# Release 1.10.0-alpha1

This release includes support for Cloud Hypervisor (https://github.com/cloud-hypervisor/cloud-hypervisor),
bug fixes for rootless support and support for firecracker v0.19.0.
We have also added support for running guest in FIPS mode when host is running in FIPS mode.
This release also deprecates bridged networking model.

agent Changes

Shortlog

183a24a release: Kata Containers 1.10.0-alpha1
1ee8516 config: add option to control hotplug timeout of block devices

proxy Changes

Shortlog

c86bcc2 release: Kata Containers 1.10.0-alpha1
0e26fbb ci: travis: use xenial

runtime Changes

Shortlog

df889c3 release: Kata Containers 1.10.0-alpha1
fab759d config: Disable jailer by default for firecracker
1afad1c vc: Sandbox#Annotations should use annotationsLock read lock
7943dd9 persistence: store configuration in newstore
618666e vc: Remove unnecessary call to kill
1e04679 versions: Add cloud-hypervisor
510f0a6 clh: fix build
ee9a53c vc: Remove extra call to Kill
a2b6afc FC: log out the firecracker's console when debug enabled
13a00a2 virtcontainers: add a stateful to FC struct
784066a Makefile: clh: Use virtiofs kernel
01713d5 runtime: added cloud hypervisor driver
70297c2 nemu: remove nemu support
519eff7 fc: config: vhost-net not supported
0c482b2 qemu-configs: update disable_vhost_net description
744ccd4 network: Set the default config to tcfilter
27433d9 config: Get rid of bridged model docs in the configuration
dffc988 virtcontainers: Eliminate legacy networking models
6154210 versions: bump firecracker version
78ca966 virtcontainers: bump firecracker minimum supported version
77b0dfb virtcontainers: use new firecracker API
0def9b0 virtcontainers/firecracker: update API
f6ffb79 rootless: Fix cgroup creation logic for rootless
0bd41b9 FIPS: Add support for starting VM in FIPS mode.
5b31282 vc/qemu: add mutex to qmp monitor channel in qmpSetup()
62f64bb version: Update containerd version to 1.3.0
3f1a39c rootless: Fix rangeUID parsing
69ab092 versions: Add cri-tools and conmon to the versions.yaml
0e70b38 versions: Update kubernetes and cri-o to 1.16

shim Changes

Shortlog

3e47391 release: Kata Containers 1.10.0-alpha1

Compatibility with Docker

Kata Containers 1.10.0-alpha1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.0-alpha1 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.10.0-alpha1 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.10.0-alpha1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.0-alpha1 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.0-alpha1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.0-alpha1 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.9.2

This release includes bug fixes for rootless support with Kata.

agent Changes

Shortlog

1f4ac9c release: Kata Containers 1.9.2

proxy Changes

Shortlog

807ce0f release: Kata Containers 1.9.2

runtime Changes

Shortlog

cbcca5e release: Kata Containers 1.9.2
639f033 rootless: Fix rangeUID parsing
fd95e7e rootless: Fix cgroup creation logic for rootless

shim Changes

Shortlog

cf81691 release: Kata Containers 1.9.2

Compatibility with Docker

Kata Containers 1.9.2 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.2 is compatible with CRI-O v1.15.0

Compatibility with cri-containerd

Kata Containers 1.9.2 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.2 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.2 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.2

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.2 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.8.5

agent Changes

Shortlog

eb3712f release: Kata Containers 1.8.5

proxy Changes

Shortlog

ed47d80 release: Kata Containers 1.8.5

runtime Changes

Shortlog

e06eb5d release: Kata Containers 1.8.5

shim Changes

Shortlog

f45f032 release: Kata Containers 1.8.5

Compatibility with Docker

Kata Containers 1.8.5 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.8.5 is compatible with CRI-O v1.14.1

Compatibility with cri-containerd

Kata Containers 1.8.5 is compatible with cri-contaienrd 1.2.6

OCI Runtime Specification

Kata Containers 1.8.5 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.8.5 is compatible with Kubernetes 1.14.1-00

Kata Linux Containers image

Agent version: 1.8.5

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.8.5 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.10.0-alpha0

agent Changes

Shortlog

40567f6 release: Kata Containers 1.10.0-alpha0
19bee57 agent: connect debugging console in a specific vsock port
a4f7373 agent: fix pause bin on musl
8361150 docs: Add enable services and installation steps for TRACING.md
f9f129a docs: Add missing steps at TRACING.md
d3e66bf tracing: Wrapper for tracing functions
455f728 tracing: Generate an alias for opentracing.Span
7a7dba7 network: ensure parent directories exist
5f302e5 agent: Revert "client: remove the parameter of 'enableYamux'"
717ee24 client: remove the parameter of 'enableYamux'
d387c77 vendor: Update github.com/syndtr/gocapability/capability
b3d737b vendor: update libcontainer to 1.0.0-rc9

