Kata Containers 1.12.0-rc0

Kata Containers release 1.12.0-rc0

Kata Containers 1.11.4

Kata Containers release 1.11.4

Kata Containers 1.10.8

Kata Containers release 1.10.8

Kata Containers 2.0.0

Release 2.0.0

Welcome to the Kata Containers 2.0.0 release!
This release has brought in quite a few exciting changes including moving to a monorepo model in this repository.
Kata 2.0 delivers improved performance and observability enhancements as the community continues to address the challenge of providing secure, light, fast and agile container management technology across stacks and platforms.

Key changes introduced in the 2.0 release are:

• Kata-agent has been rewritten in rust to significantly reduce memory overhead overall attack surface.
• Agent protocol has been simplified to use ttRPC from grpc.
• Component called Kata-monitor has been introduced to improve observability and manageability
• New component called agent-ctl has been introduced to help validate agent API
• We have moved to a mono-repo model, all code and document repositories consolidated into one single repo.
• Virtio-fs is now the default shared file system type which mean better POSIX compliance compared to virtio-9p
• Latest Cloud Hypervisor support on par with QEMU
• Move to support solely shimv2 api to simplify code and reduce attack surface further. This also meanskata-shim and kata-proxy used in 1.x are no longer required.
• Guest kernel updated to v5.4.71
• QEMU updated to v5.0.0

We have introduced quite a few improvements wrt to observability. We plan to bring in tracing support for the agent and runtime in our next release.

To install Kata Containers 2.0, please see https://github.com/kata-containers/kata-containers/blob/2.0.0/docs/install
To upgrade from a Kata Containers 1.x deployment, please see https://github.com/kata-containers/kata-containers/blob/2.0.0/docs/Upgrading.md

