Stories Tag: kata-container

Confidential Computing with Kubernetes: SEV Guest Protection for Kata Containers | by Jim Cadden | Jun, 2021 | Medium

admin 1 month ago in

Support for AMD SEV guest encryption is now available in Kata Containers, enabling for the first time a method for running confidential containers. In this post, we introduce our patches for enabling SEV protection in kata-containers 2.x and provide instructions for deploying an end-to-end demo of it with containerd and Kubernetes. At the end of this post, “Future Work”, we discuss additional properties that will…

Congratulations to the newly elected Kata Architecture Committee! | by Sunny Cai | Oct, 2020 | Medium

admin 10 months ago in

Welcome our new and returning Architecture Committee members! The Architecture Committee (AC) is composed of five members, who are elected by contributors. The AC elections take place every six months, in February (two seats available) and in September (three seats available). The AC is responsible for architectural decisions, including standardization, and making final decisions if Maintainers disagree. For the September 2020 Kata Containers Architecture Committee…

Kubernetes: What Secure Containers Are and How They Satisfy Security, Performance, Scheduling | Medium

admin 12 months ago in

By Wang Xu, Senior Technical Expert at Ant Financial This article is compiled from Lecture 28 of “CNCF x Alibaba Cloud-Native Technology Open Course”. Phil Karlton once said, “There are only two hard things in computer science: cache invalidation and naming things.” No matter whether you are an expert or novice developer, it is difficult to name containers. As far as system software is concerned,…

#27 — Les Kata Containers, des Micro VM pour Kubernetes avec Samuel Ortiz

admin 1 year ago in

Quel niveau d’isolation offre la conteneurisation ? Le marketing qui a eu lieu autour de Docker dès 2013 laissait entendre, pour simplifier les choses, qu’un conteneur était comparable à une machine virtuelle, mais en plus léger. Or du point de vue de la sécurité, il n’en est absolument rien : les conteneurs partagent tous le noyau de leur hôte, et sont principalement isolés au travers…