github kata-containers/kata-containers test-test-3.4.0
Kata Containers test-test-3.4.0

latest releases: 3.6.0, 3.6.0-alpha-test, 3.5.0...
4 months ago

What's Changed

  • metrics: Add parallel udp iperf3 benchmark by @GabyCT in #8278
  • runtime-rs: fix a typo in device manager by @ZizhengBian in #8294
  • AArch64: runtime: use pcie root port to do pci/pcie device hotplug by @jongwu in #7647
  • dragonball: add metrics support for balloon device by @lisongqian in #7697
  • kata-manager: Add clh config to containerd config file by @amshinde in #8281
  • gha: add dependencies for spell checker by @cmaf in #8317
  • runtime-rs: Add default configuration file for cloud-hypervisor by @amshinde in #8250
  • tests/git-helper: cancel any previous rebase left halfway by @wainersm in #8322
  • agent: use open_tree()/move_mount() to set up bind mounts between containers directly. by @h56983577 in #8033
  • dragonball: add metrics support for legacy device by @lisongqian in #7695
  • kata-runtime/kata-ctl: Add security details to output by @jodh-intel in #8314
  • dragonball: add tracing feature for dragonball by @lisongqian in #7831
  • utils: kata manager: Fix version checks by @jodh-intel in #8323
  • Enable fio checkmetrics by @dborquez in #8202
  • network: Fix network attach for ipvlan and macvlan by @amshinde in #8334
  • agent: Skip flaky create_tmpfs on s390x by @BbolroC in #8289
  • runtime-rs: Log system enhancement by @TimePrinciple in #8311
  • docs: Fix broken links by @cmaf in #8255
  • cargo: Agent cargo.lock updated by @amshinde in #8351
  • release: Fully migrate from hub to gh by @gkurz in #8308
  • gha: Add workflow to close stale PRs by @fidencio in #8348
  • kata-manager: Fix deployment of containerd on architectures other than amd64. by @brianwang12 in #7057
  • Docs: Fix Dragonball link by @sazzy4o in #8285
  • gha: stale: Fix typo and allow manually triggering it by @fidencio in #8368
  • kata-manager: Accept only "lts" or "active" as containerd versions by @fidencio in #8365
  • runtime-rs: update device pci info for vfio and virtio-blk devices by @amshinde in #8284
  • Updating containerd to a GogoProtobuf free version by @beraldoleal in #8061
  • tests: fixes permission denied when running test by @beraldoleal in #8217
  • runtime-rs: ch: Simplify VSOCK error handling by @jodh-intel in #8386
  • agent: Restrict device access at upper node of container's cgroup by @justxuewei in #7531
  • runtime-rs: Update status for pause and resume by @cmaf in #8023
  • network: Fix network hotplug for ipvlan and macvlan endpoints for qemu and add tests by @amshinde in #8367
  • runtime: Fix TestCheckHostIsVMContainerCapable unstablity issue by @justxuewei in #8389
  • Upgrade to Cloud Hypervisor v36.0 by @likebreath in #8379
  • gha: Fix regex used to get kubectl version from the k3s version by @fidencio in #8411
  • kata-deploy: Allow users to set hypervisor annotations by @fidencio in #8404
  • agent: update AGENT_THREADS metrics value by @gaohuatao-1 in #8370
  • runtime-rs: fix a typo in shm by @studychao in #8169
  • kata-manager: Add support for Docker CLI installation by @fidencio in #8376
  • Update release process documentation by @gkurz in #8309
  • utils: kata-manager: Ensure only one download URL by @jodh-intel in #8374
  • docs: add agent policy documentation by @danmihai1 in #8406
  • dragonball: Introduce vhost-net device by @justxuewei in #7675
  • runtime-rs: ch: Fix TDX by @jodh-intel in #8419
  • metrics: Fix function that completely stops kata containers before running a test by @dborquez in #8338
  • utils: kata-manager: Add option to list versions by @jodh-intel in #8383
  • ci: Re-add tracing tests and move docker/nerdctl to the basic-ci-amd64.yaml file by @fidencio in #8174
  • gha: Remove docker and nerdctl tests from ci.yaml by @justxuewei in #8432
  • runtime: Improve vCPU allocation for the VMMs by @fidencio in #7623
  • kernel: Fix vsock packets drop when the driver initializes by @alex-matei in #8431
  • dragonball: Remove vhost-net dependency on virtio-net by @justxuewei in #8426