proxy Changes

Shortlog

d3a9486 release: Kata Containers 1.10.0-alpha0

runtime Changes

Shortlog

a1e359d versions: move cmake and musl version into versions.yaml
0a35f50 release: Kata Containers 1.10.0-alpha0
9d50cc1 HV: Remove number of guest CPU configuration in ACRN
c51d492 virtcontainers: fix the issue of missing watchConsole
691a6a7 sandbox/cgroups: don't constrain if using SandboxCgroupsOnly
7fe0100 cli: add kata-overhead command
1bbc1d5 virtcontainers: add StatsSandbox to vc API
569bd78 virtcontainers: change pass by value to pass by reference
e4c816b versions: support specify version in versions.yaml for rust agent.
24d7aff virtcontainers: change pass by value to pass by reference
5b226d0 ci: Fix versions_checker.sh
f8b84d7 ci: Fix versions_checker.sh
eca7bd2 virtcontainers: unmount host mounts if container can't be created
abec17f virtcontainers/store: make VCStoreUUIDPath rootless
91bd095 virtcontainers/annotations: use right domain name for kata annotations
c1060a3 v2: Change the event and error behavior of pause/resume
929c4e7 network: Change NewNS() call
c0995c6 vendor: Vendor the latest CNI plugins
86d8346 version: Update the version for cni plugins
f6a10bc state: Refactor code to move all the state load code
fa4acad state: Load the state from storage early on

shim Changes

Shortlog

8903b33 release: Kata Containers 1.10.0-alpha0

Compatibility with Docker

Kata Containers 1.10.0-alpha0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.0-alpha0 is compatible with CRI-O v1.15.0

Compatibility with cri-containerd

Kata Containers 1.10.0-alpha0 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.10.0-alpha0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.0-alpha0 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.10.0-alpha0

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.0-alpha0 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.9.1

Fixes for SandboxCgroupOnly handling, and crio integration.

agent Changes

Shortlog

68f1594 release: Kata Containers 1.9.1

proxy Changes

Shortlog

d0bdd50 release: Kata Containers 1.9.1

runtime Changes

Shortlog

9f1a80c release: Kata Containers 1.9.1
3308077 sandbox/cgroups: don't constrain if using SandboxCgroupsOnly
0e68662 ci: Fix versions_checker.sh

shim Changes

Shortlog

8b94508 release: Kata Containers 1.9.1

Compatibility with Docker

Kata Containers 1.9.1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.1 is compatible with CRI-O v1.15.0

Compatibility with cri-containerd

Kata Containers 1.9.1 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.1 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.1 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.9.0

Release 1.9.0 of Kata Containers includes:

• Support for Firecracker 0.18.0, including support for virtio-vsock(https://github.com/firecracker-microvm/firecracker/blob/master/docs/vsock.md)
• Support for OCI annotations allowing per pod custom configurations. With this, it is now possible to customize cpus, memory, kernel parameters, etc. on a per pod basis.
• Experimental support for virtio-fs v0.3 with qemu, with nemu being deprecated.
• Initial support for rootless Kata with podman.
• Experimental support for ACRN hypervisor. (https://projectacrn.org/)
• Configuration support to use pod cgroups alone, skipping cgroup creation for each container in a pod.

agent Changes

Shortlog

81ecd61 release: Kata Containers 1.9.0
6eac713 release: Kata Containers 1.9.0-rc0
95be1c3 agent: add support for logging to a vsock port
a03e23b protocols/client: improve hybrid vsock parser
6a96997 protocols/client: make schemes and hybrid vsock dialer public
e01f23c network: Add a testcase for setupDNS
d733185 network: Setup DNS for sandbox
bd0f562 protocols/client: support hybrid vsocks
4a34395 docs: Fix incorrect script reference in TRACING.md
8d682c4 release: Kata Containers 1.9.0-alpha2
b900a3f CI: Make Travis call common setup
a63ad12 release: Kata Containers 1.9.0-alpha1
545a411 mount: ensure local directory storage types have the correct permissions
006fdfe device: fix the issue of failed waiting on device appeared in /dev
f454d98 s390s: fix rootBusPath
b1a4284 travis: Fix golang version
b86f0de test: Add test to check for route-setup for interfaces from same subnet
2537235 network: While updating routes, do not delete routes with proto "kernel"
ad72fe8 agent: add support for loading kernel modules
72a50ef revert: agent: sandbox_pause should get arguments from proc
cfbd8c9 agent: sandbox_pause should get arguments from proc
b8b8dac s390x: add virtio-blk-ccw support
4ab32a9 vendor: dep check fixes
5ffb2a6 agent: make NoPivotRoot config depend on / fs type
a1c9d50 make: install depends on $(TARGET)
cf20c9b ci: Allow travis to use go install script
4354b24 tests: Add lots of new unit tests
d4a22d1 device: Allow uevent handler to be stopped
8eb2134 config: Add parseCmdlineOption test
d4f205d device: Add extra checks
faa6cb0 mount: Fix incorrect error return
2d95c36 mount: Add test for parseMountFlagsAndOptions
5163bab console: Add debug console test
d167490 sandbox: Remove redundant check
72fc0ad mount: Improve error message
c92715f tests: Add test for getMemory
cd2f994 memory: Add extra check for memory file
d0117bf release: Kata Containers 1.9.0-alpha0
7c97a0a agent: delete element of sandbox.deviceWatchers with right key
458b4aa vendor: Move to a previous version for runtime-spec vendor
32428bc vendor: update dependency opencontainers/runc

