September 2021 - kata-dev - lists.katacontainers.io

Elections for Kata Architecture Committee: Fabiano Fidêncio
by Fabiano Fidêncio 09 Sep '21

09 Sep '21

Name: Fabiano Fidêncio Email: fabiano(a)fidencio.org Background: I am a Software Engineer, a tattoo canvas for abstract art, a music addict, a goats and pigs instagram follower, and a big fan of old video games. In the past 18 months I dedicated a huge chunk of my professional and personal time contributing to the Kata Containers project and community, with a strong focus on helping Red Hat to build a product from the Kata Containers project. My involvement with Kata Containers has been intense. I've been involved on pretty much every part of the project, on projects Kata Containers interacts with. Moreover, I've already been serving the community as a current member of the Kata Containers Architecture Committee. In the enterprise world, I have worked on making the upstream project a Red Hat's downstream product, passing by Fedora, CentOS, Red Hat CoreOS, and OpenShift components. As a result of this effort Red Hat now has an official product which uses Kata Containers underneath. In the community space, I also have helped on a lot of different parts of the project. connected people to have their problems solved, mentored both newcomers and students into our community, led Architecture Committee meetings, led the last vPTG's Kata Containers session. I also went hands-on on CI, code-reviewing, development focusing on easing the adoption of the project, managed the past and current releases, and have been working as much as possible to grow this community in a healthy way. My main motivations are still to increase Kata Containers adoption in the industry, while ensuring the project is stable and easily consumable. This is more important now than ever as new players are adopting and contributing to the Kata Containers project. To make it possible, I plan to continue working in the integration bits, while connecting and facilitating the communication between the Kata Containers community and the communities that I am part of. On a side note, I'd like to mention that from November 1st, 2021, I'll be working for Intel, focusing on the Kata Containers project. Fabiano Fidêncio (IRC / Slack: fidencio) Best Regards, -- Fabiano Fidêncio

1 0

Confidential Computing Meeting - 2021/09/09
by Samuel Ortiz 08 Sep '21

08 Sep '21

Hey Everyone! Tomorrow (09/09) at 12:00 (noon) UTC, we'll have our regular confidential containers meeting. Due to a conflict with the TAG-runtime session (Many thanks to everyone that joined that session), we had to cancel last week’s meeting so we’re carrying a few topics over. We’ll go through our v0 status sync and see how close we are from reaching our first milestone. Then we’ll discuss about that TAG-runtime presentation and look at our next steps. After that we’ll talk about a couple of upcoming conferences where we either will or could present our work. Finally, Gerry Liu from Alibaba will talk about container image management with containerd, for confidential containers. Image management and offload is a key part of our project, and next week we’ll also have IBM present about their work and proposals on that topic. We have a packed agenda for tomorrow, but feel free to add more topics to it [1]. If we’re running out of time and can’t get to some items there, we’ll just carry them over to the following meetings. Cheers, Samuel. [1] https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRTJ0QnJh…

1 0

Architecture vs. project discussions…
by Christophe de Dinechin 07 Sep '21

07 Sep '21

During the last architecture committee meeting (https://etherpad.opendev.org/p/Kata_Containers_2021_Architecture_Committee_…) we talked about disabling the Arm CI. This is an important discussion for the project, but it is not really "architecture" either. So this made me think that we could either: 1. Make it more explicit that the AC meeting is our primary weekly meeting, and that we can also discuss non-architectural topics such as CI or upcoming talks. This matches existing practice, and it acknowledges that separation of concerns may be difficult (e.g. a change in repository like govmm is operational, but has architectural implications like "what APIs do we want to expose"). 2. Take advantage of an existing weekly meeting that happens right before, the backlog review meeting. We are now "on a roll" and tend to finish this meeting early after having cleaned up the queue. We could decide to add an "agenda" for this meeting for discussion of more operational topics. We often have a few CI contributors there on a regular basis too, so it's not necessarily an extra load. As usual, I believe that the correct solution will be a combination of both. As a first step, we could decide to use the existing EtherPad, and to simply add an "Operational issues" section that we could then discuss ahead of the AC meeting during the backlog review, so that we have solutions to offer rather than just problems to discuss. What do you think? Christophe

