes

Fixed support for support rlimits

Shortlog

df822eb grpc: support rlimits
87ad0a8 release: Kata Containers 1.5.0-rc1
34b7454 grpc: sandbox: add container when is fully created.
4eca13b client: do cleanup after UT stop mock server
c25288a Makefile: Decide if agent will be built by seccomp tag

proxy Changes

No changes for this release.

Shortlog

5bf3df6 release: Kata Containers 1.5.0-rc1

runtime Changes

Added support for 9 containerd-shim-kata-v2.

Shortlog

20f2d30 virtcontainers: share the agent's client between factory's VM and sandbox
d4104bf release: Kata Containers 1.5.0-rc1
7d0be36 versions: refactor configuration of qemu in version.yaml
617e5e4 vendor: Update govmm vendoring
f651147 block: Add cache-related options for block devices
2af240b versions: Add nemu
deb6f16 virtcontainers: update context id of vsock to uint64
ea74b98 shim: Add trace config option
018c8c1 vendor: Update govmm vendoring
7093eec git: Add containerd-shim-kata-v2 to .gitignore
96ed6c5 git: Sort .gitignore entries
04ce4c0 virtcontainers: change uint32 to uint64 for ioctl
fa9b15d virtcontainers: Return the appropriate container status
0bf29c8 config: Check factory config
fe784c1 config: Create function to check config options
70e4dc5 config: Move check code to end of LoadConfiguration
02f8b29 containerd-shim-kata-v2: add building of shimv2 into Makefile
8199d10 containerd-shim-kata: add unit test cases
7951041 containerd-shim-kata-v2: add the service Stats support
5cc016c containerd-shim-kata-v2: add the service Kill support
9ee53be containerd-shim-kata-v2: add the service Resume support
8df33d3 containerd-shim-kata-v2: add the service Pause support
cd321a3 containerd-shim-kata-v2: add the service ResizePty support
47326f5 containerd-shim-kata-v2: add the service Update support
642231b containerd-shim-kata-v2: add the service Shutdown support
87f591a containerd-shim-kata-v2: add the service Connect support
ec4f27b containerd-shim-kata-v2: add the service CloseIO support
8c95b75 containerd-shim-kata-v2: add the service Pids support
709bc9a containerd-shim-kata-v2: add the service Cleanup support
a0e6456 containerd-shim-kata-v2: add the service Delete support
fd18b22 containerd-shim-kata-v2: add the service State support
fbaefc9 containerd-shim-kata-v2: add the service wait support
269c940 containerd-shim-kata-v2: add the exec service support
4c5b296 containerd-shim-kata-v2: add the start service support
72fd6e0 containerd-shim-kata-v2: add the create service support
d6c4ca5 container-shim-kata-v2: The init containerd shim v2 support
5e6cd00 containerd-shim-v2: add the shim v2 required vendors
f0cb0c7 cli: refactor to align with katautils package
ca58bb4 ppc64le: kata-env fails due to missing vendor field
8cfb06f kata-check: optionally require kvm-intel unrestricted_guest
acbcde3 kata-check: do not require nested vt
ea9ecd7 kata-check: modprobe missing kernel modules
9984636 kata-env: Show runtime trace setting

shim Changes

FIXME - massage this section by hand to produce a summary please

Shortlog

94cd0d4 release: Kata Containers 1.5.0-rc1
da529a9 tracing: Add opentracing support
e155d22 main: Return exitcode rather than exiting
87efb54 docs: Add debug info to README
9e5adde docs: Improve README
10addb9 vendor: Re-vendor agent and gRPC packages

Compatibility with Docker

Kata Containers 1.5.0-rc1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.5.0-rc1 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.5.0-rc1 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.5.0-rc1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.5.0-rc1 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.5.0-rc1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
x86_64:
name: clearlinux
version: "20640"
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.5.0-rc1 suggest to use the Linux kernel v4.14.67
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations

Kata Containers 1.4.1

Kata Containers release 1.4.1

Kata Containers 1.4.0

Release 1.4.0

agent Changes

Highlights:

• Return agent details and capabilities to runtime in GetGuestDetails grpc call.
• Support guest rootfs image based hooks.