Shortlog

6648c8c release: Kata Containers 2.0.0
dbfe85e snap: install libseccomp-dev
0c3b6a9 package: drop qemu-virtiofs shim
f751c98 packaging: install virtiofsd for normal qemu build as well
08361c5 runtime: enable virtiofs by default
da9bfb2 runtime: Pass --thread-pool-size=1 to virtiofsd
7347d43 packaging: Apply virtiofs performance related fixes to 5.x
c7bb1e2 tools: Improve agent-ctl README
e6f7ddd tools: Make agent-ctl support more APIs
46cfed5 tools: Remove commented out code in agent-ctl
81fb2c9 tools: Log request in agent-ctl tool if debug enabled
0c43215 tools: Rename agent-ctl command to GetGuestDetails
6511ffe tools: Fix comment in agent-ctl
ee59378 kernel: update to 5.4.71
ef11213 config: make virtio-fs part of standard kernel
1fb6730 agent: remove unwrap() for e.as_errno()
05e9fe0 agent: Use ? instead of match when the error returns directly
d658129 kata-monitor: use regexp to check if runtime is kata containers
ae2d89e agent: use anyhow context to attach context to Error instead of match
095d4ad agent: remove useless match
bd816df agent: Use ok_or_else instead of match for Option -> Result
d413bf7 agent: Fix crasher if AddARPNeighbors request empty
76408c0 agent: Fix crasher if UpdateRoutes request empty
6e4da19 agent: Fix crasher if UpdateInterface request empty
8f8061d agent: replace match Result with or_else
64e4b2f agent: replace unnecessary match Result with map_err
7c0d68f agent: replace check! with map_err for readability
82ed34a agent: remove check! in child process because we cant' see logs.
9def624 agent: replace if let Err with or_else
6926914 agent: refactor namespace::setup to optimize error handling
e733c13 agent: replace if let Err with map_err
ba069f9 rustjail: add length check for uid_mappings in rootless euid mapping
cc8ec7b versions: Update Kubernetes, containerd, cri-o and cri-tools
8a364d2 annotations: Correct unit tests to validate new protections
0cc6297 annotations: Split addHypervisorOverrides to reduce complexity
b6059f3 annotations: Add unit test for checkPathIsInGlobs
c6afad2 annotations: Add unit test for regexpContains function
451608f makefile: Add missing generated vars to USER_VARS
8328136 makefile: Improve names of config entries for annotation checks
a92a630 annotations: Give better names to local variabes in search functions
997f7c4 annotations: Rename checkPathIsInGlobList with checkPathIsInGlobs
74d4065 config: Add better comments in the template files
73bb3fd config: Whitelist hypervisor annotations by name
5a587ba config: Use glob instead of regexp to match paths in annotations
29f5dec annotations: Fix typo in comment
d71f9e1 config: Add makefile variables for path lists
28c386c config: Protect file_mem_backend against annotation attacks
c2a186b config: Protect vhost_user_store_path against annotation attacks
8cd094c config: Add security warning on configuration examples
b5f2a1e config: Protect ctlpath from annotation attack
2d65b3b config: Protect jailer_path annotation
fe5e1cf config: Add examples for path_list configuration
3f7bcf5 annotations: Simplify negative logic
80144fc config: Add hypervisor path override through annotations
2f5f356 config: Fix typo in function name
2faafbd config: Protect virtio_fs_daemon annotation
9e5ed41 config: Add 'List' alternates for hypervisor configuration paths
b33d4fe agent: fix panic on malformed device resource in container update
1838233 cpuset: add cpuset pkg
bfbbe8b cpuset: don't set cpuset.mems in the guest
5c21ec2 sandbox: consider cpusets if quota is not enforced
9bb0d48 cpuset: support setting mems for sandbox
64a2ef6 virtcontainers: add method for calculating cpuset for sandbox
a441f21 cpuset: add cpuset pkg
ce54090 docs: Update upgrading guide
e884fef docs: update the build kata containers kernel document
9c16643 agent/device: Check type as well as major:minor when looking up devices
4978c90 agent/device: Index all devices in spec before updating them
a7ba362 agent/device: Forward port update_spec_device_list() unit test
230a983 agent/device: update_spec_device_list() should error if dev not found
