https://cybertoolchain.io/tools/kata-containers New releases and features in kata-containers, tracked by The Cyber Toolchain. en Tue, 20 Oct 2026 21:01:28 GMT https://github.com/kata-containers/kata-containers/releases/tag/4.3.0 https://github.com/kata-containers/kata-containers/releases/tag/4.3.0 Tue, 20 Oct 2026 21:01:28 GMT Kata 4.3.0 adds rootless SEV-SNP/TDX, GPU driver repo support, guest-extension VMM expansion, and deeper webhook memory enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables rootless SEV-SNP and TDX in `runtime-rs`/QEMU, allowing confidential VMs to run without root privileges.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds ability to enforce a minimum memory limit in the kata-webhook. • Adds support for a dedicated driver userspace repository for NVIDIA GPUs via `driver.url` in `nvgpu`. • Accepts a complete driver source tarball as `driver.url` for NVIDIA GPU builds. • Expands guest-extensions support to VMMs beyond QEMU, updates Cloud Hypervisor to v53.0, and bumps the guest kernel to 6.18.52. • Adds agent capabilities to unseal sealed secret environment variables during exec requests, report cgroup v2 CPU throttling time, and fall back to `fsmount` when overlay options exceed 4K. • Adds kata-deploy support to provision host devices for rootless VMMs and to detect external Node Feature Discovery (NFD) by label. • Verifies guest-pulled image references in `genpolicy`. • Improves `genpolicy` by adding a default `PATH` when the container image environment lacks one and by naming the missing Secret or ConfigMap when an env source is absent. • Improves kata-deploy by restricting containerd `pod_annotations` to the per-installation configuration and honoring `imagePullSecrets` on kubectl-image hook Jobs. Breaking changes: • The `image_guest_pull` driver option metadata is removed from `genpolicy`, `agent`, and runtime(-rs) — configurations or policies that set this field will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/4.2.0 https://github.com/kata-containers/kata-containers/releases/tag/4.2.0 Tue, 15 Sep 2026 12:48:18 GMT Kata Containers 4.2.0 adds TLS to kata-monitor, VFIO/block-device fd passing for QEMU, virtio-rng for dragonball, and early guest console log capture.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds TLS support to `kata-monitor` for encrypted metrics exposure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Passes block storage sources by file descriptor in `runtime-rs/QEMU`, enabling more secure and flexible block device attachment. • Passes VFIO devices by file descriptor in `runtime-rs/QEMU`, enabling fd-based VFIO device handoff. • Adds `virtio-rng` entropy device to the dragonball VMM. • Captures early guest console logs in the runtime before the agent is fully up. • Allows disabling CLH nested virtualization in the runtime. • Enables cold-plug of block devices requested before boot in `runtime-rs` with Cloud Hypervisor. • Ships `dcgm-exporter` in the NVIDIA GPU guest images. • Enables NFD (Node Feature Discovery) in the NVIDIA kata-deploy presets. • Bumps rootfs base to Ubuntu 26.04 across all images. Breaking changes: • The `disable_block_device_use` option is removed from `runtime-rs` as it was unsupported — configs referencing it will need to be updated. • The `cpu_nested_config` override is removed from `runtime-rs`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/4.1.0 https://github.com/kata-containers/kata-containers/releases/tag/4.1.0 Fri, 21 Aug 2026 09:16:01 GMT Kata Containers 4.1.0 adds OpenVMM and Cloud Hypervisor VM template support, L3 forwarding network model, NVSwitch passthrough, and EROFS backing mode in kata-deploy. • Adds `shared_fs=none` configuration to `kata-deploy` so virtiofsd is not shipped when it is not needed. • Adds EROFS backing mode configuration support in `kata-deploy`. • Adds values overlay support when publishing the Helm chart in `kata-deploy`. • Adds `listxattr` to the dragonball seccomp allowlist in `runtime-rs`, enabling workloads that call this syscall. • Adds L3 forwarding network model for `runtime-rs`, enabling an additional network topology option. • Adds OpenVMM hypervisor support in `runtime-rs`. • Adds Cloud Hypervisor VM template support in `runtime-rs`. • Adds `nvswitch-class` device passthrough support in the runtime, enabling NVSwitch-based GPU topologies. • Adds `VIRTIO_F_ACCESS_PLATFORM` flag for TDX virtio devices in dragonball, improving TDX guest compatibility. • Adds a hypercall (`VcpuExit::Hypercall`) handler for TDX in dragonball. • Adds a generic devkit debug guest extension (runtime-rs only). • Adds composable VM extensions for IBM SEL in `runtime-rs`. • Splits the static release tarball by runtime, producing per-runtime