Feature/lab12

[kvassoedik]

Goal

Implement and validate Kata Containers runtime isolation using containerd and nerdctl.
Build the Kata runtime from source, configure the environment, and compare traditional container execution with VM-based isolated execution.

Changes

• Built containerd-shim-kata-v2 from source
• Installed and configured Kata Containers assets
• Configured containerd for Kata runtime support
• Installed and configured CNI networking plugins
• Validated Kata runtime execution with nerdctl
• Captured kernel and CPU isolation evidence
• Added runtime comparison and isolation analysis
• Added Lab 12 submission report and supporting artifacts

Testing

Executed runtime validation commands:

sudo nerdctl run --rm \
  --runtime io.containerd.kata.v2 \
  alpine:3.19 uname -a

Validated VM isolation:

sudo nerdctl run --rm \
  --runtime io.containerd.kata.v2 \
  alpine:3.19 dmesg | head

Verified:

• Kata runtime launches successfully
• Guest kernel boots correctly
• KVM virtualization detected
• containerd integration works properly

Artifacts & Screenshots

• submission12.md
• labs/lab12/analysis/kernel-comparison.txt
• labs/lab12/kata/cpu.txt
• labs/lab12/kata/kernel.txt
• labs/lab12/runc/health.txt
• labs/lab12/setup/kata-built-version.txt

Checklist

• Clear PR title
• Docs updated if needed
• No secrets or large temp files committed