proxy Changes

Shortlog

c9f98d3 release: Kata Containers 1.9.0
8745201 release: Kata Containers 1.9.0-rc0
78bbd7e release: Kata Containers 1.9.0-alpha2
5e28640 release: Kata Containers 1.9.0-alpha1
1d7a0f1 vendor: Fix sync issue
3a5319f ci: Allow travis to use go install script
e497126 release: Kata Containers 1.9.0-alpha0

runtime Changes

Shortlog

e6f6a1c release: Kata Containers 1.9.0
b84cb5e release: Kata Containers 1.9.0-rc0
dd21046 vc/store: fix TestStoreVCNewVCSandboxStore/TestStoreVCNewVCContainerStore
6ab89e4 vc/store: fix cache factory ut
4863aa9 vc/store: reuse store
ad15631 virtiofsd: Do not use posix lock.
23a5dc7 virtiofsd: use virtiofsd --syslog
d5a3d0a virtiofs: use virtiofsd --fd=FDNUM
6ce6a26 kata_agent: use virtio-fs 0.3+ mount options
2b40b6b vendor: update kata agent
aa43e2a virtcontainers: set agent's logs vsock port
80855a8 ci: travis: allow ppc64le failures
c3abd51 config: Fix virtio-fs typo in Makefile
aa6a16c Hypervisor: UUID fix for acrn hypevisor
8f6b0a6 virtcontainers: change firecracker socket permissions
8f70643 tests: Remove hardcoded annotation value.
e7b9c36 tests: Add tests for annotations.
09129c1 config: Define minimum memory requirement
8405b56 annotations: add Annotations for the agent.
5b78a8a annotations: Add annotations for runtime config
afb91c2 annotations: Add annotations to support additional configurations
845bf73 annotations: Support annotations to customise kata config
30d0b7a annotations: Add missing firmware and hashes to asset annotations
46b6815 annotations: Change existing annotations to fit a new format
312f3e7 virtcontainers/fc: implement remove device
7e9cc56 virtcontainers/fc: improve create disk pool process
07932d5 virtcontainers/fc: add logs and improve others to make debugging easier
ed7240b virtcontainers: move device operations to a more generic place
e93bf96 network: Add tuntap device
c8dd92d dep: update vendor packages for netlink commit
41407cf vc: make cgroup usage configurable if rootless
5f0799f vc: add rootless dir to path variables
cdd6f7e katautils: update paths to be configurable for rootless execution
2d8b278 rootless: add rootless logic
8b843c5 QEMU: do not require nvdimm machine option with initrd
c152ebf s390x: Fix runtime build for s390x
bc3c07b versions: Update kernel to 4.19.75
b1909e8 config: fix virtiofsd name
84ead98 config: add configuration-qemu-virtio-fs.toml to gitignore
443e657 config: honor DEFSHAREDFS_QEMU_VIRTIOFS and CONFIG_QEMU_VIRTIOFS_IN
3d0949d virtcontainers: check minimum supported version of firecracker
8680db6 versions: update firecracker to the version 0.18.0
123ba13 vendor: update kata agent
5ac6e9a virtcontainers: make socket generation hypervisor specific
f2f0923 virtcontainers: rename kataVSOCK type and move it into the types package
f42dd7d virtcontainers/fc: Add support for hybrid vsocks
2c4cf39 virtcontainers/fc: bump firecracker experimental version
bb87b44 virtcontainers/fc: Add logger to the http transport
880bb2b virtcontainers: introducing HybridVSock type
2a8af23 virtcontainers: Make fc.go fit the new API
67ce728 virtcontainers: Update firecracker swagger API
1f93cff virtcontainers: fix the issue of missing qemu error logs
cdb1b5c cli: Fix the qemu-virtiofs.toml
7fa0a72 s390x: Share image between qemu instances
7965baa vendor: update govmm
c81db9c sandbox: The unit of newMemory is MB
4134571 config: do not use nemu variable for qemu-virtiofs configuration
97fe749 config: use 9p as default shared filesystem for nemu
2ed94cb Config: Remove ConfigJSONKey from annotations
324952c configuration: Add QEMU with virtiofs 3.0 support
82c2773 kernel: update to v4.19.73
7a3e7ef release: Kata Containers 1.9.0-alpha2
bca37c3 version: Add QEMU and kernel with virtiofs 3.0
da4d89b vendor: upgrade vendor ttrpc
07630b5 virtcontainers: Set sandbox dns in sandbox request
2faece3 s390x: Add appendImage function to qemu_s390x.go
e3f92fe virtcontainer: add error return code
a0e09df s390x: add appendVSock with devno
6b2a90a virtcontainer: rename appendVSockPCI
7c4e479 vc: Remove bind destination when unmounting
712e06a virtio-fs: add virtio_fs_extra_args for virtiofsd
b62814a sandbox: combine sandbox cgroup functions
9fc7246 sandbox: delete cgroup for SandboxOnly option
3fc6f4b sandbox: add containers, do not get cgroup path
074418f sandbox: Join cgroup sandbox on create.
2fcb8bb container: SandboxCgroupOnly: no host cgroups.
b650632 config: add option SandboxCgroupOnly
5a17d67 cgroups: container: check cgroup path before use it
f45b2d9 cgroups: quote some paths on errors.
6fdbef4 sandbox: Rename constrainHypervisor
caac68c sandbox: cgroup: prefix cgroup related methods
529ec25 sandbox: cgroups: move methods to sandbox file
d804c39 cgroups: container: rename functions
f71a1ef kernel: update to 4.19.71
d512158 hypervisor: Fix MacVTap internetworking support in ACRN
9507f45 CompatOCISpec: limit usage of CompatOCISpec
b075b5c s390x: add virtio-blk-ccw
d627585 virtcontainers: add devno
7eec670 virtcontainers: create generic function
e99739f ccw: add ccw type as bridge
23e6073 virtcontainers: Move bridge var in qemu type
9188774 bridges: abstraction of bridge type
f128195 release: Kata Containers 1.9.0-alpha1
611a860 kubernetes: update kubernetes for AArch64
8cf0f06 vsock: set VHOST_VSOCK_SET_GUEST_CID based based on arch
ff8d23d tests: allow running unit tests using podman
a5f1744 vc: Delete store when new/create container is failed
c8e5659 virtcontainers: fix kernel modules annotations
ba3d3da vendor: update govmm
5bfca6e test: add arch required kernel modules
db50978 kata-check: require kvm/vhost modules for amd64
c54f00a kata-check: reduce default output verbosity
24fcd1b test: add a generic function for CLI kata-check command
4cf0703 v2: Prevent killing all container processes when exec is failed
c91556a api: add a CleanupContainer api for VC
4a28b52 test: add test for network metric
dc38ba7 test: fix cgroup mock test
6534357 shim-v2: add network stat in metric
21698aa vendor: update cgroup
50d4188 qemu: fix error message miss
52e68f5 virtcontainers: cleanup the container config once failed
5b749a5 virtcontainers: remove the redundant sandbox config store
88e281c monitor: enlarge watch buffer
0075bf8 hypervisor: allow to return a slice of pids
0926c8d virtcontainers: Fix the issue of watching console for firecracker
4deeb05 versions: update version of qemu to 4.1.0
e7457e6 qemu: add logfile when debug is on
aebc496 qemu: fix memory prealloc option handling
6c77d76 qemu: check guest status with qmp query-status
5b50b34 shimv2: cancel monitor before stopping sandbox
49184ee vendor: update govmm
31ddb4d virtcontainers: add watchconsole for no_proxy type
b58ab66 qemu: do not try to stop qemu multiple times
d90eba8 network: always cold unplug network devices
d26ff71 Revert: "sandbox: remove network before stopping vm"
debc7d9 agent: add default timeout for grpc requests
9d4050e container: do not pause a StateReady container
794e08e sandbox: remove network before stopping vm
e4672...