Shortlog

0aae82b release: Kata Containers 1.4.0
7b4c337 vendor: Update vendor/github.com/containerd/console
8dedf30 agent: build as Position-Independent-Executable
dc635d4 test: Add test for ipvlan routes in l3 mode
69ee60f network: Refactor to reduce cyclomatic complexity
4005c33 network: Handle default route where gateway is empty
83138df pkg: types: Add a new field type
a13144b proto: Split reusable structures into their own package
3a678a9 agent: Fix the issue of stdout hang on builtin proxy
980023e agent: add support for guest-hooks
d12910e agent: judge whether /sys/devices/system/memory/block_size_bytes exist.
e03f7d7 memory: Fix update memory path.
a396a23 grpc: Add seccomp status to guest details
7b71c10 grpc: Add agent details to guest details call

proxy Changes

Highlights:

• Number of golang threads are now throttled so that kata-proxy does not take too many pids.

Shortlog

209cb5f release: Kata Containers 1.4.0
88bc241 make: interpret LIBEXECDIR as an absolute path
d95ae4c proxy: build as Position-Independent-Executable
5dcbe7e Makefile: trigger build on VERSION file changes
4544880 threads: restrict number of golang threads if not set

runtime Changes

Highlights:

• Enable host cgroups support to restrict qemu process and vcpu threads.
• Enable support for macvlan and ipvlan networking.
• Add support for new machine type virt introduced by the NEMU project.
• VM factory network interfaces are now hotplugged by default so that guests have the default network connectivity.
• When creating new containers, memory resource is checked and hotplugged on demand.
• A new NetInterworkingModel none is added and it works with tap endpoint types so that enlighted CNI plugins can add tap devices to a sandbox directly, bypassing host network namespaces and thus provide better performance with less network setup complexity.
• A new NetInterworkingModel tcfilter is added. It bridges host netns veth and guest tap device with TC filters.
• Guest rootfs image can now have a guest_hook_path to save a bunch of prestart/poststart/prestop/poststop hook binaries, and they will be executed in the guest at specified container life cycle point accordingly.
• Add several sandbox level APIs in preparation of the upcoming containerd-shim-v2 support.

