Fabiano Fidêncio
Fabiano Fidêncio
> Is there a complete demo of how to build a kata container that shielded by Intel TDX? It depends is the best answer I can give you. Do you...
> @fidencio Hi, it's on Ubuntu 22.04 OS in the kernel version of 6.5.0-28-generic. But my TDX version is unknown. For Ubuntu, I'd recommend you move to 24.04 and then...
Also, please, subscribe to https://github.com/kata-containers/kata-containers/issues/9590, as that is of your interest as well.
@wainersm, I am not big fond of this approach, to be honest. While I understand that we can pull the image inside the guest with non-tees as well, we usually...
> @littlejawa does it need an annotation similar to `io.containerd.cri.runtime-handler` but for cri-o? I couldn't find that information on the docs. That's not needed for CRI-O.
> I'm not sure I understood your point. > > Are you talking about this PR (i.e. kata-deploy configure CRI-O for guest-pull) or the way we are testing on non-TEE...
> Starting by the fact that snapshotter is a containerd concept, afaik. So using `SNAPSHOTTER_HANDLER_MAPPING` with cri-o sounds wrong. Suppose we rename it; is it okay that breakage? I think...
> Sorry, I changed my mind on the cache implementation _again_ 😢, so have added a new commit to this PR: > > ``` > ci: cache: Update agent cache...
@wedsonaf, @jiangliu, can you take a look at this? I think we need this one also backported to the CCv0 branch.