  • tests|gha: add nightly tests for s390x by @BbolroC in #7987
  • gha: Keep kata tarballs for 15 days by @ldoktor in #8460
  • tests: Enable stressng scalability test by @GabyCT in #8421
  • metrics: Add iperf udp information to README by @GabyCT in #8453
  • tests|gha: add containerd and k8s tests for s390x by @BbolroC in #7931
  • StratoVirt: add support for a lightweight VMM StratoVirt in Kata by @WenyuanLau in #7796
  • Fixes make check errors by @beraldoleal in #8345
  • runitme-rs/bugfix: kata pod with multi-containers sharing one direct volume by @Apokleos in #8332
  • kata-deploy: Set a default value for ALLOWED_HYPERVISOR_ANNOTATIONS by @BbolroC in #8478
  • dragonball: Uniform the spelling of Virtio by @justxuewei in #8465
  • Dragonball: add PCI bus and PCI interrupt support in mptable Spec by @studychao in #8451
  • CC: Remote hypervisor merge to main by @stevenhorsman in #7046
  • utils: kata-manager: Allow installing kata from a given tarball by @fidencio in #8439
  • runtime: Introduce KataVirtualVolume structure into go runtime by @ChengyuZhu6 in #8471
  • runtime-rs: bringing virtio-fs device in device-manager by @Apokleos in #7932
  • dragonball: add vhost-user connection management logic by @adamqqqplay in #8450
  • tests: k8s: Allow passing rust-runtime env var to kata-deploy by @fidencio in #8476
  • kernel: backport erofs patch to 6.1.52 guest kernel by @ChengyuZhu6 in #8481
  • metrics: Fix result finding in tensorflow benchmark by @GabyCT in #8467
  • runtime-rs on arm64: Fixes unable to Boot Container Image using Cloud… by @brianwang12 in #8422
  • runtime: Fix configmap/secrets updates with FS sharing disabled by @Sumynwa in #8239
  • github: add workflows for building and publishing kata artefacts on ppc64le by @Amulyam24 in #8459
  • runtime: Pass KataVirtualVolume to the guest as devices in go runtime by @ChengyuZhu6 in #8494
  • CODEOWNERS: Expand scope by @jodh-intel in #8461
  • gha: add cri-containerd workflow for ppc64le by @Amulyam24 in #8501
  • gha: Disable stratovirt for gha metrics by @GabyCT in #8497
  • Revert "runtime: confidential: Do not set the max_vcpu to cpu" by @fidencio in #8533
  • tools: Stop building / shipping log-parser-rs by @fidencio in #8528
  • gha: fix artefacts build on ppc64le by @Amulyam24 in #8526
  • runtime: Update hypervisor generated code by @stevenhorsman in #8520
  • osbuilder: add pkg bash for alpine by @cheriL in #8456
  • tests: more k8s-exec-rejected debug output by @danmihai1 in #8271
  • metrics: Fix iperf parallel bandwidth limit by @GabyCT in #8531
  • runtime-rs: Add Hybrid VSOCK device handling for CH by @cmaf in #7815
  • Migrate static checks by @cmaf in #8288
  • build/kata-deploy: Move rust runtime config files to runtime-rs directory -- based on #8445 by @fidencio in #8483
  • libs:logging: Fix logger by @jodh-intel in #8547
  • runtime-rs: Enhancing DirectVolMount Handling with Patching Support by @Apokleos in #8301
  • dragonball: init dbs-pci lib with pci bus & pci conf by @studychao in #8480
  • libs: protection: x86_64: drop root requirement for querying by @jodh-intel in #8549
  • kernel: Add CONFIG_TDX_GUEST_DRIVER to the tdx.conf by @fidencio in #8556
  • gha: Add cloud runtime rs as part of the stability tests by @GabyCT in #8550
  • docs: Update iperf3 network documentation by @GabyCT in #8524
  • docs: Update cri installation url link by @GabyCT in #8540
  • runtime-rs: Launch cloud-hypervisor in given netns by @amshinde in #8551
  • move vsock device into device manager by @Apokleos in #8516
  • runtime-rs: Show config files attempted on config load failure by @jodh-intel in #8558
  • mount: support checking multiple kinds of block device driver by @yuchen0cc in #4743
  • gha: dragonball: Enable, but do not run, cri-containerd, stability, and devmapper tests by @fidencio in #8570
  • Build for measured rootfs improvements by @wainersm in #7231
  • gha: basic-ci: Add a timeout for the tests by @fidencio in #8573
  • image-builder: bugfix incorrect partition location by @Lu-Biao in #8436
