# Release 1.9.6

agent Changes

Shortlog

65bbbe3 release: Kata Containers 1.9.6

proxy Changes

Shortlog

b2ac7a4 release: Kata Containers 1.9.6

runtime Changes

Shortlog

a1da8ac release: Kata Containers 1.9.6

shim Changes

Shortlog

e02ca66 release: Kata Containers 1.9.6

Compatibility with Docker

Kata Containers 1.9.6 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.6 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.9.6 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.6 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.6 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.6

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "fedora"
version: "latest"
ppc64le:
name: "centos"
version: "latest"
s390x:
name: "ubuntu"
version: "latest"
x86_64:
name: "clearlinux"
version: "latest"
meta:
image-type: "clearlinux"

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "alpine"
version: "3.7"
ppc64le:
name: "alpine"
version: "3.7"
s390x:
name: "alpine"
version: "3.7"
x86_64:
name: "alpine"
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.6 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.11.0-alpha1

agent Changes

• Support container pipe size tuning
• Support pmem/nvdimm hotplug

Shortlog

97f6fa7 release: Kata Containers 1.11.0-alpha1
05b557a agent: add configurable container pipe size cmdline option
8ede869 agent: add kernel cmdline parameter to enable or disable cgroups v2
ddd9188 agent: parse kernel command line as soon as possible
2a5442a agent: support pmem/nvdimm hotplug
3f0d98e agent: Remove dev from pciDeviceMap when device is unplugged
e4c2037 agent: don't receive signals from stdin

proxy Changes

Shortlog

1f23aa4 build: Add support to strip the proxy golang binary
a7e5f51 release: Kata Containers 1.11.0-alpha1

runtime Changes

• Better jailer support
• vhost-user-blk/scsi support
• CPU hotplug for cloudhypervisor
• Readonly guest image on host side

Shortlog

00da127 unit-test: refine related unit tests
13390df Jailer: re-mount jailerRoot with exec
9d3022a mount: modify func bindMount
126fa15 agent: append and handle vhost-user-blk device
cf066b7 devices: hotplug vhost-user-blk device to qemu
3696318 devices: filter vhost-user-blk/scsi device
54b24da devices: add vhost-user storage configuration
17a92ae release: Kata Containers 1.11.0-alpha1
94298dd clh: Remove dead-code on maxClhVcpus
2cd0c88 README: logging: add shimv2 information
4c28717 vc: add agent.container_pipe_size annotation
4ce44ab clh: set rootfstype
eee4d70 katutils: logging: default log level to Warn
913d153 cli: logging: Default to Warn level
ed43117 vc: Remove container share dir when stopping
17b9de1 clh: enable CPU hotplug
63c7ac5 clh: add 'APIsocket' to persist HypervisorState
e9a4658 vc: Use BlockIndexMap instead of BlockIndex
7427fea dnm: vendor: update agent client
0da1010 version-update: version update for cri-o and k8s
376c425 cli: add virtioFsDaemon to kata-env.
171eb70 qemu: use govmm vhost user device types directly
4639294 qemu: pass guest image file readonly
63fdf53 vendor: update govmm dependency
c6cc8b9 virtcontainers: support lazy attach devices
3345977 clh: update minimal supported version to check.
2033229 clh: Fix version check
ea82922 virtcontainers/pkg/cgroups: implement cgroup manager
03cdf6c virtcontainers: add new package for cgroups
5f9a77c vc: validate container path when cleaning up
5bf3231 vc: do not follow symlink when umounting contanier host path

shim Changes

Shortlog

298a4d8 make: Add support to strip the binary
488bbaf release: Kata Containers 1.11.0-alpha1

Compatibility with Docker

Kata Containers 1.11.0-alpha1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.0-alpha1 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.11.0-alpha1 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.11.0-alpha1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.11.0-alpha1 is compatible with Kubernetes 1.17.3-00

Kata Linux Containers image

Agent version: 1.11.0-alpha1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "ubuntu"
version: "latest"
ppc64le:
name: "centos"
version: "latest"
s390x:
name: "ubuntu"
version: "latest"
x86_64:
name: "clearlinux"
version: "latest"
meta:
image-type: "clearlinux"

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "alpine"
version: "3.7"
ppc64le:
name: "alpine"
version: "3.7"
s390x:
name: "alpine"
version: "3.7"
x86_64:
name: "alpine"
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.11.0-alpha1 suggest to use the Linux kernel v5.4.15
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.10.2

agent Changes

Shortlog

45e619d release: Kata Containers 1.10.2

proxy Changes

Shortlog

171eb27 release: Kata Containers 1.10.2

runtime Changes

Shortlog

3533c16 release: Kata Containers 1.10.2

shim Changes

Shortlog

370850e release: Kata Containers 1.10.2

Compatibility with Docker

Kata Containers 1.10.2 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.2 is compatible with CRI-O 0eec454168e381e460b3d6de07bf50bfd9b0d082

Compatibility with cri-containerd

Kata Containers 1.10.2 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.10.2 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.2 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.2