2 2

Weekly Kata Herders
by Hunt, James O 07 Sep '21

07 Sep '21

Hi All, # Herders This week's Kata PR and issue herders are: - Fabiano (https://github.com/fidencio) - Eric (https://github.com/egernst) - Salvador (https://github.com/chavafg) # Statistics ## Issues Issues opened last week: 53 Issues closed last week: 42 Open issues: 431 Issue backlog project board: https://github.com/orgs/kata-containers/projects/23 ## PRs PRs opened last week: 63 PRs closed last week: 48 Open PRs: 115 Open PRs (excluding dnm+wip): 74 # Get involved If you'd like to help get the open PRs merged and open issues resolved (or get involved in other ways with Kata), take a look at the contributing guide [2] and the rota process [3]. Any problems, just ask us [4]. Cheers, James [1] - https://github.com/kata-containers/community/wiki/Review-Team-Rota [2] - https://github.com/kata-containers/community/blob/master/CONTRIBUTING.md [3] - https://github.com/kata-containers/community/blob/master/Rota-Process.md [4] - https://github.com/kata-containers/community#join-us --- https://katacontainers.io/ | https://github.com/kata-containers Open Source Technology Center Intel Corporation (UK) Ltd. - Co. Reg. #1134945 - Pipers Way, Swindon SN3 1RJ.

1 0

kata qemu question
by 詹康彬 07 Sep '21

07 Sep '21

Hello kata official, Excuse me, I have a question about qemu. Since I want to know the eth0 information in the vm, I wonder how can I get into the qemu kvm control mode. By the way, I have already start a pod using kubernetes. thanks best regards Tom

1 0

Shall we still try to release kata-containers 2.1.2?
by Fabiano Fidêncio 06 Sep '21

06 Sep '21

Folks, Last week we released kata-containers 2.2.0 (which I'll send another email about later Today), making the stable-2.1 branch EOL. Snir has done a bunch of work trying to backport things so we'd have a 2.1.2 release out, but it seems that it got way too complicated due to CI failures here and there. With this in mind, I'm proposing we call it a life for the stable-2.1 branch, don't even try to put more effort on trying to make a last release out of it, and focus on stable-2.2 branch for now on, hopefully following the Guidelines suggested by Gabriela (see: https://github.com/kata-containers/kata-containers/issues/2429) Does someone have any objection to the plan of *NOT* releasing 2.1.2? Best Regards, -- Fabiano Fidêncio

1 0

govmm/Kata integration, revisited
by David Gibson 03 Sep '21

03 Sep '21

So.. I just discovered I had a mail misconfiguration which meant at least one recent message I sent to the list on the govmm stuff didn't get through. Which probably explains why I had a different idea of what was going on that other people seem to have had. I proposed the integration of govmm into the Kata repository for two reasons: 1) To avoid the back and forth of synchronized govmm & Kata changes 2) To avoid maintaining another external interface When I first pitched it to Fabiano I had the impression that Kata was the only user of govmm making it an internal interface in practice, so (1) was the main motivation. Having discovered that's not the case, though, (2) is really the more important factor. The Kata team really doesn't have the resources to maintain a general VMM interface - which is in fact an extremely difficult problem (witness the complexity of libvirt). It's made more difficult by the fact that there's not really a natural API boundary in between qemu itself and Kata's hypervisor interface, so what is and isn't in govmm is already pretty arbitrary and based on Kata's needs. AIUI, at the last AC meeting, the decision was made to move govmm into the kata-containers repo, encouraging external users to consume it from the new location. That addresses (1), but not (2), since it's still effectively an external interface. It makes the dilineation of that interface even less clear than it already is. So, I really think this is a bad approach. Instead, what I believe we should do is leave the govmm repository as is, but orphaned, for external users. They can take up maintenance of it, if they have the interest. For Kata, I think we should simply fork the current govmm state, removing any parts we don't need, and in future make no attempt to keep it as anything but an internal interface tailored for Kata's needs. I believe this will let us make some significant simplifications. My issue and pull request (#2393 and #2395) were made with the latter approach in mind, and I'm presently holding off on merging until we're clear on how we're proceding here. -- David Gibson | I'll have my music baroque, and my code david AT gibson.dropbear.id.au | minimalist, thank you. NOT _the_ _other_ | _way_ _around_! http://www.ozlabs.org/~dgibson

