Feature/lab12

[pepegx]

Summary

Completed Lab 12: Kata Containers VM-backed container sandboxing.

Checklist

• Task 1 - Kata install + runtime config
• Task 2 - runc vs kata runtime comparison
• Task 3 - Isolation tests
• Task 4 - Basic performance snapshot

Evidence

• Added submission report: labs/submission12.md
• Added raw evidence under labs/lab12/
• Verified containerd-shim-kata-v2 --version
• Verified Kata runtime with io.containerd.kata.v2
• Verified juice-runc health check on port 3012
• Compared host/runc kernel vs Kata guest kernel
• Collected isolation evidence for dmesg, /proc, network interfaces, and kernel modules
• Collected startup and HTTP latency benchmark data

Notes

Kata long-running detached containers were handled according to the lab workaround guidance: juice-runc is used as
the reachable web baseline, while short-lived Alpine containers are used for Kata runtime, isolation, and benchmark
tests.