# Release 1.8.4

runtime Changes

Shortlog

c5b570d release: Kata Containers 1.8.4
d2c019a ci: travis: Fix check when VERSION has not changed

agent Changes

Shortlog

3b10e4d release: Kata Containers 1.8.4

proxy Changes

Shortlog

f7c6f1b release: Kata Containers 1.8.4

shim Changes

Shortlog

1cb89ee release: Kata Containers 1.8.4

Compatibility with Docker

Kata Containers 1.8.4 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.8.4 is compatible with CRI-O v1.15.0

Compatibility with cri-containerd

Kata Containers 1.8.4 is compatible with cri-contaienrd 1.2.6

OCI Runtime Specification

Kata Containers 1.8.4 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.8.4 is compatible with Kubernetes 1.14.1-00

Kata Linux Containers image

Agent version: 1.8.4

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.8.4 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.9.0-rc0

Features included in release candidate 1.9.0-rc0 for Kata Containers:

• Suport for Firecracker 0.18.0, including support for virtio-vsock(https://github.com/firecracker-microvm/firecracker/blob/master/docs/vsock.md)
• Support for OCI annotations allowing per pod custom configurations. With this it is now possible to customize cpus, memory, kernel parameters etc on a per pod basis.
• Experimental support for virtio-fs with qemu, with nemu being deprecated.
• Initial support for rootless Kata with podman.
• Support for ACRN hypervisor. (https://projectacrn.org/)
• Configuration support to use pod cgroups alone, skipping cgroup creation for each container in a pod.