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "fedora"
version: "latest"
ppc64le:
name: "centos"
version: "latest"
s390x:
name: "ubuntu"
version: "latest"
x86_64:
name: "clearlinux"
version: "latest"
meta:
image-type: "clearlinux"

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: "https://github.com/kata-containers/osbuilder"
architecture:
aarch64:
name: "alpine"
version: "3.7"
ppc64le:
name: "alpine"
version: "3.7"
s390x:
name: "alpine"
version: "3.7"
x86_64:
name: "alpine"
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.2 suggest to use the Linux kernel v4.19.86
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

# Release 1.11.0-alpha0

Highlights for the first alpha release for 1.11.0 included:

• Kernel was updated to 5.4.15
• Firecracker version was updated to v0.20.0
• ipv6 support was added
• The "newstore" feature has had been a "experimental" feature for long time. This has now been made a formal feature. This feature guarantees better compatibility between Kata versions.
• Initial support for virtio-mem was added
• Improvements to rootless implementation were made including fixing rootless with net=none, detecting rootless runtime with libcontainer and adding support for the --rootless flag.

agent Changes

Shortlog

8f57eda protocols: client: Add timeout for hybrid vsock handshake
8929a02 release: Kata Containers 1.11.0-alpha0
f6472bd build: Update CentOS version for the Dockerfile
accab34 agent-client: include log in agent client
a44d555 FC: Add new vsock connection handshake
c66b927 ipv6: Add flag IFA_F_NODAD for ipv6 address.
93a901c ipv6: Add support for ipv6
8d8d3f8 test: change import path for NetworkInterface
e6cbfc1 vendor: Update vendoring for libcontainer.
660e61f Revert: client.go: HybridVSockDialer: Change Read EOT to recv peek
6cfb75d Revert: client.go: HybridVSockDialer: Check return size n of unix.Recvfrom
54eb918 Revert: client.go: HybridVSockDialer: Close dup fd after receive packet
2f49115 agent: Fix mem-hotplug on x86 when ARCH_MEMORY_PROBE is set
44608b2 vendor: update golang/sys
33f3208 client.go: HybridVSockDialer: Close dup fd after receive packet

proxy Changes

Shortlog

d70f905 release: Kata Containers 1.11.0-alpha0
46750d9 Makefile: overwrite PREFIX from environment

