4 ms·
> So on VMs, [ring0 layer (the kernel)] doesn’t exist (from what I understand) The kernel still exists in a VM. The “dedicated kernel” bit of Kata distinguish
by amarshall 3y ago
> So on VMs, [ring0 layer (the kernel)] doesn’t exist (from what I understand)
The kernel still exists in a VM. The “dedicated kernel” bit of Kata distinguishes it from typical containers, not from VMs.
Kata is an abstraction atop existing hypervisors that are themselves just an abstraction over KVM. There’s nothing new here w.r.t. VM detection evasion.
> fool it into thinking it’s installed in the right space
Most VM detection is about observing devices, drivers, timings, or other side-channel type data that is often only seen in a VM.