tarballs. • Adds a `qemu-no-shared-fs` build variant and trims confidential-guest QEMU builds. • Disables QEMU features and devices by default to reduce the attack surface. • Adds `podLabels` support on per-node Jobs in `kata-deploy`. • Adds TEE key advertisement rendering from the Helm chart in `kata-deploy`. • Enables job-mode dispatcher confinement to trusted nodes in `kata-deploy`. • Isolates guest debug in runtime classes within `kata-deploy`. • Drops `nsenter` from `kata-deploy` and tightens host privileges. • Shares block storage source mapping in `runtime-rs` to reduce duplication. • Bumps virtiofsd to 1.14.0. • Binds nydus-snapshotter to the node's actual CRI unit in `kata-deploy`. • Makes `kata-deploy` roll out when mounted ConfigMaps change via Helm. • Local CUDA repository support added for NVIDIA GPU extensions (`nvgpu`). • Extracts PCI utilities into a standalone `pcilibs-rs` crate. • Places the runtime in the sandbox cgroup synchronously in `runtime-rs`, improving resource accounting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/4.0.0 https://github.com/kata-containers/kata-containers/releases/tag/4.0.0 Mon, 20 Jul 2026 16:21:48 GMT Kata Containers 4.0 rewrites the runtime in Rust, ships Dragonball VMM by default, and adds dm-verity, EROFS, virtio-mem, and VFIO cold-plug. • Introduces `runtime-rs`, a full Rust rewrite of the Kata Containers runtime, now the default runtime replacing the original Go runtime. • Adds Dragonball as a built-in VMM default, supporting virtio-net, virtio-blk, and VFIO device passthrough without requiring QEMU or Cloud Hypervisor. • Adds support for EROFS snapshotter, available through Helm configuration, with `kata-deploy` validating EROFS prerequisites before installation. • Adds dm-verity integrity-verified root filesystem support, enabled by default in deployment configurations. • Adds block-based `emptyDir` volumes ('block-plain') for improved performance and security, avoiding filesystem sharing. • Adds `virtio-mem` memory hotplug support in `runtime-rs`. • Adds VFIO device cold-plug support, including CDI-based VFIO cold-plug in single-container (non-pod-sandbox) mode. • Adds s390x VFIO-AP mediated device support for IBM Z crypto and accelerator workloads. • Adds a unified block device model (BlockModern) across QEMU, Cloud Hypervisor, and Dragonball, with improved hot-plug/unplug reliability and rollback on failure. • Adds discard and unmap support for thin-provisioned storage (requires hypervisor support). • Adds GPT/VMDK support for integrity-verified root filesystems. • Adds improved virtio-scsi support as a container root filesystem driver. • Propagates multi-queue networking configuration through all supported hypervisors (QEMU, Cloud Hypervisor, Dragonball). • Adds support for placing network devices in the host network namespace when using QEMU. • Adds improved network interface hot-plug for QEMU with enhanced SR-IOV support. • Improves static sandbox resource sizing to account for runtime overhead values, benefiting Kubernetes Pod Overhead and scheduling accuracy. • Adds GPU device support across QEMU, Cloud Hypervisor, and Dragonball hypervisors. • Expands supported hardware architectures in `runtime-rs` to x86_64, ARM (aarch64), and IBM s390x. • Updates containerd shim to version 0.11 and ttrpc to version 0.9 as part of the Rust runtime dependency refresh. Breaking changes: • The original Go runtime is deprecated and `kata-deploy` sets the RuntimeClass to `runtime-rs` by default — existing users may encounter minor differences in configuration and behavior when upgrading. • Unsafe `emptyDir` setting that allowed volumes to exceed their `sizeLimit` has been removed. • Unused VFIO configuration options were removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.32.0 https://github.com/kata-containers/kata-containers/releases/tag/3.32.0 Mon, 22 Jun 2026 10:06:27 GMT Kata Containers 3.32.0 adds Kata-monitor standalone image, Job-based deployment, TDX ACPI/guest memfd support, and erofs/iothread/nycus capabilities. • `kata-monitor` is shipped as a standalone multi-arch image starting with 3.32.0 • Add a Job-based deployment mode to `kata-deploy` (alternative to the privileged DaemonSet) • Add basic ACPI implementation for TDX boot in `dragonball` • Add implementation for KVM-managed guest memfd in `dragonball` • Support erofs snapshotter with gpt vmdk mode in `runtime-rs` • Support Independent iothreads in `runtime-rs` • Nydus standalone mode support in `runtime-rs` • Add support for monitoring disk usage via statfs to Metrics • Use `/etc/containerd/conf.d/` drop-in for containerd >= 2.2.0 Breaking changes: • `file_mem_backend` config option removed in `runtime-rs` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.31.0 