runtime Changes

Shortlog

12d10eb clh: Update clh driver to use the latest openAPI knobs
de8fe25 clh: Update CLH to stable/v0.5.x
32196ff clh: Do not find vsock context ID
c2462e7 release: Kata Containers 1.11.0-alpha0
db5cfeb makefile: Fix missing LDFLAGS references
b74cda0 makefile: do not use LDFLAGS for extra kata flags.
1c1e7cc unit-test: refine unit tests
1ad927d kata-check: use "--strict" to perform version consistency check
a4b3c65 kata-env: import new struct VersionInfo
0f720e6 virtcontainers: fix typo in sandbox
78bb6c0 virtcontainers/persist: fix typo in fs
a8dcff5 AArch64: change image rootfs from fedora to ubuntu
2c3b465 build: Add support to strip the binary
de7383b kernel: Update kernel to latest stable 5.4.15
055f317 selinux: Disable selinux
a45cf62 virtcontainers/pkg/rootless: fix comment on exported var
c36c667 cli: implement --rootless option
11bd456 virtcontainers: support new persist API
9585bc9 virtcontainers/hypervisors: support new persist API
00307a7 virtcontainers/sandbox: support new persist API
4b9ab55 virtcontainers/factory: support new persist API
71f48a3 virtcontainers/persist: update GetDriver to support rootless fs
dd2762f virtcontainers/persist: introduce mock fs driver
ea8fb96 virtcontainers/persist: introduce rootless fs driver
768db1b virtcontainers/persist: update API and interface
6be7481 virtcontainers: remove getVMPath method from agent
658f779 rootless: move pkg/rootless to virtcontainers
83561c4 ci: Do not setup virtcontainers while using podman
22c486a CI: update yq to 3.1.0
5c3bcd8 dep: Fix dep check
836e3c2 clh: update to v0.5.0
b602e62 docs: README: Minor grammatical updates
7498978 Vendor: update agent client
27d9e43 FC: update Firecracker to v0.20.0
bb41b72 qemu: Support PCIe device hotplug for q35
fa7d00e vendor: update github.com/intel/govmm
b2fb86f virtcontainers: clh: Set the serial to NULL instead of OFF
3594855 s390x: fix refactoring
96a49a8 AArch64: arm ci failed on stale Gopkg.lock.
9bf4b85 AArch64: fix golint error on ARM CI.
2560e65 versions: bump conmon version to v2.0.5
693ad23 virtcontainers: Fix error message in mockHypervisor
4a77b0f rootless: use libcontainer API to detect rootless
c5d79eb ipv6: Add support for ipv6 for netmon as well.
b169476 ipv6: Add support for ipv6
c26ce18 vendor: update agent client
01a12b0 qemu: Add virtio-mem support
b337428 vendor: Update github.com/intel/govmm
c3cf98a virtcontainers: constrain docker container when sandbox_cgroup_only=true
54482f1 virtcontainers: remove json cgroups struct tag
316b5f2 virtcontainers: Fix typo in logger message
1f957e1 vc: Detach device when unable to store sandbox device
7186c01 unit-test: delete what ioutil.TempFile creates
0244d95 unit-test: delete what ioutil.TempDir() creates
aa62781 unit-test: reconstuct TestMain
d042d5c virtcontainers: fix unit tests
776da08 virtcontainers/hook: fix HookState
f372b85 virtcontainers: reimplement setupSandboxCgroup
9949daf virtcontainers: move validCgroupPath
ce2795e virtcontainers: remove systemd paramenter from constraintGRPCSpec
8c63c18 virtcontainers: add function to create a new cgroup manager
8057cd7 virtcontainers: add function to identify systemd cgroup path
4126968 virtcontainers: save CgroupPaths and Cgroups in sandbox
a170d00 vendor: update agent
112f90b vendor: update golang/x/sys
4a1dc1e vendor: update libcontainer
908a42a vendor: update logrus
290339d compatibility: keep oldstore for compatibility
4a298cb persist: address comments
d33b154 persist: add interface for global read/write
ed4a195 persist: remove unused struct
8e88859 persist: remove all usage of VCStore
01b4a64 persist: remove VCStore from sandbox/apis
b63e517 persist: replace sandbox lock with newstore.Lock
508101b persist: fix vmtemplate storage leak
29b55ab persist: remove VCStore from container
633748a persist: remove VCStore from hypervisor
687f2db persist: move "newstore" out of experimental
0af4819 versions: update qemu to 4.1.1
09198ee FC: jailer failed when importing new flag "--config-file"
3ed472d store: UT tmp path should be random
5617120 nsenter: skip ut on non-root
e5b04a5 ut: fs test should set RunStoragePath
9bf0d67 ut: direct factory needs to set VCStorePrefix
4c35d09 vc: set store RunVMStoragePath for ut
3deb24e cli: flush coverage report in defer function
f56d70c vc: UT should set VCStorePrefix
7c7a4a3 annotations: add disable_image_nvdimm
652bb76 cli: syscall return value check is wrong
a871728 qemu: add disalbe_image_nvdimm option
dd5b446 qemu: refactor appendImage
a2d3f9f vitiofsd: Add virtiofsd interaface
2a085ee clh: virtiofsd: check path is not empty
af5c9c2 clh: hypervisor: Do not set 9p values for virtiofs
6a10cd9 clh: test: add unit test
8a439ea clh: add Client Interface and bootVM test
661956f versions: Update cloud hypervisor url
b96c7e5 rootless: fix rootless for case net=none
a215f87 vendor: Update github.com/kata-containers/agent to handle hvsock issue
1c11fe2 shimv2: support runtime config path via annotation
6eae033 shimv2: cleanup container if not found
743309c vc: stop container should change container state at last
6cd9b3b vendor: Update golang.org/x/sys
9c3151e clh: remove not requried values
e9a852d clh: update api calls for latest master
1a7539c clh: update client
5532378 versions: update clh to v0.4.0
837a0ee cache-factory: set bridge info when creating vm
3d8ffe4 cache-factory: fix nil pointer runtime panic
8f6d0ab FC: introduce --config-file to replace API configure request
f2d8d71 FC: func checkVersion should be more independent
9ce2113 FC: remove API Ready state
efb611a clh: client: update acording to versions.yaml
9a15457 vc: Check error return from storeState
ab2088f makefile: honor virtiofs config for default config
cc25216 virtiofs: add default value for virtioFsCache type.

shim Changes

Shortlog

5723a04 release: Kata Containers 1.11.0-alpha0
f299e2c Makefile: overwrite PREFIX from environment

Compatibility with Docker

Kata Containers 1.11.0-alpha0 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.11.0-alpha0 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.11.0-alpha0 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.11.0-alpha0 support the OCI Runtime Specification [v1.0.0-rc5][ocispec]

Compatibility with Kubernetes

Kata Containers 1.11.0-alpha0 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.11.0-alpha0

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: ubuntu
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.11.0-alpha0 suggest to use the Linux kernel v5.4.15
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata [installation instructions][installation].

Issues & limitations

More information [Limitations][limitations]

# Release 1.10.1

agent Changes

Shortlog

fda7fc5 release: Kata Containers 1.10.1

proxy Changes

Shortlog

b0dc2b5 release: Kata Containers 1.10.1

runtime Changes

Shortlog

ea2a080 release: Kata Containers 1.10.1

shim Changes

Shortlog

3719b66 release: Kata Containers 1.10.1

Compatibility with Docker

Kata Containers 1.10.1 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.10.1 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.10.1 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.10.1 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.10.1 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.10.1

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.10.1 suggest to use the Linux kernel v4.19.86
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

