- kata-dev - lists.katacontainers.io

Creation of OSF Project Confirmation Guidelines
by Claire Massey 13 Dec '18

13 Dec '18

Hi everyone, As you know, Kata Containers is a pilot project supported by the OpenStack Foundation (OSF). As such, we wanted to make sure you’re aware of an effort recently kicked off a sub group of the OSF Board of Directors to draft guidelines[1] for confirming pilot projects as full, top-level, open infrastructure project of the Foundation. The current pilot projects that will be eligible for confirmation review in 2019-2020 are Airship, Kata Containers, StarlingX and Zuul. Currently the OpenStack project is the only confirmed project. The discussion about drafting these guidelines is just getting started, and *we invite you to participate in this effort* by reviewing the working draft in this etherpad and adding in your feedback and thoughts starting on line 139: https://etherpad.openstack.org/p/BrainstormingOSFProjectConfirmationGuideli… There will most likely be an open call scheduled in early 2019 where additional feedback will also be welcomed. I will share that invitation with you once it’s schedule. The goal is to come up with a set of points that the Board can use when reviewing pilot projects for confirmation. This topic has previously been discussed at a very high-level at previous Board meetings, including the September 18th meeting[2] (starting around slide 38). 1. https://etherpad.openstack.org/p/ProjectConfirmationGuidelines 2. https://docs.google.com/presentation/d/10UyCpxkjPqC3kT-dYRpBxzNT39i2OhlggJv… <https://docs.google.com/presentation/d/10UyCpxkjPqC3kT-dYRpBxzNT39i2OhlggJv…> Thanks, Claire

1 0

2019 Planning - Community Building, Marketing, etc
by Claire Massey 13 Dec '18

13 Dec '18

Hi everyone, Looking ahead to 2019 we’ll have two open Kata Containers community meetings to brainstorm and discuss plans for educational activities, engagement, marketing, advocacy, etc. The calls are both scheduled on Monday, December 17, at these times: - 8:00am PST (16:00 UTC) - 6:00pm PST (2:00 UTC) We will use the same dial-in link[1] and etherpad notes[2] for both calls. In the meantime, please take a look at the running list of 2019 events[3] and make note of the upcoming CFP deadlines. Here are a few notable CFP deadlines coming up fast that are worth flagging: - November 30, 2018: Cloud Foundry Summit[4] (event in Philadelphia in April 2019) - December 10, 2018: O’Reilly Velocity[5] (event in San Jose, CA in June 2019) - December 13,2018: DevOpsCon[6] (event in Berlin, Germany in June 2019 - January 15, 2019: OSCON[7] (event in Portland, OR in July 2019) - January 18, 2019: KubeCon / CloudNativeCon Europe[8] (event in Barcelona in May 2019) Thanks, Claire [1] Join Zoom Meeting: https://zoom.us/j/121941262 [2] Notes: https://etherpad.openstack.org/p/2019_Kata_Marketing_Plans [3] 2019 events: https://docs.google.com/spreadsheets/d/1b8RA-xZrytBVSyA4fSCvSLQS4nHBZmMbs7s… [4] https://www.cloudfoundry.org/event/nasummit2019/ [5] https://conferences.oreilly.com/velocity/vl-ca/public/cfp [6] https://devopsconference.de/call-for-papers-en/ [7] https://conferences.oreilly.com/oscon/oscon-or/public/cfp [8] https://events.linuxfoundation.org/events/kubecon-cloudnativecon-europe-201…

2 4

RCC: cancel architecture committee on Monday December 10th
by Ernst, Eric 10 Dec '18

10 Dec '18

Hey ya’ll, I’m looking at the agenda for Monday, and it is quite sparse. I know a majority of participants will be en route or already in Seattle for KubeCon. Anyone have timely opens they want to make sure are discussed? If not, I propose we cancel this week. Cheers, Eric

