Building secure container infrastructure with Kata Containers
The OpenStack Foundation has announced a new open source project—Kata Containers, which aims to unite the security advantages of virtual machines (VMs) with the speed and manageability of container technologies. The project is designed to be hardware agnostic and compatible with Open Container Initiative (OCI) specifications, as well as the container runtime interface (CRI) for Kubernetes.
Intel is contributing its open source Intel Clear Containers project and Hyper is contributing its runV technology to initiate the project. Besides Intel and Hyper, 99cloud, AWcloud, Canonical, China Mobile, City Network, CoreOS, Dell/EMC, EasyStack, Fiberhome, Google, Huawei, JD.com, Mirantis, NetApp, Red
Hat, SUSE, Tencent, Ucloud, UnitedStack, and ZTE are also supporting the project’s launch.
The Kata Containers project will initially comprise six components, which include the agent, runtime, proxy, Shim, kernel and packaging of QEMU 2.9. It is designed to be architecture agnostic and to run on multiple hypervisors. Kata Containers offers the ability to run container management tools directly on bare metal.
“The Kata Containers Project is an exciting addition to the OpenStack Foundation family of projects. Lighter, faster, more secure VM technology fits perfectly into the OpenStack Foundation family and aligns well with Canonical’s data centre efficiency initiatives. Like Clear Containers and Hyper.sh previously, Kata Container users will find their hypervisor and guests well supported on Ubuntu,” said Dustin Kirkland, vice president, product, Canonical.