agent Changes

Shortlog

6eac713 release: Kata Containers 1.9.0-rc0
95be1c3 agent: add support for logging to a vsock port
a03e23b protocols/client: improve hybrid vsock parser
6a96997 protocols/client: make schemes and hybrid vsock dialer public
e01f23c network: Add a testcase for setupDNS
d733185 network: Setup DNS for sandbox
bd0f562 protocols/client: support hybrid vsocks
4a34395 docs: Fix incorrect script reference in TRACING.md
8d682c4 release: Kata Containers 1.9.0-alpha2
b900a3f CI: Make Travis call common setup
a63ad12 release: Kata Containers 1.9.0-alpha1
545a411 mount: ensure local directory storage types have the correct permissions
006fdfe device: fix the issue of failed waiting on device appeared in /dev
f454d98 s390s: fix rootBusPath
b1a4284 travis: Fix golang version
b86f0de test: Add test to check for route-setup for interfaces from same subnet
2537235 network: While updating routes, do not delete routes with proto "kernel"
ad72fe8 agent: add support for loading kernel modules
72a50ef revert: agent: sandbox_pause should get arguments from proc
cfbd8c9 agent: sandbox_pause should get arguments from proc
b8b8dac s390x: add virtio-blk-ccw support
4ab32a9 vendor: dep check fixes
5ffb2a6 agent: make NoPivotRoot config depend on / fs type
a1c9d50 make: install depends on $(TARGET)
cf20c9b ci: Allow travis to use go install script
4354b24 tests: Add lots of new unit tests
d4a22d1 device: Allow uevent handler to be stopped
8eb2134 config: Add parseCmdlineOption test
d4f205d device: Add extra checks
faa6cb0 mount: Fix incorrect error return
2d95c36 mount: Add test for parseMountFlagsAndOptions
5163bab console: Add debug console test
d167490 sandbox: Remove redundant check
72fc0ad mount: Improve error message
c92715f tests: Add test for getMemory
cd2f994 memory: Add extra check for memory file
d0117bf release: Kata Containers 1.9.0-alpha0
7c97a0a agent: delete element of sandbox.deviceWatchers with right key
458b4aa vendor: Move to a previous version for runtime-spec vendor
32428bc vendor: update dependency opencontainers/runc

proxy Changes

Shortlog

8745201 release: Kata Containers 1.9.0-rc0
78bbd7e release: Kata Containers 1.9.0-alpha2
5e28640 release: Kata Containers 1.9.0-alpha1
1d7a0f1 vendor: Fix sync issue
3a5319f ci: Allow travis to use go install script
e497126 release: Kata Containers 1.9.0-alpha0

