Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version. However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-5f68b343b-22d60a36c-1.85.1-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-b00013c71-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-af919686a-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-b2c943931-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.24.11-rust-1.85.1-923f97bc6-x86_64
• tools: quay.io/kata-containers/builders:tools-b9774e44b-a8a458664-9dfa6df2c-12a515826-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.85.1-musl-1cf1a332a-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• genpolicy: Make cpath compatible with both runtime-rs and runtime-go by @Apokleos in https://github.com/kata-containers/kata-containers/pull/12064
• Runtime/QEMU: Introduce virtio-blk with iothreads and enable Indep iothreads framework by @zhangckid in https://github.com/kata-containers/kata-containers/pull/11620
• build: Introduce root workspace for rust components by @RuoqingHe in https://github.com/kata-containers/kata-containers/pull/11563
• genpolicy: prepare integration tests for programmatic modification by @burgerdev in https://github.com/kata-containers/kata-containers/pull/11978
• tests: Run authenticated tests with experimental_force_guest_pull by @fidencio in https://github.com/kata-containers/kata-containers/pull/12074
• ci: Adjust gatekeeper's job fetch by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/12106
• tests: nvidia: cc: Re-enable NIM tests by @fidencio in https://github.com/kata-containers/kata-containers/pull/12056
• runtime-rs: Clear Linux.Resources.Devices completely and correct the guest path for container mount binding by @Apokleos in https://github.com/kata-containers/kata-containers/pull/12102
• tests: Enable AUTO_GENERATE_POLICY for qemu-coco-dev-runtime-rs by @Apokleos in https://github.com/kata-containers/kata-containers/pull/12109
• build(deps): bump the bit-vec group across 2 directories with 1 update by @dependabot[bot] in https://github.com/kata-containers/kata-containers/pull/11370
• build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.4 by @dependabot[bot] in https://github.com/kata-containers/kata-containers/pull/11802
• build: Exclude tools from root workspace by @RuoqingHe in https://github.com/kata-containers/kata-containers/pull/12110
• tests: k8s: Fix typo in authenticated tests by @fidencio in https://github.com/kata-containers/kata-containers/pull/12111
• gpu: introduce a new devkit build flag to produce a rootfs for developers by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12059
• tests: nvidia: cc: Re-enable multi GPU test case by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12117
• shim: Support device cold plug with Kubernetes by @jojimt in https://github.com/kata-containers/kata-containers/pull/12087
• tests: cc: Test authenticated images with force guest pull by @fidencio in https://github.com/kata-containers/kata-containers/pull/12118
• tests: Reduce KBS deployment check flakeness by @fidencio in https://github.com/kata-containers/kata-containers/pull/12119
• runtime-rs: Bump cgroups-rs to v0.5.0 by @justxuewei in https://github.com/kata-containers/kata-containers/pull/12121
• tests: nvidia: cc: add allow-all policy and init-data generation by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12050

New Contributors

• @zhangckid made their first contribution in https://github.com/kata-containers/kata-containers/pull/11620
• @jojimt made their first contribution in https://github.com/kata-containers/kata-containers/pull/12087
• @LandonTClipp made their first contribution in https://github.com/kata-containers/kata-containers/pull/12173

Full Changelog: https://github.com/kata-containers/kata-containers/compare/3.23.0...3.24.0