Kata Containers 1.9.5

Kata Containers release 1.9.5

# Release 1.10.0

Welcome to Kata Containers release 1.10.0

Highlights

• Initial support for Cloud Hypervisor
• HybridVsock support for cloud hypervisor and firecracker
• Updated Firecracker version to v0.19.1
• Better rootless support for firecracker
• This release deprecates bridged networking model

agent Changes

Shortlog

980e425 release: Kata Containers 1.10.0
74a3b95 release: Kata Containers 1.10.0-rc0
afd0871 ci: install docker before configure
c502552 client.go: HybridVSockDialer: Check return size n of unix.Recvfrom
f8e4ce8 client.go: HybridVSockDialer: Change Read EOT to recv peek
5b64d42 agent: get current cpuset from /sys/devices/system/cpu/online
183a24a release: Kata Containers 1.10.0-alpha1
1ee8516 config: add option to control hotplug timeout of block devices
40567f6 release: Kata Containers 1.10.0-alpha0
19bee57 agent: connect debugging console in a specific vsock port
a4f7373 agent: fix pause bin on musl
8361150 docs: Add enable services and installation steps for TRACING.md
f9f129a docs: Add missing steps at TRACING.md
d3e66bf tracing: Wrapper for tracing functions
455f728 tracing: Generate an alias for opentracing.Span
7a7dba7 network: ensure parent directories exist
5f302e5 agent: Revert "client: remove the parameter of 'enableYamux'"
717ee24 client: remove the parameter of 'enableYamux'
d387c77 vendor: Update github.com/syndtr/gocapability/capability
b3d737b vendor: update libcontainer to 1.0.0-rc9

proxy Changes

Shortlog

04e7e8c release: Kata Containers 1.10.0
f416af8 Makefile: overwrite PREFIX from environment
47f28fc release: Kata Containers 1.10.0-rc0
c86bcc2 release: Kata Containers 1.10.0-alpha1
0e26fbb ci: travis: use xenial
d3a9486 release: Kata Containers 1.10.0-alpha0