4 16

Adding David Esparza to the kata-containers team in GitHub
by Fuentes, Salvador 02 Sep '21

02 Sep '21

Hey Folks, David Esparza joined the Kata team at Intel couple of months ago and he has been contributing improving the metrics CI scripts and tests. He has also been reviewing a few PRs in the tests repo and we have already added him to the review rota. Because of that, I would like to add David to the GitHub teams, so that he can officially review PRs and start CI jobs. Let me know your thoughts. Thanks. Salvador Fuentes.

3 2

Canceled event with note: Kata containers confidential computing use case meeting @ Thu Sep 2, 2021 6:30pm - 7:30pm (IDT) (kata-dev@lists.katacontainers.io)
by aadam＠redhat.com 02 Sep '21

02 Sep '21

This event has been canceled with this note: "Samuel and I discussed and we think the tag meeting will take more than 30 minutes so we are canceling the confidential containers meeting this week. " Title: Kata containers confidential computing use case meeting Discussing kata container confidential computing use case and working on relevant tasks.Meeting notes:https://docs.google.com/document/d/1E3GLCzNgrcigUlgWAZYlgqNTdVwiMwCRT… will be recorded for those who can't attend. Join Zoom Meetinghttps://zoom.us/j/98038141932Passcode: kataMeeting ID: 980 3814 1932One tap mobile+12532158782,,98038141932# US (Tacoma)+13462487799,,98038141932# US (Houston)Dial by your location +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) +1 669 900 6833 US (San Jose) +1 301 715 8592 US (Washington DC) +1 312 626 6799 US (Chicago) +1 646 876 9923 US (New York)Meeting ID: 980 3814 1932Find your local number: https://zoom.us/u/adGVd3H0IA When: Thu Sep 2, 2021 6:30pm – 7:30pm Israel Time Where: https://zoom.us/j/98038141932 Calendar: kata-dev(a)lists.katacontainers.io Who: * aadam(a)redhat.com - organizer * Boeuf, Sebastien * harpatil(a)redhat.com * Sun, Ning * mpatel(a)redhat.com * Brian Kocoloski * Kumari, Madhuri * wmoschet(a)redhat.com * ffidenci(a)redhat.com * azaalouk(a)redhat.com * ailan(a)redhat.com * jrope(a)redhat.com * Eric Adams * kapteen(a)gmail.com * slp(a)redhat.com * Boris Ostrovsky * Liam Merwick * kata-dev(a)lists.katacontainers.io * Wang,Liang(ACG CCN) * George Kennedy * steven(a)uk.ibm.com * Gupta, Sandeep * jfreiman(a)redhat.com * cmeadors(a)redhat.com Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this courtesy email at the account kata-dev(a)lists.katacontainers.io because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://calendar.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn more at https://support.google.com/calendar/answer/37135#forwarding

1 0

Confidential Containers talk today at DevConf.us
by Christophe de Dinechin 02 Sep '21

02 Sep '21

I will be giving a talk about Confidential Containers at DevConf.us today. https://devconfus2021.sched.com/event/lkiO/confidential-containers-distrust… The timing may not be convenient for everyone (for me, it's during my evening). But if you are curious about what is happening and where we may be going in that space, please feel free to join. Videos should be posted after the conference, if you cannot attend it live (the talk itself is pre-recorded anyway). Cheers, Christophe

1 0