Hi Young,

I was traveling so not sure if you received a response to your request for a gVisor comparison.

I’ll bring to your attention a webinar on Sandboxed Containers that Rancher Labs did in February of 2019. He compared different sandboxed container approaches -- Kata, gVisor, IBM Nabla. I found it very informative. 

I wrote up my notes from the webinar here in case it’s easier to read my notes than listen to an hour+ long webinar 😊. I also added some comments:

https://docs.google.com/document/d/11L48VVdXYZS9sd-byzHGcRqWOl0FoGOU12z-xFtfHPs/edit?usp=sharing

Please let me know if you have additional questions,

Margaret

From: 하영 <youngha@knu.ac.kr>
Sent: Thursday, September 5, 2019 1:21 AM
To: kata-dev@lists.katacontainers.io
Subject: [kata-dev] a couple of questions about Kata

Hi all,

I got a couple of questions:

1. Kata-container provides strong isolation through lightweight VM, I want more details about security perspective.

   Does Kata container have a solution to container threat models? ( ex) container escape, etc. )

2. What is the strength of Kata in comparison to gVisor? 

Young