runtime Changes

Shortlog

a084781 release: Kata Containers 1.10.0
df1be10 clh: remove not requried values
b27bdf4 clh: update api calls for latest master
2dc44f7 clh: update client
cf49d81 versions: update clh to v0.4.0
abaa450 release: Kata Containers 1.10.0-rc0
810c2c9 versions: bump firecracker version
0afeb52 clh: clh http unit test
42061f6 clh: cleanup VM dir
c688a15 version: CH bump to master
9f15dd2 clh: remove cli builder
f73723a clh: use http client
6010218 clh: Implement check()
a10da3e vendor: update openapi deps
1836226 clh: generate client code
dcac021 clh: Add Generation tools for API client
0babd38 rootless: Disable vhost-net for rootless
67f203f compatoci: Add a SetLogger call
abbb536 virtiofs: stop sandbox when virtiofsd quits
9c0872d vc: Remove device when AddDevice encounters error
c58e6f9 kernel: update to 4.19.86
e8cc87b clh: basic/unit tests for clh driver
3ef8f6c clh: fixes erroneous killing of virtiofsd
6af127f clh: improve driver logging for failed hypervisor
7b8e15f Merge pull request #3 from kata-containers/master
bec46bb vc: Use map to represent ignoredMounts
0697124 fc: update comments for startSandbox
628799a vc: Check return value from os.MkdirAll in virtiofsdArgs
544730b vc: Drop Sandbox#Pause and Sandbox#Resume
38224e8 vc: Use map built-in accessor to find container in Sandbox#GetContainer
9dd3f13 Makefile: Move the .git-commit: rule block to below the all: rule
7bcce3d Makefile: do not use tabs in if/else blocks
d4be097 Makefile: fix suspicious line
b7731e9 virtcontainers: don't consider non-running container resources
43f0513 virtcontainers: update resources after adding container to sandbox
9a4ee4f vc: Utilize map for newMounts to speed up replaceOCIMountSource
c833ac2 vc: BlockIndex should not be altered in case of error
613fd0f virtcontainers: rename GetOCISpec to GetPatchedOCISpec
330cc72 tracing: Unbreak tracing test
191ee63 fc.go: Set fc log level to debug if hypervisor.enable_debug is true
336edf7 virtcontainers: honour ContainerConfig struct comment and not save Spec
7f67b9f virtcontainers: improve algorithm to find containers
562d9fd Merge pull request #2073 from Pennyzct/firecracker_fifo_log
fea166d Merge pull request #2250 from devimc/topic/gitignore/addClhToml
7938cd8 Merge pull request #2208 from choury/patch-1
0ac4355 gitignore: include cloud hypervisor configuration toml
0ff0e54 Merge pull request #2217 from ericooper/clh-driver-fix-2206
1abe52a clh: removed hard-coded vsock contextid (cid)
eae8449 Merge pull request #2242 from tedyu/to-disk-close
db696da Merge pull request #2232 from tedyu/rm-persist-dir
b8b6733 vc: Persist file handle may leak in FS#ToDisk
a17ca14 Merge pull request #2238 from tedyu/start-sandbox-running
3a4025f Merge pull request #2234 from tedyu/close-cf
03478d4 vc: Clean up directories in case MkdirAll fails
51d7c23 shim: Respect containerd's debug config
93a0336 vc: Restore sandbox state when there is error starting containers
88205cf Merge pull request #2224 from amshinde/1.10.0-alpha1-branch-bump
660728f Merge pull request #2229 from amshinde/disable-jailer
2331e87 vc: Persist file handle may leak in FS#FromDisk
1f71114 Merge pull request #2223 from tedyu/sandbox-anno
fab759d config: Disable jailer by default for firecracker
48c8d66 Merge pull request #2179 from WeiZhang555/persist-storage
df889c3 release: Kata Containers 1.10.0-alpha1
1afad1c vc: Sandbox#Annotations should use annotationsLock read lock
66f0ec5 Merge pull request #2216 from tedyu/kata-vc-kill
289b6bc Merge pull request #2219 from jcvenegas/ch-versions
1e04679 versions: Add cloud-hypervisor
618666e vc: Remove unnecessary call to kill
7943dd9 persistence: store configuration in newstore
daae1db log: extract error info from firecracker built-in log and metrics scheme
daae1db log: extract error info from firecracker built-in log and metrics scheme
0ac4355 gitignore: include cloud hypervisor configuration toml
51d7c23 shim: Respect containerd's debug config
1abe52a clh: removed hard-coded vsock contextid (cid)
164fa18 Merge pull request #2 from kata-containers/master
b8b6733 vc: Persist file handle may leak in FS#ToDisk
03478d4 vc: Clean up directories in case MkdirAll fails
93a0336 vc: Restore sandbox state when there is error starting containers
2331e87 vc: Persist file handle may leak in FS#FromDisk
df889c3 release: Kata Containers 1.10.0-alpha1
fab759d config: Disable jailer by default for firecracker
1afad1c vc: Sandbox#Annotations should use annotationsLock read lock
7943dd9 persistence: store configuration in newstore
618666e vc: Remove unnecessary call to kill
1e04679 versions: Add cloud-hypervisor
c0d2867 Merge pull request #2214 from bergwolf/fix-build
45faacf Merge pull request #2204 from tedyu/rm-extra-kill
510f0a6 clh: fix build
be6110d Merge pull request #2202 from lifupan/watch_firecracker_console
ee9a53c vc: Remove extra call to Kill
547d580 Merge pull request #2164 from ericooper/ich-driver-001
784066a Makefile: clh: Use virtiofs kernel
01713d5 runtime: added cloud hypervisor driver
3886dcf Merge pull request #2196 from egernst/remove-nemu
70297c2 nemu: remove nemu support
a2b6afc FC: log out the firecracker's console when debug enabled
13a00a2 virtcontainers: add a stateful to FC struct
35f54fd Merge pull request #2194 from egernst/fixup-vhost-fc
f2bbcf4 Merge pull request #2197 from egernst/disable-vhost-comment
0c482b2 qemu-configs: update disable_vhost_net description
75d149c Merge pull request #1214 from mcastelino/topic/network-simplify
519eff7 fc: config: vhost-net not supported
af73bb3 Merge pull request #2184 from devimc/topic/virtcontainers/fixFC019
6154210 versions: bump firecracker version
78ca966 virtcontainers: bump firecracker minimum supported version
77b0dfb virtcontainers: use new firecracker API
0def9b0 virtcontainers/firecracker: update API
744ccd4 network: Set the default config to tcfilter
27433d9 config: Get rid of bridged model docs in the configuration
dffc988 virtcontainers: Eliminate legacy networking models
8c7a83b Merge pull request #2178 from amshinde/fix-rootless-cgroups
31b5f96 Merge pull request #2171 from amshinde/support-fips-mode
f6ffb79 rootless: Fix cgroup creation logic for rootless
d0615f8 Merge pull request #2140 from YvesChan/qmp_race
94b3cf2 Merge pull request #2100 from amshinde/update-containerd-version
bcb3854 Merge pull request #2174 from darfux/fix-rootless-ids
0bd41b9 FIPS: Add support for starting VM in FIPS mode.
3f1a39c rootless: Fix rangeUID parsing
3e3e923 Merge pull request #2167 from chavafg/topic/k8s-1.16
69ab092 versions: Add cri-tools and conmon to the versions.yaml
5b31282 vc/qemu: add mutex to qmp monitor channel in qmpSetup()
0e70b38 versions: Update kubernetes and cri-o to 1.16
62f64bb version: Update containerd version to 1.3.0
510f0a6 clh: fix build
ee9a53c vc: Remove extra call to Kill
a2b6afc FC: log out the firecracker's console when debug enabled
13a00a2 virtcontainers: add a stateful to FC struct
784066a Makefile: clh: Use virtiofs kernel
01713d5 runtime: added cloud hypervisor driver
70297c2 nemu: remove nemu support
519eff7 fc: config: vhost-net not supported
0c482b2 qemu-configs: update disable_vhost_net description
744ccd4 network: Set the default config to tcfilter
27433d9 config: Get rid of bridged model docs in the configuration
dffc988 virtcontainers: Eliminate legacy networking models
6154210 versions: bump firecracker version
78ca966 virtcontainers: bump firecracker minimum supported version
77b0dfb virtcontainers: use new firecracker API
0def9b0 virtcontainers/firecracker: update API
f6ffb79 rootless: Fix cgroup creation logic for rootless
0bd41b9 FIPS: Add support for starting VM in FIPS mode.
5b31282 vc/qemu: add mutex to qmp monitor channel in qmpSetup()
62f64bb version: Update containerd version to 1.3.0
3f1a39c rootless: Fix rangeUID parsing
69ab092 versions: Add cri-tools and conmon to the versions.yaml
0e70b38 versions: Update kubernetes and cri-o to 1.16
a1e359d versions: move cmake and musl version into versions....

