Feature/lab12

[Dart-NEW]

Goal

Complete Lab 12: Kata Containers VM-backed container sandboxing, including setup, runc vs Kata comparison, isolation tests, and performance trade-off analysis.

Changes

• Built and verified containerd-shim-kata-v2.
• Configured containerd with io.containerd.kata.v2.
• Captured runc Juice Shop health evidence.
• Captured Kata runtime evidence using the documented ctr workaround.
• Added kernel, CPU, dmesg, /proc, network, modules, startup, and latency artifacts.
• Added labs/submission12.md with analysis and recommendations.

Testing

• Verified Kata shim version: 3.30.0.
• Verified runc Juice Shop health: HTTP 200.
• Verified Kata guest kernel: 6.18.15.
• Compared host kernel vs Kata guest kernel.
• Ran isolation checks for dmesg, /proc, network, and kernel modules.
• Measured startup time:
  • runc: 0.57s
  • Kata: 5.95s
• Measured runc Juice Shop HTTP latency: avg=0.0019s.
• Pre-commit secret scan passed.

Artifacts & Screenshots

• labs/submission12.md
• labs/lab12/setup/kata-built-version.txt
• labs/lab12/setup/kata-test-run-ctr.txt
• labs/lab12/runc/health.txt
• labs/lab12/analysis/kernel-comparison.txt
• labs/lab12/analysis/cpu-comparison.txt
• labs/lab12/isolation/dmesg.txt
• labs/lab12/isolation/proc.txt
• labs/lab12/isolation/network.txt
• labs/lab12/isolation/modules.txt
• labs/lab12/bench/startup.txt
• labs/lab12/bench/http-latency.txt

Checklist

• Clear title
• Docs updated
• No secrets in code