a6d9fd4 sandbox: don't constrain cpus, mem only cpuset, devices
8f0cb2f cgroups: add ability to update CPUSet
cbdae44 agent: fix errorneous parsing for guest block size
97acaa8 docs: Add containerd install guide
2324666 agent: use ok_or/map_err instead of match
ebe5ad1 rustjail: use Iterator to manipulate vector elements
c9497c8 rustjail: delete codes commented out
d5d9928 rustjail: delete unused test code
f70892a agent: use chain of Result to avoid early return
ab64780 agent: update not accurate comments
9e064ba agent: use macro to simplify parse_cmdline function in config.rs
42c48f5 agent: add blank lines between methods
d3a36fa agent: delete unused field in agentService
fa54660 agent: use no-named closure to reduce codes
efddcb4 agent: use a local fn to reduce duplicated codes
7bb3e56 packaging: fix cloud-hypervisor binary path
7b53041 packaging: fix missing cloud_hypervisor_repo
38212ba packaging: apply qemu v5.1 stable fixes
fb7e9b4 agent: fix aarch64 build
0cfcbf7 docs: add namespace key to pod/container config files
997f1f6 docs: Add crictl example json files
f60f43a runtime: Clear the VCMock 1.x API Methods from 2.0
1789527 ci: snap: add event filtering
999f67d agent: do not follow link when mounting container proc and sysfs
cb2255f agent: set init process non-dumpable
2a6c9ee agent-ctl: include cargo lock updates
eaff5de versions: add plugins section
4f1d23b virtiofs: Disable DAX
6d80df9 snap: specify python version
a116ce0 osbuilder: Create target directory for agent
4dc3bc0 rust-agent: Treat warnings as error
8f7a484 rust-agent: Identify unused results in tests
ce54e5d rust-agent: Log returned errors rather than ignore them
9adb7b7 rust-agent: Remove unused imports
73ab9b1 rust-agent: Report errors to caller if possible
4db3f9e rust-agent: Ignore write errors while writing to the logs
19cb657 rust-agent: Remove unused code that has undefined behavior
86bc151 rust-agent: Remove 'mut' where not needed
8d8adb6 rust-agent: Remove uses of deprecated functions
76298c1 rust-agent: Remove or rename unused parameters
7d303ec rust-agent: Remove or rename unused variables
e0b79eb rust-agent: Remove unused functions
8ed61b1 rust-agent: Remove useless braces
cc4f02e rust-agent: Remove unused macros
ace6f1e clh: Support VFIO device unplug
47cfeaa clh: Remove unnecessary VmmPing
63c4757 versions: cloud-hypervisor: Bump to version 6d30fe05
059b89c docs: Change kata_tap0 to tap0_kata
4ff3ed5 docs: update networking description
de8dcb1 dev-guide: update kata-agent install details
c488cc4 docs: Update docs for enabling agent debug console
e5acb12 docs: update dev guide for agent build
1bddde7 ci: add github action to test the snap
9517b0a versions: cloud-hypervisor: bump version
f5a7175 runtime: cloud-hypervisor: tag openapi-generator-cli container
3f39bdf versions: update clh to v0.10.0
18d325e packaging: fix cloud-hypervisor build
b5e9d60 action: Require PR porting labels
e6f16b7 packaging: fix release notes scripts
5c67668 release: Kata Containers 2.0.0-rc0
729a3b1 action: ignore 'fixes check' for subsystem 'release'
d7c77b6 runtime: write oom file to notify CRI-O tha OOM occurred
15065e4 agent: add cgroup v2 support
295f510 runtime: Don't use hard-coded crio config
615ffb9 agent: Generate version file with more adequate information in it.
f13ca94 agent: Fix setting of version
c823b4c agent: Make build remove generated files on clean
357d788 ci: replace spaces by tabs as indent
22876b2 agent: allow multiple wait on the same process
6487044 shimv2: trust cached status when deleting containers
325a4f8 shimv2: do not kill a stopped exec process
b081f26 action: Add issue to project and move to "In progress" on linked PR
2ce97ec virtiofsd: fix typo in test code
6520320 agent: setup DNS for guest
90e0dc8 ci: run agent test under root user
20a084a docs: update sandbox apis doc for kata 2.0-dev
c133a45 rustjail: fix the issue of invalid cgroup_parent path
dae6c7d osbuilder: update usage of RUST_AGENT variable
d86e746 agent: add retry betwe...