runtime Changes

Shortlog

b84cb5e release: Kata Containers 1.9.0-rc0
dd21046 vc/store: fix TestStoreVCNewVCSandboxStore/TestStoreVCNewVCContainerStore
6ab89e4 vc/store: fix cache factory ut
4863aa9 vc/store: reuse store
ad15631 virtiofsd: Do not use posix lock.
23a5dc7 virtiofsd: use virtiofsd --syslog
d5a3d0a virtiofs: use virtiofsd --fd=FDNUM
6ce6a26 kata_agent: use virtio-fs 0.3+ mount options
2b40b6b vendor: update kata agent
aa43e2a virtcontainers: set agent's logs vsock port
80855a8 ci: travis: allow ppc64le failures
c3abd51 config: Fix virtio-fs typo in Makefile
aa6a16c Hypervisor: UUID fix for acrn hypevisor
8f6b0a6 virtcontainers: change firecracker socket permissions
8f70643 tests: Remove hardcoded annotation value.
e7b9c36 tests: Add tests for annotations.
09129c1 config: Define minimum memory requirement
8405b56 annotations: add Annotations for the agent.
5b78a8a annotations: Add annotations for runtime config
afb91c2 annotations: Add annotations to support additional configurations
845bf73 annotations: Support annotations to customise kata config
30d0b7a annotations: Add missing firmware and hashes to asset annotations
46b6815 annotations: Change existing annotations to fit a new format
312f3e7 virtcontainers/fc: implement remove device
7e9cc56 virtcontainers/fc: improve create disk pool process
07932d5 virtcontainers/fc: add logs and improve others to make debugging easier
ed7240b virtcontainers: move device operations to a more generic place
e93bf96 network: Add tuntap device
c8dd92d dep: update vendor packages for netlink commit
41407cf vc: make cgroup usage configurable if rootless
5f0799f vc: add rootless dir to path variables
cdd6f7e katautils: update paths to be configurable for rootless execution
2d8b278 rootless: add rootless logic
8b843c5 QEMU: do not require nvdimm machine option with initrd
c152ebf s390x: Fix runtime build for s390x
bc3c07b versions: Update kernel to 4.19.75
b1909e8 config: fix virtiofsd name
84ead98 config: add configuration-qemu-virtio-fs.toml to gitignore
443e657 config: honor DEFSHAREDFS_QEMU_VIRTIOFS and CONFIG_QEMU_VIRTIOFS_IN
3d0949d virtcontainers: check minimum supported version of firecracker
8680db6 versions: update firecracker to the version 0.18.0
123ba13 vendor: update kata agent
5ac6e9a virtcontainers: make socket generation hypervisor specific
f2f0923 virtcontainers: rename kataVSOCK type and move it into the types package
f42dd7d virtcontainers/fc: Add support for hybrid vsocks
2c4cf39 virtcontainers/fc: bump firecracker experimental version
bb87b44 virtcontainers/fc: Add logger to the http transport
880bb2b virtcontainers: introducing HybridVSock type
2a8af23 virtcontainers: Make fc.go fit the new API
67ce728 virtcontainers: Update firecracker swagger API
1f93cff virtcontainers: fix the issue of missing qemu error logs
cdb1b5c cli: Fix the qemu-virtiofs.toml
7fa0a72 s390x: Share image between qemu instances
7965baa vendor: update govmm
c81db9c sandbox: The unit of newMemory is MB
4134571 config: do not use nemu variable for qemu-virtiofs configuration
97fe749 config: use 9p as default shared filesystem for nemu
2ed94cb Config: Remove ConfigJSONKey from annotations
324952c configuration: Add QEMU with virtiofs 3.0 support
82c2773 kernel: update to v4.19.73
7a3e7ef release: Kata Containers 1.9.0-alpha2
bca37c3 version: Add QEMU and kernel with virtiofs 3.0
da4d89b vendor: upgrade vendor ttrpc
07630b5 virtcontainers: Set sandbox dns in sandbox request
2faece3 s390x: Add appendImage function to qemu_s390x.go
e3f92fe virtcontainer: add error return code
a0e09df s390x: add appendVSock with devno
6b2a90a virtcontainer: rename appendVSockPCI
7c4e479 vc: Remove bind destination when unmounting
712e06a virtio-fs: add virtio_fs_extra_args for virtiofsd
b62814a sandbox: combine sandbox cgroup functions
9fc7246 sandbox: delete cgroup for SandboxOnly option
3fc6f4b sandbox: add containers, do not get cgroup path
074418f sandbox: Join cgroup sandbox on create.
2fcb8bb container: SandboxCgroupOnly: no host cgroups.
b650632 config: add option SandboxCgroupOnly
5a17d67 cgroups: container: check cgroup path before use it
f45b2d9 cgroups: quote some paths on errors.
6fdbef4 sandbox: Rename constrainHypervisor
caac68c sandbox: cgroup: prefix cgroup related methods
529ec25 sandbox: cgroups: move methods to sandbox file
d804c39 cgroups: container: rename functions
f71a1ef kernel: update to 4.19.71
d512158 hypervisor: Fix MacVTap internetworking support in ACRN
9507f45 CompatOCISpec: limit usage of CompatOCISpec
b075b5c s390x: add virtio-blk-ccw
d627585 virtcontainers: add devno
7eec670 virtcontainers: create generic function
e99739f ccw: add ccw type as bridge
23e6073 virtcontainers: Move bridge var in qemu type
9188774 bridges: abstraction of bridge type
f128195 release: Kata Containers 1.9.0-alpha1
611a860 kubernetes: update kubernetes for AArch64
8cf0f06 vsock: set VHOST_VSOCK_SET_GUEST_CID based based on arch
ff8d23d tests: allow running unit tests using podman
a5f1744 vc: Delete store when new/create container is failed
c8e5659 virtcontainers: fix kernel modules annotations
ba3d3da vendor: update govmm
5bfca6e test: add arch required kernel modules
db50978 kata-check: require kvm/vhost modules for amd64
c54f00a kata-check: reduce default output verbosity
24fcd1b test: add a generic function for CLI kata-check command
4cf0703 v2: Prevent killing all container processes when exec is failed
c91556a api: add a CleanupContainer api for VC
4a28b52 test: add test for network metric
dc38ba7 test: fix cgroup mock test
6534357 shim-v2: add network stat in metric
21698aa vendor: update cgroup
50d4188 qemu: fix error message miss
52e68f5 virtcontainers: cleanup the container config once failed
5b749a5 virtcontainers: remove the redundant sandbox config store
88e281c monitor: enlarge watch buffer
0075bf8 hypervisor: allow to return a slice of pids
0926c8d virtcontainers: Fix the issue of watching console for firecracker
4deeb05 versions: update version of qemu to 4.1.0
e7457e6 qemu: add logfile when debug is on
aebc496 qemu: fix memory prealloc option handling
6c77d76 qemu: check guest status with qmp query-status
5b50b34 shimv2: cancel monitor before stopping sandbox
49184ee vendor: update govmm
31ddb4d virtcontainers: add watchconsole for no_proxy type
b58ab66 qemu: do not try to stop qemu multiple times
d90eba8 network: always cold unplug network devices
d26ff71 Revert: "sandbox: remove network before stopping vm"
debc7d9 agent: add default timeout for grpc requests
9d4050e container: do not pause a StateReady container
794e08e sandbox: remove network before stopping vm
e467293 virtcontainers: fix hotplug pci devices execeed max capacity bug
3fc17e9 vsock: Propogate error for vsock ioctl
604e1ab versions: kernel: update to 4.19.65
df7cf77 network: Ignore routes with proto as "kernel"
565f14f acrn: Change the default network model for ACRN to macvtap
2c99b95 network: Deprecate brid...

