Container Live Migration
Demonstrates container Live Migration and evaluates key implications for security practitioners.
Summary
Overview: The difficult task to checkpoint and restore a process is used in many container runtimes to implement container live migration. This talk will give details how CRIU is able to checkpoint and restore processes, how it is integrated in different container runtimes and which optimizations CRIU offers to decrease the downtime during container migration.
In this talk I want to provide details how CRIU checkpoints and restores a process. Starting from ptrace() to pause the process, how parasite code is injected into the process to checkpoint the process from its own address space. How CRIU transfo Details: rms itself to the restored process during restore. How SELinux and seccomp is restored.
I also want to give an overview how CRIU uses userfaultfd for lazy migration and dirty page tracking for pre-copy migration.
I want to end this talk with an overview about how CRIU is integrated in different container runtimes to implement container live migration.
Related talks
The Linux Foundation·13 min
Provides lightning Talk: Containers Live Migration: Whats There, Whats Missing, Whats... Daniel Simionato and evaluates key implications for security practitioners.
The Linux Foundation·28 min
Dragan Stancevic
Demonstrates VM live migration over CXL memory and evaluates key implications for security practitioners.
The Linux Foundation·27 min
Wei Wang · Intel Corp.
Evaluates TDX Live Migration and evaluates key implications for security practitioners.