Kata Containers 4.1.0

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.6.0 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-086d5ee82-7632ffd8a-1.95-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-4d1e78da2-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-fc8df7157-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-ebdd40446-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.25.13-rust-1.95-a7a273435-x86_64
• tools: quay.io/kata-containers/builders:tools-d258cc68c-2bc880425-e4d00165a-7632ffd8a-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.85.1-musl-7632ffd8a-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• libs: extract pcilibs into standalone pcilibs-rs crate by @fidencio in #13411
• build: remove unused cross-compilation paths by @fidencio in #13419
• build(deps): bump pillow from 12.2.0 to 12.3.0 in /docs by @dependabot[bot] in #13422
• build(deps): bump serde_with from 2.3.3 to 3.21.0 by @dependabot[bot] in #13384
• dragonball: Merge the three network device managers into one by @justxuewei in #13423
• runtime-rs: resource: place the runtime in the sandbox cgroup synchronously by @Redent0r in #13338
• ci: Disable k8s tests on arm64 by @fidencio in #13467
• nvidia-gpu: chisel NVIDIA libs from sandboxutils-filelist.json by @zvonkok in #13427
• kata-deploy: Do not ship virtiofsd when using shared_fs=none by @fidencio in #13451
• gpu-extension: fix Fabric Manager topology path by @fidencio in #13471
• kata-deploy: configure EROFS backing mode by @manuelh-dev in #13476
• required-tests: Make all s390x CI jobs not-required by @BbolroC in #13489
• tests: fix k8s-hostpath-volume test on ppc64le by @Amulyam24 in #13445
• build(deps): bump pymdown-extensions from 10.21.3 to 11.0 in /docs by @dependabot[bot] in #13490
• ci: Get s390x CI back by @BbolroC in #13493
• nvgpu: local CUDA repo support and build-race fixes by @zvonkok in #13455
• versions: Bump virtiofsd to 1.14.0 by @manandey in #13479
• kata-deploy: isolate guest debug in runtime classes by @fidencio in #13480
• runtime-rs: file path in open() error message by @danmihai1 in #13477
• runtime-rs: Create shared volume paths under rw path by @Apokleos in #13466
• ci: Remove coco tests on rke2/k3s/microk8s/k0s by @fidencio in #13498
• packaging: split the static release tarball by runtime by @fidencio in #13488
• kata-deploy: bind nydus-snapshotter to the node's actual CRI unit by @fidencio in #13482
• gpu-extension: Build it without depending on the monolithic image by @fidencio in #13473
• tests: clean leaked NVIDIA GPU resources before setup by @fidencio in #13450
• kata-deploy: support a values overlay when publishing the helm chart by @zvonkok in #13478
• build: consume guest-components CoCo artefacts instead of building locally by @fidencio in #13487
• build: pause-image must be a dep of the monolith confidential images by @fidencio in #13509
• local-build: fix pause-image dep to use pause-image-tarball by @BbolroC in #13513
• tests: nvidia: remove NIM operator tests by @manuelh-dev in #13503
• packaging: disable AGENT_INIT for s390x vanilla initrd by @BbolroC in #13508
• tests: avoid apt install of curl in GPU attestation pod by @fidencio in #13512
• runtime-rs: Allow listxattr in dragonball seccomp by @Apokleos in #13510
• helm: roll out kata-deploy when mounted ConfigMaps change by @fidencio in #13418
• agent/rustjail: Fix double close on pipes by @sprt in #13505
• tests/k8s: run plain first, triage failures on -debug by @fidencio in #13514
• qemu: Disable features/devices per default by @zvonkok in #10708
• build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /src/runtime by @dependabot[bot] in #13434
• Add a generic devkit debug guest extension (runtime-rs only!) -- take 2 by @fidencio in #13497
• Static runtime default by @jimmykarily in #13499
• genpolicy: invalidate incompatible layer caches and persist them across NVIDIA CI runs by @manuelh-dev in #13504
• tests: fix envsubst invocation in attestation test by @manuelh-dev in #13531
• build(deps): bump raven-actions/actionlint from 2.1.1 to 2.2.0 by @dependabot[bot] in #13534
• build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /src/tools/csi-kata-directvolume by @dependabot[bot] in #13521
• docs: Update containerd installation link by @lntutor in #13525
• runtime-rs: Add support for OpenVMM by @sprt in #13346
• ci: unbreak CI for s390x by @sprt in #13544
• runtime-rs: nvidia: Remove unwanted annotations by @fidencio in #13537
• kata-deploy: drop nsenter and tighten host privileges by @fidencio in #13530
• runtime-rs: L3 forwarding network model for runtime-rs by @Stevenjin8 in #13281
• runtime-rs: fix resource leak on container create/start failure by @halcyon-r in #12748
• runtime-rs: share block storage source mapping by @manuelh-dev in #13309
• build: enable composable VM extensions for IBM SEL (runtime-rs) by @BbolroC in #13529
• ci: Run full self-hosted matrix in ci-devel by @BbolroC in #13543
• genpolicy: derive pause identity from image and restore Azure CLH policy coverage by @manuelh-dev in #13516
• ci/openvmm: Enable block-plain emptyDir test by @sprt in #13545
• qemu: add a qemu-no-shared-fs build and trim the confidential-guest ones by @fidencio in #13520
• docs: Enhance virtio-fs documentation with usage details by @zvonkok in #12927
• kata-deploy: ship glibc deps in dispatcher image on ppc64le/s390x by @fidencio in #13550
• runtime: Allow nvswitch-class devices to be passed through by @LandonTClipp in #13540
• ci: keep ORAS installer stdout from polluting tarball paths by @fidencio in #13563
