Samuel Ortiz

I think there are 2 aspects to cover here: 1. How do we expose a TPM into the guest 2. Which backend(s) do we want to support For 1, I...

> We could expose the virtio-tpm as a socket so that you can plug whatever implementation you want in: simulator or a version that makes use of the hardware. vhost-user-tpm...

Windows support also potentially includes bootloader support, where the hypothetical windows kernel virtio TPM driver would not be present.

> There are two new features introduced recently in the VFIO API. > > * The first one is about how a vendor driver can implement the migration support for...

@jovizhangwei With 2.2.4 we were not enabling vhost by default. With 3.0 we assume vhost is available. I just opened a virtcontainers issue for that: https://github.com/containers/virtcontainers/issues/385 and will get a...

@jovizhangwei FWIW, vhost-net provides significant networking performance improvements with KVM. Is there any reason why it is not enabled with your kernel ?

_From @mcastelino on April 27, 2017 17:56_ @devimc We need to add this to our release notes.

_From @devimc on April 27, 2017 18:49_ great! thanks @mcastelino and nice description

@dato Thanks for the report. The `--read-only` part will be fixed with a [vircontainer PR](https://github.com/containers/virtcontainers/pull/381) and we're looking at the uid/gid issue as well.

@miaoyq > BTW, will cc or Kate-containers support k8s with docker? cc or kata will not work with the docker CRI shim ([dockershim](https://github.com/kubernetes/kubernetes/tree/master/pkg/kubelet/dockershim)) that's currently used by kubelet as its...