- kata-dev - lists.katacontainers.io

RCC: cancel architecture committee on Monday December 10th
by Ernst, Eric 10 Dec '18

10 Dec '18

Hey ya’ll, I’m looking at the agenda for Monday, and it is quite sparse. I know a majority of participants will be en route or already in Seattle for KubeCon. Anyone have timely opens they want to make sure are discussed? If not, I propose we cancel this week. Cheers, Eric

4 3

Gatekeepers....
by Whaley, Graham 10 Dec '18

10 Dec '18

Good morning, KatHerders this week are: - Marco - Julio https://github.com/kata-containers/community/wiki/Review-Team-Rota#the-rota We have a rather <cough> 'healthy' 74 issues open. 21 of those are 'do-not-merge'. I am aware I have not managed to give much time to PR reviews in the last couple of weeks (head down tracking metrics CI instabilities...), and will try to find some time this week... all review from others also appreciated :-) Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

metrics CI failing at present
by Whaley, Graham 07 Dec '18

07 Dec '18

Hi all, The metrics CI has been nack'ing PRs for the last 48h or so - it feels like maybe some PRs have landed that have effected boot time and memory footprint. I'll go track down when that happened, send an update here, and adjust the metrics bounds check values if needed. In the meantime, don't panic about metrics CI failures... Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

2 2

[Newsletter] What's Happening in the Open Infrastructure Community
by Claire Massey 06 Dec '18

06 Dec '18

Hi everyone, This week, the OSF team distributed the first Open Infrastructure Community Newsletter. Our goal with the bi-weekly newsletter is to provide a digest of the latest developments and activities across open infrastructure projects, events and users. This week, the newsletter highlighted the Berlin Summit as well as brief updates from Kata Containers and other OSF projects - OpenStack, Airship, StarlingX and Zuul. You can checkout the full newsletter on Superuser [1], and if you are interested in receiving the upcoming newsletters, you can subscribe here [2]. If you would like to contribute to a future newsletter or have feedback, please reach out to community(a)openstack.org <mailto:community@openstack.org>. Thanks, Claire [1] http://superuser.openstack.org/articles/inside-open-infrastructure-newslett… <http://superuser.openstack.org/articles/inside-open-infrastructure-newslett…> [2] https://www.openstack.org/community/email-signup <https://www.openstack.org/community/email-signup>

1 0

Herding
by Whaley, Graham 03 Dec '18

03 Dec '18

Good morning. Kata Herders this week are: - PengTao - James - Archana https://github.com/kata-containers/community/wiki/Review-Team-Rota#the-rota Despite having a fairly active week last week, the open PR count is drifting up, and we are at 59 items. Let's take that a sign of healthy activity... but see if we can finalise some of those and get them merged? Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

[ac] Arch Committee meeting, Monday Dec 3
by Thierry Carrez 30 Nov '18

30 Nov '18

Hi everyone, This is your periodic reminder that this Monday at 15:00UTC (like every Monday), we'll hold a Kata Architecture Committee meeting. You can join at: https://zoom.us/j/837139405 Check when 15:00UTC actually is in your timezone: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Kata+Containers+A… Please add topics to the agenda at: https://etherpad.openstack.org/p/katacontainers-2018-architecture-committee… See you then, -- Thierry Carrez (ttx)

