Implement Kubernetes Runtime Based on Rust-VMM Yingzhe Ru(@ruyingzhe), Tencent Liangyu Zhou(@choujimmy), Tencent ## About Us Yingzhe Ru Senior Software Engineer at Tencent Working on TKEStack project 0c2c9027389ebfcd1766a04cb8ffc2/p10_2.jpg) container kata-runtime QEMU VMM Firecracker VMM Rust-VMM Pod Sandbox Agent container Guest Kernel gVisor runsc Pod Sandbox container Sentry Gofer 10c2c9027389ebfcd1766a04cb8ffc2/p13_2.jpg) ## Want to get safer and faster? Rust-VMM ## Why we love Rust-VMM? Rust-VMM is an open-source project that empowers the community to build custom Virtual Machine

vulnerabilities, new Rust-based virtualization architectures and components, such as CrosVM, FireCracker, and Rust-VMM, have emerged as more recognized virtualization solutions. These Rust-based virtualization solutions

意指大气层中的平流层，寓意为保护 openEuler 平台上业务平稳运行的轻薄的保护层。 QEMU 代码量庞大、CVE 安全漏洞频出，业界逐步演进出以 Rust 语言实现的 CrosVM、FireCracker 和 Rust-VMM 等新型虚拟化架构或组件。具备安全、轻量、高性能、低损耗、组件灵活拆分的特点。 ![Image](/uploads/documents/1/9/e/7/19e764adf78c4b15154fe10821294e57/p9_2

security, code redundancy, and low efficiency are awaiting handling. A practicable solution is the rust-vmm architecture, which is developed using the memory-safe programming language Rust. General-purpose