AI Potluck
Infrastructure / Deployment

Kata Containers

OpenInfra Foundation

Kata Containers runs each container inside its own lightweight virtual machine, so workloads keep container ergonomics while gaining hardware-backed isolation of kernel, memory, network and I/O. A containerd shimv2 runtime and an in-VM agent plug it into Kubernetes through a RuntimeClass, and the hypervisor is pluggable across QEMU, Cloud Hypervisor, Firecracker, Dragonball and StratoVirt. The OpenInfra Foundation stewards the project.

The repository landing page does not state governance; the OpenInfra Foundation stewardship is established on the project site instead. Verified 2026-08-13 via the Kata Containers README, docs/hypervisors.md, and katacontainers.io.

Openness

5 high confidence
5.0
license
Apache-2.0(OSI)
source
public
governance
open community (OpenInfra Foundation)
core-gated
ungated

Fully Apache-2.0, source public, vendor-neutral open-foundation governance, no managed-tier gating from the project itself.

Adoption

3 medium confidence
3.0

Established CNCF/OpenInfra-adjacent container-runtime project integrated into Kubernetes runtimeclass deployments; broad but operator-concentrated infrastructure adoption rather than a mass per-user count. No clean download or user figure could be verified, and the ~8k GitHub stars only corroborate rather than carry the level. Level 3 reflects specialist infrastructure reach. The absence of a numeric reach is deliberate: katacontainers.io publishes no download, install, cluster or user count anywhere - what it publishes instead is a running user survey asking operators to self-report, plus one named production deployment (Baidu, for Function Computing, Cloud Container Instances and Edge Computing) - and the project ships as release tarballs and a kata-deploy Helm chart rather than through a countable package registry, so there is no channel to band on.

  • https://github.com/kata-containers/kata-containers recorded 2026-06-04

    standard implementation of lightweight VM containers; integrated runtime; 8k stars

  • https://katacontainers.io/ recorded 2026-08-13

    The project site publishes no usage, download or deployment figure. It names one production user in prose - "Baidu is running Kata Containers in production to support Function Computing, Cloud Container Instances, and Edge Computing" - and otherwise asks operators to "Take the Kata Containers User Survey", which is the project asking for the number rather than reporting one.

  • https://api.github.com/repos/kata-containers/kata-containers recorded 2026-08-13

    Repo metadata - 8,531 stars, 1,431 forks, 99 watchers, pushed 2026-08-13, not archived. Corroborates an active specialist infrastructure project; the level does not rest on it.

  • https://raw.githubusercontent.com/kata-containers/kata-containers/main/README.md recorded 2026-08-13

    Distribution is by release tarball and the kata-deploy Helm chart on Kubernetes, or build from source - no package-registry channel that would yield a countable download figure.

Capability

4 high confidence
4.0

VM-grade isolation with OCI and Kubernetes compatibility and pluggable hypervisors; very strong isolation but higher cold-start than the microVM and userspace frontier-definers, so 4. Five hypervisors are pluggable - QEMU, Cloud Hypervisor, Firecracker, Dragonball and StratoVirt - with QEMU the best-supported for NVIDIA GPUs and confidential computing, and the runtime ships as a containerd shimv2 shim with an in-VM agent across x86_64, aarch64, ppc64le and s390x. That places it one rung below Firecracker, which defines the frontier here.

Verified 2026-08-13