Incus vs Kata Containers

Incus is free software for managing system containers, application containers, and virtual machines. Instances can share storage and networking, and administrators can manage them through a command-line tool, REST API, or third-party integrations. The software supports snapshots, backup and recovery, migration, configurable storage pools and networks, and resource controls. The project describes its API as suitable for use from a laptop through clusters of thousands of compute nodes. Documented integrations include Terraform, OpenTofu, Ansible, Packer, Distrobuilder, GARM, Kubernetes Cluster API, and Incant. The daemon runs on Linux; client applications are available for Windows and macOS, with FreeBSD client packages also listed. Upstream does not directly provide packages, so installation is through Linux distributions, third-party repositories, or source. Incus is developed under the Apache 2 license. Containers are unprivileged by default, but access to the Unix socket grants full control, so it should be limited to trusted users. The 6.0 LTS release is supported until June 2029; feature releases are normally supported until the next release.

Kata Containers is a free, open-source Linux container runtime that uses lightweight virtual machines for workload isolation while remaining compatible with the container ecosystem. Each workload runs in a dedicated kernel, separating network, I/O, and memory; hardware virtualization can provide an additional defense layer. The runtime supports OCI container images, the Kubernetes CRI interface, and integrations with Docker and Kubernetes. Supported hypervisors include QEMU, Cloud Hypervisor, and Firecracker. Listed hardware includes Nvidia GPU, FPGA, QAT, RDMA, and SR-IOV, with x86_64, aarch64, ppc64le, and s390x architectures. Kata requires nested virtualization or bare metal, and kata-check can check host capability. Installation guides cover CentOS, Debian, Fedora, OpenSUSE, RHEL, SLES, and Ubuntu. Listed cloud platforms include Amazon Web Services, Microsoft Azure, Google Compute Engine, and Vexxhost OpenStack Cloud. The Apache 2.0 license permits use and distribution. Only the current monthly release series receives security fixes; older releases are unsupported and there are no long-term-support branches.