Release 1.5.0

This is an exciting release for Kata, which includes support for the Firecracker* hypervisor, the s390x* architecture as well as a new method for integrated with the containerd* project. New hypervisors, new CPU architectures and significant integration improvements!

https://medium.com/kata-containers/kata-containers-1-5-release-99acbaf7cf34

agent Changes

Shortlog

b4dae5c release: Kata Containers 1.5.0
56a779e release: Kata Containers 1.5.0-rc2
169d755 protocols/grpc: implement function to copy files
ff87c26 virtio-mmio: Add support for virtio-mmio blk devices
b9c5d5b libcontainer: use /run as root containers path
092f1a0 block: add support of block storage driver "nvdimm"
31c6b6e grpc: add SetGuestDateTime API
df822eb grpc: support rlimits
87ad0a8 release: Kata Containers 1.5.0-rc1
34b7454 grpc: sandbox: add container when is fully created.
4eca13b client: do cleanup after UT stop mock server
c25288a Makefile: Decide if agent will be built by seccomp tag

proxy Changes

Shortlog

ac75b33 release: Kata Containers 1.5.0
3be7e68 CI: add a CODEOWNERS file
fcbcb2f release: Kata Containers 1.5.0-rc2
5bf3df6 release: Kata Containers 1.5.0-rc1