# Release 1.8.3

agent Changes

FIXME - massage this section by hand to produce a summary please

Shortlog

be08b93 release: Kata Containers 1.8.3
45195d7 CI: Make Travis call common setup

proxy Changes

FIXME - massage this section by hand to produce a summary please

Shortlog

dd04286 release: Kata Containers 1.8.3

runtime Changes

FIXME - massage this section by hand to produce a summary please

Shortlog

23b2e29 ci: Verify and block merge if other projects are not updated
d758805 release: Kata Containers 1.8.3
e388cc5 virtcontainers: move device operations to a more generic place
1d7b7b1 virtcontainers/fc: implement remove device
c94c07f versions: Update kernel to 4.19.75

shim Changes

FIXME - massage this section by hand to produce a summary please

Shortlog

ab14d36 release: Kata Containers 1.8.3

Compatibility with Docker

Kata Containers 1.8.3 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.8.3 is compatible with CRI-O v1.14.1

Compatibility with cri-containerd

Kata Containers 1.8.3 is compatible with cri-contaienrd 1.2.6

OCI Runtime Specification

Kata Containers 1.8.3 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.8.3 is compatible with Kubernetes 1.14.1-00

Kata Linux Containers image

Agent version: 1.8.3

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.8.3 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

Kata Containers 1.9.0-alpha2

Release 1.9.0-alpha2

agent Changes

Shortlog

8d682c4 release: Kata Containers 1.9.0-alpha2
b900a3f CI: Make Travis call common setup
a63ad12 release: Kata Containers 1.9.0-alpha1
545a411 mount: ensure local directory storage types have the correct permissions
006fdfe device: fix the issue of failed waiting on device appeared in /dev
f454d98 s390s: fix rootBusPath
b1a4284 travis: Fix golang version
b86f0de test: Add test to check for route-setup for interfaces from same subnet
2537235 network: While updating routes, do not delete routes with proto "kernel"
ad72fe8 agent: add support for loading kernel modules
72a50ef revert: agent: sandbox_pause should get arguments from proc
cfbd8c9 agent: sandbox_pause should get arguments from proc
b8b8dac s390x: add virtio-blk-ccw support
4ab32a9 vendor: dep check fixes
5ffb2a6 agent: make NoPivotRoot config depend on / fs type
a1c9d50 make: install depends on $(TARGET)
cf20c9b ci: Allow travis to use go install script
4354b24 tests: Add lots of new unit tests
d4a22d1 device: Allow uevent handler to be stopped
8eb2134 config: Add parseCmdlineOption test
d4f205d device: Add extra checks
faa6cb0 mount: Fix incorrect error return
2d95c36 mount: Add test for parseMountFlagsAndOptions
5163bab console: Add debug console test
d167490 sandbox: Remove redundant check
72fc0ad mount: Improve error message
c92715f tests: Add test for getMemory
cd2f994 memory: Add extra check for memory file

proxy Changes

Shortlog

78bbd7e release: Kata Containers 1.9.0-alpha2
5e28640 release: Kata Containers 1.9.0-alpha1
1d7a0f1 vendor: Fix sync issue
3a5319f ci: Allow travis to use go install script

