Skip to content

AKernel v0.1.6rc2

Pre-release
Pre-release

Choose a tag to compare

View all tags
@tianyuzhou95 tianyuzhou95 released this 10 Sep 16:45
v0.1.6rc2
940e13e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AKernel v0.1.6rc2 expands Firecracker image support, adds OCI entrypoint inheritance and richer network policies, and improves node lifecycle safety and deployment reliability.

Highlights

  • Add Firecracker support for OCI and Nydus image roots through read-only virtio-fs across standalone, Helm, and Terraform deployments.
  • Add Sandbox(inherit_entrypoint=True) to run an image's ENTRYPOINT and CMD, with wait_entrypoint() and structured exit details.
  • Extend network policies with ingress and egress rules, CIDR and domain matching, protocol and port filters, and independent DNS controls. Add Sandbox.update_network_policy() for atomic policy replacement.
  • Use a dedicated XFS data disk by default on Alibaba Cloud nodes for sandbox writable layers and local checkpoints.
  • Fix systemd container detection to prevent shared host filesystems from being remounted read-only during node shutdown, and reject unsafe PIDs during cgroup cleanup.
  • Package the checksum-verified static distill-fs v0.1.1 release and update the openYuanRong control plane and RRT to 0.10.2rc4.
Assets 2
Loading