1 0

[Blog Post] Kata combo v1.3 and v1.4 release
by Tao Peng 29 Nov '18

29 Nov '18

FYI, we just released a blog post about Kata Containers 1.3 and 1.4 releases, see https://katacontainers.io/posts/kata-containers-13-14-release-updates/ . The blog contents are also listed here for your reference. ------------------------------------------- Hello Kata Kats, I'm proud to see the rapid advancement of the Kata Containers project as of late. Since September, we’ve done several releases which introduce features to help Cloud Service Providers (CSPs) and others who plan to deploy Kata into production. We are fortunate to have input to the Kata community project from some of the world’s largest cloud service providers, operating system vendors and telecom equipment makers such that we can better serve their internal infrastructure needs as well as enterprise customers. The Kata Containers 1.4.0 release has several nice new features and many bug-fixes. All users are recommended to upgrade. We also released a new stable release (v 1.3.1) for which only kernel changes were relevant. The 1.4.0 release highlights following features: - Host cgroups support: The virtual machine is now constrained in a host side cpu cgroup, enabling the requested cpu quota and periods to be better honored. This protects against a single container using up host resources which could lead to things like denial of service. - NEMU `virt` machine type support: This new machine type is specially optimized for cloud environments and a great fit for Kata Containers use cases. NEMU is a lighter weight version of QEMU intended to reduce the attack footprint of the VM, thus improving the security model even more. To learn more about NEMU, see https://github.com/intel/nemu. - New NetInterworkingModel `none`: It works with tap endpoint types so that enlightened CNI plugins can add tap devices to a sandbox directly, skipping extra steps and complexity introduced with the host’s network namespaces. - New NetInterworkingModel `tcfilter`: Yet another method for Kata Containers to bridge the host netns veth and guest tap device, with TC filter rules. With it, Kata Containers have more compatibility with different network endpoint types and CNI plugins. - Enable macvlan and ipvlan network support: These two networking models provide lightweight and fast access to underlay or host interfaces without NATing. - Guest rootfs image can now have a `guest_hook_path` that specifies the path to OCI hook binaries within the guest to provide support to run OCI hooks within the guest. This feature helps with vendor-specific device passthrough to the Kata VM, for example. For full details of v1.4 release features, please see https://github.com/kata-containers/runtime/releases/tag/1.4.0 For the new stable v1.3.1 release, only kernel changes were relevant for that branch. https://github.com/kata-containers/runtime/releases/tag/1.3.1 In September we released the 1.3.0 release and 1.2.2 stable releases with features like Network and Memory hotplug in order to better support CSP customers’ running production environments. We also continued our pursuit to be cross-architecture by adding more support for ARM64 as well as Intel(R) Graphics Virtualization Technology. To re-cap v1.3.0 feature highlights in case you missed the announcement: - Network hotplug: Sandbox network can now be dynamically changed by the "kata-runtime network" subcommand. This allows customized CNI plugins to create more Kata-native network endpoints within a running container and better support for live dynamic network reconfiguration. - Network monitoring: a new kata component (kata-netmon) is added to monitor container netns on the host. Now CNI hooks to dynamically change the network setup of a running container and "docker network connect" work with Kata Containers. - Network multiqueue support: Network cards are added to to the guest with multiqueue support allowing Kata Containers to gain better network performance by running multiple threads in parallel. - Memory hotplug: "kata-runtime update" subcommand can now add extra memory to a running container for long-lived dynamically reconfigured pods. - Better container memory constraint support: containers in the same Kata sandbox (VM) can be constrained by memcg inside the guest. - GPU support: both Intel(R) GVT-g and GVT-d GPU devices can now be used by Kata Containers. - Architecture/ARM64: add GICv4 or higher support. For full details, please see https://github.com/kata-containers/runtime/releases/tag/1.3.0 The 1.2.2 stable release had several important fixes. Users who want to stick with stable-1.2 branch were recommended to update. For full details, please see https://github.com/kata-containers/runtime/releases/tag/1.2.2 Thanks to all contributors who are helping to advance Kata Containers in order to better serve our growing number of users! Cheers, Tao Peng Tao Software Engineer Hyper.SH [1[ Intel® Graphics Virtualization Technology –d (Intel® GVT –d): vDGA: virtual dedicated graphics acceleration (one VM to one physical GPU) [2] Intel® Graphics Virtualization Technology –g (Intel® GVT -g): vGPU: virtual graphics processing unit (multiple VMs to one physical GPU) [3] ARM® Generic Interrupt Controller Architecture Specification GIC architecture version 4.0

1 0

Kata with Certified Kubernetes Conformance Program
by Jin, Yuntong 29 Nov '18

29 Nov '18

Hi, CNCF launched Certified Kubernetes Conformance Program, https://www.cncf.io/announcement/2017/11/13/cloud-native-computing-foundati… Kata released with Limitations<https://github.com/kata-containers/documentation/blob/master/Limitations.md> , will this affect the conformance of Kubernetes with Kata ? Best Regards Jin, Yuntong

2 1

Kata Booth at KubeCon Seattle
by Claire Massey 28 Nov '18

28 Nov '18

Hi everyone, KubeCon Seattle is less than two weeks away! We’re excited to have a dedicated Kata Containers booth at the event to provide more visibility for the project and a central location for community outreach, education and collaborative discussions. If you’re planning to attend the event, please review the KubeCon schedule[1] and add your name to the etherpad[2]. We’d also love it if you would sign-up to volunteer some hours in the Kata booth! Myself and other members of the OSF staff will also be there to support the booth, but as Kata experts, you are the real people who attendees are going to want to talk to. I’ve created a temporary slack channel, #kubeconseattle2018, to use is for onsite coordination during the event. Feel free to join the open channel. At the booth we will have the Kata one pager collateral, the new Kata install postcard and plenty of stickers and socks to distribute. The booth number is S17 on the expo hall floor. Let me know if you have any questions. Thanks, Claire [1] https://events.linuxfoundation.org/events/kubecon-cloudnativecon-north-amer… <https://events.linuxfoundation.org/events/kubecon-cloudnativecon-north-amer…> [2] https://etherpad.openstack.org/p/KataKubeConBooth <https://etherpad.openstack.org/p/KataKubeConBooth>

1 0

Gatekeepers this week
by Whaley, Graham 26 Nov '18

26 Nov '18

Good morning! Gatekeepers this week are..... me! https://github.com/kata-containers/community/wiki/Review-Team-Rota#the-rota I'm aware others are active in review as well right now, and many thanks to those contributors. Let's fire a couple of stats out then... We have 56 Issues open right now (a touch high for the project - we seem to hover around 40 quite often), BUT, 21 of those issues are currently marked as DO-NOT-MERGE. And for kicks, I updated the Cauldron.io stats page for the kata project: http://cauldron.io/dashboards/kata-containers Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0