Feature/lab12

[fayz131]

Goal

Complete Lab 12 on Kata Containers sandboxing and compare VM-backed isolation with the default runc runtime.

Changes

• Installed and configured containerd + nerdctl
• Installed Kata Containers runtime assets
• Configured io.containerd.kata.v2 runtime for containerd
• Ran OWASP Juice Shop with runc
• Collected runtime diagnostics and virtualization checks
• Documented Kata runtime limitations inside VirtualBox environment
• Added submission12.md with analysis and findings

Testing

• Verified containerd and nerdctl installation
• Verified Kata shim installation:
  • containerd-shim-kata-v2 --version
• Tested Juice Shop availability:
  • curl http://localhost:3000
  • HTTP 200 received
• Tested Kata runtime execution
• Verified missing virtualization support:
  • egrep -c '(vmx|svm)' /proc/cpuinfo
  • /dev/kvm missing

Artifacts & Screenshots

Artifacts included under:

• labs/lab12/setup/
• labs/lab12/kata/
• labs/lab12/runc/
• labs/submission12.md

---

Checklist

• PR title is clear and descriptive
• Documentation updated if needed
• No secrets, temporary files, or large binaries included