Explore OCI hook mechanism for Raksh instead of custom agent

IBM / raksh

Seamlessly use VM based TEEs with Kubernetes for data-in use protection

Apache License 2.0

36 stars 9 forks source link

Explore OCI hook mechanism for Raksh instead of custom agent #19

Open bpradipt opened 4 years ago

bpradipt commented 4 years ago

This task is to explore OCI hook mechanism for making the necessary modifications inside the Guest VM instead of relying on customer Kata guest agent (aka Raksh agent)

bpradipt commented 4 years ago

An example approach using OCI hook - https://github.com/bpradipt/raksh-oci-hook/

Guest hooks is broken with latest Kata runtime. Currently looking into it..