4 3

Gatekeepers....
by Whaley, Graham 10 Dec '18

10 Dec '18

Good morning, KatHerders this week are: - Marco - Julio https://github.com/kata-containers/community/wiki/Review-Team-Rota#the-rota We have a rather <cough> 'healthy' 74 issues open. 21 of those are 'do-not-merge'. I am aware I have not managed to give much time to PR reviews in the last couple of weeks (head down tracking metrics CI instabilities...), and will try to find some time this week... all review from others also appreciated :-) Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

metrics CI failing at present
by Whaley, Graham 07 Dec '18

07 Dec '18

Hi all, The metrics CI has been nack'ing PRs for the last 48h or so - it feels like maybe some PRs have landed that have effected boot time and memory footprint. I'll go track down when that happened, send an update here, and adjust the metrics bounds check values if needed. In the meantime, don't panic about metrics CI failures... Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

2 2

[Newsletter] What's Happening in the Open Infrastructure Community
by Claire Massey 05 Dec '18

05 Dec '18

Hi everyone, This week, the OSF team distributed the first Open Infrastructure Community Newsletter. Our goal with the bi-weekly newsletter is to provide a digest of the latest developments and activities across open infrastructure projects, events and users. This week, the newsletter highlighted the Berlin Summit as well as brief updates from Kata Containers and other OSF projects - OpenStack, Airship, StarlingX and Zuul. You can checkout the full newsletter on Superuser [1], and if you are interested in receiving the upcoming newsletters, you can subscribe here [2]. If you would like to contribute to a future newsletter or have feedback, please reach out to community(a)openstack.org <mailto:community@openstack.org>. Thanks, Claire [1] http://superuser.openstack.org/articles/inside-open-infrastructure-newslett… <http://superuser.openstack.org/articles/inside-open-infrastructure-newslett…> [2] https://www.openstack.org/community/email-signup <https://www.openstack.org/community/email-signup>

1 0

Herding
by Whaley, Graham 03 Dec '18

03 Dec '18

Good morning. Kata Herders this week are: - PengTao - James - Archana https://github.com/kata-containers/community/wiki/Review-Team-Rota#the-rota Despite having a fairly active week last week, the open PR count is drifting up, and we are at 59 items. Let's take that a sign of healthy activity... but see if we can finalise some of those and get them merged? Graham --------------------------------------------------------------------- Intel Corporation (UK) Limited Registered No. 1134945 (England) Registered Office: Pipers Way, Swindon SN3 1RJ VAT No: 860 2173 47 This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

[ac] Arch Committee meeting, Monday Dec 3
by Thierry Carrez 30 Nov '18

30 Nov '18

Hi everyone, This is your periodic reminder that this Monday at 15:00UTC (like every Monday), we'll hold a Kata Architecture Committee meeting. You can join at: https://zoom.us/j/837139405 Check when 15:00UTC actually is in your timezone: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Kata+Containers+A… Please add topics to the agenda at: https://etherpad.openstack.org/p/katacontainers-2018-architecture-committee… See you then, -- Thierry Carrez (ttx)

