4 Feb
2020
4 Feb
'20
2:14 a.m.
Hi, it seems that nowadays a large chunk of k8s deployments being run in virtualized enviroments (i.e. some form of public/private IaaS system). So using kata-containers in such an enviroment means that the VMs spawned by kata are running nested inside the VMs of the k8s cluster. Given that nested virtualization adds quite a bit of overhead (in certain cases I believe) and that it still seems to be considered experimental [0]. Is that really the way to go or is kata-containers really more just aiming for baremetal k8s deployments? regards, Ralf [0] https://www.linux-kvm.org/page/Nested_Guests