  • docs: Update config containerd url link by @GabyCT in #8578
  • runtime-rs: add network hotplug for clh by @amshinde in #8580
  • deployment: Add stable overlay for kata-deploy.yaml by @zvonkok in #8509
  • GHA: remove GITHUB_WORKSPACE when workflow fails due to merge conflict by @BbolroC in #8601
  • metrics: Update TensorFlow ResNet FP32 dockerfile by @GabyCT in #8594
  • gha: nerdctl: Enable cloud hypervisor runtime-rs for nerdctl CI by @GabyCT in #8604
  • Implement and use try_from for DiskConfig by @amshinde in #8582
  • packaging: Add IBM Z SE artifacts to main by @BbolroC in #6755
  • dragonball: introduce vhost-user-fs device by @adamqqqplay in #8429
  • GHA: make secrets inherited for build-kata-static-tarball-s390x by @BbolroC in #8612
  • kata-ctl: Moved log-parser-rs into kata-ctl by @gabevenberg in #6826
  • runtime-rs: fix panic when hypervisor mismatches with configuration by @liubogithub in #8566
  • GHA: Use --client=true for k3s kubectl version by @BbolroC in #8622
  • CI: static-checks: Try multiple user agents by @jodh-intel in #8592
  • GHA: Fix kata-deploy-runtime-classes-check for kata-qemu-se by @BbolroC in #8624
  • rootfs: build OPA binary from source for ppc64le and s390x by @BbolroC in #7769
  • gha: k8s: Add cloud-hypervisor (runtime-rs) support by @GabyCT in #8560
  • dragonball: add --all for fmt ci by @studychao in #8599
  • metrics: cleans k8s iperf deployment when the test finishes. by @dborquez in #8542
  • tests: nerdctl: Enable nerdctl tests for cloud hypervisor runtime-rs by @GabyCT in #8617
  • dragonball: Disable packed virtqueue for vhost-user devices by @justxuewei in #8634
  • runtime-rs: ch: Change state when VM stopped by @jodh-intel in #8630
  • dragonball: add pci root bus and root device by @studychao in #8564
  • kata-deploy: Use tomlq to configure containerd by @fidencio in #8639
  • static-checks: Direct Makefile to use new static checks by @cmaf in #8635
  • GHA: Put all the preliminary steps into pre-action for s390x by @BbolroC in #8649
  • dragonball: Use vhost-net device by default by @justxuewei in #8609
  • runtime-rs: Enhancement of DirectVolume when using a dedicated CSI by @Apokleos in #8620
  • gha: add a post cleanup script for cri-containerd ppc64le workflow by @Amulyam24 in #8667
  • Remove warning for cgroupsv2 only operating systems by @wvell in #8589
  • static-checks: Add some dependencies to static checks for CoCo features by @ChengyuZhu6 in #8674
  • metrics: Update TensorFlow ResNet50 Int8 Dockerfile by @GabyCT in #8644
  • metrics: Improve latency network cleanup by @GabyCT in #8659
  • tests: k8s: Fix indentation in setup script by @GabyCT in #8676
  • runtime-rs: support Memory hotplug by @Tim-0731-Hzt in #6876
  • github-actions: Remove ignore paths for required CI checks by @amshinde in #8664
  • kata-ctl: Add option to dump config files by @jodh-intel in #8641
  • agent: correct CPUShares and CPUWeight value by @jongwu in #8341
  • ci: Use static checks from kata repo for lib functions by @cmaf in #8682
  • runtime-rs: Separate init_config() from new() for struct VsockDevice by @BbolroC in #8672
  • dragonball: Trigger unit tests of dbs_* subcrates by make test by @justxuewei in #8700
  • tests: additional run-runk logging by @danmihai1 in #8697
  • tests: k8s: Fix indentation in confidential common script by @GabyCT in #8699
  • runtime-rs: Update readme to indicate cloud-hypervisor support by @amshinde in #8588
  • gha: kata-deploy: Revert containerd config break by @stevenhorsman in #8679
  • kata-deploy: Update jq as part of the kata-deploy daemonset by @fidencio in #8709
  • tests: retry connection to pod SSH server by @danmihai1 in #8688
  • tests: Use function from Kata repo by @cmaf in #8714
  • tests: Load vhost modules explicitly while Kata installing by @justxuewei in #8718
  • kata-deploy: Allow setting up snapshotters per runtime handler by @fidencio in #8655
  • dragonball: introduce pci msi/msix interrupt by @studychao in #8662
  • kata-deploy: snapshotter typo fixes by @stevenhorsman in #8721