# Release 1.9.4

agent Changes

Shortlog

b56edd2 release: Kata Containers 1.9.4

proxy Changes

Shortlog

398577 release: Kata Containers 1.9.4
6acce19 Makefile: overwrite PREFIX from environment

runtime Changes

Shortlog

2880c22 release: Kata Containers 1.9.4

shim Changes

Shortlog

65a88b0 release: Kata Containers 1.9.4
142cc15 Makefile: overwrite PREFIX from environment

Compatibility with Docker

Kata Containers 1.9.4 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.4 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.9.4 is compatible with cri-contaienrd 1.3.0

OCI Runtime Specification

Kata Containers 1.9.4 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.4 is compatible with Kubernetes 1.16.2-00

Kata Linux Containers image

Agent version: 1.9.4

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.4 suggest to use the Linux kernel v4.19.86
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations

Kata Containers 1.10.0-rc0

Release 1.10.0-rc0

agent Changes

• HybridVsock support for cloud hypervisor and firecracker

Shortlog

74a3b95 release: Kata Containers 1.10.0-rc0
afd0871 ci: install docker before configure
c502552 client.go: HybridVSockDialer: Check return size n of unix.Recvfrom
f8e4ce8 client.go: HybridVSockDialer: Change Read EOT to recv peek
5b64d42 agent: get current cpuset from /sys/devices/system/cpu/online
183a24a release: Kata Containers 1.10.0-alpha1
1ee8516 config: add option to control hotplug timeout of block devices
40567f6 release: Kata Containers 1.10.0-alpha0
19bee57 agent: connect debugging console in a specific vsock port
a4f7373 agent: fix pause bin on musl
8361150 docs: Add enable services and installation steps for TRACING.md
f9f129a docs: Add missing steps at TRACING.md
d3e66bf tracing: Wrapper for tracing functions
455f728 tracing: Generate an alias for opentracing.Span
7a7dba7 network: ensure parent directories exist
5f302e5 agent: Revert "client: remove the parameter of 'enableYamux'"
717ee24 client: remove the parameter of 'enableYamux'
d387c77 vendor: Update github.com/syndtr/gocapability/capability
b3d737b vendor: update libcontainer to 1.0.0-rc9

proxy Changes

No change.

Shortlog

47f28fc release: Kata Containers 1.10.0-rc0
c86bcc2 release: Kata Containers 1.10.0-alpha1
0e26fbb ci: travis: use xenial
d3a9486 release: Kata Containers 1.10.0-alpha0

runtime Changes

• cloud-hypervisor support
• nemu support is removed
• constraint kata host components at sandbox level
• no more bridge network mode, tcfilter is the default network mode now