https://github.com/kata-containers/kata-containers/releases/tag/3.31.0 Tue, 19 May 2026 21:41:51 GMT Kata Containers 3.31.0 adds coldplug GPU support, HTTP health probes, and genpolicy env source from metadata labels. • `runtime-rs`: add CCW network hotplug capability for QEMU VMs • `kata-deploy` now exposes HTTP health probes at `/healthz` and `/readyz` endpoints • `genpolicy` supports environment variable values sourced from `metadata.labels` • `runtime-rs` adds coldplug GPU support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.30.0 https://github.com/kata-containers/kata-containers/releases/tag/3.30.0 Sat, 02 May 2026 20:12:40 GMT runtime-rs gains vCPU thread pinning, splits irqchip via Dragonball userspace IOAPIC, and supports containerd v4 config • `runtime-rs` now includes `vCPU thread pinning support` for finer control over VM CPU allocation. • `dragonball` gains a `userspace IOAPIC` implementation to enable the `split irqchip` architecture. • `kata-deploy` adds support for `containerd config version 4`, removing compatibility gaps with newer containerd setups. Breaking changes: • `agent` has removed the `standard-oci-runtime feature`, dropping support for that runtime mode in favor of the standard OCI implementation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.29.0 https://github.com/kata-containers/kata-containers/releases/tag/3.29.0 Wed, 22 Apr 2026 19:53:36 GMT Adds VFIO cold-plug support for CLH, sector size config for block devices, and QEMU ppc64le support in runtime-rs. • `clh`: Add VFIO device cold-plug support to the Cloud Hypervisor runtime • runtime: allow specifying logical/physical sector size for block devices via configuration • runtime-rs: add QEMU support for ppc64le architecture • runtime-rs: Enhance TDX in qemu with new capabilities • agent: add `mkfs_opts` parameter to `cdh_secure_mount` function Breaking changes: • `dbg_monitor_socket` config key is renamed (change in name affects existing configs) • runtime-rs now denies configuration of unknown fields, rejecting previously silent invalid keys Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.28.0 https://github.com/kata-containers/kata-containers/releases/tag/3.28.0 Tue, 17 Mar 2026 02:47:17 GMT Adds configurable pod overhead per-shim and hotplug support for memory/block on s390x in Kata Containers v3.28.0 • Adds `per-shim configurable pod overhead` in kata-deploy to tune resource limits individually for each shim type (e.g. `shim-v2-go`). • Adds support for memory hotplug via virtio-mem on s390x architecture. • Adds support for block device hotplug on s390x architecture in the runtime-rs component. • Implements trusted ephemeral data storage in the coco subsystem. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.27.0 https://github.com/kata-containers/kata-containers/releases/tag/3.27.0 Thu, 19 Feb 2026 14:15:23 GMT kata-deploy updates strategy configurable, CRI-O device cold-plug annotations, configurable network_queues, TEE nodeSelectors, genpolicy allowlist/suppression • `update_strategy` config option in `kata-deploy` to control DaemonSet update strategy • `cri-o.device-coldplug` annotation support in shim for device hot-add without restart • `network_queues` configuration and annotation in `runtime-rs` for configurable network queue counts • TEE nodeSelectors automatically added by `kata-deploy` when NFD is detected • `--{base64/raw}-out` flags in `genpolicy` to suppress YAML output • allowlist support for multiple NVIDIA GPU resource keys in `genpolicy` vfio settings • RO and RW sysfs permissions allowed in `genpolicy` for privileged containers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.26.0 https://github.com/kata-containers/kata-containers/releases/tag/3.26.0 Thu, 29 Jan 2026 06:06:23 GMT New TDX/SNP runtimeclasses, arm64 QEMU support in runtime-rs, iommufd enforcement for confidential guest VFIO, and containerd v2.0+ -info flag • `kata-deploy` now includes `runtime-rs TDX / SNP runtimeclasses` for deploying Intel Trust Domain Extensions and AMD Secure Nested Paging workloads. • The `runtime-rs` binary adds arm64 QEMU support, enabling the Rust runtime on ARM64 hosts without relying on the legacy Go implementation. • The shim now enforces `iommufd` for confidential guest VFIO device assignment, ensuring strict IOMMU isolation for secure VMs. • Both `runtime` and `runtime-rs` add `-info` flag support to query metadata for containerd v2.0+ compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.25.0 https://github.com/kata-containers/kata-containers/releases/tag/3.25.0 Mon, 19 Jan 2026 12:31:15 GMT Kata Containers 3.25.0 adds VFIO-AP support on s390x, measured rootfs build support, and a kata-remote Helm runtime class. • `runtime-rs` enables VFIO-AP hardware pass-through (hotplug only) for `s390x` platforms • `kata-deploy` adds post-install verification for the Helm chart via the `post-install` hook • `runtime-rs` supports measured rootfs builds through dedicated Makefile targets and configuration keys • Helm release provides a `kata-remote` runtime class definition Breaking changes: • `runk` is officially deprecated in 3.25.0 and will be removed in 3.26.