diff options
| author | Sascha Grunert <sgrunert@suse.com> | 2019-10-21 09:37:58 +0200 |
|---|---|---|
| committer | Sascha Grunert <sgrunert@suse.com> | 2019-11-06 09:45:39 +0100 |
| commit | 9fe9c4181a0b7f73922d6e623c98023cb4f9f559 (patch) | |
| tree | cb08b59f2e20e469b452edff500832a5966bdcfc | |
| parent | b4b727256c728295e6a3fcb69593347df9e90b23 (diff) | |
| download | podman-9fe9c4181a0b7f73922d6e623c98023cb4f9f559.tar.gz podman-9fe9c4181a0b7f73922d6e623c98023cb4f9f559.tar.bz2 podman-9fe9c4181a0b7f73922d6e623c98023cb4f9f559.zip | |
Add Kata Containers runtimes to libpod.conf
This adds the Kata Containers runtimes to the libpod.conf and adds
additional documentation to it.
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
| -rw-r--r-- | libpod.conf | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/libpod.conf b/libpod.conf index 47f66ecc1..47563099c 100644 --- a/libpod.conf +++ b/libpod.conf @@ -146,6 +146,29 @@ crun = [ "/usr/local/bin/crun", ] +# Kata Containers is an OCI runtime, where containers are run inside lightweight +# Virtual Machines (VMs). Kata provides additional isolation towards the host, +# minimizing the host attack surface and mitigating the consequences of +# containers breakout. +# Please notes that Kata does not support rootless podman yet, but we can leave +# the paths below blank to let them be discovered by the $PATH environment +# variable. + +# Kata Containers with the default configured VMM +kata-runtime = [ + "/usr/bin/kata-runtime", +] + +# Kata Containers with the QEMU VMM +kata-qemu = [ + "/usr/bin/kata-qemu", +] + +# Kata Containers with the Firecracker VMM +kata-fc = [ + "/usr/bin/kata-fc", +] + # The [runtimes] table MUST be the last thing in this file. # (Unless another table is added) # TOML does not provide a way to end a table other than a further table being |