Kata Containers Releases Version 3.0.0 

AUSTIN, Texas, Oct. 10, 2022 —Today, the open source project Kata Containers issued version 3.0.0 of the software. Kata Containers is a secure container runtime with lightweight virtual machines that feel and perform like containers but provide stronger workload isolation using hardware virtualization technology as a second layer of defense. This solution offers a fast and secure deployment option for anything from highly regulated workloads to untrusted code, spanning public and private cloud, containers-as-a-service and edge computing use cases.
Since launching in 2017, Kata Containers has been embraced by users who value “the speed of containers with the security of virtual machines.” Kata Containers 3.0.0 builds on software’s most valuable features: security, speed and compatibility with a wide variety of environments and hardware.

Key Features of Kata Containers 3.0.0

• A newly written runtime implementation in Rust and an optional integrated Rust hypervisor, further reducing Kata Containers resource consumption and management complexity.

  • Rust removes the overhead of the GO runtime.

  • Integrated Rust hypervisor ensures that Kata Containers only spawn one host component for each POD.

  • Aligns with the popular trends in the Linux community to rustify core software stack.

• Improved hypervisor support, making Kata Containers more accessible to a wider range of environment configurations.

  • Newly added support for GPUs, such as VFIO (Virtual function I/O), which allows safe, non-privileged, userspace drivers and PCI(e) devices in general.

  • Upgrade to cloud-hypervisor v26.0 with several improvements to cloud-hypervisor support for Intel TDX.

• Code updates to support the latest stable Linux Kernel release.

  • Each deployment of the Kata Container runtime includes its own kernel for increased security & container isolation. The kernel in Kata Containers 3.0.0 has been updated to run v5.19.2.

• Increased compatibility with leading cloud-native technologies.

  • Kata Containers supports popular runtimes including (but not limited to) Kubernetes, CRI-O, Containerd and OCI v1.0.0-rc5 Runtime specification.

• Additional security enhancements, including

  • Signature verification support with image-rs and offline filesystem KBC

  • Support for static resource management functionality in Rust runtime, significantly improving speed and security

  • Support for cgroupv2, adopting the latest Linux kernel cgroups features

Read more about the features of Kata Containers 3.0.0 in the release notes.

“There’s a lot of excitement in the Kata Containers community around how the improved hypervisor support in Kata Containers 3.0.0 expands compatibility with a number of popular environment configurations and hardware technologies, such as GPUs,” said Treva Williams, technical community manager at the Open Infrastructure Foundation. “Kata community members are constantly seeking ways to improve and do not shy away from a challenge, such as rewriting Kata in Rust. Switching to Rust significantly increases speed, performance and safety, so the community’s hard work in making the switch pays huge dividends for Kata users and future contributors as well.”

About Kata Containers

Kata Containers is an open infrastructure project of the Open Infrastructure Foundation. Delivering the speed and performance of containers with the security of virtual machines, Kata Containers is designed to be architecture agnostic and is compatible with Open Container Initiative (OCI) images as well as the container runtime interface (CRI) for Kubernetes. Kata Containers is hosted on Github under the Apache 2 license.

About the Open Infrastructure Foundation

The OpenInfra Foundation builds communities who write open source infrastructure software that runs in production. With the support of over 110,000 individuals in 187 countries, the OpenInfra Foundation hosts open source projects and communities of practice, including infrastructure for AI, container native apps, edge computing and data center clouds.

Source: Kata Containers