FAUN.dev() is where engineers from GitHub, Netflix, and Shopify go to stay ahead — fast.

An effortless, straightforward way to keep up with technologies...so you can keep your tabs closed and your mind open!

70,000+ developers already joined our ecosystem ⭐⭐⭐⭐⭐
Trusted by engineers at:

Google • Microsoft • AWS • Netflix

Kata Containers

Kata Containers is an open-source container runtime that combines the speed and UX of containers with the strong isolation of virtual machines by running each container inside a lightweight VM.

Featured Course(s)

Cloud-Native Microservices With Kubernetes - 2nd Edition

A Comprehensive Guide to Building, Scaling, Deploying, Observing, and Managing Highly-Available Microservices in Kubernetes

> Get Your Copy

Updates and recent posts about Kata Containers..

Posts
Description

Activity

@jordanunix created an organization DevOpsDayLA , 3 months ago.

Story

@laura_garcia shared a post, 3 months ago

Software Developer, RELIANOID

💡 Third-Party Vendors: The Hidden Cybersecurity Risk

In today’s hyper-connected world, digital supply chains are only as secure as their weakest link. One single vendor can open the door to ransomware, outages, or worse. At RELIANOID, we take this risk seriously. 🔒 That’s why we apply: ✅ Continuous vendor risk assessments ✅ Real-time monitoring of thi..

cropped-Blog-THIRD-PARTY-VENDOR-RISKS-RELIANOID

Link

@varbear shared a link, 3 months ago

FAUN.dev()

Unconventional PostgreSQL Optimizations

PostgreSQL 18 now supportsvirtual generated columns, indexable expressions without burning storage. Perfect for standardizing queries in analytics-heavy pipelines. Pair that withplanner constraint exclusion(constraint_exclusion=on), and Postgres can dodge irrelevant table scans based on constraints... read more

Link

@varbear shared a link, 3 months ago

FAUN.dev()

Software engineering when machine writes the code

In 1968, computer scientists identified the "software crisis" - the existing methods of programming were struggling to handle the power of computers. Today, AI coding assistants are accelerating productivity, but concerns arise about understanding the code they generate, the implications for debuggi.. read more

Link

@varbear shared a link, 3 months ago

FAUN.dev()

How I Taught GitHub Copilot Code Review to Think Like a Maintainer

Vibe coding has made contributing to open source easier, but the high number of contributions to the AI agent framework goose has posed a challenge. An AI Code Review agent like Copilot can help review PRs, but tuning its feedback is crucial for reducing noise and increasing value. By providing clea.. read more

Link

@varbear shared a link, 3 months ago

FAUN.dev()

The challenges of soft delete

"Soft delete" sounds gentle. It isn't. Slapping adeleted_atcolumn on every table pollutes queries, drags down migrations, and leaves tombstones all over production. This post digs into saner options:PostgreSQL triggers,event archiving in the app layer, andCDC via WAL. Each separates the dead stuff f.. read more

Link

@kaptain shared a link, 3 months ago

FAUN.dev()

Experimenting with Gateway API using kind

A new guide shows how to runGateway APIlocally withkindandcloud-provider-kind. It spins up a one-node Kubernetes cluster in Docker - complete with LoadBalancer Services and a Gateway API controller. Cloud vibes, zero cloud bill. Fire it up to deploy demo apps, test routing, or poke around with CRD e.. read more

Link

@kaptain shared a link, 3 months ago

FAUN.dev()

Run a Private Personal AI with Clawdbot + DMR

Clawdbot just plugged intoDocker Model Runner (DMR). That means you can now run your own OpenAI-compatible assistant, locally, on your hardware. No cloud. No per-token fees. No data leaking into the void!.. read more

Link

@kaptain shared a link, 3 months ago

FAUN.dev()

Cluster API v1.12: Introducing In-place Updates and Chained Upgrades

Cluster API v1.12.0 addsin-place updatesandchained upgrades, so machines can swap parts without going down, and clusters can jump versions without drama. KubeadmControlPlaneandMachineDeploymentsnow choose between full rollouts or surgical patching, depending on what changed. The goal: keep clusters .. read more

Link

@kaptain shared a link, 3 months ago

FAUN.dev()

Ingress NGINX: Statement from the Steering and Security Response Committees

Kubernetes is cutting offIngress NGINXin March 2026. No more updates. No bug fixes. No security patches. Done. Roughly half of cloud-native setups still rely on it, but it's been understaffed for years. If you're one of them, it's time to move. There’s no plug-and-play replacement, but the ecosystem.. read more

Kata Containers is a Cloud Native Computing Foundation (CNCF) project designed to close the security gap between traditional Linux containers and virtual machines. Instead of sharing a single host kernel like standard containers, Kata Containers launches each pod or container inside its own lightweight virtual machine using hardware virtualization.

This approach dramatically reduces the attack surface and prevents container escape vulnerabilities, making Kata ideal for multi-tenant, untrusted, or sensitive workloads. Despite using VMs under the hood, Kata is optimized for fast startup times and integrates seamlessly with Kubernetes through the Container Runtime Interface (CRI), allowing it to be used alongside runtimes like containerd and CRI-O.

Kata Containers is commonly used in scenarios such as multi-tenant Kubernetes clusters, confidential computing, sandboxed AI workloads, serverless platforms, and agent execution environments where strong isolation is mandatory. It supports multiple hypervisors, including QEMU, Firecracker, and Cloud Hypervisor, and continues to evolve toward faster boot times, lower memory overhead, and better hardware acceleration support.