---
# System prepended metadata

title: Potential projects for LFX Summer Term

---

# Potential projects for LFX Summer Term

### Fuzz testing KA
- Haven't picked it up yet as no one in the mentors team has enough understanding of fuzz testing

### Podman support
- Containers can be run by both root and rootless users
    - Podman uses user namespaces for this
    - Initially we can support root containers, think about rootless later
- OCI Hooks supported
- Podman == unorchestrated only
    
#### Side Notes
- Kubernetes can't use podman as it's runtime, podman doesn't implement CRI
- Podman desktop has this extension similar to docker desktop for running K8s (similar to KinD) which is often confused for podman with Kubernetes.

### Extending features to non-k8s
- `karmor recommend` for host policies and unorchestrated containers
- Dynamic configuration for default posture, visibility - [Issue](https://github.com/kubearmor/KubeArmor/issues/1303)
    - Through kubearmor.yaml config file
    - Through new gRPC service
    - karmor commands for the same
- Improve `karmor profile` for host logs
- `karmor install` for VMs
- Policy validation for non-k8s

### KubeArmor dashboards
- Application behaviour dashboards in progress in LFX term 1
    - [x] Node graph
    - [x] Network
- KubeArmor state/Lens plugin will be part of LFX term 3
    - Completion in term 1 might not be possible

### LXC/LXD support (doesn't seem possible)
- [Go client](https://github.com/lxc/go-lxc) but uses LGPL v2.1
- CRI friendly shims (unmaintained)
    - [LXE](https://github.com/automaticserver/lxe)
    - [lxcri](https://github.com/lxc/lxcri)

# Taken up
### Improve CI and test coverage (Tasks according to decreasing priority)
- Testing host protection in
    - K8s - [Issue](https://github.com/kubearmor/KubeArmor/issues/1625)
    - Non-k8s
- Testing container protection in
    - Non-k8s
- Testing on ARM - [Issue](https://github.com/kubearmor/KubeArmor/issues/1228).
    - Note: the attached PR only runs apparmor and BPF LSM on the self hosted runner
- CI workflows refactoring
    - Using common workflow for building images to reduce time
- Platforms
    - Testing minikube, KinD etc - [Issue](https://github.com/kubearmor/KubeArmor/issues/1417) 
- Improving docs on creating tests