Here you can see a simple pod being started with cloud-hypervisor running confined by the container_kvm_t label.
This is using CRI-O as the Container Engine, and contains work not yet released as part of cloud-hypervisor and not yet proposed as part of Kata Containers.