Shortlog

abaa450 release: Kata Containers 1.10.0-rc0
810c2c9 versions: bump firecracker version
0afeb52 clh: clh http unit test
42061f6 clh: cleanup VM dir
c688a15 version: CH bump to master
9f15dd2 clh: remove cli builder
f73723a clh: use http client
6010218 clh: Implement check()
a10da3e vendor: update openapi deps
1836226 clh: generate client code
dcac021 clh: Add Generation tools for API client
0babd38 rootless: Disable vhost-net for rootless
67f203f compatoci: Add a SetLogger call
abbb536 virtiofs: stop sandbox when virtiofsd quits
9c0872d vc: Remove device when AddDevice encounters error
c58e6f9 kernel: update to 4.19.86
e8cc87b clh: basic/unit tests for clh driver
3ef8f6c clh: fixes erroneous killing of virtiofsd
6af127f clh: improve driver logging for failed hypervisor
7b8e15f Merge pull request #3 from kata-containers/master
bec46bb vc: Use map to represent ignoredMounts
0697124 fc: update comments for startSandbox
628799a vc: Check return value from os.MkdirAll in virtiofsdArgs
544730b vc: Drop Sandbox#Pause and Sandbox#Resume
38224e8 vc: Use map built-in accessor to find container in Sandbox#GetContainer
9dd3f13 Makefile: Move the .git-commit: rule block to below the all: rule
7bcce3d Makefile: do not use tabs in if/else blocks
d4be097 Makefile: fix suspicious line
b7731e9 virtcontainers: don't consider non-running container resources
43f0513 virtcontainers: update resources after adding container to sandbox
9a4ee4f vc: Utilize map for newMounts to speed up replaceOCIMountSource
c833ac2 vc: BlockIndex should not be altered in case of error
613fd0f virtcontainers: rename GetOCISpec to GetPatchedOCISpec
330cc72 tracing: Unbreak tracing test
191ee63 fc.go: Set fc log level to debug if hypervisor.enable_debug is true
336edf7 virtcontainers: honour ContainerConfig struct comment and not save Spec
7f67b9f virtcontainers: improve algorithm to find containers
562d9fd Merge pull request #2073 from Pennyzct/firecracker_fifo_log
fea166d Merge pull request #2250 from devimc/topic/gitignore/addClhToml
7938cd8 Merge pull request #2208 from choury/patch-1
0ac4355 gitignore: include cloud hypervisor configuration toml
0ff0e54 Merge pull request #2217 from ericooper/clh-driver-fix-2206
1abe52a clh: removed hard-coded vsock contextid (cid)
eae8449 Merge pull request #2242 from tedyu/to-disk-close
db696da Merge pull request #2232 from tedyu/rm-persist-dir
b8b6733 vc: Persist file handle may leak in FS#ToDisk
a17ca14 Merge pull request #2238 from tedyu/start-sandbox-running
3a4025f Merge pull request #2234 from tedyu/close-cf
03478d4 vc: Clean up directories in case MkdirAll fails
51d7c23 shim: Respect containerd's debug config
93a0336 vc: Restore sandbox state when there is error starting containers
88205cf Merge pull request #2224 from amshinde/1.10.0-alpha1-branch-bump
660728f Merge pull request #2229 from amshinde/disable-jailer
2331e87 vc: Persist file handle may leak in FS#FromDisk
1f71114 Merge pull request #2223 from tedyu/sandbox-anno
fab759d config: Disable jailer by default for firecracker
48c8d66 Merge pull request #2179 from WeiZhang555/persist-storage
df889c3 release: Kata Containers 1.10.0-alpha1
1afad1c vc: Sandbox#Annotations should use annotationsLock read lock
66f0ec5 Merge pull request #2216 from tedyu/kata-vc-kill
289b6bc Merge pull request #2219 from jcvenegas/ch-versions
1e04679 versions: Add cloud-hypervisor
618666e vc: Remove unnecessary call to kill
7943dd9 persistence: store configuration in newstore
daae1db log: extract error info from firecracker built-in log and metrics scheme
daae1db log: extract error info from firecracker built-in log and metrics scheme
0ac4355 gitignore: include cloud hypervisor configuration toml
51d7c23 shim: Respect containerd's debug config
1abe52a clh: removed hard-coded vsock contextid (cid)
164fa18 Merge pull request #2 from kata-containers/master
b8b6733 vc: Persist file handle may leak in FS#ToDisk
03478d4 vc: Clean up directories in case MkdirAll fails
93a0336 vc: Restore sandbox state when there is error starting containers
2331e87 vc: Persist file handle may leak in FS#FromDisk
df889c3 release: Kata Containers 1.10.0-alpha1
fab759d config: Disable jailer by default for firecracker
1afad1c vc: Sandbox#Annotations should use annotationsLock read lock
7943dd9 persistence: store configuration in newstore
618666e vc: Remove unnecessary call to kill
1e04679 versions: Add cloud-hypervisor
c0d2867 Merge pull request #2214 from bergwolf/fix-build
45faacf Merge pull request #2204 from tedyu/rm-extra-kill
510f0a6 clh: fix build
be6110d Merge pull request #2202 from lifupan/watch_firecracker_console
ee9a53c vc: Remove extra call to Kill
547d580 Merge pull request #2164 from ericooper/ich-driver-001
784066a Makefile: clh: Use virtiofs kernel
01713d5 runtime: added cloud hypervisor driver
3886dcf Merge pull request #2196 from egernst/remove-nemu
70297c2 nemu: remove nemu support
a2b6afc FC: log out the firecracker's console when debug enabled
13a00a2 virtcontainers: add a stateful to FC struct
35f54fd Merge pull request #2194 from egernst/fixup-vhost-fc
f2bbcf4 Merge pull request #2197 from egernst/disable-vhost-comment
0c482b2 qemu-configs: update disable_vhost_net description
75d149c Merge pull request #1214 from mcastelino/topic/network-simplify
519eff7 fc: config: vhost-net not supported
af73bb3 Merge pull request #2184 from devimc/topic/virtcontainers/fixFC019
6154210 versions: bump firecracker version
78ca966 virtcontainers: bump firecracker minimum supported version
77b0dfb virtcontainers: use new firecracker API
0def9b0 virtcontainers/firecracker: update API
744ccd4 network: Set the default config to tcfilter
27433d9 config: Get rid of bridged model docs in the configuration
dffc988 virtcontainers: Eliminate legacy networking models
8c7a83b Merge pull request #2178 from amshinde/fix-rootless-cgroups
31b5f96 Merge pull request #2171 from amshinde/support-fips-mode
f6ffb79 rootless: Fix cgroup creation logic for rootless
d0615f8 Merge pull request #2140 from YvesChan/qmp_race
94b3cf2 Merge pull request #2100 from amshinde/update-containerd-version
bcb3854 Merge pull request #2174 from darfux/fix-rootless-ids
0bd41b9 FIPS: Add support for starting VM in FIPS mode.
3f1a39c rootless: Fix rangeUID parsing
3e3e923 Merge pull request #2167 from chavafg/topic/k8s-1.16
69ab092 versions: Add cri-tools and conmon to the versions.yaml
5b31282 vc/qemu: add mutex to qmp monitor channel in qmpSetup()
0e70b38 versions: Update kubernetes and cri-o to 1.16
62f64bb version: Update containerd version to 1.3.0
510f0a6 clh: fix build
ee9a53c vc: Remove extra call to Kill
a2b6afc FC: log out the firecracker's console when debug enabled
13a00a2 virtcontainers: add a stateful to FC struct
784066a Makefile: clh: Use virtiofs kernel
01713d5 runtime: added cloud hypervisor driver
70297c2 nemu: remove nemu support
519eff7 fc: config: vhost-net not supported
0c482b2 qemu-configs: update disable_vhost_net description
744ccd4 network: Set the default config to tcfilter
27433d9 config: Get rid of bridged model docs in the configuration
dffc988 virtcontainers: Eliminate legacy networking models
6154210 versions: bump firecracker version
78ca966 virtcontainers: bump firecracker minimum supported version
77b0dfb virtcontainers: use new firecracker API
0def9b0 virtcontainers/firecracker: update API
f6ffb79 rootless: Fix cgroup creation logic for rootless
0bd41b9 FIPS: Add support for starting VM in FIPS mode.
5b31282 vc/qemu: add mutex to qmp monitor channel in qmpSetup()
62f64bb version: Update containerd version to 1.3.0
3f1a39c rootless: Fix rangeUID parsing
69ab092 versions: Add cri-tools and conmon to the versions.yaml
0e70b38 versions: Update kubernetes and cri-o to 1.16
a1e359d versions: move cmake and musl version into versions.yaml
0a35f50 release: Kata Containers 1.10.0-alpha0
9d50cc1 HV: Remove number of guest CPU configuration in ACRN
c51d492 virtcontainers: fix the issue of missing watchConsole
691a6a7 sandbox/cgroups: don't constrain if using SandboxCgroupsOnly
7fe0100 cli: add kata-overhead command
1bbc1d5 virtcontainers: add StatsSandbox to vc API
569bd78 virtcontainers: change pass by value to pass by reference
e4c816b versions: support specify version in versions.yaml for rust agent.
24d7aff virtcontainers: change pass by value to pass by reference
5b226d0 ci: Fix versions_checker.sh
f8b84d7 ci: Fix versions_...

