[kata-dev] About the build of QEMU on Kata Containers
Montes, Julio
julio.montes at intel.com
Mon Mar 8 15:57:18 UTC 2021
Hi Wainer
My two cents
* Performance
- Smaller memory footprint
- Better boot time
* Smaller Attack surface
- custom Kconfig
* Kata needs features that some distros may not support it because they
are considered insecure, unstable or too new, for example:
- 9p
- libpmem/nvdimm
- vsocks
--
Julio
On Mon, 2021-03-08 at 12:41 -0300, Wainer dos Santos Moschetta wrote:
> Hi all,
>
> While working on updating the version of QEMU [1] used on the
> project,
> for some occasions people outside asked me why the project builds
> QEMU
> from source instead of relying on distro's provided. When I started
> contributing to this project I asked it myself many times but I
> never
> looked for an answer.
>
> I can think on many reasons but I would be guessing. So If someone
> could
> share the rationale here, I would appreciate it. Perhaps more
> important,
> we could discuss if the scenario stands the same so that we should
> stick
> with that approach or if we could manage the QEMU build differently
> nowadays.
>
> [1] https://github.com/kata-containers/kata-containers/pull/1349
>
> Thanks in advance,
>
> Wainer dos Santos Moschetta
>
> Software Engineer, Red Hat, Brazil
>
>
> _______________________________________________
> kata-dev mailing list
> kata-dev at lists.katacontainers.io
> http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev
More information about the kata-dev
mailing list