Ru(@ruyingzhe), Tencent Liangyu Zhou(@choujimmy), Tencent Implement Kubernetes Runtime Based on Rust-VMM About Us Yingzhe Ru Senior Software Engineer at Tencent Working on TKEStack project, have great OCI Comparison kata- runtime runc runsc container container Pod QEMU VMM Firecracker VMM Rust-VMM container container Pod Sandbox Agent gVisor Guest Kernel O C I Gofer container container CBS persistent volume mount mount attach VPC Want to get safer and faster? Rust-VMM Why we love Rust-VMM? Rust-VMM is an open-source project that empowers the community to build custom Virtual

new Rust-based virtualization architectures and components, such as CrosVM, FireCracker, and Rust-VMM, have emerged as more recognized virtualization solutions. These Rust-based virtualization solutions

openEuler 平台上 业务平稳运行的轻薄的保护层。 QEMU 代码量庞大、CVE 安全漏洞频出，业界逐步演进出以 Rust 语言 实现的 CrosVM、FireCracker 和 Rust-VMM 等新型虚拟 化架构或组件。具 备安全、轻量、高性能、低损耗、组件灵活拆分的特点。 StratoVirt 主要优势如下： • 强安全性：基于 Rust 实现语言级安全，模型设计上最小化攻击面，

security, code redundancy, and low efficiency are awaiting handling. A practicable solution is the rust-vmm architecture, which is developed using the memory-safe programming language Rust. General-purpose