1 0

[Blog Post] Kata combo v1.3 and v1.4 release
by Tao Peng 29 Nov '18

29 Nov '18

FYI, we just released a blog post about Kata Containers 1.3 and 1.4 releases, see https://katacontainers.io/posts/kata-containers-13-14-release-updates/ . The blog contents are also listed here for your reference. ------------------------------------------- Hello Kata Kats, I'm proud to see the rapid advancement of the Kata Containers project as of late. Since September, we’ve done several releases which introduce features to help Cloud Service Providers (CSPs) and others who plan to deploy Kata into production. We are fortunate to have input to the Kata community project from some of the world’s largest cloud service providers, operating system vendors and telecom equipment makers such that we can better serve their internal infrastructure needs as well as enterprise customers. The Kata Containers 1.4.0 release has several nice new features and many bug-fixes. All users are recommended to upgrade. We also released a new stable release (v 1.3.1) for which only kernel changes were relevant. The 1.4.0 release highlights following features: - Host cgroups support: The virtual machine is now constrained in a host side cpu cgroup, enabling the requested cpu quota and periods to be better honored. This protects against a single container using up host resources which could lead to things like denial of service. - NEMU `virt` machine type support: This new machine type is specially optimized for cloud environments and a great fit for Kata Containers use cases. NEMU is a lighter weight version of QEMU intended to reduce the attack footprint of the VM, thus improving the security model even more. To learn more about NEMU, see https://github.com/intel/nemu. - New NetInterworkingModel `none`: It works with tap endpoint types so that enlightened CNI plugins can add tap devices to a sandbox directly, skipping extra steps and complexity introduced with the host’s network namespaces. - New NetInterworkingModel `tcfilter`: Yet another method for Kata Containers to bridge the host netns veth and guest tap device, with TC filter rules. With it, Kata Containers have more compatibility with different network endpoint types and CNI plugins. - Enable macvlan and ipvlan network support: These two networking models provide lightweight and fast access to underlay or host interfaces without NATing. - Guest rootfs image can now have a `guest_hook_path` that specifies the path to OCI hook binaries within the guest to provide support to run OCI hooks within the guest. This feature helps with vendor-specific device passthrough to the Kata VM, for example. For full details of v1.4 release features, please see https://github.com/kata-containers/runtime/releases/tag/1.4.0 For the new stable v1.3.1 release, only kernel changes were relevant for that branch. https://github.com/kata-containers/runtime/releases/tag/1.3.1 In September we released the 1.3.0 release and 1.2.2 stable releases with features like Network and Memory hotplug in order to better support CSP customers’ running production environments. We also continued our pursuit to be cross-architecture by adding more support for ARM64 as well as Intel(R) Graphics Virtualization Technology. To re-cap v1.3.0 feature highlights in case you missed the announcement: - Network hotplug: Sandbox network can now be dynamically changed by the "kata-runtime network" subcommand. This allows customized CNI plugins to create more Kata-native network endpoints within a running container and better support for live dynamic network reconfiguration. - Network monitoring: a new kata component (kata-netmon) is added to monitor container netns on the host. Now CNI hooks to dynamically change the network setup of a running container and "docker network connect" work with Kata Containers. - Network multiqueue support: Network cards are added to to the guest with multiqueue support allowing Kata Containers to gain better network performance by running multiple threads in parallel. - Memory hotplug: "kata-runtime update" subcommand can now add extra memory to a running container for long-lived dynamically reconfigured pods. - Better container memory constraint support: containers in the same Kata sandbox (VM) can be constrained by memcg inside the guest. - GPU support: both Intel(R) GVT-g and GVT-d GPU devices can now be used by Kata Containers. - Architecture/ARM64: add GICv4 or higher support. For full details, please see https://github.com/kata-containers/runtime/releases/tag/1.3.0 The 1.2.2 stable release had several important fixes. Users who want to stick with stable-1.2 branch were recommended to update. For full details, please see https://github.com/kata-containers/runtime/releases/tag/1.2.2 Thanks to all contributors who are helping to advance Kata Containers in order to better serve our growing number of users! Cheers, Tao Peng Tao Software Engineer Hyper.SH [1[ Intel® Graphics Virtualization Technology –d (Intel® GVT –d): vDGA: virtual dedicated graphics acceleration (one VM to one physical GPU) [2] Intel® Graphics Virtualization Technology –g (Intel® GVT -g): vGPU: virtual graphics processing unit (multiple VMs to one physical GPU) [3] ARM® Generic Interrupt Controller Architecture Specification GIC architecture version 4.0

1 0

Kata with Certified Kubernetes Conformance Program
by Jin, Yuntong 29 Nov '18

29 Nov '18

Hi, CNCF launched Certified Kubernetes Conformance Program, https://www.cncf.io/announcement/2017/11/13/cloud-native-computing-foundati… Kata released with Limitations<https://github.com/kata-containers/documentation/blob/master/Limitations.md> , will this affect the conformance of Kubernetes with Kata ? Best Regards Jin, Yuntong

2 1