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.24.0 https://github.com/kata-containers/kata-containers/releases/tag/3.24.0 Fri, 12 Dec 2025 18:45:20 GMT Kata Containers 3.24.0 adds device cold plug support, virtio-blk iothreads, IOMMUFD QMP commands, and dynamic queue config via Pod annotations • Adds IOMMUFD object creation capabilities for QEMU QMP commands within the runtime to improve GPU device passthrough management. • Introduces an iothreads framework for virtio-blk devices, allowing independent I/O processing threads for storage performance. • Updates the `genpolicy` tool to support both `runtime-rs` and `runtime-go` runtimes through a unified `cpath` compatibility layer. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.23.0 https://github.com/kata-containers/kata-containers/releases/tag/3.23.0 Tue, 18 Nov 2025 00:15:41 GMT Kata Containers 3.23.0 adds kata-ctl factory subcommands for VM templates, structured shim configs, and TEE NodeFeatureRules deployment. • Adds `kata-ctl vm-template` factory subcommands for VM template management • Introduces a new structured configuration format for shims in the kata-deploy helm chart to replace the legacy `env.*` fields • Kata-deploy now automatically deploys NodeFeatureRules for Trusted Execution Environments (TEEs) • Enables CLH VMM process to run in non-root mode within the runtime-rs subsystem Breaking changes: • The `env.shims`, `env.defaultShim`, `env.allowedHypervisorAnnotations`, `env.snapshotterHandlerMapping`, `env.pullTypeMapping`, `env.agentHttpsProxy`, `env.agentNoProxy`, `env._experimentalSetupSnapshotter`, `env._experimentalForceGuestPull` (and their per-arch variants like `*_x86_64`), and `env.debug` fields are deprecated in the legacy format and will be removed in 2 releases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.22.0 https://github.com/kata-containers/kata-containers/releases/tag/3.22.0 Tue, 28 Oct 2025 18:07:35 GMT Adds experimental_force_guest_pull support, new TEE configs for runtime-rs (TDX QGS port=0, Dragonball seccomp), and nydus/erofs snapper selection in kata-deploy • `runtime-rs: add seccomp support for dragonball` enables Seccomp filtering within the Dragonball VMM. • `runtime: config: allow TDX QGS port=0` allows setting `qemu.qgs_port` to 0 in the configuration. • `kata-deploy: Allow users to set experimental_force_guest_pull` adds a helm chart option to force guest-side image pulling. • kata-deploy: Add the ability to set up different snapshotters (nydus & erofs) allows configuring the container runtime snapper in the deployment manifest. • `runtime-go | kata-deploy: Add Arm CCA confidential Guest Support` enables support for Arm Confidential Computing Architecture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.21.0 https://github.com/kata-containers/kata-containers/releases/tag/3.21.0 Tue, 23 Sep 2025 20:18:00 GMT Kata Containers v3.21.0 adds initdata support for IBM SEL and Confidential Guests, new IO limits, and zstd packaging. • Adds `initdata` annotation support for `remote configs` in the Go runtime (`runtime`) • Adds `initdata` annotation support for `NonProtection scenarios` in the Rust runtime (`runtime-rs)` • Adds `CoCo annotations` support for `ConfidentialGuests` in `qemu` runtime • Adds `zst` suffix handling to `kata-manager` for tarball unpacking • Adds `xz` and `zst` suffix support for the `kata tarball` in `kata-deploy local-build` • Adds `block devices io limit` support in `runtime-rs` • Adds `sandbox's shm volume` support in `runtime-rs` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.20.0 https://github.com/kata-containers/kata-containers/releases/tag/3.20.0 Wed, 20 Aug 2025 19:36:47 GMT Kata Containers 3.20 adds seccomp support for Cloud Hypervisor and Firecracker runtimes, plus guest NVIDIA GPU components. • `agent-ctl` gains the `--vm` flag to boot a pod VM directly for testing purposes • `runtime-rs` adds seccomp syscall filtering for the Cloud Hypervisor runtime • `runtime-rs` adds seccomp syscall filtering for the Firecracker runtime • Guest-side NVIDIA GPU components are included for AMD64 workloads • `kata-types` removes the default setting of `guest_hook_path` from its configuration Breaking changes: • The annotation for passing through initdata confidential containers feature changed from `io.katacontainers.config.runtime.cc_init_data` to `io.katacontainers.config.hypervisor.cc_init_data` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.19.0 https://github.com/kata-containers/kata-containers/releases/tag/3.19.0 Sun, 20 Jul 2025 20:32:58 GMT Kata Containers 3.19 adds runtime-rs blockfile rootfs, memory/vCPU hotplug for Cloud Hypervisor, vfio coldplug, and GPU annotations • Adds `blockfile` based rootfs support in `runtime-rs` • Adds VFIO support with coldplug for Cloud Hypervisor in `runtime-rs` • Adds GPU annotations for remote hypervisor in `runtime-rs` • Adds `initdata` annotation support for remote hypervisor in `runtime-rs` Breaking changes: • The default block device driver is changed from `virtio-scsi` to `virtio-blk-*` in `runtime-rs` • The `Sev` feature is deprecated and removed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.18.0 https://github.com/kata-containers/kata-containers/releases/tag/3.18.0 Thu, 19 Jun 2025 11:28:02 GMT Kata Containers 3.18.0 adds TDX support in runtime-rs, shared_fs=none for CoCo, and forces guest image pulls. • Adds `runtime: add option to force guest pull` to allow pulling images inside the guest environment • Supports `shared_fs = "none"` for CoCo workloads in `runtime-rs` • Adds `memory prealloc support` for `qemu/ch` hypervisors in `runtime-rs` • Supports pulling images in guest using Kata Volumes for CoCo in `runtime-rs` Breaking changes: • The `hotplug_vfio_on_root_bus` config key is removed from `config.toml` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.17.0 https://github.com/kata-containers/kata-containers/releases/tag/3.17.0 Wed, 21 May 2025 13:29:19 GMT Kata Containers 3.17 adds VFIO-AP support, hot-plug block devices in qemu-rs, and OCI Helm chart publishing • Adds `runtime/config` VFIO configuration support for IBM SEL via `VFIO config` entries. • Enables hot-plug block device support in the Rust runtime (qemu-rs) using QMP commands. • Publishes helm charts to OCI registries for Kata Containers releases. • Adds RISC-V 64-bit architecture support for the `kata-agent`. • Adds EROFS Snapshotter Support to Kata containers for faster image processing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.16.0 https://github.com/kata-containers/kata-containers/releases/tag/3.16.0 Fri, 25 Apr 2025 10:11:52 GMT Kata Containers 3.16 adds TDX QGS via Unix sockets, initdata for bare-metal/QEMU, and BUILD_TYPE=debug for genpolicy • `BUILD_TYPE=debug` in genpolicy to build debug policy binaries • TDX QGS support via Unix Domain Sockets in the runtime • `initdata` support for bare-metal and QEMU hypervisors • Default `INSTALLATION_PREFIX` validation in kata-deploy • Support for building the go, rust, or both runtimes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.15.0 https://github.com/kata-containers/kata-containers/releases/tag/3.15.0 Thu, 20 Mar 2025 09:29:03 GMT kata-containers 3.15.0 adds guest swap support, IOMMUFD GPU enhancements, and genpolicy sysctl/Route rules • Adds `AddGuestSwap` configuration option to `confidential_guest.toml.in` for enabling guest-side swap support • Adds `UpdateRoutesRequest` rules to `genpolicy-settings` allowing dynamic route updates inside the container policy • Adds `UpdateInterfaceRequest` rules to `genpolicy-settings` allowing dynamic interface updates inside the container policy • Enables IOMMUFD GPU support in QEMU via experimental updates and module signing • Adds `genpolicy` support for reading `sysctls` from PodSpec and environment defaults • Allows `SNP_IDBlock` configuration in runtime config to make Secure Nested Paging ID blocks adjustable • Enables Dragonball sandbox runtime exclusively on x86_64 and aarch64 architectures • Adds guest network route updates via new route flags support in the kernel agent Breaking changes: • Dragonball sandbox runtime is now restricted to x86_64 and aarch64 architectures only; other platforms will not build or run with it • s390x conditional compilation has been removed from runtime-rs, changing build targets for that architecture Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.14.0 https://github.com/kata-containers/kata-containers/releases/tag/3.14.0 Mon, 17 Feb 2025 21:42:24 GMT Kata Containers 3.14 adds sandbox API support, reclaim_guest_freed_memory config for QEMU/CHV, and VFIO-AP coldplug for s390x • Adds the sandbox API implementation allowing external management of Kata sandboxes • Adds `reclaim_guest_freed_memory` configuration option for both qemu and cloud-hypervisor hypervisors to allow host reclamation of freed guest memory • Enables VFIO-AP coldplug support for s390x architectures Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.13.0 https://github.com/kata-containers/kata-containers/releases/tag/3.13.0 