Files
k7/ROADMAP.md
G 13fafe0997 Release 0.4.0
Per-key node pins, k7d-fc pause/resume/exec, and HA-soak fixes. Playbook
pins k7d 0.7.0. GitHub .deb, Launchpad PPA, and PyPI k7-sdk are 0.4.0.
2026-09-19 23:22:14 +02:00

1.9 KiB

Project Roadmap

Where K7 is headed — for contributors and operators.


Current focus

Release engineering: keep the apt/PPA, GHCR k7-api, and PyPI k7-sdk pipelines current with main (PPA, GitHub .deb, and PyPI k7-sdk are 0.4.0).


Recently shipped

  • Multi-node Ansible, Longhorn topology, HA / cross-node tests
  • Cilium CNI + FQDN egress
  • API + SDK parity: pause / resume / fork
  • Snapshot lifecycle + GC; restore from VolumeSnapshot
  • CLI → API by default; k7 api / k7 dev api rebuild
  • Docker-in-VM sidecar + bench harness
  • First-class --docker (guest dockerd on k7d / k7d-fc; docker-vehicle on Kata)
  • Firecracker jailer
  • k7d-fc backend (k7d driving stock Firecracker + jailer)
  • Python SDK as k7-sdk / k7_sdk (katakate deprecated)
  • k7d backend install path (public Katakate/k7d GitHub Releases; playbook pin 0.7.0)
  • HTTPS-by-default for k7-api (Caddy sidecar, cluster CA)
  • Network security hardening: cluster-wide sandbox→platform isolation, opt-in sandbox ingress / --expose-port, Hubble, and a source-CIDR allowlist for the API NodePort. Tetragon was evaluated and rejected

Next goals

  • PPA / GHCR / PyPI cut of the unreleased work (HTTPS, --docker, k7d-fc)
  • Optional macOS CLI artifacts (tarball / Homebrew) — after the above

Future work

  • GPU passthrough support
  • Cross-node mobility of snapshots / forks for the k7d backend (kql already moves state across nodes via Longhorn)
  • AppArmor integration
  • CI/CD deployment tests on every public tag
  • TEE support; custom rootfs; persistent in-API interpreter

How to contribute

  1. Open a Discussion or Issue
  2. Reference the roadmap item
  3. See CONTRIBUTING.md

Last updated: September 2026