2,257
edits
Changes
Jump to navigation
Jump to search
Line 13:
Line 13: +
→Solution
* a CRIU daemon is launched in the background listening to connections to unix socket
* a CRIU daemon is launched in the background listening to connections to unix socket
* an application, that wants to checkpoint itself opens the connection and asks for it
* an application, that wants to checkpoint itself opens the connection and asks for it
** the service gets pid of the process to dump using SO_PEERCREDS socket option. This is improtaint not to ask for pid from the requestor, as malicious user may ask to dump someone else and then study its dumps.
* CRIU service spawns a process, that executes regular dump
* CRIU service spawns a process, that executes regular dump
* while dumping the connection is closed by CRIU, so application may read() the socket to wait for dump end
* while dumping the connection is closed by CRIU, so application may read() the socket to wait for dump end