# Potential projects for LFX Summer Term ### Fuzz testing KA - Haven't picked it up yet as no one in the mentors team has enough understanding of fuzz testing ### Podman support - Containers can be run by both root and rootless users - Podman uses user namespaces for this - Initially we can support root containers, think about rootless later - OCI Hooks supported - Podman == unorchestrated only #### Side Notes - Kubernetes can't use podman as it's runtime, podman doesn't implement CRI - Podman desktop has this extension similar to docker desktop for running K8s (similar to KinD) which is often confused for podman with Kubernetes. ### Extending features to non-k8s - `karmor recommend` for host policies and unorchestrated containers - Dynamic configuration for default posture, visibility - [Issue](https://github.com/kubearmor/KubeArmor/issues/1303) - Through kubearmor.yaml config file - Through new gRPC service - karmor commands for the same - Improve `karmor profile` for host logs - `karmor install` for VMs - Policy validation for non-k8s ### KubeArmor dashboards - Application behaviour dashboards in progress in LFX term 1 - [x] Node graph - [x] Network - KubeArmor state/Lens plugin will be part of LFX term 3 - Completion in term 1 might not be possible ### LXC/LXD support (doesn't seem possible) - [Go client](https://github.com/lxc/go-lxc) but uses LGPL v2.1 - CRI friendly shims (unmaintained) - [LXE](https://github.com/automaticserver/lxe) - [lxcri](https://github.com/lxc/lxcri) # Taken up ### Improve CI and test coverage (Tasks according to decreasing priority) - Testing host protection in - K8s - [Issue](https://github.com/kubearmor/KubeArmor/issues/1625) - Non-k8s - Testing container protection in - Non-k8s - Testing on ARM - [Issue](https://github.com/kubearmor/KubeArmor/issues/1228). - Note: the attached PR only runs apparmor and BPF LSM on the self hosted runner - CI workflows refactoring - Using common workflow for building images to reduce time - Platforms - Testing minikube, KinD etc - [Issue](https://github.com/kubearmor/KubeArmor/issues/1417) - Improving docs on creating tests