June 2021 - kata-dev - lists.katacontainers.io

February 2021 Kata Containers Architecture Committee elections are open! (round 2)
by Fabiano Fidêncio 16 Sep '21

16 Sep '21

Hello Kata Citizens, On behalf of myself, Fabiano Fidêncio, and Ricardo Aravena, as the approved election officials, it's a pleasure to announce that the Kata Containers Architecture Committee Elections for February 2021 are open! There are two Architecture Committee seats up for election. The seats up for election are currently filled by `Xu Wang`, and `Samuel Ortiz`. The timeline for the election process is: • Election officials approved by AC: February 23 * February 24, 15:00 UTC - March 10, 2021 14:59 UTC: Candidate nominations open * March 10, 15:00 UTC - March 22, 2021 14:59 UTC: Q&A/Debate period * March 23, 15:00 UTC - March 29, 2021 14:59 UTC: Voting open * March 30, 2021, results announced The window will be open for candidates to post their submissions, from February 24th, 15:00 UTC. The process to submit a nomination is: 1) Review the responsibilities of the Architecture Committee members [1] 2) Between now and March 3 at 14:59 UTC, you can declare your candidacy for one of the open seats by submitting a text file with your name (please put your name as the file name), the reason for running, and your platform/objectives to this folder [2]. Please also send a message to the kata-dev ML with this same info, declaring your candidacy. Who can vote: Anyone who has had a commit merged into the project in the last 12 months will be eligible to vote. All eligible voters will receive an email with a link to the voting system once the voting period opens. More details of the election process are outlined at [3] and in the etherpad at [4]. Note, once candidacy entry has closed and we enter the debate period, where we will be openly asking the candidates some questions around their candidacy. The community is encouraged to submit questions via the election officials and etherpad at [4] - get your thinking caps on now in preparation... we shall then filter, review, and choose a set of suitable questions for the candidates. Please let us know if you have any questions about running for a seat or the election process! [1] https://github.com/kata-containers/community/tree/master/elections#architec… [2] https://github.com/kata-containers/community/tree/master/elections/arch-com… [3] https://github.com/kata-containers/community/tree/master/elections [4] https://etherpad.opendev.org/p/KataArchCommElections_Feb2021 Best Regards, -- Fabiano Fidêncio

4 3

Updated invitation: Kata Containers Perf Isolation Use Case Meeting @ Weekly from 11pm to 11:45pm on Wednesday (SGT) (kata-dev@lists.katacontainers.io)
by bergwolf＠gmail.com 21 Jul '21

21 Jul '21

This event has been changed. Title: Kata Containers Perf Isolation Use Case Meeting As discussed, let's split off and use this time slot to talk about the performance isolation use case. And let's meet weekly until we have fewer things to discuss.Zoom link (passcode: kata)https://zoom.us/j/98038141932gdoc link:https://docs.google.com/document/d/15Hc6DkJxLKev_MNKdN3OZWSpZxH3ch5TJ-… (changed) When: Weekly from 11pm to 11:45pm on Wednesday Singapore Standard Time (changed) Calendar: kata-dev(a)lists.katacontainers.io Who: * bergwolf(a)gmail.com - organizer * kata-dev(a)lists.katacontainers.io * Fabiano Fidêncio * Karl Heubaum * Liam Merwick * Boris Ostrovsky * Gupta, Sandeep * Wang, Arron * eric.g.ernst(a)gmail.com * Wang,Liang(ACG CCN) * aadam(a)redhat.com * azaalouk(a)redhat.com * Boeuf, Sebastien * ffidenci(a)redhat.com * Sun, Ning * Prabhakar, Surya * Brian Kocoloski * jrope(a)redhat.com * Peng Tao Event details: https://calendar.google.com/calendar/event?action=VIEW&eid=NDgyNmFzbXBqbjAz… Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this courtesy email at the account kata-dev(a)lists.katacontainers.io because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://calendar.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding

