Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version. However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-5f68b343b-7420194ea-1.85.1-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-b00013c71-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-af919686a-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-2f73e34e3-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.24.6-rust-1.85.1-12a515826-x86_64
• tools: quay.io/kata-containers/builders:tools-99ae3607d-9fda9905a-7bb28d8da-12a515826-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.85.1-musl-1cf1a332a-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• genpolicy: match sandbox name by regex by @charludo in https://github.com/kata-containers/kata-containers/pull/11814
• runtime-rs: Remove InitData annotation from OCI Spec by @Apokleos in https://github.com/kata-containers/kata-containers/pull/11843
• tests: k8s: add test duration information by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/11841
• runtime-rs: set the default block driver as virtio-scsi for qemu by @lifupan in https://github.com/kata-containers/kata-containers/pull/11844
• agent/rustjail: Fix double free in TTY handling by @sprt in https://github.com/kata-containers/kata-containers/pull/11833
• tests: agent-ctl: Fix cleanup for testing with qemu by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/11847
• GHA: Pin Alpine to 3.20 for tee-unencrypted image by @BbolroC in https://github.com/kata-containers/kata-containers/pull/11848
• csi-kata-directvolume: Add basic SPDK volume support by @whyeinstein in https://github.com/kata-containers/kata-containers/pull/11719
• ci: Remove DL3007 ignore comment for base image by @BbolroC in https://github.com/kata-containers/kata-containers/pull/11851
• runtime-rs: Add support for running the VMM in non-root mode by @StevenFryto in https://github.com/kata-containers/kata-containers/pull/11678
• ci.ocp: Avoid unsupported "git --revision" by @ldoktor in https://github.com/kata-containers/kata-containers/pull/11835
• gha: Run Zizmor without Advanced Security by @sprt in https://github.com/kata-containers/kata-containers/pull/11853
• tests/k8s: Add set -euo pipefail to lib.sh by @sprt in https://github.com/kata-containers/kata-containers/pull/11854
• gha: zizmor: fix "workflow or action definition without a name" error by @sprt in https://github.com/kata-containers/kata-containers/pull/11855
• tests: k8s: auto-generate policy for additional tests by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/11845
• gpu: Add libgcc for RUST libc=gnu builds by @zvonkok in https://github.com/kata-containers/kata-containers/pull/11856
• libs: Fix the test_parse_mount_options failure on ppc64le by @shwetha-s-poojary in https://github.com/kata-containers/kata-containers/pull/11849
• tests: k8s: auto-generate policy for additional tests by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/11858
• Revert "ci: temporarily avoid using the Mariner Host image" by @sprt in https://github.com/kata-containers/kata-containers/pull/11846
• ci: add genpolicy build for Darwin by @burgerdev in https://github.com/kata-containers/kata-containers/pull/11636
• runtime: config: allow TDX QGS port=0 by @mythi in https://github.com/kata-containers/kata-containers/pull/11850
• kata-sys-util: format mount.rs by @burgerdev in https://github.com/kata-containers/kata-containers/pull/11869

New Contributors

• @whyeinstein made their first contribution in https://github.com/kata-containers/kata-containers/pull/11719
• @shwetha-s-poojary made their first contribution in https://github.com/kata-containers/kata-containers/pull/11849
• @szymon-klimek made their first contribution in https://github.com/kata-containers/kata-containers/pull/11880
• @M-Phansa made their first contribution in https://github.com/kata-containers/kata-containers/pull/11894
• @spuzirev made their first contribution in https://github.com/kata-containers/kata-containers/pull/11888

Full Changelog: https://github.com/kata-containers/kata-containers/compare/3.21.0...3.22.0