Thu, 16 Jan 2025 16:40:25 GMT Adds direct-volume auto-creation and mem-agent for improved resource isolation • `kata-ctl direct-volume` now automatically creates the `KATA_DIRECT_VOLUME_ROOT_PATH` directory if it does not exist • Adds `mem-agent` support to kata-containers to enable memory-specific agent operations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.12.0 https://github.com/kata-containers/kata-containers/releases/tag/3.12.0 Wed, 18 Dec 2024 18:48:41 GMT Kata Containers 3.12.0 adds GPU builder images, kata-deploy multi-install support and containerd v3 config • `qemu` runtime upgrades to QEMU 9.1.2 • `kata-deploy` gains `multi-install` support for multiple Kata installations on one host • `kata-deploy` supports containerd configuration version 3 via drop-in files Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.11.0 https://github.com/kata-containers/kata-containers/releases/tag/3.11.0 Wed, 20 Nov 2024 09:34:04 GMT Adds CDI support in kata-agent and basic boilerplate for remote hypervisor • `kata-agent` gains `CDI` support (pull #9584) • `runtime-rs` adds basic boilerplate for remote hypervisor (pull #10225) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.10.0 https://github.com/kata-containers/kata-containers/releases/tag/3.10.0 Tue, 22 Oct 2024 14:53:31 GMT Kata Containers 3.10 adds CDI device support, VFIO-DAN networking, virtio-scsi hotplugging, and confidential sealed secrets as volumes. • `tools.kata-webhook` now allows specifying the runtime class via a configMap • Introduces Container Device Interface (CDI) support in `runtime-rs` • Adds Dynamic Attached Network (DAN) support for VFIO network devices in the Go `kata-runtime` • Adds network device hotplugging capability to `qemu-rs` • Supports Confidential Sealed Secrets as a volume mount Breaking changes: • Drop of ACRN platform support by the `acrn` hypervisor component Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.9.0 https://github.com/kata-containers/kata-containers/releases/tag/3.9.0 Thu, 19 Sep 2024 14:55:15 GMT Kata Containers 3.9.0 adds CDH_API_TIMEOUT config, TDX mrconfigid settings, and image-rs xattr checks. • `agent/config` introduces the `CDH_API_TIMEOUT` configuration key to control the Confidential Computing API timeout • `runtime`: Add support for setting `mrconfigid`, `mrowner`, and `mrownerconfig` in TDX configurations • `image-rs` (agent) now checks extended attributes (xattrs) during image unpacking for stricter security • `virtcontainers` allows specifying the `nydus-overlayfs` binary path via a configuration option Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.8.0 https://github.com/kata-containers/kata-containers/releases/tag/3.8.0 Wed, 21 Aug 2024 16:44:43 GMT Adds kata-deploy Helm Chart, genpolicy support for cron jobs and envFrom, runtime-rs memory hotplugging, and trusted image storage • `genpolicy` adds `--version` flag. • `genpolicy` gains support for the `envFrom` container spec field. • `genpolicy` gains support for Kubernetes `CronJob` resources. • `genpolicy` validates each exec command line argument (`container.exec_commands`). • `initdata` annotation can now be set in the hypervisor config. • `kata-deploy` provides a new Helm Chart for deployment. • `runtime-rs` adds `wait_vm` support for hypervisors. • Trusted image storage capability is introduced. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.7.0 https://github.com/kata-containers/kata-containers/releases/tag/3.7.0 Wed, 17 Jul 2024 21:19:01 GMT Kata Containers 3.7 adds Firecracker backend, CNCF Confidential Container Runtime policy support, and SharedFS for remote hypervisors • Adds `firecracker` as a new hypervisor backend option in the `runtime-rs` agent • Enables pulling encrypted container images via standard OCI registry calls without external credential helpers • Introduces support for the CNCF Confidential Container Runtime (`coco`) policy framework in the Go `kata-runtime` via the `DAN` (Device Access Network) implementation • Implements `SharedFS` initialization for remote hypervisor configurations to allow shared volume mounts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.6.0 https://github.com/kata-containers/kata-containers/releases/tag/3.6.0 Mon, 17 Jun 2024 20:12:53 GMT Adds GPU rootfs build targets, runtime QMP support for QEMU, and genpolicy `runtimeClassName` filter. • Adds build targets for GPU rootfs initrd/image via `gpu: Add build targets for GPU rootfs initrd/image` • Adds QMP support for QEMU in runtime-rs (runtime-rs: add QMP support for Qemu(part I)) • Adds genpolicy ability to filter by `RuntimeClassName` (new `runtimeClassName` filter in genpolicy) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.5.0 