runtime Changes

Shortlog

6875d3f release: Kata Containers 1.5.0
02261f9 s390x: change pci bridge type
d75f26d vc: set detach flag when umounting rootfs
d314e2d agent: clean up share path created by the agent
36762c7 qemu: cleanup vm template path properly
f542233 s390x: root parameter is missing
a5a74f6 vc: qemu: fix error message on hotplug.
d4dd5f1 qemu: fix gofmt import order.
b029e44 virtcontainers: set private propagation in rootfs
18c7aa4 virtcontainers: ppc64le qemu does not have nvdimm capabilities yet
5ee838d shimv2: use the UnmarshalAny() to unmarshal Protobuf.Any
5329a71 runtime-v2: Make sure Shutdown() only shuts the server down
6c3e0a9 build: Add support for building firecracker hypervisor
6fcb76c build: Handle qemu explicitly
933b16f build: Improve quiet install
a07b4cd virtcontainers: Fix unit test typo
5ba30fd shimv2: multi wait support for wait service
7228bab container: update: Allow updates once container is created
08f1c05 Module: fix parameter order error in cli/ps.go
2e1ddbc virtcontainers: Add Bridge to the types package
b25f43e virtcontainers: Add Capabilities to the types package
67e696b virtcontainers: Add Asset to the types package
42a89d0 katautils: Move SetKernelParams from CreateSandbox to updateRuntimeConfig
abcc2d5 Versions: Add firecracker version
a02fd59 virtcontainers: Remove code duplication in the test setup
cf22f40 virtcontainers: Remove the hypervisor waitSandbox method
763bf18 virtcontainers: Remove the hypervisor init method
db33d71 Kata-runtime: Use correct model name for TestGetCPUDetails
11e24aa kata-runtime: Return correct kata-env on ppc64le
fb149ce katautils: Remove unused argument containerID of function SetKernelParams
2c1b15d kernel: Revert "versions: Bump to kernel 4.19.10"
802bfa2 versions: Bump to kernel 4.19.10
b05dbe3 runtime: Convert to the new internal types package
701afe9 virtcontainers: First types package
3ab7d07 virtcontainers: Alias for pkg/types
bf2813f cli: allow to kill a stopped container and sandbox
c2c9c84 virtcontainers: Conditionally pass seccomp profile
09168cc virtcontainers: Call stopVM() from sandbox.Stop()
acf833c virtcontainers: Call agent startSandbox from startVM
ebf8547 virtcontainers: Remove useless startSandbox wrapper
0b28ab9 shimv2: get the kata configure file from env KATA_CONF_FILE
5c6d94d firecracker: Revendor firecracker go sdk to 0.12.0
ec5cf18 firecracker: Network API update
c099be5 container: Use lazy unmount
dd28ff5 memory: Add new option memory_offset
ef75c3d block: Add new block storage driver "nvdimm"
0f2c5bc release: Kata Containers 1.5.0-rc2
bf1a5ce sandbox: cleanup sandbox if creation failed
83e38c9 mounts: Ignore existing mounts if they cannot be honored
353564a config: Reorganize the code to fix code complexity
d6c1f53 config: Add firecracker configuration support
0d84d79 virtio-mmio: Add support for virtio-mmio
b4c3a2f virtcontainers: fc: Stop the VM by killing the process
fba2379 firecracker: Add support for pseudo hotplug
22ebc09 firecracker: Close the vsock vhostfd
e65bafa virtcontainers: Add firecracker as a supported hypervisor
c1d3f1a firecracker: VMM API support
c34b045 firecracker: vendor in all firecracker dependencies
05be5bf shimv2: discard log before shim init log output
a21d1e6 virtcontainers: cgroups: Don't error if no thread ID
378d815 virtcontainers: copy or bind mount shared file
bc31844 virtcontainers: Check file sharing support
6291762 virtcontainers: copy files form host to guest
dcd48a9 vc: capabilities: add capability flags for filesystem sharing
e776380 vendor: update kata agent
e4e7c3a katautils: check config template and vsock
f63a18d virtcontainers: Add context when creating tests sandboxes
2535844 make: Add "GOPATH not set"
0f1fde4 virtcontainers: network: Use multiqueue flag only when appropriate
573b73e katautils: fix the issue of shimv2 boot failed with vsock enabled
e98dee6 docs: drop 's in architecture names for consistency
1892102 docs: add IBM Z in the README
c8c564b qemu-arm64: refactor 'console=hvc0,hvc1' for kata-agent debugging
a1af1cb virtcontainers: network: Rely on hypervisor capabilities for multi queues
a227ab8 virtcontainers: hypervisor: Add capability regarding multiqueue support
0bcd221 virtcontainers: network: Rename numCPUs to queues
2cb4bb9 virtcontainers: network: Reorganize endpoints interconnection
d4586d4 test: remove TestHotplugRemoveMemory
0d80202 vc:sandbox: rename newcontainer to fetchcontainer.
618cfbf vc: sandbox: Let sandbox manage VM resources.
8444a7a factory: set guest time after resuming
f813708 vendor: update agent vendor for SetGuestDateTime
df8b7db shimv2: fix the issue of reaping child mistakenly
e4a3fd5 vendors: upgrade the containerd vendors
6f83061 s390x: add support for s390x
6024088 config: Add cache-related options for block devices
20f2d30 virtcontainers: share the agent's client between factory's VM and sandbox
d4104bf release: Kata Containers 1.5.0-rc1
7d0be36 versions: refactor configuration of qemu in version.yaml
617e5e4 vendor: Update govmm vendoring
f651147 block: Add cache-related options for block devices
2af240b versions: Add nemu
deb6f16 virtcontainers: update context id of vsock to uint64
ea74b98 shim: Add trace config option
018c8c1 vendor: Update govmm vendoring
7093eec git: Add containerd-shim-kata-v2 to .gitignore
96ed6c5 git: Sort .gitignore entries
04ce4c0 virtcontainers: change uint32 to uint64 for ioctl
fa9b15d virtcontainers: Return the appropriate container status
0bf29c8 config: Check factory config
fe784c1 config: Create function to check config options
70e4dc5 config: Move check code to end of LoadConfiguration
02f8b29 containerd-shim-kata-v2: add building of shimv2 into Makefile
8199d10 containerd-shim-kata: add unit test cases
7951041 containerd-shim-kata-v2: add the service Stats support
5cc016c containerd-shim-kata-v2: add the service Kill support
9ee53be containerd-shim-kata-v2: add the service Resume support
8df33d3 containerd-shim-kata-v2: add the service Pause support
cd321a3 containerd-shim-kata-v2: add the service ResizePty support
47326f5 containerd-shim-kata-v2: add the service Update support
642231b containerd-shim-kata-v2: add the service Shutdown support
87f591a containerd-shim-kata-v2: add the service Connect support
ec4f27b containerd-shim-kata-v2: add the service CloseIO support
8c95b75 containerd-shim-kata-v2: add the service Pids support
709bc9a containerd-shim-kata-v2: add the service Cleanup support
a0e6456 containerd-shim-kata-v2: add the service Delete support
fd18b22 containerd-shim-kata-v2: add the service State support
fbaefc9 containerd-shim-kata-v2: add the service wait support
269c940 containerd-shim-kata-v2: add the exec service support
4c5b296 containerd-shim-kata-v2: add the start service support
72fd6e0 containerd-shim-kata-v2: add the create service support
d6c4ca5 container-shim-kata-v2: The init containerd shim v2 support
5e6cd00 containerd-shim-v2: add the shim v2 required vendors
f0cb0c7 cli: refactor to align with katautils package
ca58bb4 ppc64le: kata-env fails due to missing vendor field
8cfb06f kata-check: optionally require kvm-intel unrestricted_guest
acbcde3 kata-check: do not require nested vt
ea9ecd7 kata-check: modprobe missing kernel modules
9984636 kata-env: Show runtime trace setting

shim Changes

Shortlog

8028cf7 release: Kata Containers 1.5.0
25aa726 release: Kata Containers 1.5.0-rc2
40282c9 logger: log to std logger if shimLog is not yet inited
94cd0d4 release: Kata Containers 1.5.0-rc1
da529a9 tracing: Add opentracing support
e155d22 main: Return exitcode rather than exiting
87efb54 docs: Add debug info to README
9e5adde docs: Improve README
10addb9 vendor: Re-vendor agent and gRPC packages

Compatibility with Docker

Kata Containers 1.5.0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.5.0 is compatible with CRI-O fa540c8e806d28c2cbcd157bdf8acf2b20990ab6

Compatibility with cri-containerd

Kata Containers 1.5.0 is compatible with cri-contaienrd 54b1c00b3b307b0fadd10c02d9467a6545c2c4d5

OCI Runtime Specification

Kata Containers 1.5.0 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.5.0 is compatible with Kubernetes 1.12.2-00

Kata Linux Containers image

Agent version: 1.5.0

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: "20640"
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.5.0 suggest to use the Linux kernel v4.14.67
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions:

Issues & limitations

More information Limitations