# Release 2.0.0-rc1

kata-containers Changes

RC1 for 2.0 includes stability fixes for both the runtime and the agent, additional unit-tests, improvements to metrics, removal of OBS
packages, and updates in documentation.

Shortlog

fb2f3cf release: Kata Containers 2.0.0-rc1
f32a741 actions: add kata deploy test
512e79f packaging: cleaning, updating based on new filepaths
aa70080 packaging: remove obs-packaging
34015ba packaging: pull versions, build-image out from obs dir
93b60a8 packaging: Revert "packaging: Stop providing OBS packages"
aa9951f rust-agent: Update README
9d8c729 docs: drop docker installation guide
033ed13 docs: fix static check errors in docs/install/README.md
c058d04 docs: update architecture.md
9d2bb0c qemu: upgrade qemu version to 5.1.0 for arm64.
627d062 agent: Fix OCI Windows network shared container name typo
96afe62 github: Remove issue template and use central one
d946016 docs: fix broken links
37f1a77 Packaging: release notes script using error kernel path urls
450a81c rust-agent: Replaces improper use of match for non-constant patterns
c09f02e devices: fix go test warning in manager_test.go
58c7469 action: Allow long lines if non-alphabetic
c36ea09 agent: remove unreachable code
ba19730 agent: Change do_exec return type to ! because it will never return
725ad06 agent: propagate the internal detail errors to users
9858c23 packaging: Stop providing OBS packages
fc8f1ff install: Add contacts to the distribution packages
f7b4f76 install: Update information about Community Packages
4fd66fa install: Update SUSE information
e6ff42b install: Update openSUSE information
6710d87 install: Update RHEL information
178b79f install: Update Fedora information
bc545c6 install: Update CentOS information
5854819 ci: fix clone_tests_repo function
0057f86 agent: Set LIBC=gnu for ppc64le arch by default
fa04017 fc: integrate Firecracker's metrics
60b7265 static-build/qemu-virtiofs: Refactor apply virtiofs patches
57b53db packaging/qemu: Add common code to apply patches
ddf1a54 static-build/qemu-virtiofs: Fix to apply QEMU patches
cbdf640 runtime: fix TestNewConsole UT failure
ceeecf9 travis: skip static checker for ppc64
7c53bae runtime: fix golint errors
b549d35 agent: fix cargo fmt
9f3113e ci: always checkout 2.0-dev of test repository
ef94742 docs: fix static check errors
d717649 runtime: fix make check
0fc04a2 gitignore: ignore agent service file
8d7ac5f agent: fix UT failures due to chdir
612acbe agent: Only allow proc mount if it is procfs
f3a487c rustjail: make the mount error info much more clear
3a55952 runtime: add enable_debug_console configuration item for agent
567daf5 runtime: add debug console service
c7d913f runtime: Call s.newStore.Destroy if globalSandboxList.addSandbox
7bd410c shimv2: add a comment in checkAndMount()
7fbc789 osbuilder: specify default toolchain verion in rust-init.
7fc41a7 runtime: Update cloud-hypervisor client pkg to version v0.10.0
a31d82f agent/oci: Don't use deprecated Error::description() method
9ef4c80 runtime: Fix linter errors in release files
6a4e413 packaging: Build from source if the clh release binary is missing
678d4d1 runtime: add podman configuration to data collection script
718f718 ci: use export command to export envs instead of env config item
d860ded ci: use Travis cache to reduce build time
a141da8 agent: update cgroups crate
aaaaee7 docs: Update the reference path of kata-deploy in the packaging
21efaf1 runtime: make kata-check check for newer release
2056623 how-to: add privileged_without_host_devices to containerd guide
34126ee travis: enable RUST_BACKTRACE
980a338 agent/rustjail: add more unit tests
e14f766 agent/rustjail: remove makedev function
2e0731f agent/rustjail: add unit tests for ms_move_rootfs and mask_path
addf620 agent/rustjail: implement functions to chroot
c24b68d agent/rustjail: add unit test for pivot_rootfs
24677d7 agent/rustjail: implement functions to pivot_root
9e74c28 agent/rustjail: add unit test for mount_cgroups
b7aae33 agent/rustjail: add unit test for init_rootfs
6d9d582 agent/rustjail/mount: don't use unwrap
1bc6fbd agent/rustjail: add tempfile crate as depedency
d39f5a8 rustjail: implement functions to mount and umount files
d90a0ee docs: Fix the kata-pkgsync tool's docs script path
2618c01 docs: fix k8s containerd howto links
5c4878f docs: fix up developer guide for 2.0
bd6b169 gitignore: ignore agent version.rs
5770336 agent: fix agent panic running as init
45daec7 packaging: use local version file for kata 2.0 in Makefile
ed5a7dc docs: fix release process doc
6fc7c77 packaging: fix release notes

