| *** marcov has quit IRC | 01:06 | |
| kata-irc-bot | <eric.ernst> what's the question lungaro? | 02:32 |
|---|---|---|
| eernst | hey lungaro you shouldn't need any patches for your hostkernel | 02:36 |
| eernst | it is just a few things that run in userspace on your host system - we distribute them in a container as well as standard distro packages. | 02:37 |
| kata-irc-bot | <raravena80> also if you upgrade to a patch version, you install the files (or the package) on top of the old ones | 03:05 |
| *** eernst has quit IRC | 03:27 | |
| *** eernst has joined #kata-dev | 03:30 | |
| *** eernst has quit IRC | 03:32 | |
| *** eernst has joined #kata-dev | 03:34 | |
| *** eernst has quit IRC | 03:39 | |
| *** sjas_ has joined #kata-dev | 04:26 | |
| *** sjas has quit IRC | 04:29 | |
| *** marcov has joined #kata-dev | 06:33 | |
| *** jodh has joined #kata-dev | 06:34 | |
| *** jodh has quit IRC | 06:34 | |
| *** jodh has joined #kata-dev | 06:34 | |
| *** zerocoolback has joined #kata-dev | 06:38 | |
| *** sameo has joined #kata-dev | 07:33 | |
| *** davidgiluk has joined #kata-dev | 08:03 | |
| *** sameo has quit IRC | 08:44 | |
| *** sameo has joined #kata-dev | 08:49 | |
| *** sameo has quit IRC | 09:20 | |
| *** annabelleB has joined #kata-dev | 10:27 | |
| *** zerocoolback has quit IRC | 10:28 | |
| *** zerocoolback has joined #kata-dev | 10:28 | |
| *** zerocoolback has quit IRC | 10:33 | |
| *** annabelleB has quit IRC | 11:22 | |
| *** sameo has joined #kata-dev | 11:27 | |
| *** eernst has joined #kata-dev | 11:32 | |
| *** eernst has quit IRC | 11:37 | |
| *** devimc has joined #kata-dev | 11:44 | |
| *** annabelleB has joined #kata-dev | 12:05 | |
| *** annabelleB has quit IRC | 12:11 | |
| *** zerocoolback has joined #kata-dev | 12:34 | |
| *** fuentess has joined #kata-dev | 13:26 | |
| *** eernst has joined #kata-dev | 14:04 | |
| *** eernst has quit IRC | 14:25 | |
| *** eernst has joined #kata-dev | 14:26 | |
| *** fiddletwix has joined #kata-dev | 15:33 | |
| *** zerocoolback has quit IRC | 15:40 | |
| kata-irc-bot | <anne> WRT that docs PR that was updating our supported security options—is seccomp and apparmor support a reasonable goal before EOY? | 15:45 |
| kata-irc-bot | <eric.ernst> certainly seccomp, as there's an active PR on it right now. I'm not sure about general MAC support. | 16:08 |
| kata-irc-bot | <mvedovati> @eric.ernst fyi AppArmor requires a kernel built with `CONFIG_SECURITY_APPARMOR`, some extra management packages in the rootfs, and some code in the agent to load a profile | 16:29 |
| kata-irc-bot | <eric.ernst> I think adding some more filtering/help in the guest is solid, I'm just wary of increasing the default configuration for everyone; Im really interested in understanding some more of the security profiles that people are looking for when they are looking at kata. | 16:32 |
| kata-irc-bot | <eric.ernst> we may just need more vcpus for our CI and just have multiple configurations in test. | 16:32 |
| kata-irc-bot | <eric.ernst> These come with a cost with respect to density. | 16:33 |
| davidgiluk | hmm then of course we get into the fun of apparmor or selinux | 16:33 |
| kata-irc-bot | <raravena80> a cost likely in terms of performance too | 16:34 |
| *** zerocoolback has joined #kata-dev | 16:36 | |
| *** zerocoolback has quit IRC | 16:44 | |
| kata-irc-bot | <mvedovati> having some numbers would help in taking a decision | 16:48 |
| kata-irc-bot | <eric.ernst> We have tools in place for easily measuring these kinds of metrics (boot time, density, i/o) | 16:57 |
| *** sameo has quit IRC | 17:05 | |
| davidgiluk | are those tools easy replicatable if someone else wanted to setup the same tests for stuff they're playing with? | 17:07 |
| *** jodh has quit IRC | 17:08 | |
| lungaro | can someone explain what is done to speed up the boot time? | 17:54 |
| *** cseader has joined #kata-dev | 18:56 | |
| *** devimc_ has joined #kata-dev | 18:56 | |
| *** devimc_ has quit IRC | 18:57 | |
| *** eernst has quit IRC | 19:07 | |
| *** sjas_ is now known as sjas | 19:17 | |
| *** davidgiluk has quit IRC | 19:34 | |
| *** zerocoolback has joined #kata-dev | 19:46 | |
| *** zerocoolback has quit IRC | 19:48 | |
| *** sjas has quit IRC | 20:16 | |
| *** sjas has joined #kata-dev | 20:17 | |
| *** sjas has quit IRC | 20:30 | |
| *** sjas has joined #kata-dev | 20:35 | |
| *** devimc has quit IRC | 20:42 | |
| *** fuentess has quit IRC | 20:55 | |
| *** eernst has joined #kata-dev | 21:48 | |
| *** eernst has quit IRC | 23:01 | |
| *** dtk has joined #kata-dev | 23:30 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!