Shortlog

7b63f21 release: Kata Containers 1.4.0
a2799bb versions: Update Kubernetes, containerd and cri-o
cba7a88 virtcontainers: fix sandbox store struct VFIODevice bug
0796f2e virtcontainers: Add function supportGuestMemoryHotplug
d73f27c test: set arch for test TestHotplugRemoveMemory
58c1db5 make: notify user if yq is going to be installed
ab43e2a make: add ability to skip go version check
bf56858 cli: Fix console for big endian architecture
4b9a471 virtcontainers: fix not close socket with ethtool
b185f31 build: introduction of archConvertStatFs function
2f98b3e network: support hotplug a nic several times
982381b api: Cleanup StartContainer()
5777381 sandbox: Create and export Pause/ResumeContainer() to the API level
b298ec4 sandbox: Create and export ProcessListContainer() to the API level
3add296 sandbox: Create and export KillContainer() to the API level
7653726 sandbox: Create and export StopContainer() to the API level
109e12a sandbox: Export Stop() to the API level
6c3e266 sandbox: Export Start() to the API level
f5048b7 golang.mk: Check and install yq before use it
842a00a cli: refactor the config into a separated package
193b324 newContainer: Not attach device if it is a CDROM
95f4fdb build: check golang version meets min req.
eaa5c7a CI: travis: call yq installer
cbf7fb2 CI: travis: add yq installer script
8ddc0ce network: Use constant string for "none" network model
658bdb1 runtime,netmon: build as Position-Independent-Executable
5199777 virtcontainers: Rely on new interface LinkType field
45b2191 netmon: Rely on new interface field LinkType
7bf84d0 types: Replace agent/pkg/types with virtcontainers/pkg/types
39b95cc virtcontainers: Create a new package "types"
e9aa870 network: enable network hotplug for vm factory
21a671e network: set endpoint pci address when hotplug
11c6753 cli: fix the issue of using wrong path to get version
33abb3e cli: add guest hook path option in the configuration file
32ef29b factory: use customised deep compare
eb77a41 qemu: make saveSandbox wait for migration completion
0acbbf0 network: Add support for ipvlan
34fe3b9 cgroups: add host cgroup support
523d49c vendor: add github.com/containerd/cgroups lib
31cf6fb vfio: Change the way the driver is fetched
38d56c9 netmon: Rely on agent/pkg/types instead of duplicating types
309dcf9 vendor: Update the agent vendoring based on pkg/types
c38792e config: Add documentation for tcfilter in configuration.toml
17be8e3 network: Introduce constants for the network model strings
5da973d test: Add test to verify tc redirect
e20dbd0 network: Use tc redirect filter to redirect traffic to the VM
7a5a57d cli: test: add unit test for kata-env and kata-check
14e5437 cli: add configuration option to use or not use host netns
6935279 network: add new NetInterworkingModel "none" and endpoint type TapEndpoint
f8f2962 virtcontainers: refactor hotplug qmp functions
526d55b versions: Update golang to 1.10.4
62992f5 versions: Update cri containerd version for golang 1.10.2 fix
21d38e9 network: Marshal BridgedMacvlanEndpoint and MacvtapEndpoint
b72a3cd device: fix the issue of passing wrong device address using virtio-blk
8831245 create/run: Make bundle path default to cwd
ee9275f virtcontainers: Add missing API trace calls
36306e2 sandbox/virtcontainers: modify tests relate to memory hotplug.
14f480a sandbox/virtcontainers: combine addResources and updateResources
8e2ee68 sandbox/virtcontainers: memory resource hotplug when create container.
3f39d6e virtcontainers: Add missing API release calls
0ae5b14 qemu: Disable the default romfile used by virtio-pci
6f0873a vendor: Update govmm vendoring
b04691e network: Collapse log calls for endpoint Attach and Detach
ab15498 network: Explicitly check for veth type
3c590b0 network: Rename VirtualEndpoint to VethEndpoint
df8f21d network: Refactor network tests.
adcd910 network: Refactor network.go
8f1b28d network: Sort endpoints by name
dffb4f9 virtcontainers: qemu: Add proper support for virt machine type
0de7572 vendor: Update govmm vendoring
3c7cf58 tests: Add additional network tests to verifu link creation functions
378191a tests: Add tests for macvlan and macvtap endpoints
def070d golint: Refactor to reduce cyclomatic complexity
417c1f0 macvtap: Add support for macvtap
581ff17 macvlan: Assign random MAC address
8847af8 network: Add support for macvlan driver
1f5792e test: fix unit test nil pointer.
4697cf3 memory: update: Update state using the memory removed.
0cab192 block: Advertise block support for q35
f4cf213 vendor: fix govmm package

shim Changes

Highlight changes:

1. Number of golang threads are now throttled so that each kata-shim process does not take too many pids.

Shortlog

147ffb1 release: Kata Containers 1.4.0
fc6ba19 make: add support for DESTDIR
eca4281 shim: build as Position-Independent-Executable
e57ab67 threads: restrict number of golang threads if not set

Compatibility with Docker

Kata Containers 1.4.0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.4.0 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.4.0 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.4.0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.4.0 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.4.0

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
x86_64:
name: clearlinux
version: "20640"
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.4.0 suggest to use the Linux kernel v4.14.67
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations

# Release 1.3.1

agent Changes

Version bump, no changes.

Shortlog

8196989 release: Kata Containers 1.3.1

proxy Changes

Version bump, no changes.

Shortlog

c708651 release: Kata Containers 1.3.1

runtime Changes

Shortlog

2f8cd97 release: Kata Containers 1.3.1
d267da7 network: Sort endpoints by name

shim Changes

Version bump, no changes.

Shortlog

41549e5 release: Kata Containers 1.3.1

Kernel changes

Shortlog

1d993c0 kernel: configs: Disable IPv6-in-IPv4 tunnel in guest kernel for Arm64
b2ac6c5 kernel: configs: Add EFI support for Arm64
fd0ffc0 kernel: Disable CONFIG_IPV6_SIT
7532532 kernel: configs: Add EFI support

Compatibility with Docker

Kata Containers 1.3.1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.3.1 is compatible with CRI-O 6273bea4c9ed788aeb3d051ebf2d030060c05b6c

Compatibility with cri-containerd

Kata Containers 1.3.1 is compatible with cri-contaienrd v1.0.5

OCI Runtime Specification

Kata Containers 1.3.1 support the OCI Runtime Specification v1.0.0-rc5

Kata Linux Containers image

Agent version: 1.3.1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
x86_64:
name: clearlinux
version: "20640"
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.3.1 suggest to use the Linux kernel v4.14.67
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations