a couple of questions about Kata
Hi Young,
I was traveling so not sure if you received a response to your request for a gVisor comparison.
I’ll bring to your attention a webinar on Sandboxed Containers that Rancher Labs did in February of 2019. He compared different sandboxed container approaches -- Kata, gVisor, IBM Nabla. I found it very informative.
I wrote up my notes from the webinar here in case it’s easier to read my notes than listen to an hour+ long webinar 😊. I also added some comments:
https://docs.google.com/document/d/11L48VVdXYZS9sd-byzHGcRqWOl0FoGOU12z-xFtf...
Please let me know if you have additional questions,
Margaret
From: 하영 youngha@knu.ac.kr Sent: Thursday, September 5, 2019 1:21 AM To: kata-dev@lists.katacontainers.io Subject: [kata-dev] a couple of questions about Kata
[http://mail.knu.ac.kr:80/mail/webmailreconf.public.do?26641280]
Hi all,
I got a couple of questions:
1. Kata-container provides strong isolation through lightweight VM, I want more details about security perspective.
Does Kata container have a solution to container threat models? ( ex) container escape, etc. )
2. What is the strength of Kata in comparison to gVisor?
Young
participants (2)
-
LaBrecque, Margaret
-
하영