mirror of
https://github.com/edera-dev/krata.git
synced 2025-08-03 05:10:55 +00:00
0d3c942492
This change addresses a race condition where the read-copy of a raw FD is closed while the write-copy is still in use. Now the read-copy is not closed, by utilizing mem::forget.
krata
An isolation engine for securing compute workloads.
$ kratactl zone launch -a alpine:latest
Introduction
krata is a single-host workload isolation service. It isolates workloads using a type-1 hypervisor, providing a tight security boundary while preserving performance.
krata utilizes the core of the Xen hypervisor with a fully memory-safe Rust control plane.
Hardware Support
| Architecture | Completion Level | Hardware Virtualization |
|---|---|---|
| x86_64 | 100% Completed | None, Intel VT-x, AMD-V |
| aarch64 | 10% Completed | AArch64 virtualization |