适用的场景

  • 对安全要求比较高的，比如金融服务
  • 在、离线混部场景，对资源隔离和故障隔离要求比较高
  • 对系统有定制化需求的，比如内核参数定制
  • 可以支持热迁移，专有云场景下，对某些有状态应用有好处

参考资料

kata官方

https://github.com/orgs/kata-containers/repositories

https://github.com/kata-containers/documentation

https://github.com/kata-containers/kata-containers/tree/main/docs

https://github.com/kata-containers/kata-containers/tree/main/docs/how-to

https://github.com/kata-containers/documentation/blob/master/design/architecture.md

https://github.com/kata-containers/kata-containers/blob/main/docs/design/architecture.md

https://github.com/kata-containers/kata-containers/tree/main/docs/design

https://github.com/kata-containers/kata-containers/releases

http://liubin.org/kata-dev-book/

https://mp.weixin.qq.com/s?__biz=MzUzOTk2OTQzOA==&mid=2247483874&idx=1&sn=cdc118f8c76a6bed6a6bd15153f5cb10&chksm=fac11313cdb69a055a2a200883b348a30f4d80f219b2f33a628efeccbfd6fd54efc7f7706f93&scene=21

https://mp.weixin.qq.com/s?__biz=MzUzOTk2OTQzOA==&mid=2247483883&idx=1&sn=23c9ce9d31821a13bdeb2e73dc355302&scene=21

https://mp.weixin.qq.com/s?__biz=MzUzOTk2OTQzOA==&mid=2247483919&idx=1&sn=0448ee1346cde7e9b51b3f2b9b339457&scene=21

https://www.sofastack.tech/blog/kata-container-2.0-road-to-attack/

代码分析

https://blog.csdn.net/zhonglinzhang/article/details/99458561

https://openeuler.org/zh/blog/gaohuatao/2021-04-09-isulad-shimv1-shimv2-diff.html

network

https://www.yuque.com/stardust-zhy/kernel/pggg77

ideas

  • 用tc redirect连接veth和tap
  • 使用virtio-mem做内存弹性
  • 使用ttrpc进一步降低内存开销