As I understand, Kata Containers
Kata Container build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers but provide the workload isolation and security advantages of VMs
On the other hand, gvisor
gVisor is a user-space kernel for containers. It limits the host kernel surface accessible to the application while still giving the application access to all the features it expects.
As I believe, both of these technology trying to add linux space into containers in order to enhance security.
My question is How do they differ from each other ? Is there overlapping in functionalities?
From what I gather:
Kata Containers
gVisor