More Than Secure - Containerd + KataContainers as Kubernetes Runtime

Explore the integration of KataContainers with containerd as a secure Kubernetes runtime in this 39-minute conference talk. Dive into the design and implementation of leveraging hardware virtualization-based runtime in Kubernetes clusters. Learn how KataContainers was refactored as a containerd plugin, addressing networking challenges through CRI and improving performance of hypervisor-based container runtime with custom volume plugins. Gain insights into the CRI design and implementation, which has sparked a resurgence in Kubernetes container runtimes. Discover why hypervisor runtime extends beyond security, offering solutions for legacy applications and hard multi-tenancy in the containerd + KataContainers ecosystem.

More Than Secure: Containerd + KataContainers as Kubernetes Runtime - Lei Zhang, Alibaba