  • runtime-rs: Refactor the code related to PCI paths and VFIO device driver initialize in DM. by @Apokleos in #8668
  • dragonball: Support vhost-user-net device by @justxuewei in #8503
  • runtime-rs: Support vhost-user-net device by @justxuewei in #8626
  • kata-monitor: fix Dockerfile to build image by @liubin in #8729
  • dragonball: introduce vhost-user-blk device by @adamqqqplay in #8632
  • dragonball: introduce vfio support by @studychao in #8724
  • kata-deploy: Fix shim check for snapshotter configuration by @fidencio in #8733
  • runtime-rs: add pci topology for pci devices by @Apokleos in #7489
  • runtime-rs: Add dedicated CSI driver for DirectVolume support in Kata by @Apokleos in #8618
  • Dragonball: add pci vfio passthrough, hot(un)plug support by @studychao in #8740
  • dbs-pci: introduce Cargo.lock to prevent the influence from upstream by @studychao in #8771
  • runtime-rs|agent|protocols|agent-ctl: Bump ttrpc and containerd-shim-protos versions by @justxuewei in #8757
  • dragonball: Fix compilation issue without all net features by @justxuewei in #8744
  • metrics: Improve iperf3 cleanup by @GabyCT in #8766
  • docs: Update docs for new StratoVirt VMM introduction by @fadecoder in #8759
  • tests: Add hypervisor component to kill kata components function by @GabyCT in #8776
  • agent: hold lock while setting new policy by @danmihai1 in #8735
  • agent: Fix an issue reporting OOM events by mistake by @justxuewei in #8773
  • agent: use method params instead of const params in functions by @cheriL in #8326
  • packaging: Fix indentation of build static stratovirt by @GabyCT in #8778
  • tests: Add check images as part of install dependencies by @GabyCT in #8789
  • tests: list the current k8s pods by @danmihai1 in #8772
  • runtime-rs: fixup the of bridge vfio device between runtime-rs and dr… by @Apokleos in #8749
  • TEEs: Introduce kernel-confidential by @fidencio in #8753
  • versions: Update runc version by @GabyCT in #8796
  • runtime-rs: Forward events to containerd via ttrpc by @justxuewei in #8780
  • runtime: Allow no initrd path for IBM Z Secure Execution by @BbolroC in #8693
  • gha: Fix the failure of gha metrics for StratoVirt by @WenyuanLau in #8657
  • tools: add policy generation tool by @danmihai1 in #8248
  • Fix backport check hub by @stevenhorsman in #8763
  • runtime-rs: ch: Unbreak CH driver by @jodh-intel in #8803
  • ci: test dragonball stability and cri-containerd by @Apokleos in #8737
  • metrics: Use a specific python version to run tensorflow benchmark by @GabyCT in #8792
  • genpolicy: "cargo fmt -- --check" clean-up by @danmihai1 in #8817
  • dragonball: Remove unused definition by @justxuewei in #8819
  • tests: cbl-mariner: disable k8s-oom.bats by @danmihai1 in #8827
  • genpolicy: cargo clippy fixes by @danmihai1 in #8822
  • metrics: Remove iperf3 server protocol by @GabyCT in #8830
  • runtime-rs: bugfix for DirectVolume/rawblock when driver is blk by @Apokleos in #8708
  • genpolicy: temporarily disable allow_storages() by @danmihai1 in #8837
  • tools: genpolicy static checks by @danmihai1 in #8814
  • tests: Ignore virtiofs contribution to memory usage when it is disabled. by @dborquez in #8808
  • genpolicy: use root path from cbl-mariner Guest VM by @danmihai1 in #8836
  • runtime-rs: ch: Implement minimal implementation for missing thread/pid APIs by @jodh-intel in #8710
  • tools: install genpolicy settings files by @danmihai1 in #8845
  • GHA: Enable static check for s390x, aarch64 and ppc64le by @BbolroC in #8485
  • runtime-rs: Add qemu cmdline generation framework by @pmores in #8185
  • genpolicy: ignore pod DNS settings by @danmihai1 in #8862
  • versions: Update firecracker version by @GabyCT in #8855
  • gha: get ready to install genpolicy by @danmihai1 in #8857
  • gpu: Add NVIDIA GPU Confidential kernel target by @zvonkok in #8872
  • runtime: remove SharedVersions field dead code by @kalil-pelissier in #8812
  • docs: provide a guide for how to use IBM Secure Execution by @BbolroC in #7146
  • versions: Update libseccomp to version v2.5.5 by @GabyCT in #8884