Compatibility with Docker

Kata Containers 2.0.0-rc1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 2.0.0-rc1 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 2.0.0-rc1 is compatible with cri-contaienrd 3a4acfbc99aa976849f51a8edd4af20ead51d8d7

OCI Runtime Specification

Kata Containers 2.0.0-rc1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 2.0.0-rc1 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 2.0.0-rc1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/kata-containers/tools/osbuilder"
architecture:
aarch64:
name: "ubuntu"
version: "latest"
ppc64le:
name: "centos"
version: "latest"
s390x:
name: "ubuntu"
version: "latest"
x86_64:
name: "clearlinux"
version: "latest"
meta:
image-type: "clearlinux"

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/kata-containers/tools/osbuilder"
architecture:
aarch64:
name: "alpine"
version: "3.12"
ppc64le:
name: "alpine"
version: "3.12"
s390x:
name: "alpine"
version: "3.12"
x86_64:
name: "alpine"
version: "3.12"

Kata Linux Containers Kernel

Kata Containers 2.0.0-rc1 suggest to use the Linux kernel v5.4.60
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

Kata Containers 2.0.0-rc0

The 2.0.0-rc0 Kata-Containers release marks feature freeze and agent protocol freeze for the incoming 2.0.0 release. It features following changes:

• cgropus-v2 support
• kata-agent OOM event support
• kata-agent guest hooks support
• update to qemu 5.0 + virtiofs + dax
• update to cloud-hypervisor 0.10.0
• many github action improvements
• a lot of bugfixes and packaging improvements

