BestHub
Sign in
Tagged articles

Kata Containers

8 articles · Page 1 of 1
360 Zhihui Cloud Developer
360 Zhihui Cloud Developer
Jul 14, 2026 · Cloud Native

Using Pod Overhead and Kata Containers to Isolate Kernel Memory and Stop Container Slab Leaks

The article explains how intensive file‑system reads in a Kubernetes pod cause kernel slab memory to balloon, why standard cgroup limits cannot contain the leak, and demonstrates step‑by‑step how configuring Pod Overhead with Kata containers creates a separate sandbox cgroup that isolates kernel memory, preventing host‑level OOM.

Kata ContainersKubernetesPod Overhead
0 likes · 12 min read
Using Pod Overhead and Kata Containers to Isolate Kernel Memory and Stop Container Slab Leaks
Alibaba Cloud Developer
Alibaba Cloud Developer
May 30, 2022 · Information Security

How HaiGuang CSV Powers Secure Confidential Containers in Longxi 8.4

Longxi 8.4 now supports confidential containers built on HaiGuang's CSV technology, offering encrypted lifecycle, isolated compute resources, measurable startup, and remote attestation that together create a fully secure container environment integrated with Kata and Inclavare Containers.

CSV technologyCloud securityKata Containers
0 likes · 5 min read
How HaiGuang CSV Powers Secure Confidential Containers in Longxi 8.4
Alibaba Cloud Native
Alibaba Cloud Native
Mar 30, 2020 · Cloud Native

Why Secure Containers Matter: From OCI to Kata and gVisor

This article explains the concept of secure containers, their definition based on the OCI specification, and how projects like Kata Containers and gVisor implement isolation layers to provide VM‑level security with container‑level performance in cloud‑native environments.

Cloud NativeKata Containerscontainer-security
0 likes · 19 min read
Why Secure Containers Matter: From OCI to Kata and gVisor
Meituan Technology Team
Meituan Technology Team
Mar 12, 2020 · Information Security

Cloud Native Security: Container Escape and Mitigation Strategies

Meituan's security team explains cloud‑native architecture, outlines container‑escape threats from kernel bugs, vulnerable runtimes and misconfigurations, and recommends mitigation through hardened kernels, secure‑container runtimes like gVisor or Kata, rigorous patch management, and collaborative feature development to strengthen runtime protection.

DockerKata ContainersKubernetes
0 likes · 20 min read
Cloud Native Security: Container Escape and Mitigation Strategies
AntTech
AntTech
Dec 26, 2019 · Information Security

Understanding Secure Containers: From HyperContainer to Kata and gVisor

This article explains the concept of secure containers, traces their naming history, defines their role in cloud‑native environments, and details the architectures of Kata Containers and gVisor as modern solutions that add isolation layers to improve container security and performance.

Cloud NativeKata ContainersVirtualization
0 likes · 12 min read
Understanding Secure Containers: From HyperContainer to Kata and gVisor
AntTech
AntTech
Sep 28, 2019 · Information Security

Security Containers and Cloud Sandbox: Evolution, Architecture, and Future Directions

This article reviews the development of secure container technologies, including the history of container isolation, the design of MicroVM‑based solutions like Kata Containers, Alibaba Cloud's security sandbox architecture, performance benchmarks, and future challenges for secure cloud‑native runtimes.

Alibaba CloudCloud SandboxKata Containers
0 likes · 14 min read
Security Containers and Cloud Sandbox: Evolution, Architecture, and Future Directions