feat(lab12): kata vs runc isolation + perf + escape PoC

[PollyS6]

Goal

Kata Containers

Changes

-submissions/lab12.md

Testing

• Commands:
• diff labs/lab12/results/runc-devs.txt labs/lab12/results/kata-devs.txt
• Observed output:
• host exposes 200+ devices; Kata exposes only 15

Artifacts & Screenshots

• https://github.com/PollyS6/DevSecOps-Intro/blob/feature/lab12/submissions/lab12.md

Checklist

• Title is clear (feat(labN): style)
• No secrets/large temp files committed
• Submission file at submissions/labN.md exists
• Task 1 — Kata installed; both runtimes run; kernel diff documented
• Task 2 — Isolation + 5-run startup + I/O benchmark with trade-off analysis
• Bonus — Escape PoC succeeds on runc, fails on Kata (with host-side verification)