Lab 12 — Kata Containers: VM-backed Container Sandboxing

[Boogyy]

Goal

Complete Lab 12 by setting up Kata Containers as a VM-backed container runtime, comparing it with the default runc runtime, and documenting the isolation and performance trade-offs.

Changes

• Added Kata runtime setup evidence under labs/lab12/setup/
• Added runc and Kata runtime comparison artifacts
• Updated build-kata-runtime.sh to support the local build environment

Testing

Verified Kata and runc behavior with:

• containerd-shim-kata-v2 --version
• sudo nerdctl run --rm --runtime io.containerd.kata.v2 alpine:3.19 uname -a
• runc Juice Shop health check returning HTTP 200
• Kernel, CPU, /proc, network, dmesg, and module comparison outputs

Artifacts & Screenshots

Supporting artifacts are committed under:

• labs/submission12.md
• labs/lab12/setup/
• labs/lab12/runc/
• labs/lab12/kata/
• labs/lab12/isolation/
• labs/lab12/analysis/
• labs/lab12/bench/

---

Checklist

• PR title is clear and descriptive
• Documentation updated if needed
• No secrets or large temporary files committed