June 2018 - Kata-hypervisor - lists.katacontainers.io

Continue QEMU Discussions via this ML
by Claire Massey 05 Sep '18

05 Sep '18

HI everyone, Thank you to those who were able to make up to Vancouver a couple of weeks ago to join the spirited discussion about QEMU and Kata Containers. You can find the notes from that meeting here - https://etherpad.openstack.org/p/qemu_2018-05-23_katacontainers <https://etherpad.openstack.org/p/qemu_2018-05-23_katacontainers>. This mailing list is the place to continue the discussion and move things forward - feel free to invite others to subscribe. Please jump in and get the conversation rolling. Thanks, Claire

7 10

kata requirements for image formats and devices
by Allison Randal 07 Aug '18

07 Aug '18

I wasn't at the session where this started (because I was speaking on a panel at the same time about edge computing, containers/VMs, and hybrid approaches), but several people pointed me at this list, because I'm currently working on a lightweight hypervisor written in Rust (on top of KVM), as PhD research at the University of Cambridge. I'm interested in getting more details on what features of QEMU are used by Kata Containers. Specifically, what image formats and devices do you need? This information would be equally valuable to a stripped-down QEMU, so it wouldn't be a distraction from that work, just a side benefit of informing other approaches to lightweight hypervisors. The fundamental concept of my work is building a "library hypervisor", somewhat analogous to the way unikernels are a "library operating system". So, instead of a monolithic body of code, it is a collection of Rust libraries that provide devices, support for various image formats, an interface to KVM, etc. A final compiled hypervisor imports a minimal set of libraries to get the minimal set of features that it needs. I had considered Kata Containers as a possible example target, though I was prioritizing it behind libvirt, minikube, LinuxKit, and a few other potential targets. I wouldn't mind bumping Kata Containers up to a higher priority, if people here would be interested in a prototype to try. Allison

5 10

Link to the Hypervisor Prototype
by Castelino, Manohar R 14 Jun '18

14 Jun '18

Folks, Please find below the link to the initial prototype code that tries to reduce the number of emulated devices in QEMU that can still boot most cloud workloads. https://github.com/intel/nemu We created some tooling around automated code reduction and a minimal CI to ensure that this code reduction still retained features that Linux expects to find when booting cloud images. https://github.com/intel/nemu/tree/master/tools https://github.com/intel/nemu/tree/master/tools/CI -manohar

10 24

Re: [Kata-hypervisor] runq
by Ernst, Eric 14 Jun '18

14 Jun '18

(shameless plug) – I created a Dockerfile and some daemonsets, [1] (everything is a daemonset) for Kata which’ll include a static QEMU to provide similar ease-of-experience. Install on a cluster would be much easier; hoping that this becomes one of the standard/tested methods for Kata + K8S (review on this PR welcome: [2]). Or, maybe I’m missing the point on QEMU for runq. Thx, Eric -- [1] - https://github.com/egernst/kata-deploy [2] - https://github.com/kata-containers/packaging/pull/65 On 6/13/18, 7:59 AM, "Jessie Frazelle (TUPPERWARE) via Kata-hypervisor" <kata-hypervisor(a)lists.katacontainers.io> wrote: Another runtime... https://github.com/gotoz/runq What I think is cool is that qemu isn't required to be installed on the host... they do it for you... but still uses qemu just a better user experience in terms of installation etc. _______________________________________________ Kata-hypervisor mailing list Kata-hypervisor(a)lists.katacontainers.io http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-hypervisor

2 3

runq
by Jessie Frazelle (TUPPERWARE) 14 Jun '18

14 Jun '18

Another runtime... https://github.com/gotoz/runq What I think is cool is that qemu isn't required to be installed on the host... they do it for you... but still uses qemu just a better user experience in terms of installation etc.

1 0

Formal verification
by Jessie Frazelle (TUPPERWARE) 08 Jun '18

08 Jun '18

I didn't want to fork the other thread too far off base but I was wondering if people had thought or implemented formal verification for hypervisors and if they could share any details. Everything I've read on formal verification of hypervisors is purely from papers but not from industry so I am wondering if there are discrepancies between academia and industry here Thanks :)

2 1