Kata Containers 1.9.3

Release 1.9.3

agent Changes

No change.

Shortlog

7d5fe7c release: Kata Containers 1.9.3

proxy Changes

No change.

Shortlog

d4be0c1 release: Kata Containers 1.9.3

runtime Changes

• Include firecracker release v0.18.1 to address CVE-2019-18960
• bugfix

Shortlog

3d5e0db rootless: Disable vhost-net for rootless
71d6d22 release: Kata Containers 1.9.3
b7fa015 versions: bump fc version to v0.18.1
c46fdff virtcontainers: don't consider non-running container resources
2777cb2 virtcontainers: update resources after adding container to sandbox
9204973 virtcontainers/store: make VCStoreUUIDPath rootless
c818711 vc: Don't adjust block index on error
10a977d vc: Persist file handle may leak in FS#ToDisk

shim Changes

No change.

Shortlog

4b5d13a release: Kata Containers 1.9.3

Compatibility with Docker

Kata Containers 1.9.3 is compatible with Docker v18.06-ce

Compatibility with CRI-O

Kata Containers 1.9.3 is compatible with CRI-O v1.16.0

Compatibility with cri-containerd

Kata Containers 1.9.3 is compatible with cri-contaienrd 1.2.7

OCI Runtime Specification

Kata Containers 1.9.3 support the OCI Runtime Specification v1.0.0-rc5

Compatibility with Kubernetes

Kata Containers 1.9.3 is compatible with Kubernetes 1.15.3-00

Kata Linux Containers image

Agent version: 1.9.3

Default Image Guest OS:

description: |
Root filesystem disk image used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: fedora
version: latest
ppc64le:
name: centos
version: latest
s390x:
name: ubuntu
version: latest
x86_64:
name: clearlinux
version: latest
meta:
image-type: clearlinux

Default Initrd Guest OS:

description: |
Root filesystem initrd used to boot the guest virtual
machine.
url: https://github.com/kata-containers/osbuilder
architecture:
aarch64:
name: alpine
version: "3.7"
ppc64le:
name: alpine
version: "3.7"
s390x:
name: alpine
version: "3.7"
x86_64:
name: alpine
version: "3.7"

Kata Linux Containers Kernel

Kata Containers 1.9.3 suggest to use the Linux kernel v4.19.75
See the kernel suggested Guest Kernel patches
See the kernel suggested Guest Kernel config

Installation

Follow the Kata installation instructions.

Issues & limitations

More information Limitations