2 5

[RFC]: Kata tracing proposals
by Hunt, James O 01 Jul '21

01 Jul '21

Hi All, TL;DR Please review the tracing proposals document PR [1]. # Detail Hot on the heels of the last tracing update [2], I've just raised a doc PR that summarises liubin's proposals for tracing with Kata [1]. In summary, the proposals simplify the planned architecture still further, but remove "dynamic tracing" from our plans (although this could be considered at a later date if the community deems it worthwhile). # Feedback required If you have an interest in tracing, _please_ review this document and comment. We're particularly keen to understand the answers to the questions listed on the PR above (do you care more about short-lived or long-running containers, etc). The answers will help us decide whether to proceed with the proposals. # Architecture Committee discussion I've added an agenda item for next weeks AC meeting [3] to discuss these proposals so you have a few days to review the doc before we discuss next Tuesday. Cheers, James [1] - https://github.com/kata-containers/kata-containers/pull/2062 [2] - https://gist.github.com/jodh-intel/0ee54d41d2a803ba761e166136b42277 [3] - https://etherpad.opendev.org/p/Kata_Containers_2021_Architecture_Committee_… --- https://katacontainers.io/ | https://github.com/kata-containers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ.

1 1

Confidential Computing and FIPS compliance
by Snir 30 Jun '21

30 Jun '21

Hi, Recently I’ve started investigating the requirement for FIPS [1] compliance with kata containers, currently it doesn’t seem there's much cryptography happening in Kata, however, it was brought to my attention that it might be more common in the confidential computing solutions. As the requirement for FIPS compliance is sometimes correlated to dealing with sensitive information I tend to believe it might also be a requirement by some of the confidential computing users. Since I’m jumping a bit late on the confidential computing train \o/ I’d like to ask some newbie questions: * Was FIPS compliance discussed/considered in the context of confidential computing? * Is it known already what crypto components are expected to be used? * I saw it’s planned to re-implement the ocicrypt library in Rust[2], AFAIU Rust doesn’t have standard library cryptography, hence, i assume it will count on all sorts of other crypto dependencies, is there any plan to have limitations/requirements on what should be used? I'm not a FIPS nor crypto expert, however I'd be glad to help or provide more info if required :) Regards, Snir. [1] https://en.wikipedia.org/wiki/FIPS_140-2 https://www.nist.gov/itl/current-fips [2] https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRTJ0QnJh… More not necessarily related info: BoringCryto- google's FIPS compliant lib: https://boringssl.googlesource.com/boringssl/+/master/crypto/fipsmodule/FIP… Allowed algorithms: https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fi… https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fi… https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fi… https://csrc.nist.gov/csrc/media/publications/fips/140/2/final/documents/fi…

4 4

[Diversity] Diversity and Inclusion July Meeting Update
by Amy Marrich 30 Jun '21

30 Jun '21

Due to most US companies having July 5th off, we will be moving the Jully D&I WG meeting Please join us Monday, July 19th at 17:00 UTC in the #openinfra-diversity channel on OFTC. The agenda can be found at https://etherpad.openstack.org/p/ diversity-wg-agenda. Thanks, Amy (spotz)

1 0

October 2021 PTG Dates & Registration
by Ashlee Ferguson 29 Jun '21

29 Jun '21

Hi everyone, We're happy to announce the next virtual PTG[1] will take place October 18-22, 2021! Registration is now open[2]. The virtual PTG is free to attend, but make sure to register so you recieve important communications like schedules, passwords, and other relevant updates. Next week, keep an eye out for info regarding team sign-ups. Can't wait to see you all there! Ashlee [1] https://www.openstack.org/ptg/ [2] https://openinfra-ptg.eventbrite.com

1 0

Canceled event with note: Kata containers confidential computing use case meeting @ Thu Jul 1, 2021 3pm - 4pm (IDT) (kata-dev@lists.katacontainers.io)
by aadam＠redhat.com 29 Jun '21

