mir/criu
2
0
Fork 0
mirror of https://github.com/checkpoint-restore/criu synced 2025-08-22 01:51:51 +00:00
Code Issues Releases Wiki Activity
criu/images/inventory.proto

22 lines
456 B
Protocol Buffer
Raw Normal View History

Add missing "proto2" syntax marker .. to address protobuf 3.x proto-c warnings Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>
2016-07-01 21:49:54 +02:00
syntax = "proto2";
img: Save crtools process IDs in inventory On restore we'll need to know whether the root task should be cloned in new set of namespaces. It's natural to do it by comparing root ids with some "other-world" IDs. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2013-01-17 16:56:24 +04:00
import "core.proto";
lsm: add support for c/ring LSM profiles This patch adds support for checkpoint and restore of two linux security modules (apparmor and selinux). The actual checkpoint or restore code isn't that interesting, other than that we have to do the LSM restore in the restorer blob since it may block any number of things that we want to do as part of the restore process. I tried originally to get this to work using libraries in the restorer blob, but I could _not_ get things to work correctly (I assume I was doing something wrong with all the static linking, you can see my draft attempts here: https://github.com/tych0/criu/commits/apparmor-using-libraries ). I can try to resurrect this if it makes more sense, to do it that way, though. v2: lsm_profile lives in creds.proto instead of the task core, look in a more canonical place for selinuxfs and don't try to special case any selinux profile names. v3: only allow unconfined selinux profiles Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2015-05-06 16:18:42 -06:00
enum lsmtype {
NO_LSM = 0;
SELINUX = 1;
APPARMOR = 2;
}
images: Introduce the top-level file -- inventory Currently we store the images version in the core file. This is bad, since core file describes a single process (or thread) and says nothing about the images set as a whole (let alone the fact that it's being parsed too late). Thus introduce the inventory image file which describes the image set the way we need (want). For now the only entry in it is the images version. In the future it can be extended. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-07-19 17:37:25 +04:00
message inventory_entry {
proto: Align members and numbers We're aligning members and number in protobuf files from the very beginning for readability sake. So fix up newer ones which were not. Also use /* */ comments, not //. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-02-01 12:27:00 +04:00
required uint32 img_version = 1;
optional bool fdinfo_per_id = 2;
optional task_kobj_ids_entry root_ids = 3;
optional bool ns_per_id = 4;
image: Add bits and pieces for cgroups image The exact structure of the image will be revealed in the next patch(es). What is important here, is that cgroup image is somewhat new. It will likely contain arrays of objects of different types, so I introduce the "header" object, that will link these arrays using pb repeated fields. This will help us to avoid many image files for different cgroup objects and will make the amount of write()-s required be 1. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2014-05-08 16:33:59 +04:00
optional uint32 root_cg_set = 5;
lsm: add support for c/ring LSM profiles This patch adds support for checkpoint and restore of two linux security modules (apparmor and selinux). The actual checkpoint or restore code isn't that interesting, other than that we have to do the LSM restore in the restorer blob since it may block any number of things that we want to do as part of the restore process. I tried originally to get this to work using libraries in the restorer blob, but I could _not_ get things to work correctly (I assume I was doing something wrong with all the static linking, you can see my draft attempts here: https://github.com/tych0/criu/commits/apparmor-using-libraries ). I can try to resurrect this if it makes more sense, to do it that way, though. v2: lsm_profile lives in creds.proto instead of the task core, look in a more canonical place for selinuxfs and don't try to special case any selinux profile names. v3: only allow unconfined selinux profiles Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2015-05-06 16:18:42 -06:00
optional lsmtype lsmtype = 6;
inventory: save uptime to know when dump had happened We want to use a simple fact: If we have an alive process in a pstree we want to dump, and a starttime of that process is less than pre-dump's timestamp (taken while all processes were freezed), then these exact process existed (100% sure) at the time of these pre-dump and the process' memory was dumped in images. So save inventory image on pre-dump and put there an uptime. https://jira.sw.ru/browse/PSBM-67502 v9: improve comment, put uptime to ivnentory image as 1) where is no stats in parent images directory if --work-dir option is set to something different then images directory, 2) stats-dump is not an image and it is a bad practice to put there data required for restoring. v10:s/u_int64_t/uint64_t/ Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Signed-off-by: Andrei Vagin <avagin@virtuozzo.com>
2018-04-06 10:31:28 +03:00
optional uint64 dump_uptime = 8;
Handling iov generation for non-PROT_READ regions Skip iov-generation for regions not having PROT_READ, since process_vm_readv syscall can't process them during "read" pre-dump. Handle random order of "read" & "splice" pre-dumps. Signed-off-by: Abhishek Dubey <dubeyabhishek777@gmail.com> Signed-off-by: Andrei Vagin <avagin@gmail.com>
2019-10-03 19:39:19 +05:30
optional uint32 pre_dump_mode = 9;
tcp: allow to specify --tcp-close on dump In this case, states of established tcp connections will not be dumped and they will not be blocked. This will be useful in case of snapshots, when we don't need to restore tcp connections. Signed-off-by: Andrei Vagin <avagin@gmail.com>
2020-09-09 19:39:53 +03:00
optional bool tcp_close = 10;
images: Introduce the top-level file -- inventory Currently we store the images version in the core file. This is bad, since core file describes a single process (or thread) and says nothing about the images set as a whole (let alone the fact that it's being parsed too late). Thus introduce the inventory image file which describes the image set the way we need (want). For now the only entry in it is the images version. In the future it can be extended. Signed-off-by: Pavel Emelyanov <xemul@parallels.com>
2012-07-19 17:37:25 +04:00
}
Reference in New Issue Copy Permalink