Yohei Ueda

Support Peer Pod VMs

9

This PR contains necessary changes in Kata shim and agent to support Peer Pod VMs. Peer Pod VMs are sandbox VMs that are not managed by local hypervisor, but by...

CCv0: containerd for CCv0 does not pull a "pause" conatiner image into sandbox

3

When I used the CCv0 kata shim with the custom containerd at https://github.com/confidential-containers/containerd/tree/CC-main, it successfully pulls container images of a pod, but does not pull a "pause" container image. It...

Support read-only root filesystem

3

This patch adds the support of the --read-only option of docker run. All mount points on root filesystem needs to be created in proxy in advance. This commit requires #11...

Enable IPv6 support in VM when IPv6 address is assigned

4

When we enable IPv6 support in Docker, a runq container fails to start. https://docs.docker.com/config/daemon/ipv6/ ``` # docker run --runtime runq --rm busybox ip addr show eth0 [init(1) 7291815] permission denied...

Calico unconditionally drops VXLAN packets that are not related to Calico

1

I set up a Kubernetes cluster using Calico with the following configuration. * VXLAN mode: Always * VXLAN port: 4789 (default) * VXLAN ID (VNI): 4096 (default) I also configured...