News for hackers. Stuff that matters.

A comment on Kata Containers – The speed of containers, the security of VMs.

Re:Kata Containers – The speed of containers, the security o... by acobster on Thursday December 07, 2017 @10:55AM (#15871123)
> It is designed to be architecture agnostic, run on multiple hypervisors and be compatible with the OCI specification for Docker containers

In what sense is this "OCI compatible"? Do they implement the runtime, image format spec, or both? My understanding of containerization and OCI runtimes is that they're fundamentally different from hardware-level virtualization.

[ Parent | on HN ]
Re:Kata Containers – The speed of containers, the security o... by bergwolf on Thursday December 07, 2017 @07:58PM (#15875844)
Both. The hardware virtualization related settings are configured out side of OCI spec but the runtime accept OCI spec and plays with it accordingly. As for image format, Kata runs unchanged docker images.
[ Parent | on HN ]