Cloud Native Security
CI Runners in a microVM: Docker Builds with Kata Containers on Kubernetes
CI jobs execute third-party code next to a privileged Docker daemon — an unnecessary risk on a shared host kernel. We moved our Gitea Actions runners to Kata Containers and documented the five pitfalls nobody warns you about.
10 min read