https://github.com/kata-containers/kata-containers/releases/tag/3.5.0 Wed, 15 May 2024 10:27:33 GMT Kata Containers 3.5.0 adds NVIDIA GPU support for SNP/TDX, runtimeClasses, IOMMU in QEMU, and regorus policy engine • Adds `nvidia-gpu-snp.json` and `nvidia-gpu-tdx.json` configuration files to the default distribution for confidential computing with NVIDIA GPUs. • Integrates `regorus` as the new policy engine in `kata-agent`, replacing OPA. • Adds IOMMU support to QEMU VMs in `runtime-rs` via the QEMU command line. • Deploys default `RuntimeClass` resources for NVIDIA GPU workloads via `kata-deploy`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.4.0 https://github.com/kata-containers/kata-containers/releases/tag/3.4.0 Fri, 19 Apr 2024 16:12:32 GMT Kata Containers 3.4.0 adds runtime-rs QEMU support for s390x, Dragonball MTRR regs, and cgroups-v2 enablement via systemd. • `qemu` on `s390x` is now enabled in `runtime-rs`. Previously this architecture was not supported by the Rust runtime with QEMU. • `Dragonballl: introduce MTRR regs support` adds Memory Type Range Register handling to the Dragonball hypervisor component within the Kata agent/runtime stack. • kata-agent supports `cgroups-v2` via `systemd.unified_cgroup_hierarchy` configuration, allowing modern container cgroup management inside the guest VM. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.3.0 https://github.com/kata-containers/kata-containers/releases/tag/3.3.0 Wed, 20 Mar 2024 09:52:18 GMT Kata Containers 3.3.0 adds StratoVirt support, vhost-net for Dragonball, and hypervisor annotation control in kata-deploy • Add `StratoVirt` as a supported lightweight VMM for Kata containers • Add `vhost-net` device support in the Dragonball sandbox runtime • Allow users to set hypervisor annotations via the `ALLOWED_HYPERVISOR_ANNOTATIONS` environment variable in `kata-deploy` • Include security details in the output of `kata-runtime` and `kata-ctl` commands • Add default configuration file for Cloud Hypervisor in `runtime-rs` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.2.0 https://github.com/kata-containers/kata-containers/releases/tag/3.2.0 Mon, 23 Oct 2023 17:49:53 GMT Kata Containers 3.2.0 adds CRI-O compatibility, TDX support for hypervisor annotations, and VFIO configuration options. • Adds `hot_plug_vfio` config entry to Cloud Hypervisor configuration to enable VFIO device binding. • Adds `--xattr` flag to virtiofsd invocations instead of `-o xattr`. • Allows specifying `virtio_fs_extra_args` annotation on containers to pass extra arguments to virtiofsd. • Adds support for CRI-O as a compatible container runtime in this release. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.1.0 https://github.com/kata-containers/kata-containers/releases/tag/3.1.0 Thu, 23 Mar 2023 16:45:00 GMT Kata Containers 3.1.0 adds AMD SEV-SNP support, hugepages, direct-volume ops via kata-ctl, and Darwin skeletons for macOS dev. • `clh: Add hotplug support for network devices` • `virtcontainers: introduce hypervisor_darwin` with Darwin skeletons for Linux subsystems to enable macOS development. Breaking changes: • `Drop QEMU log file support` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.1.0-alpha1 https://github.com/kata-containers/kata-containers/releases/tag/3.1.0-alpha1 Mon, 19 Dec 2022 15:11:25 GMT Kata Containers 3.1.0-alpha1 adds nydus snapshotter support, SELinux guest agent support, and kata-ctl host checks. • Add `nydus` to release artifacts for use as an image snapshotter • Add `kata-ctl` CLI tool with architecture and version check capabilities (`--check-version-only`, arch checks) • Add SELinux support in the `agent` for guest containers (requires OSBuilder images and kernel configs) • Add Dragonball sandbox runtime support via new components Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/3.0.0 https://github.com/kata-containers/kata-containers/releases/tag/3.0.0 Sun, 09 Oct 2022 08:59:51 GMT Kata Containers 3.0.0 adds Rust-based runtime, dragonball sandboxing, and GPU VFIO support • `support host cgroup v2` for the new Rust-based runtime implementation. • `drop-in config files` are now supported via the `tomy::Value tree merging` in `runtime-rs`. • `GPU VFIO passthrough support` enabled in the runtime. • `FSGroup` support added for the guest agent. • `static resource management` functionality available via config keys in `runtime-rs`. • `inline-virtio-fs` added as a shared_fs type in configuration. • `disable_guest_seccomp` functionality supported in `runtime-rs`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.5.1 https://github.com/kata-containers/kata-containers/releases/tag/2.5.1 Fri, 02 Sep 2022 01:17:53 GMT kata-containers 2.5.1 adds hugetlb cgroup support via kernel CONFIG_CGROUP_HUGETLB and updates Cloud-Hypervisor to v26.0. • Adds `CONFIG_CGROUP_HUGETLB` kernel option to the base image to enable hugetlb cgroups • Upgrades cloud-hypervisor runtime to version 26.