runtime Changes

Shortlog

324952c configuration: Add QEMU with virtiofs 3.0 support
82c2773 kernel: update to v4.19.73
7a3e7ef release: Kata Containers 1.9.0-alpha2
bca37c3 version: Add QEMU and kernel with virtiofs 3.0
da4d89b vendor: upgrade vendor ttrpc
07630b5 virtcontainers: Set sandbox dns in sandbox request
2faece3 s390x: Add appendImage function to qemu_s390x.go
e3f92fe virtcontainer: add error return code
a0e09df s390x: add appendVSock with devno
6b2a90a virtcontainer: rename appendVSockPCI
7c4e479 vc: Remove bind destination when unmounting
712e06a virtio-fs: add virtio_fs_extra_args for virtiofsd
b62814a sandbox: combine sandbox cgroup functions
9fc7246 sandbox: delete cgroup for SandboxOnly option
3fc6f4b sandbox: add containers, do not get cgroup path
074418f sandbox: Join cgroup sandbox on create.
2fcb8bb container: SandboxCgroupOnly: no host cgroups.
b650632 config: add option SandboxCgroupOnly
5a17d67 cgroups: container: check cgroup path before use it
f45b2d9 cgroups: quote some paths on errors.
6fdbef4 sandbox: Rename constrainHypervisor
caac68c sandbox: cgroup: prefix cgroup related methods
529ec25 sandbox: cgroups: move methods to sandbox file
d804c39 cgroups: container: rename functions
f71a1ef kernel: update to 4.19.71
d512158 hypervisor: Fix MacVTap internetworking support in ACRN
9507f45 CompatOCISpec: limit usage of CompatOCISpec
b075b5c s390x: add virtio-blk-ccw
d627585 virtcontainers: add devno
7eec670 virtcontainers: create generic function
e99739f ccw: add ccw type as bridge
23e6073 virtcontainers: Move bridge var in qemu type
9188774 bridges: abstraction of bridge type
f128195 release: Kata Containers 1.9.0-alpha1
611a860 kubernetes: update kubernetes for AArch64
8cf0f06 vsock: set VHOST_VSOCK_SET_GUEST_CID based based on arch
ff8d23d tests: allow running unit tests using podman
a5f1744 vc: Delete store when new/create container is failed
c8e5659 virtcontainers: fix kernel modules annotations
ba3d3da vendor: update govmm
5bfca6e test: add arch required kernel modules
db50978 kata-check: require kvm/vhost modules for amd64
c54f00a kata-check: reduce default output verbosity
24fcd1b test: add a generic function for CLI kata-check command
4cf0703 v2: Prevent killing all container processes when exec is failed
c91556a api: add a CleanupContainer api for VC
4a28b52 test: add test for network metric
dc38ba7 test: fix cgroup mock test
6534357 shim-v2: add network stat in metric
21698aa vendor: update cgroup
50d4188 qemu: fix error message miss
52e68f5 virtcontainers: cleanup the container config once failed
5b749a5 virtcontainers: remove the redundant sandbox config store
88e281c monitor: enlarge watch buffer
0075bf8 hypervisor: allow to return a slice of pids
0926c8d virtcontainers: Fix the issue of watching console for firecracker
4deeb05 versions: update version of qemu to 4.1.0
e7457e6 qemu: add logfile when debug is on
aebc496 qemu: fix memory prealloc option handling
6c77d76 qemu: check guest status with qmp query-status
5b50b34 shimv2: cancel monitor before stopping sandbox
49184ee vendor: update govmm
31ddb4d virtcontainers: add watchconsole for no_proxy type
b58ab66 qemu: do not try to stop qemu multiple times
d90eba8 network: always cold unplug network devices
d26ff71 Revert: "sandbox: remove network before stopping vm"
debc7d9 agent: add default timeout for grpc requests
9d4050e container: do not pause a StateReady container
794e08e sandbox: remove network before stopping vm
e467293 virtcontainers: fix hotplug pci devices execeed max capacity bug
3fc17e9 vsock: Propogate error for vsock ioctl
604e1ab versions: kernel: update to 4.19.65
df7cf77 network: Ignore routes with proto as "kernel"
565f14f acrn: Change the default network model for ACRN to macvtap
2c99b95 network: Deprecate bridged networking mode.
50c3e56 network: fix failed to remove network
355b9c0 virtcontainers: add support for loading kernel modules
979f064 vendor: update kata agent
2058751 shim-v2: fix shim leak when hypervisor exit unexpectly
a9168a3 virtiofs: wait for virtiofsd process to release its resources
0832294 pkg/katautils: Do not set init in the kernel command line
6e1e6a2 virtiofs: fix virtiofs crash when cache=none
263fb64 acrn: Add toml to gitignore
0d0a84e versions: Upgrade to k8s 1.15
7668aeb virtcontainers: support SMP die
104c04d vendor: update govmm
50e263d qemu: support vfio pass x-pci-vendor-id and x-pci-device-id pass
2cf4189 vendor: update github.com/intel/govmm
e41a6b9 vendor: Update vendor directories
95e8a7a dep: Remove nested vendor directories
3063391 ut: skip TestBindUnmountContainerRootfsENOENTNotError for non-root
c4583f4 ut: skip TestStartNetworkMonitor for non-root
f3d0978 persist: improve readability
3bfbbd6 persist: merge "network.json"
99cf3f8 persist: merge "agent.json"
7d5e48f persist: manage "hypervisor.json" with new store
d5d7d82 vc: move container mount cleanup to container.go
e02f6dc shimv2: monitor sandbox liveness
262484d monitor: watch hypervisor
67c401c agent: use hypervisor pid as backup proxy pid for non-kata proxy cases
835b6e9 sandbox: do not fail SIGKILL
bc4460e sandbox: support force stop
4130913 agent: mark agent dead when failing to connect
c472a01 container: allow to stop a paused container
f886c0b vc: drop container SetPid API
f2423e7 virtcontainers: convert virtcontainers tests to testify/assert
f2e6a31 ci: Allow travis to use go install script

shim Changes

Shortlog

153d74a release: Kata Containers 1.9.0-alpha2
6ec334a release: Kata Containers 1.9.0-alpha1
351ef95 vendor: Manually edit Gopkg.lock
728d0e5 vendor: Fix remaining out of sync dependency
b67e899 vendor: Fix out of sync vendor issue
e6c7cda ci: Allow travis to use go install script

Compatibility with Docker

Kata Containers 1.9.0-alpha2 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.0-alpha2 is compatible with CRI-O v1.15.0

Compatibility with cri-containerd

Kata Containers 1.9.0-alpha2 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.0-alpha2 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.0-alpha2 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.0-alpha2

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.0-alpha2 suggest to use the Linux kernel v4.19.73
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations