17 Jul
2019
17 Jul
'19
10:22 a.m.
Hi Kata-folks I have raised a pull request to enable some security features in the guest kernel https://github.com/kata-containers/packaging/pull/639 . This change will impact in the memory consumption because of the kernel memory randomization. In the case of no-KSM the difference is ~2MB and I think it's a price that we can pay. But for KSM the difference is ~36MB. I would like to know what do you think about this change. Is KSM a feature that should be still considered? Do you have enabled KSM in your cluster? Thanks -- Julio