Skip to content

AKernel v0.1.2

Latest
Latest

Choose a tag to compare

View all tags
@tianyuzhou95 tianyuzhou95 released this 14 Aug 15:17
· 21 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.1.2
d35c175

AKernel v0.1.2 adds sandbox network policies, experimental eBPF NAT, NVIDIA GPU and disk-backed storage support, while improving SDK and runtime compatibility.

Highlights

  • Add creation-time block-network and exact or wildcard DNS deny-list policies.
  • Add experimental TC eBPF bpfnat; iptables remains the default backend.
  • Add experimental whole-device NVIDIA GPU sandboxes powered by gVisor nvproxy and configurable writable rootfs quotas; both currently require runsc.
  • Make the RRT (Rust runtime) profile the default.
  • Support both the default openyuanrong-sandbox backend and optional actor-based openyuanrong-sdk backend, upgraded to openYuanRong 0.9.7.
  • Add transparent cgroup v1 and v2 support.

See the README, SDK guide, and deployment guide for usage, limitations, and upgrade requirements.

Assets 3
Loading