Shortlog

3f39bdf versions: update clh to v0.10.0
18d325e packaging: fix cloud-hypervisor build
b5e9d60 action: Require PR porting labels
e6f16b7 packaging: fix release notes scripts
5c67668 release: Kata Containers 2.0.0-rc0
729a3b1 action: ignore 'fixes check' for subsystem 'release'
d7c77b6 runtime: write oom file to notify CRI-O tha OOM occurred
15065e4 agent: add cgroup v2 support
295f510 runtime: Don't use hard-coded crio config
615ffb9 agent: Generate version file with more adequate information in it.
f13ca94 agent: Fix setting of version
c823b4c agent: Make build remove generated files on clean
357d788 ci: replace spaces by tabs as indent
22876b2 agent: allow multiple wait on the same process
6487044 shimv2: trust cached status when deleting containers
325a4f8 shimv2: do not kill a stopped exec process
b081f26 action: Add issue to project and move to "In progress" on linked PR
2ce97ec virtiofsd: fix typo in test code
6520320 agent: setup DNS for guest
90e0dc8 ci: run agent test under root user
20a084a docs: update sandbox apis doc for kata 2.0-dev
c133a45 rustjail: fix the issue of invalid cgroup_parent path
dae6c7d osbuilder: update usage of RUST_AGENT variable
d86e746 agent: add retry between doing CPU hotplug and make it online.
517dda0 kernel: update to the latest LTS kernel 5.4.60
ebd3f31 osbuilder: fix rootfs build on ppc64le
b474828 kernel: Remove arm patches for ptp
82efd2f kernel: Enabling PTP clock support in kernel
2dfb8bc rootfs-builder: fix unbootable dracut-based initramfs on Fedora
fcd29a2 osbuilder/image-builder: disable reflink
0d198f9 virtcontainers: Add unit test for utils/compare.go
8b07bc2 agent: fix unit tests - remove rustjail::errors
6c96d66 agent: update Cargo toml and lock
46d7b9b agent/rustjail: remove rustjail::errors
fbb7973 agent: Use anyhow for error handling
33759af agent: Add anyhow dependency
c192446 agent/rustjail: Use anyhow for error handling
2e3e2ce agent/rustjail/capabilities: Use anyhow for error handling
6a4c9b1 agent/rustjail/cgroups: Use anyhow for error handling
359286a agent/rustjail: Add anyhow dependency
2019f00 docs: update yaml file link for prometheus deployment
11e8a49 docs: update the docs for minikube installing kata
00bd04f docs: Update local branch from upstream
dd60e56 trivial: Fix spelling of "privilege"
f7ff6d3 image-builder: disable reflink
0be02a8 runtime: qemu: reduce boot time and memory footprint
1de9bc0 snap: reimplement snapcraft.yaml to support kata 2.0
85642c3 snap: move snapcraft.yaml to the right place
cb99937 runtime: Fix typo in hotplugVFIODevice()
92dfa46 drivers: Correct isPCIeDevice logic
cf3ac9f docs: Add documentation for VFIO-AP passthrough
8666e01 qemu/default-configs: update default-config for QEMU 5
2d12da8 qemu: update default-configs
ae98ea4 obs-packaging: fix wait for obs
f5b71d3 qemu: update build dependencies to support QEMU 5
f1fd00d Merge pull request #571 from eryugey/eguan/2.0-dev
c14d44a Merge pull request #568 from Jakob-Naucke/vfio-ap-fragment
0a9b8e0 rustjail: default permission of device node should be 666
6f2eab4 Merge pull request #555 from jodh-intel/2.0-dev-agent-fix-shutdown-crash
b4c1053 Merge pull request #563 from bergwolf/guest-hooks
8e18cec Merge pull request #504 from cmaf/unit-virtcontainers-utils-utils
5fbac0a Merge pull request #556 from evanfoster/shutdown-agent
bb30759 agent: add guest hooks UT
095ebb8 agent: fix OCI hook handling
03a4d10 agent: support guest hooks
e7bfeb4 agent: construct container bundle in tmpfs location
2ee4002 packaging: Add VFIO-AP fragment for s390x
60770f4 Merge pull request #566 from Jakob-Naucke/revendor-govmm-vfio-ap
e6757de Merge pull request #543 from likebreath/clh_backporting
4c30b25 runtime: Re-vendor GoVMM for VFIO-AP support
282bff9 sandbox: Disconnect from agent after VM shutdown
29aae01 Merge pull request #559 from snir911/doc
5b70723 Merge pull request #511 from Jakob-Naucke/forward-s390x-packaging
9f1a3d1 kernel: add s390x fragment
f135061 kernel: config CONFIG_GENERIC_MSI_IRQ_DOMAIN
b67325c kernel: add missing configs
454dd85 kernel: config CONFIG_ PARAVIRT
62b4506 kernel: config CONFIG_NO_HZ_FULL
6dca74b kernel: moved acpi hotplug config
7c85dec kernel: config CONFIG_PCI_MSI_IRQ_DOMAIN
efe51b2 kernel: fragment for pmem
08d046d kernel: config CONFIG_HAVE_NET_DSA
7b49fa1 kernel: fragments not supported on s390x
ccfb73c agent/agent-ctl: update Cargo.lock
fd13c93 virtcontainers: Add msg to existing utils unit tests
c3fc09b virtcontainers: Add to utils unit tests
942041e Merge pull request #548 from Tim-Zhang/fix-action-check-subsystem
9658255 docs: remove outdated dependencies from agent docs
