mirror of
https://github.com/edera-dev/krata.git
synced 2025-08-03 13:11:31 +00:00
48416f8441
Mounting procfs with hidepid=1 denies access to procfs directories for processes not accessible by the current user credentials. Signed-off-by: Ariadne Conill <ariadne@ariadne.space>
krata
An isolation engine for securing compute workloads.
$ kratactl zone launch -a alpine:latest
Introduction
krata is a single-host workload isolation service. It isolates workloads using a type-1 hypervisor, providing a tight security boundary while preserving performance.
krata utilizes the core of the Xen hypervisor with a fully memory-safe Rust control plane.
Hardware Support
| Architecture | Completion Level | Hardware Virtualization |
|---|---|---|
| x86_64 | 100% Completed | None, Intel VT-x, AMD-V |
| aarch64 | 10% Completed | AArch64 virtualization |