Lab12 submission: Basanov Maxim

[scruffyscarf]

Goal

Run OWASP Juice Shop under Kata Containers to experience VM-backed container isolation, compare it with the default runc runtime, and document security/operational trade-offs.

Changes

Added labs/lab12/analysis/cpu-comparison.txt
Added labs/lab12/analysis/kernel-comparison.txt
Added labs/lab12/bench/curl-3012.txt
Added labs/lab12/bench/http-latency.txt
Added labs/lab12/bench/startup.txt
Added labs/lab12/isolation/dmesg.txt
Added labs/lab12/isolation/modules.txt
Added labs/lab12/isolation/network.txt
Added labs/lab12/isolation/proc.txt
Added labs/lab12/kata/cpu.txt
Added labs/lab12/kata/kernel.txt
Added labs/lab12/kata/test1.txt
Added labs/lab12/runc/health.txt
Added labs/lab12/setup/kata-build/kata-containers
Added labs/lab12/setup/kata-built-version.txt
Added labs/submission12.md

Testing

No testing.

Artifacts & Screenshots

labs/labs12
├── analysis
│   ├── cpu-comparison.txt
│   └── kernel-comparison.txt
├── bench
│   ├── curl-3012.txt
│   ├── http-latency.txt
│   └── startup.txt
├── isolation
│   ├── dmesg.txt
│   ├── modules.txt
│   ├── network.txt
│   └── proc.txt
├── kata
│   ├── cpu.txt
│   ├── kernel.txt
│   └── test1.txt
├── runc
│   └── health.txt
├── scripts
│   ├── configure-containerd-kata.sh
│   └── install-kata-assets.sh
└── setup
    ├── build-kata-runtime.sh
    ├── kata-build
    │   └── kata-containers
    ├── kata-built-version.txt
    └── kata-out

Checklist

• Task 1 — Kata install + runtime config
• Task 2 — runc vs kata runtime comparison
• Task 3 — Isolation tests
• Task 4 — Basic performance snapshot
• PR has a clear and descriptive title
• Documentation has been updated if necessary
• No sensitive data or large temporary files have been committed