509
edits
Changes
mLine 67:
Line 67: + − === Forensic Analysis ===+ + + − Once a checkpoint has been created, it's content can be analysed with the <code>checkpointctl</code> tool.+ + + − This tool provides a <code>list</code> and <code>show</code> commands that can be used to display an overview of the checkpoints stored in <code>/var/lib/kubelet/checkpoints</code>.+ + +
→Kubelet Checkpoint API
</pre>
</pre>
=== Forensic Analysis ===
Once a container checkpoint has been created, it's content can be analysed with the help of the [https://github.com/checkpoint-restore/checkpointctl checkpointctl] tool.
<code>checkpointctl</code> provides <code>list</code> and <code>show</code> commands that can be used to display an overview of the existing checkpoints stored in <code>/var/lib/kubelet/checkpoints</code>.
<pre>
sudo checkpointctl list
</pre>
<pre>
sudo checkpointctl show /var/lib/kubelet/checkpoints/checkpoint-counters_default-counter-2025-11-07T11:58:58Z.tar
</pre>