  • gpu: remove GHA target first then remove the obsoleted Makefile targets by @zvonkok in #8901
  • tests: k8s: bats --show-output-of-passing-tests by @danmihai1 in #8898
  • tools: allow all users to execute genpolicy by @danmihai1 in #8908
  • metrics: Update packages needed for ResNet50 FP32 Dockerfile by @GabyCT in #8876
  • tools: Use defined variable in build base qemu script by @GabyCT in #8904
  • qemu: enable TPM by @zvonkok in #8905
  • packaging: Don't always build the kata-agent by @fidencio in #8916
  • tests: Add IBM SE to the basic confidential test by @BbolroC in #8914
  • genpolicy: add shareProcessNamespace support by @danmihai1 in #8909
  • gha: Cache the agent for non-x86_64 arches by @fidencio in #8926
  • gha: azure: Set the correct subscription to the account by @fidencio in #8947
  • arm64: agent_policy build always pulls amd64 opa binary by @zvonkok in #8375
  • packaging: Build coco-guest-components by @fidencio in #8933
  • genpolicy: ignore the nodeName field by @danmihai1 in #8934
  • genpolicy: optional PodTemplateSpec metadata field by @danmihai1 in #8918
  • runtime-rs: fix unused driverInfo error by @yaoyinnan in #8928
  • gha: cri-o: Bump runners to 22.04 by @fidencio in #8959
  • genpolicy: fix ConfigMap volume mount paths by @danmihai1 in #8924
  • dragonball: fix noop-method-call warning by @kalil-pelissier in #8932
  • runtime-rs: Log qemu's stderr in shim log by @pmores in #8938
  • packaging: Use Ubuntu 20.04 for building an agent by @BbolroC in #8956
  • kata-deploy: fix deprecations on kustomization files by @wainersm in #8269
  • genpolicy: ignore volume configMap optional field by @danmihai1 in #8962
  • tests: Re-arranged nerdctl tests by @GabyCT in #8964
  • genpolicy: allow separate paths for rules and settings files by @malt3 in #8941
  • runtime-rs: report error on missing or empty fields in configuration by @yaoyinnan in #8929
  • runtime: add SingleContainer when obtaining OCI Spec by @yaoyinnan in #8974
  • runtime: merged ValidCgroupPath method by @yaoyinnan in #8931
  • runtime-rs: improving io performance using dragonball's vsock fd passthrough by @frezcirno in #7483
  • genpolicy: support non-default namespace name by @danmihai1 in #8977
  • genpolicy: ignore empty YAML as input by @danmihai1 in #8966
  • ci: aks: switch from eastus2 to eastus region by @sprt in #8994
  • gha: add kubernetes tests workflow for ppc64le by @Amulyam24 in #8957
  • packaging: cache: Fix caching kernels which rely on extra modules by @fidencio in #8987
  • runtime-rs: make compilation for QEMU on s390x by @BbolroC in #8454
  • runtime: Reduce the mount points with namespace isolation by @fadecoder in #8760
  • packaging: Fix pushing artefacts to the registry by @fidencio in #9000
  • ci/openshift-ci: Move openshift-ci from the tests repo here by @ldoktor in #8654
  • packaging: Don't build the confidential / sev kernel twice -- part III by @fidencio in #9001
  • gha: k8s: Add cloud-hypervisor (runtime-rs) support by @GabyCT in #8996
  • runtime: packaging: Use confidential kernel instead of the TDX one by @fidencio in #8978
  • packaging: Add confidential image / initrd by @fidencio in #8983
  • gha: delete azure RG only if it exists by @wainersm in #9007
  • kata-monitor: fix agentUrl from containerd shim by @deagon in #9012
  • runtime: display accurate error msg to avoid misleading users. by @Apokleos in #9015
  • static-checks: Install clang in the ci environments by @ChengyuZhu6 in #9005
  • runtime: Replace TEE specific initrd / image for the confidential one by @fidencio in #9011
  • rootfs: confidential: Install coco-guest-components by @fidencio in #9022
  • runtime: missing port type in the DeviceInfo by @deagon in #8552
  • gha: add GOPATH env var to the ppc64le k8s workflow by @Amulyam24 in #9019
  • cri-containerd: fix loop in TestContainerMemoryUpdate() by @wainersm in #9025
  • rootfs: Add libattest-tdx into the confidential rootfs by @fidencio in #9027
  • gha: Enable nydus snapshotter in CoCo ci tests by @ChengyuZhu6 in #8953