• runtime-rs: fix NVSwitch passthrough by separating IOMMUFD from legacy group path by @zvonkok in #13524
• build: add pcilibs-rs workspace dependency by @zvonkok in #13526
• qemu: establish rootless and seccomp test baseline by @manuelh-dev in #13426
• CI: Restore skipped s390x test by @annu0905 in #13547
• kata-deploy: apply podLabels to per-node Jobs by @fidencio in #13549
• dragonball: Add VIRTIO_F_ACCESS_PLATFORM for TDX virtio devices by @RainaYL in #13094
• devkit: take the CUDA repository from versions.yaml by @fidencio in #13572
• dragonball: Add handler for VcpuExit of type Hypercall for TDX by @RainaYL in #13095
• runtime/QEMU: roll back rootless setup on sandbox error by @manuelh-dev in #13506
• kata-deploy: render the TEE key advertisement from the chart by @fidencio in #13553
• kata-deploy: converge job-mode CRI stage across restart-induced retries by @fidencio in #13551
• kata-deploy: let the job-mode dispatcher be confined to trusted nodes by @fidencio in #13554
• runtime-rs: Add Cloud Hypervisor VM template support by @realsdx in #13387
• agent: create new session for init process instead of inheriting parent's by @ningmingxiao in #13463
• kata-deploy: make node selection mean the same thing in both deployment modes by @fidencio in #13555
• agent: support watchable mounts for rootless settings by @manuelh-dev in #13515
• tests: nydus: wait for the nydus processes to actually die by @fidencio in #13592
• agent: reject cwd outside the container root by @cayoub-oai in #13587
• osbuilder: devkit: put the mounted extensions' tools in PATH by @fidencio in #13585
• runtime-rs: make CLH nested virtualization configurable by @cayoub-oai in #13577
• agent: fix OwnedFd usage in rustjail tests by @cayoub-oai in #13614
• runtime-rs: enable QEMU rootless seccomp BATS test by @manuelh-dev in #13428
• ci: Add ARM64 OpenVMM build by @sprt in #13616
• required-tests: Set runtime-rs k8s e2e tests as required on s390x by @BbolroC in #13582
• kata-deploy: make Nydus cleanup safe to retry by @fidencio in #13603
• tests: add a test to cover uds with emptyDir by @jojimt in #13619
• kata-deploy: vendor the NFD Helm chart dependency by @fidencio in #13613
• kata-monitor: watch both Go and runtime-rs sandbox paths by @fidencio in #13611
• kata-ctl: add cp, and let exec run a single command by @fidencio in #13570
• kata-deploy: move node lifecycle operations into the dispatcher by @fidencio in #13604
• fix: route from link not taking netmask into account by @CL0Pinette in #13633
• kata-deploy: validate the Kubernetes distribution before configuring CRI by @fidencio in #13605
• tests: sanitize NIM instruct startupProbe budgets by @manuelh-dev in #13617
• fix(agent): Fix copying dangling symlinks by @xujihui1985 in #13625
• runtime-rs: remote hypervisor fixes by @pmores in #13612
• runtime(-rs)/QEMU: enable rootless and seccomp sandbox with shared_fs=none by @manuelh-dev in #13429
• runtime(-rs): fix rootless path handling by @manuelh-dev in #13518
• kernel: enable CONFIG_CFS_BANDWIDTH for cgroup v2 cpu.max by @shashank-fujitsu in #13438
• agent: harden capability and namespace handling by @cayoub-oai in #13615
• tests: nvidia: budget the NIM model load from container start by @fidencio in #13639
• runtime-rs: fix mem-agent startup lock panic by @cayoub-oai in #13578
• build(deps): bump pymdown-extensions from 11.0 to 11.0.1 in /docs by @dependabot[bot] in #13567
• gha: enable runtime-rs for ppc64le in CI by @shwetha-s-poojary in #12552
• docs: make runtime-rs the default for ppc64le by @Amulyam24 in #13581
• deps: Bump golang to 1.25.13 and various core modules by @stevenhorsman in #13656
• packaging: update OVMF for Intel TDX by @mythi in #13631
• dragonball: Support VM template save and restore on x86 by @justxuewei in #13366
• kata-deploy: remove Kubernetes credentials from per-node Jobs by @fidencio in #13606
• kata-deploy: track node ownership per installation by @fidencio in #13607
• runtime-rs: Attempt to connect at least once in hybrid_vsock by @srcreigh in #13648
• tests: nydus: try to fix teardown races (round 2) by @fidencio in #13669
• runtime-rs: fix "container process not found" error handling by @pmores in #13435
• nvidia: temporarily disable numa & vcpu pinning by @fidencio in #13671
• check: Fix makefile package specifying by @RuoqingHe in #13012
• kata-deploy: make dispatcher rollouts converge safely by @fidencio in #13608
• kata-deploy: serialize host lifecycle changes per node by @fidencio in #13609
• agent: Release sandbox lock before blocking stats read by @M-Phansa in #13453
• Revert "packaging: update OVMF for Intel TDX" by @mythi in #13678
• genpolicy: fix emptyDir test mount sources by @fidencio in #13680
• runtime: keep the pause container free of cold-plug VFIO devices by @zvonkok in #13681
• docs: add release notes for 4.1.0 by @fidencio in #13650
• release: Bump version to 4.1.0 by @fidencio in #13683

New Contributors

• @manandey made their first contribution in #13479
• @lntutor made their first contribution in #13525
• @Stevenjin8 made their first contribution in #13281
• @halcyon-r made their first contribution in #12748
• @realsdx made their first contribution in #13387
• @ningmingxiao made their first contribution in #13463
• @CL0Pinette made their first contribution in #13633
• @xujihui1985 made their first contribution in #13625
• @shashank-fujitsu made their first contribution in #13438
• @srcreigh made their first contribution in #13648

Full Changelog: 4.0.0...4.1.0