29 Jun '21

This event has been canceled with this note: "Canceling this weeks meeting due to vacations in the US. " Title: Kata containers confidential computing use case meeting Discussing kata container confidential computing use case and working on relevant tasks.Meeting notes:https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRT… will be recorded for those who can't attend. Join Zoom Meetinghttps://zoom.us/j/98038141932Passcode: kataMeeting ID: 980 3814 1932One tap mobile+12532158782,,98038141932# US (Tacoma)+13462487799,,98038141932# US (Houston)Dial by your location        +1 253 215 8782 US (Tacoma)        +1 346 248 7799 US (Houston)        +1 669 900 6833 US (San Jose)        +1 301 715 8592 US (Washington DC)        +1 312 626 6799 US (Chicago)        +1 646 876 9923 US (New York)Meeting ID: 980 3814 1932Find your local number: https://zoom.us/u/adGVd3H0IA When: Thu Jul 1, 2021 3pm – 4pm Israel Time Where: https://zoom.us/j/98038141932 Calendar: kata-dev(a)lists.katacontainers.io Who: * aadam(a)redhat.com - organizer * Boeuf, Sebastien * Sun, Ning * Kumari, Madhuri * Fabiano Fidêncio * ailan(a)redhat.com * Eric Adams * kapteen(a)gmail.com * kata-dev(a)lists.katacontainers.io * Liam Merwick * Boris Ostrovsky * Wang,Liang(ACG CCN) * Brian Kocoloski * George Kennedy Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this courtesy email at the account kata-dev(a)lists.katacontainers.io because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://calendar.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding

1 0

Confidential computing meeting minutes (2021/06/24)
by Samuel Ortiz 28 Jun '21

28 Jun '21

Hi All, Last week we quickly reviewed our v0 proposal [1], and then started our initial discussions around attestation. Thanks to Haidong for presenting an initial, high level proposal for doing remote attestation with Kata. This triggered quite a bit of conversation, that could be summarized into: * Regardless of how the attestation agent talks back to the relying party (vsock or virtio-net directly), the interaction between it and ocicrypt would happen through the keyprovider interface [2]. * An attestation agent that could dynamically support several hardware implementations (SEV, TDX, SE, etc) would allow for building single initrd images supporting heterogeneous clusters. * Some folks on the call already have internal implementations for doing remote attestation with Kata. There is a need to create a repo where those implementation could be contributed into, as hardware specific implementations/plugins. To that purpose, we created the attestation-agent repo in the containers github organisation [3]. Next week, many folks in the US will be unable to attend due to the 4th of July holiday. I propose that we cancel this session and resume on July 8th, at 3pm UTC. Please let us know if there's anything urgent that need to be discussed on July 1st or if it's ok for everyone to cancel. Cheers, Samuel. [1] https://docs.google.com/presentation/d/1469nSRFtlHMSDDDWVLj0i21dR9M_3SO76eh… [2] https://github.com/containers/ocicrypt/blob/main/docs/keyprovider.md [3] https://github.com/containers/attestation-agent

1 0

Weekly Kata Herders
by Hunt, James O 28 Jun '21

28 Jun '21

Hi All, This week's Kata PR and issue herders are: - Eric (https://github.com/egernst) - Fabiano (https://github.com/fidencio) - Salvador (https://github.com/chavafg) # Statistics ## Issues Issues opened last week: 33 Issues closed last week: 28 Open issues: 315 Issue backlog project board: https://github.com/orgs/kata-containers/projects/23 ## PRs PRs opened last week: 34 PRs closed last week: 36 Open PRs: 59 Open PRs (excluding dnm+wip): 41 # Get involved If you'd like to help get the open PRs merged and open issues resolved (or get involved in other ways with Kata), take a look at the contributing guide [2] and the rota process [3]. Any problems, just ask us [4]. Cheers, James [1] - https://github.com/kata-containers/community/wiki/Review-Team-Rota [2] - https://github.com/kata-containers/community/blob/master/CONTRIBUTING.md [3] - https://github.com/kata-containers/community/blob/master/Rota-Process.md [4] - https://github.com/kata-containers/community#join-us --- https://katacontainers.io/ | https://github.com/kata-containers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ.

1 0

Confidential computing meeting (2021/06/24)
by Samuel Ortiz 23 Jun '21

23 Jun '21

Hi Everyone, Last week's meeting was cancelled, so no late minutes to report this week ;-) Tomorrow we will resume our v0 discussions, and hopefully start exploring the remote attestation architecture and proposals. I'm hoping Haidong Xia from Intel can come and give a brief presentation of the high level architecture proposal he has for TDX. And we could then discuss and see if this could be made into a generic, architecture agnostic design. As usual, the proposed agenda is in the google doc [1], feel free to add anything to it. And remember, tomorrow's meeting is at 3pm UTC (US timezones friendly). Cheers, Samuel. [1] https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRTJ0QnJh…

2 1