Hi Young,


I was traveling so not sure if you received a response to your request for a gVisor comparison.

 

Iโ€™ll bring to your attention a webinar on Sandboxed Containers that Rancher Labs did in February of 2019. He compared different sandboxed container approaches -- Kata, gVisor, IBM Nabla. I found it very informative. 

 

I wrote up my notes from the webinar here in case itโ€™s easier to read my notes than listen to an hour+ long webinar ๐Ÿ˜Š. I also added some comments:

 

https://docs.google.com/document/d/11L48VVdXYZS9sd-byzHGcRqWOl0FoGOU12z-xFtfHPs/edit?usp=sharing


Please let me know if you have additional questions,

 

Margaret

 

From: ํ•˜์˜ <youngha@knu.ac.kr>
Sent: Thursday, September 5, 2019 1:21 AM
To: kata-dev@lists.katacontainers.io
Subject: [kata-dev] a couple of questions about Kata

 

Hi all,

 

I got a couple of questions:

1. Kata-container provides strong isolation through lightweight VM, I want more details about security perspective.

   Does Kata container have a solution to container threat models? ( ex) container escape, etc. )

2. What is the strength of Kata in comparison to gVisor? 

 

Young