d12f920 console: Fix crash if debug console disabled
572de28 sandbox: Remove unnecessary thread
d5fbba3 main: Remove commented out and redundant code
1b2fe4a agent: Refactor main function
bac79ee main: Display config in announce
e2952b5 main: Simplify version handling
cfa35a9 action: Fix subsystem check
bba2773 Merge pull request #482 from Amulyam24/fix-ppc64le-rootfs
39b53f4 clh: enable build using Podman
04b156f qemu-virtiofs: Update to qemu 5.0 + virtiofs + dax
3ec05a9 clh: Add support to unplug block devices
45e32e1 clh: Set 'Id' explicitly while hotplugging block device
895959d clh: Provide cpu topology to API
3159438 clh: opeanapi: update api for cloud hypervisor
89836cd versions: cloud-hypervisor 0.9.0
8d5a60a versions: Update qemu-virtiofs to 5.0
76a6466 clh: Remove the use of deprecated '--memory file=' parameter
5f2a9fa Merge pull request #536 from Kvasscn/packaging-build-kernel-sh-test
bfd7810 packaging: add usage instructions for -a (arch_target) option
03b7bc1 Merge pull request #499 from lifupan/2.0-dev
485fc8d Merge pull request #531 from lifupan/propagation
2d28043 Merge pull request #527 from devimc/2020-08-13/unittest/rustjail-process
646148b Merge pull request #533 from GabyCT/topic/backportversions
ecaa1f9 clh: Enable versions and kernel tag to enable CLH CI for kata 2.0
37a331a Merge pull request #506 from lining2020/2.0-dev
64b0694 ppc64le: Support for rust agent based rootfs
2511cab virtcontainers: fix outdated example code in api document
17e2a35 Merge pull request #509 from lifupan/fix_lo
de3fd3f Merge pull request #521 from Tim-Zhang/fix-github-actions
5c7f001 rustjail: add the "HOME" env for process
58dfd50 rustjail: fix the issue of missing set propagation for bind mount
e79c572 agent: setup the "lo" interface run agent as init
d0a4563 agent: add unit tests for rustjail/process.rs
c1d3e8f Merge pull request #518 from liubin/fix/517-cleanup-virtcontainers-api
2889af7 actions: Run subject-line-length check even if the previous checks failed
9f0fef5 actions: Add commit-body-missing check
d81af48 actions: Do not limit the length of single word in commit body
8c46a41 actions: Fix subsystem checking in github-action
2466ac7 actions: Fix 'Fixes checking' problem by update dependent action
e7d3ba1 virtcontainers: cleanup codes, delete not used APIs
ba70a15 Merge pull request #486 from Tim-Zhang/commit-message-check
50c76b6 Merge pull request #503 from GabyCT/topic/fixdevguide
998a634 docs: Remove installation of proxy
5231a3e Merge pull request #452 from cmaf/unit-virtcontainers-container
0a233ff Merge pull request #440 from lifupan/2.0-dev
c305911 actions: Use github action to do Fixes/Length/Subsystem check
bd78cca shimv2: fix the issue of close IO stream
93b5528 Merge pull request #477 from GabyCT/topic/updatelimitations
e43a49e Merge pull request #479 from Tim-Zhang/close_fd_in_execute_hook
0683493 agent: Fix fd leaks in execute_hook
b03cd1b docs: Update contributions section in limitations document kata 2.0
ec84a94 Merge pull request #474 from merwick/2.0-dev
c15ef21 qemu: Set govmmQemu NoReboot config Knob
5726926 qemu: Add test for qemuConfig Knobs
5010e3a vendor: update govmm
b94b46d Merge pull request #467 from jongwu/multidev
3871b3c Merge pull request #469 from jongwu/makefile
a3c300f Merge pull request #459 from liubin/feature/458-add-structured-log
61d133f runtime: change un-structured log to structured log
31d601b Merge pull request #429 from cmaf/unit-virtcontainers-cap
7169a26 Merge pull request #425 from cmaf/unit-virtcontainers-asset
f24ad25 virtcontainers: Add unit test for types/container.go
1637e9d qemu: remove multidev in qemu/fsdev parameter on arm64
b61c9ca Makefile: add CLHCMD in arm64-options.mk
aeb4cfe Merge pull request #462 from bergwolf/releasing-2.0.0-alpha3
6fc7d4b Merge pull request #457 from liubin/feature/405-add-memory-info-for-kata-env
d5d7c22 Merge pull request #460 from devimc/2020-07-27/update-qemu5
fe99e7e runtime: add CPU cores and memory basic info for kata-env sub-command
7a825fb release: Kata Containers 2.0.0-alpha3
ad62eef Merge pull request #431 from liangxianlong/2.0-dev
3246bdc Merge pull request #445 from liubin/fix/444-remove-docs-about-shim-proxy
e1a79e6 virtcontainers: Add function to capabilities test
d1d5c69 virtcontainers: Expand unit test coverage for asset
3c415d9 virtcontainers: 9p: shares multiple devices with only one export
17fe010 vendor: update govmm
b6e910c versions: update QEMU to 5.0.0
6c99747 Merge remote-tracking branch 'upstream/2.0-dev' into 2.0-dev
db93a16 runtime: remove mock shim
d7f75dc docs: remove shim/proxy topics and fix docs links
7bbb9e...