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.5.0 https://github.com/kata-containers/kata-containers/releases/tag/2.5.0 Wed, 17 Aug 2022 02:53:01 GMT kata-containers 2.5.0 adds `kata-runtime iptables` subcommand, containerd shimv2 logging support, and direct-assigned volumes • `kata-runtime iptables` subcommand to get/set iptables rules in the guest via agent-ctl • Containerd shimv2 logging plugin support (`shim: support shim v2 logging plugin`) • Direct-assigned volume support (`direct-assigned volumes`) • Core scheduling support with containerd (`core scheduling with containerd`) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.5.0-alpha2 https://github.com/kata-containers/kata-containers/releases/tag/2.5.0-alpha2 Wed, 08 Jun 2022 16:37:53 GMT Kata Containers 2.5.0-alpha2 adds core-scheduling support, iptables get/set API, runk `list` subcommand, and Rust virtiofsd for non-x86_64. • `shim` adds support for core scheduling • `agent-ctl` introduces handle for iptables get/set • `runk` supports the `list` sub-command Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.4.1 https://github.com/kata-containers/kata-containers/releases/tag/2.4.1 Wed, 04 May 2022 17:15:19 GMT Kata Containers 2.4.1 adds fsGroup support for direct-assigned volumes and bumps hypervisors • Adds `fsGroup` support for directly assigned volumes to allow POSIX group ownership on mount Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.4.0 https://github.com/kata-containers/kata-containers/releases/tag/2.4.0 Fri, 01 Apr 2022 12:12:07 GMT Kata Containers 2.4.0 adds direct volume assignment, SGX/TDX support, static_sandbox_resource_mgmt flag, and agent CLI config option • Add `static_sandbox_resource_mgmt` flag to enable static CPU management for better initial VM sizing when sandbox resource requirements are specified (requires containerd >= 1.6, Kubernetes >= 1.23) • Add new default configuration parameter `announce_submounts` to virtio-fs settings in the configuration file to prevent inode number collisions • Add support for Intel® Software Guard Extensions (Intel® SGX) as part of the default kernel with support added to Cloud Hypervisor and QEMU drivers • Add initial Intel® Trust Domain Extensions (Intel® TDX) support for use with Cloud Hypervisor and QEMU • Add direct assigned volume support enabling volume managers like CSI to delegate block storage volume management to the kata agent • Make VMM SELinux configurable via a new configuration option • Add config file option to the kata-agent CLI for passing configuration directly via command line arguments • Update `kata-monitor` binary to listen on localhost by default and attach CRI metadata to metrics when available Breaking changes: • The netmon module is no longer supported and has been dropped from the runtime Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.3.3 https://github.com/kata-containers/kata-containers/releases/tag/2.3.3 Tue, 01 Mar 2022 18:40:45 GMT Kata Containers 2.3.3 adds configurable SELinux for the VMM process and CRI-O shim event logging. • Enables shim-v2 to log container lifecycle events for CRI-O compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.4.0-alpha2 https://github.com/kata-containers/kata-containers/releases/tag/2.4.0-alpha2 Tue, 01 Feb 2022 17:01:00 GMT Merges govmm into kata-containers, adds SGX support to QEMU, and enables initrd for Cloud Hypervisor • Enables initrd boot capability for virtual machines using the Cloud Hypervisor backend. • Introduces static sandbox resource management in the runtime to control resource allocation. Breaking changes: • The `govmm` package is no longer a separate dependency; it is merged directly into the `kata-containers` repository. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers https://github.com/kata-containers/kata-containers/releases/tag/2.3.0 https://github.com/kata-containers/kata-containers/releases/tag/2.3.0 Mon, 29 Nov 2021 21:31:25 GMT Kata Containers 2.3.0 adds Seccomp support to the agent, VFIO handling via `vfio_mode` annotation/config, and swap device support. • Adds Seccomp filtering to the kata-agent (enabled by default in 2.3) • Introduces the `vfio_mode` config variable and annotation to control VFIO device handling for DPDK workloads • Adds support for swap devices within the guest OS Breaking changes: • Built configuration files moved from `./src/runtime/cli/config/` to `./src/runtime/config/` • Static builds of the agent are broken unless built with `SECCOMP=no` (`cd ./src/agent && make SECCOMP=no`) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/kata-containers