Kata Containers
Hacker ApprovedRanked 9 of 14 container runtimes by recommenders
Open-source runtime that runs containers inside lightweight virtual machines for stronger isolation, often used on Kubernetes for sandboxing. Critics note slow nested Docker from virtio-fs limits and filesystem forwarding problems.
Open-source runtime that runs containers inside lightweight virtual machines for stronger isolation, often used on Kubernetes for sandboxing. Critics note slow nested Docker from virtio-fs limits and filesystem forwarding problems.
24 people gave an opinion
- recommend it
- 20
- criticize it
- 4
- approval share
- 83%
Recommended in 8 of 13 months
- November 2025: recommended
- December 2025: not recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: not recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 20 people recommend itNeeds 10 or more, met.
- 5 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 8 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Drop-in option for Kubernetes containers
“Kata containers with Kubernetes is an even better sandboxing option for these agents to run remotely.”
Comment from 9 Mar 2026 in “Show HN: Terminal Use (YC W26) – Vercel for filesystem-based agents” “Kata containers on k8s are almost (not quite 100%) drop in replacement.”
Comment from 1 Jun 2026 in “Codex just found a "workaround" of not having sudo on my PC” “Kata containers are the right way to go about doing sandboxing on K8s”
Comment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox” - Comment from 18 Jun 2026 in “How We Run Firecracker VMs Inside EC2 and Start Browsers in <1s”
- Comment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox”
Stronger isolation than plain containers
“It's a way to get the convenience of a container, but benefits of a virtual host.”
Comment from 5 Jan 2026 in “Sandboxing Untrusted Python” “As far as I know, Firecracker, gVisor, and Kata Containers are the solution here.”
Comment from 5 Oct 2026 in “Linux containers in 500 lines of code (2016)” “Kata containers are the right way to go about doing sandboxing on K8s”
Comment from 17 Feb 2026 in “Running NanoClaw in a Docker Shell Sandbox” - Comment from 10 Jun 2026 in “macOS Container Machines”
- Comment from 25 Feb 2026 in “Sandboxes won't save you from OpenClaw”
- Comment from 11 Nov 2025 in “The Paranoid Guide to Running Copilot CLI in a Secure Docker Sandbox”
- Comment from 8 May 2026 in “Maybe you shouldn't install new software for a bit”
What people warn about
Each mark is one comment
Slow nested Docker due to virtio-fs
“It worked well enough, but nested docker was super slow due to virtio-fs limitations.”
Comment from 28 May 2026 in “Why Ctrl+V won't paste images in Claude Code on WSL, with a fix” “It worked well enough, but nested docker was super slow due to virtio-fs limitations”
Comment from 28 May 2026 in “Why Ctrl+V won't paste images in Claude Code on WSL, with a fix” Awkward outside Kubernetes orchestration
“Kata Containers is designed for Kubernetes orchestration, not for embedding in a Python script”
Comment from 13 Dec 2025 in “BoxLite Love AI agent – SQLite for VMs: embeddable AI agent sandboxing” “Kata runs atop many things, but is a little awkward”
Comment from 11 Jan 2026 in “GPU Memory Snapshots: Supercharging Sub-Second Startup”
Other container runtimes people recommend
The four most recommended other container runtimes, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Podman | 276 | 93 | 75% | 12 | 1.5 yrs21 owners | Approved |
| OrbStack | 97 | 11 | 90% | 12 | 2 yrs3 owners | Approved |
| Apple container | 56 | 28 | 67% | 11 | — | Approved |
| gVisor | 45 | 16 | 74% | 12 | — | Approved |
| Kata ContainersThis page | 20 | 4 | 83% | 8 | — | Approved |
What people said
24 of the 27 comments that mention it, newest first. Each links to the original comment.
“Kata is HARD to make. The technical know how to make that in production is awe inspiring.”
“As far as I know, Firecracker, gVisor, and Kata Containers are the solution here.”
“dealing with filesystem forwarding issues”
“I remember putting them into production back in 2017 or so”
“Kata is decent but the attack surface it introduces makes me uncomfortable.”
“kata containers are yet another option that may apply depending on your use case”
“Kata Containers which is a CRI for running vmms like firecracker”
“Kubernetes + Kata would have helped with scaling here”
“For ultimate security, containers alone aren't enough.”
“Kata containers on k8s are almost (not quite 100%) drop in replacement.”
“It worked well enough, but nested docker was super slow due to virtio-fs limitations.”
“It worked well enough, but nested docker was super slow due to virtio-fs limitations”
“switch to Kata etc if more protection needed”
“Kata containers with Kubernetes is an even better sandboxing option for these agents to run remotely.”
“use proper VMs like Kata Containers and Firecrackers”
“Kata containers are the right way to go about doing sandboxing on K8s”
“I use Kata Containers on Kubernetes”
“The warm pool pattern for Kata VMs makes a huge difference for UX.”
“Kata runs atop many things, but is a little awkward”
“can hook with docker rather quickly”
“It's a way to get the convenience of a container, but benefits of a virtual host.”
“Kata Containers is designed for Kubernetes orchestration, not for embedding in a Python script”
“use gvisor or kata runtime for actual sandboxing”
“Kata Container doesn't support it out of the box”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.