cloud-hypervisor running confined by the `container_kvm_t` SELinux label (CRI-O)

by fidencio
GNU/Linux ◆ xterm-256color ◆ bash 117 views

Here you can see a simple pod being started with cloud-hypervisor running confined by the container_kvm_t label.

This is using CRI-O as the Container Engine, and contains work not yet released as part of cloud-hypervisor and not yet proposed as part of Kata Containers.