Kata Containers
microvmmicrovm-toolopen sourceAn OCI/Kubernetes runtime that transparently runs each container inside its own lightweight VM (Firecracker/Cloud /QEMU).
Kata Containers is a container runtime that looks like a normal OCI/Kubernetes runtime but runs each container (or pod) inside its own lightweight VM with a dedicated guest kernel, on Firecracker, Cloud , or QEMU. It gives the container workflow a hardware boundary, and is a standard way to run untrusted or multi-tenant workloads on Kubernetes. It needs KVM (bare metal or nested virt).
Strengths
- Container/Kubernetes ergonomics with a per-workload hardware boundary
- Pluggable VMM backend (Firecracker, Cloud Hypervisor, QEMU)
- Standard choice for untrusted/multi-tenant workloads on k8s
Limitations
- Requires KVM, bare metal or nested virtualization
- Heavier than a plain container; per-VM memory floor
- Linux only
Files & editor
desktop-mountTransparent to the container workflow, so your existing bind-mount and editor setup carries over, now behind a VM (files shared via virtiofs).
How you get your project into the environment and edit it. Shared-kernel routes bind-mount host files for your desktop editor; own-kernel routes keep files in the guest, so a desktop editor attaches over remote, or you edit inside. Mounts and remote editing.