krata
krata copied to clipboard
krata is an isolation engine built for securing workloads
It would be nice to be able to kill a child process in a guest now that we have visibility into the guest process table via IDM.
kratad is currently secured using Unix socket ACLs. We need to implement support for mTLS to allow kratad to be secured over the network, so that a cluster environment can...
Where possible, it makes sense to allow krata to utilize the standard image caches to populate the krata cache from Docker or Podman. This would make it easier to utilize...
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.5 to 4.1.6. Release notes Sourced from actions/checkout's releases. v4.1.6 What's Changed Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 Update for 4.1.6 release...
## 🤖 New release * `krata-oci`: 0.0.10 -> 0.0.11 (✓ API compatible changes) * `krata`: 0.0.10 -> 0.0.11 (⚠️ API breaking changes) * `krata-guest`: 0.0.10 -> 0.0.11 (✓ API compatible...
Bumps [MarcoIeni/release-plz-action](https://github.com/marcoieni/release-plz-action) from 0.5.58 to 0.5.59. Release notes Sourced from MarcoIeni/release-plz-action's releases. v0.5.59 What's Changed chore: update [email protected] by @MarcoIeni in MarcoIeni/release-plz-action#142 Update to release-plz-v0.3.69 by @MarcoIeni in MarcoIeni/release-plz-action#143 Full...
Bumps [prost-build](https://github.com/tokio-rs/prost) from 0.12.4 to 0.12.6. Commits d42c85e chore: fix prost release script (#1066) d43f7e0 chore: Release version 0.12.6 (#1065) 4b11315 fix(prost-build): re-export error_message_protoc_not_found, `protoc_from_en... 26405ab fix: Duplicate README to...
## 🤖 New release * `krata-oci`: 0.0.10 -> 0.0.11 (✓ API compatible changes) * `krata`: 0.0.10 -> 0.0.11 (⚠️ API breaking changes) * `krata-guest`: 0.0.10 -> 0.0.11 (✓ API compatible...
## 🤖 New release * `krata-oci`: 0.0.17 -> 0.0.18 * `krata`: 0.0.17 -> 0.0.18 * `krata-zone`: 0.0.17 -> 0.0.18 * `krata-xenstore`: 0.0.17 -> 0.0.18 * `krata-runtime`: 0.0.17 -> 0.0.18 *...
Workload I/O should always happen over IDM messaging instead of `/dev/console`, which should only be used for debugging.