search

edera-dev / krata

krata is an isolation engine for securing compute workloads
Apache License 2.0
245 stars 11 forks source link

chore: documentation on custom kernels #119

Closed andrewrynhard closed 3 weeks ago

andrewrynhard commented 4 months ago

Hello,

I am interested in testing krata for use as a runtime for running Talos Linux in Kubernetes. Talos has some unique requirements around the kernel it runs and I was hoping krata could eventually support running custom kernels.

azenla commented 4 months ago

Hello! There isn't actually much documentation on this yet, but there will be next week. krata supports custom kernels already ;)

If you package a kernel into a single OCI image layer with a file named "kernel" and launch with --kernel IMAGE_NAME it will use the kernel from the OCI image.

The PCI PR that is in the works brings support for modules and firmware to this system, and next week we will start publishing all supported kernel versions publicly.

I will provide an update for you once those features are shipped and documented!

andrewrynhard commented 4 months ago

Hello! There isn't actually much documentation on this yet, but there will be next week. krata supports custom kernels already ;)

If you package a kernel into a single OCI image layer with a file named "kernel" and launch with --kernel IMAGE_NAME it will use the kernel from the OCI image.

The PCI PR that is in the works brings support for modules and firmware to this system, and next week we will start publishing all supported kernel versions publicly.

I will provide an update for you once those features are shipped and documented!

Awesome ... I need to do some work to see if krata will work with Talos. I will see if I can land official support for it in Talos. Looking forward to seeing the docs!

andrewrynhard commented 4 months ago

Do you have office hours I might be able to attend and ask some questions?

azenla commented 4 months ago

@andrewrynhard Not at the moment (we will work on getting that setup soon) However, if you email us at contact@edera.dev we can do some 1:1 sessions if you’d like :)

azenla commented 3 weeks ago

Do you have office hours I might be able to attend and ask some questions?

Hello! Wanted to let you know that I now have official office hours! https://calendar.app.google/cigZ8pRjgGEVYSwT7