Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.6.0 which is not modified from the upstream version. However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-6f787300c-c9cd79655-1.89-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-229481b34-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-e02e22643-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-b2c943931-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.24.12-rust-1.89-1872af7c5-x86_64
• tools: quay.io/kata-containers/builders:tools-500146bfe-37a0c81b6-ca43a8cbb-a0d96256f-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.85.1-musl-2962e14c1-x86_64

Installation

Follow the Kata installation instructions.

Security Fixes

• CVE-2026-24054 in 20ca4d2d79aa5bf63aa1254f08915da84f19e92a

What's Changed

• kata-deploy: Switch to the rust implementation by @fidencio in https://github.com/kata-containers/kata-containers/pull/12340
• tools: Remove runk by @fidencio in https://github.com/kata-containers/kata-containers/pull/12341
• static-checks: Fix kata-deploy reference by @fidencio in https://github.com/kata-containers/kata-containers/pull/12359
• tests: Add report generation to NVIDIA tests by @fidencio in https://github.com/kata-containers/kata-containers/pull/12354
• kata-deploy: Add runtime-rs TDX / SNP runtimeclasses by @fidencio in https://github.com/kata-containers/kata-containers/pull/12352
• tests: Add common bats test runner function by @fidencio in https://github.com/kata-containers/kata-containers/pull/12365
• agent: Refresh Cargo.lock by @gkurz in https://github.com/kata-containers/kata-containers/pull/12362
• build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.17 in /src/runtime by @dependabot[bot] in https://github.com/kata-containers/kata-containers/pull/11421
• Rust linting improvements by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/12334
• build: Add cargo check by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/12371
• kata-deploy: Fix tests and issues found with non-kubeadm deployments by @fidencio in https://github.com/kata-containers/kata-containers/pull/12372
• GHA: Set timeout for kata-deploy and kbs cleanup by @BbolroC in https://github.com/kata-containers/kata-containers/pull/12383
• ci: Fix stalebot permissions by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/12305
• kata-deploy: Update debian in the container image to 13 (trixie) by @fidencio in https://github.com/kata-containers/kata-containers/pull/12380
• doc: update enabling full debug method by @Apokleos in https://github.com/kata-containers/kata-containers/pull/12384
• runtime: Add -info flag support for containerd v2.0+ by @tak-ka3 in https://github.com/kata-containers/kata-containers/pull/12366
• runtime-rs: Add arm64 QEMU support by @fidencio in https://github.com/kata-containers/kata-containers/pull/12355
• Revert "ci: Ensure the KBS resources are created" by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12349
• libs: Change kv of get_agent_kernel_params to BTreeMap by @teawater in https://github.com/kata-containers/kata-containers/pull/10978
• arm64: Update ptp.conf to correct time sync by @liubocflt in https://github.com/kata-containers/kata-containers/pull/11037
• runtime-rs: Add -info flag support for containerd v2.0+ by @tak-ka3 in https://github.com/kata-containers/kata-containers/pull/12391
• runtime-rs: se File instead of UnixStream for FIFO to fix ENOTSOCK by @Apokleos in https://github.com/kata-containers/kata-containers/pull/12388
• kata-deploy: Enable user-defined runtimes with snapshotter and guest-pull support by @fidencio in https://github.com/kata-containers/kata-containers/pull/12353
• gpu: Enable remote and local repo cuda builds by @zvonkok in https://github.com/kata-containers/kata-containers/pull/12348
• runtime-rs: Make QMP init robust by retrying handshake with deadline by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11585
• ci.ocp: Two little fixes regarding the openshift-ci by @ldoktor in https://github.com/kata-containers/kata-containers/pull/12274
• agent: remove redundant func comment by @houstar in https://github.com/kata-containers/kata-containers/pull/11959
• versions: Bump guest-components by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/12401
• shim: enforce iommufd for confidential guest vfio by @jojimt in https://github.com/kata-containers/kata-containers/pull/12394
• kernel: Readjust kernel version after decrement by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12403
• ci.ocp: Use 0.0.0-dev tagged helm chart by @ldoktor in https://github.com/kata-containers/kata-containers/pull/12389
• kata-deploy: Update for mariner in all target by @manuelh-dev in https://github.com/kata-containers/kata-containers/pull/12395
• release: Bump version to 3.26.0 by @fidencio in https://github.com/kata-containers/kata-containers/pull/12406

New Contributors

• @tak-ka3 made their first contribution in https://github.com/kata-containers/kata-containers/pull/12366
• @liubocflt made their first contribution in https://github.com/kata-containers/kata-containers/pull/11037

Full Changelog: https://github.com/kata-containers/kata-containers/compare/3.25.0...3.26.0