Open Stack

Hi Young,

I was traveling so not sure if you received a response to your request for a gVisor comparison.

I’ll bring to your attention a webinar on Sandboxed Containers that Rancher Labs did in February of 2019. He compared different sandboxed container approaches -- Kata, gVisor, IBM Nabla. I found it very informative.

I wrote up my notes from the webinar here in case it’s easier to read my notes than listen to an hour+ long webinar 😊. I also added some comments:

https://docs.google.com/document/d/11L48VVdXYZS9sd-byzHGcRqWOl0FoGOU12z-xFtfHPs/edit?usp=sharing

Please let me know if you have additional questions,

Margaret

From: 하영 <youngha at knu.ac.kr>
Sent: Thursday, September 5, 2019 1:21 AM
To: kata-dev at lists.katacontainers.io
Subject: [kata-dev] a couple of questions about Kata


[http://mail.knu.ac.kr:80/mail/webmailreconf.public.do?26641280]

Hi all,



I got a couple of questions:

1. Kata-container provides strong isolation through lightweight VM, I want more details about security perspective.

   Does Kata container have a solution to container threat models? ( ex) container escape, etc. )

2. What is the strength of Kata in comparison to gVisor?



Young
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.katacontainers.io/pipermail/kata-dev/attachments/20190909/d5cdc537/attachment.html>