Kata Containers 1.12.0-alpha1

Kata Containers release 1.12.0-alpha1

Kata Containers 1.10.7

Kata Containers release 1.10.7

Kata Containers 2.0.0-alpha3

The 2.0.0-alpha3 release brings in following changes:

• Add kata-monitor to expose kata runtime/vmm/agent metrics
• Support pod overhead metrics
• rust-agent shared pid namespace support
• Sync with kata-runtime repository up to 1.12.0-alpha0 release
• cloud-hypervisor support on ARM64
• A lot of code cleanup

Changelogs:
1f8e4f6 docs: Update travis and go report card url
db93a16 runtime: remove mock shim
e5910c9 sandbox: Stop and clean up containers that fail to create
1283feb ci: checkout TRAVIS_BRANCH
d7f75dc docs: remove shim/proxy topics and fix docs links
0b3cbee virtcontainers: Add additional unit tests for sandbox
c072017 package: enable cloud-hypervisor for arm64
07a307b virtcontainers: Remove duplicate unit tests
d914f01 virtcontainers: Move unit tests for types/sandbox.go
33b1865 actions: Pin to a particular sha for actions
8564c99 actions: Add github actions to perform DCO check
c508162 actions: Add action to perform WIP check for pull requests
7bbb9e8 rootfs-builder: Don't modify /sbin/init on the build host
3d46750 device: Ease device access for rootfs device to allow node creation
f554cde virtcontainers: Add to bridges unit test
1d7d944 fc: refactor --daemonize option
7f3e895 console-watcher: use console watcher to monitor guest console outputs
1099a28 kata 2.0: delete use_vsock option and proxy abstraction
73bf932 cgroup: fix the issue of crashed when meet unsupported cgroup
ab7afae docs: Clarifying minimum version of containerd for annotations
5b15e9e runtime: consolidate types definition
c6e4d09 agent: sandbox shared pid namespace support
afcf269 rustjail: fix the issue of missing join pid namespace
f3da690 docs: add link to CRI Configuration for pods
4291eb1 runtime: add monitor_address to .gitignore
1c56abb runtime: virtcontainers: vhost-user-blk/scsi are block device nodes
bbf8517 runtime: add pprof interface for shim
0790ca4 runtime: add pod overhead metrics
ae83c96 Modifie to proper CPU architecture name for ppc64le.
f404f4d Modified Makefile to pick up correct architecture name for ppc64le.
cdbba6a agent: Make LIBC configurable
2afbfca virtcontainers: print a warning when the device to append is not supported
919fc4c virtcontainer/cgroup: create cgroup manager after creating the network
a134c2e virtcontainers/network: Change signature of Enpoint Attach method
9a9721c drivers: change BindDevicetoVFIO signature
66219d1 device: support vfio cold plug
3eb694c device: add ColdPlug flag
3cf8b47 runtime: delete Stateful from SandboxConfig
069505e runtime: delete unused sub-commands.
a0a96db runtime: handle unimplemented RPC call by NotFound status code
bd8f03a runtime: remove agent abstraction
41c0464 runtime: fix wrong issue links
83b2366 config: there is no need to check vhost-vosck for FC
d96b306 docs: add metrics design documents for Kata 2.0
b28b850 versions: Revert "versions: update QEMU to 5.0.0"
5ff5303 tools: fix branch and runime repo
24ea3f0 virtcontainers: GetOOMEvent should have no timeout
1b75daa runtime: add new command to collect metrics from Kata containers
5200ac0 runtime: remove old store
186fed2 runtime: add implementation of GetMetrics
0c4c69d agent: add GetMetrics implementation
9fd3e48 agent: add new pb message GetMetrics
9c501f3 agent: device: Allow "VmPath" to be used when adding block devices
15af20b versions: update QEMU to 5.0.0
a06d01e versions: specify rust version
7ae4376 clh: vsock: Use the updated VsockConfig
d8a333b versions: Move to cloud-hypervisor v0.8.0
9177d3a virtiofsd: Use cache=auto
d66f219 cli: Fix kata-env output on Power
94fdec4 clh: Allow add virtiofs args and cache options from config
653df67 kata_agent: Add unit tests
6da49a0 clh: Clear the "PCIAddr" field while blk device hotplug
2d6c073 kata_agent: Pass "VirtPath" with "PCIAddr" of blk devices to agent
56ae209 kata_agent: Allow to use "VirtPath" as volume source for blk devices
bdd386b qemu: Fix rtc parameter is not set to qemu
51a6d60 qemu: Remove PMU feature for Power (ppc64le) platform
3ece413 runtime: clean up shim abstraction
3a17e7a qemu: Remove pmu limitation in nested virtualization of amd/ppc64le
06571f0 build: Add "pmu=off" to default cpu_features option
115dfa1 annotations: add cpu_features
fa9d619 qemu: add cpu_features option
520295b network: Detect and add static ARP entries
117ce4a clh: remove slow boot debug flags from kernel cmdline
7013796 clh: Remove vsock log port in kernel cmdline
fd5d139 clh: Improve hypervisor logging
21f8334 clh: Set 'virtio-blk' as the default block device driver
8b5eed7 clh: Enable disk block device hotplug support
883af9c agent: set hostname when running as init
899b75f agent: fix the issue of missing found right shell
2a8650b agent-ctl: add Cargo.lock
a8430b3 gitignore: ignore more files
be9ca0d qemu: Don't leak file descriptors in case of error
6060664 virtiofsd: Improve logging
7e250f2 shim: exit out of oom polling if unimplemented
9f8d1ba virtcontainers: tests fix, nit fix
d3b3e8b virtcontainers: x86: Support microvm machine type
1983393 virtcontainers: add support for getOOMEvent agent endpoint to sandbox
7c205be virtcontainers: add support for getOOMEvent agent endpoint to sandbox
380f07e proto: update agent protocol
dbc1c30 versions: Remove golangci-lint and gometalinter entries
6e7dd43 qemu: arm64: Set defaultGICVersion to 3 to limit the max vCPU number
93d1f7b versions: Misc changes to descriptions
17b3021 qemu: arm64: Don't detect gic version by /proc/interrupts
4cda90a dax: enable dax on arm64
7a44025 Makefile: add trace-forwarder/agent-ctl missing targets
61e011e vc: Version support check is ineffective in createSandbox
ebfbca0 osbuilder: use newest golang
0fd1eb5 Makefile: add default rule
3f8d4b6 trace-forwarder: add Cargo.lock
b68d4e4 shimv2: Removing function as no longer used
f570a2c shimv2 : Remove workaround for sharedPidNs
b2cc403 build: Improve top-level Makefile
f2a1996 agent: Rename check rule to test
ea1d799 qemu: Only one element of qemuPaths map is relevant
5dffffd qemu: Remove useless table from qemuArchBase
97a0213 qemu: Detect and fail a bad machine type earlier
d6e7a58 qemu: Clarify test with bad machine type

Kata Containers 1.12.0-alpha0

Kata Containers release 1.12.0-alpha0