[kata-dev] About the build of QEMU on Kata Containers

Montes, Julio julio.montes at intel.com
Mon Mar 8 15:57:18 UTC 2021


Hi Wainer

My two cents

* Performance
  - Smaller memory footprint 
  - Better boot time
* Smaller Attack surface
  - custom Kconfig
* Kata needs features that some distros may not support it because they
are considered insecure, unstable or too new, for example:
  - 9p
  - libpmem/nvdimm
  - vsocks

--
Julio
  

On Mon, 2021-03-08 at 12:41 -0300, Wainer dos Santos Moschetta wrote:
> Hi all,
> 
> While working on updating the version of QEMU [1] used on the
> project, 
> for some occasions people outside asked me why the project builds
> QEMU 
> from source instead of relying on distro's provided. When I started 
> contributing to this project I asked it myself many times but I
> never 
> looked for an answer.
> 
> I can think on many reasons but I would be guessing. So If someone
> could 
> share the rationale here, I would appreciate it. Perhaps more
> important, 
> we could discuss if the scenario stands the same so that we should
> stick 
> with that approach or if we could manage the QEMU build differently 
> nowadays.
> 
> [1] https://github.com/kata-containers/kata-containers/pull/1349
> 
> Thanks in advance,
> 
> Wainer dos Santos Moschetta
> 
> Software Engineer, Red Hat, Brazil
> 
> 
> _______________________________________________
> kata-dev mailing list
> kata-dev at lists.katacontainers.io
> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev


More information about the kata-dev mailing list