Howto Guides

Kubernetes Integration

• Run Kata containers with crictl
• How to use Kata Containers and Containerd
• How to use Kata Containers and containerd with Kubernetes
• How to use Kata Containers and CRI-O with Kubernetes
• Kata Containers and service mesh for Kubernetes
• How to import Kata Containers logs into Fluentd

Hypervisors Integration

Currently supported hypervisors with Kata Containers include:

• qemu

• cloud-hypervisor

• firecracker

  In the case of firecracker the use of a block device snapshotter is needed for the VM rootfs. Refer to the following guide for additional configuration steps:

  • Setup Kata containers with firecracker

Confidential Containers Policy

• How to auto-generate policy

Advanced Topics

• How to use Kata Containers with virtio-fs
• Setting Sysctls with Kata
• What Is VMCache and How To Enable It
• What Is VM Templating and How To Enable It
• How to Use Template in runtime-rs
• Privileged Kata Containers
• How to load kernel modules in Kata Containers
• How to use Kata Containers with virtio-mem
• How to set sandbox Kata Containers configurations with pod annotations
• How to monitor Kata Containers in K8s
• How to use hotplug memory on arm64 in Kata Containers
• How to setup swap devices in guest kernel
• How to run rootless vmm
• How to run Docker with Kata Containers
• How to run Kata Containers with nydus
• How to run Kata Containers with AMD SEV-SNP
• How to run Kata Containers with IBM Secure Execution
• How to use EROFS to build rootfs in Kata Containers
• How to run Kata Containers with kinds of Block Volumes
• How to use the Kata Agent Policy
• How to pull images in the guest
• How to use mem-agent to decrease the memory usage of Kata container
• How to use seccomp with runtime-rs
• How to use passthroughfd-IO with runtime-rs and Dragonball
• How to use EROFS snapshotter with Kata Containers