Re:Kata Containers: The speed of containers, the security of...
by nunez on Wednesday October 04, 2023 @10:48AM
(#37765973)
dockerd should be the only process running if no other containers are running.
You can also have containers use host-mode networking (share's the host's NICs instead of using bridged networking via virtual NICs) if local IP address pollution is a concern.
Kata is just a container runtime. Depending on how they implement their network and storage drivers, functionality should be mostly the same.
You can also have containers use host-mode networking (share's the host's NICs instead of using bridged networking via virtual NICs) if local IP address pollution is a concern.
Kata is just a container runtime. Depending on how they implement their network and storage drivers, functionality should be mostly the same.