  • gha: Run static-checks on self-hosted runners conditionally by @BbolroC in #9020
  • tests: k8s: Enable tests for cloud hypervisor runtime-rs without devicemapper by @GabyCT in #8628
  • metrics: Update packages for TensorFlow ResNet Int8 Dockerfile by @GabyCT in #8951
  • kata-manager: Add support for nerdctl installation by @fidencio in #8958
  • runtime-rs: implement persist api for cloud-hypervisor by @amshinde in #8704
  • nydus: Bump nydus snapshotter version to v0.13.7 by @ChengyuZhu6 in #9045
  • genpolicy: mount source for non-confidential guest by @danmihai1 in #9029
  • tests: k8s-attach-handlers auto-generated policy by @danmihai1 in #8922
  • runtime-rs: fix assert error in make check by @ChengyuZhu6 in #9043
  • runtime-rs: fix interoperability issues between runtime-rs and cri-o by @pmores in #8986
  • runtime: fix creation of SEV confidential container on SNP enabled host. by @niteeshkd in #9037
  • packaging/osbuilder: allow to pull and unpack pause image by @ChengyuZhu6 in #9031
  • tests:k8s: make add_kernel_initrd_anotations function generic by @GabyCT in #9061
  • gha: Setup nydus snapshotter for CoCo tests by @ChengyuZhu6 in #8585
  • docs: Remove jenkins reference in kernel documentation by @GabyCT in #9047
  • tests: k8s: k8s-copy-file auto-generated policy by @danmihai1 in #9051
  • runtime-rs: Add a new config option for QEMU by @BbolroC in #8455
  • tools: avoid rootfs-image build "ln -s" error by @danmihai1 in #9068
  • tests: cri-o: Use packages from pkgs.k8s.io by @fidencio in #8936
  • tests: k8s: avoid deleting unrelated pods by @danmihai1 in #9070
  • release: Don't ship the pause-image / coco-guest-components as part of the release artefacts by @fidencio in #9080
  • tests: Remove kata-deploy-tdx test and ensure kata-deploy is always cleaned up before starting the tests by @fidencio in #9082
  • tests: Add ability to run non-TEE environments by @GabyCT in #9062
  • packaging: Remove leftovers from the transition from TEE specific kernel / initrd / image to the "confidential" ones by @fidencio in #9026
  • runtime: Update runc to v1.1.12 by @fidencio in #9098
  • packaging: Add the kata manager script by @jodh-intel in #9091
  • CI|k8s: Skip vcpu allocation test for s390x by @BbolroC in #9099
  • tools.kata-webhook: Fix lib path by @ldoktor in #9023
  • runtime: fix checksum mismatch error in make vendor by @ChengyuZhu6 in #9112
  • ci: k8s: Fix checks used to skip confidential tests by @fidencio in #9108
  • packaging: qemu-snp-experimental: support host kernel with gmem by @niteeshkd in #9086
  • Cleanup network to make sure physical interfaces are restores back to original host driver. by @amshinde in #8647
  • gha: nydus: Fix indentation in gha run script by @GabyCT in #9088
  • docs: Update CI link into the README by @GabyCT in #9079
  • gha: docker: Pull docker image as part of the dependencies by @GabyCT in #9090
  • tests: k8s: generated policy for additional tests by @danmihai1 in #9073
  • runtime-rs: bugfix for GPU passthrough failed with InvalidOperation. by @Apokleos in #9130
  • gha: try to cleanup nydus snapshotter before deploying it by @ChengyuZhu6 in #9122
  • gha: bump nydus snapshotter version to v0.13.8 by @ChengyuZhu6 in #9132
  • kata-deploy: Add pause image to confidential rootfs by @ChengyuZhu6 in #9119
  • agent: Run container workload in its own cgroup namespace (cgroup v2 guest only) by @gkurz in #9125
  • scripts: Add an enhanced die function by @GabyCT in #9115
  • build-checks: Install protoc in the ci environments by @ChengyuZhu6 in #9142
  • packaging: release notes: Don't show shortlist by default, and add survey link by @jodh-intel in #9076
  • runtime: remove kata_shim_netdev metric by @littlejawa in #9100
  • docs: Update link for tests in README by @GabyCT in #9161
  • release: Update everything in this repo related to the release and its process by @fidencio in #9146

New Contributors

Full Changelog: 3.3.0-alpha0...test-test-3.4.0

Don't miss a new kata-containers release

NewReleases is sending notifications on new releases.