Difference between revisions of "Download/criu/4.3"
Jump to navigation
Jump to search
(Created page with "<!-- **** FOR STEPS NEEDED TO MAKE A RELEASE, SEE https://criu.org/Releasing Use {{Bug|123}} to link to a github issue --> 400px|right {{Release|...") |
|||
| (2 intermediate revisions by the same user not shown) | |||
| Line 17: | Line 17: | ||
* crit: Add offline compress and decompress commands for memory images | * crit: Add offline compress and decompress commands for memory images | ||
* criu: Add collection and restoration of timer_slack_ns per thread | * criu: Add collection and restoration of timer_slack_ns per thread | ||
| + | * plugins/cuda: Add CUDA Driver API checkpoint backend and GPU device mapping on restore. | ||
| + | * service/page-xfer: Support image streaming (--stream) over RPC and incremental streamed dumps with --prev-images-dir | ||
| + | * criu: Support dumping and restoring inet socket UIDs | ||
| + | * plugins: Pass namespaced PLUGIN.NAME=VALUE options to plugins as argv | ||
| + | * rpc/libcriu: Expose page-server TLS options, --stream, --lazy-pages, and cgroup options in libcriu | ||
=== Bugfixes === | === Bugfixes === | ||
| Line 29: | Line 34: | ||
* fsnotify: Fix memory and file descriptor leaks in inotify/fanotify error paths | * fsnotify: Fix memory and file descriptor leaks in inotify/fanotify error paths | ||
* pycriu: Fix self-dump failure when explicit PID is provided | * pycriu: Fix self-dump failure when explicit PID is provided | ||
| + | * seize/compel: Always trace clone/fork/vfork on seized tasks and verify no new tasks were created during CHECKPOINT_DEVICES | ||
=== Improvements === | === Improvements === | ||
| Line 40: | Line 46: | ||
* docs: Major overhaul and export of "Under the Hood" architecture documentation | * docs: Major overhaul and export of "Under the Hood" architecture documentation | ||
* ci: Consolidate test workflows, shard test suites, and add Lima-based kernel test jobs | * ci: Consolidate test workflows, shard test suites, and add Lima-based kernel test jobs | ||
| + | * docs: Add CRIU image security and workload security considerations guides | ||
| + | * page-xfer: Support sending compressed page-server data over TLS | ||
| + | * cgroup: Clone /sys/fs/cgroup mount with OPEN_TREE_CLONE when dumping cgroup v2 | ||
Latest revision as of 18:10, 16 October 2026
| Tarball: | criu-4.3.tar.gz |
| Version: | 4.3 |
| Released: | |
| GIT tag: | v4.3 |
New features[edit]
- Memory compression: Support for LZ4 memory page and block compression with multi-threaded decompression
- Support for AArch64 / ARM64 Guarded Control Stack (GCS)
- Parallelize memfd and anonymous shared memory content restore via async daemon (asyncd)
- Restorer: Restore VMA pages with Linux native AIO
- Add --image-io-mode option to support O_DIRECT reads/writes for pages images
- plugins/amdgpu: Support checkpoint and restore of DRM buffer objects and DMA-BUF file descriptors
- Support for Linux kernel binfmt_misc sandboxing
- Add UPDATE_INETSK hook for socket address rewrite during restore
- crit: Add offline compress and decompress commands for memory images
- criu: Add collection and restoration of timer_slack_ns per thread
- plugins/cuda: Add CUDA Driver API checkpoint backend and GPU device mapping on restore.
- service/page-xfer: Support image streaming (--stream) over RPC and incremental streamed dumps with --prev-images-dir
- criu: Support dumping and restoring inet socket UIDs
- plugins: Pass namespaced PLUGIN.NAME=VALUE options to plugins as argv
- rpc/libcriu: Expose page-server TLS options, --stream, --lazy-pages, and cgroup options in libcriu
Bugfixes[edit]
- restore: Fix exit code and wait status truncation for zombie processes
- restorer/pagemap: Detect EOF on truncated pages file to prevent infinite loops
- file-lock: Fix type confusion in broken read lease restore
- soccr: Restore TCP_REPAIR_WINDOW before TCP_SEND_QUEUE to avoid window collapse
- sk-queue: Fix SCM restore for packets containing both SCM_RIGHTS and SCM_CREDENTIALS
- sk-unix: Fix mutex deadlock on connect failure in standalone restore
- pipes: Restore pipe ownership to fix /proc/self/fd access permissions
- compel: Fix heap alignment for structs with XSAVE state
- fsnotify: Fix memory and file descriptor leaks in inotify/fanotify error paths
- pycriu: Fix self-dump failure when explicit PID is provided
- seize/compel: Always trace clone/fork/vfork on seized tasks and verify no new tasks were created during CHECKPOINT_DEVICES
Improvements[edit]
- compel/infect: Optimize task interception and stop tasks without hardware breakpoints
- restorer: Switch thread synchronization to atomic operations
- restore: Parallelize task stopping in attach_to_tasks and catch_tasks
- fsnotify: Add overlayfs directory walk fallback for inotify watches
- sockets: Support dumping and restoring ucred for Unix and Netlink sockets
- coredump: Enable coredump generation on riscv64
- contrib: Add reference client and test suite for criu-service
- docs: Major overhaul and export of "Under the Hood" architecture documentation
- ci: Consolidate test workflows, shard test suites, and add Lima-based kernel test jobs
- docs: Add CRIU image security and workload security considerations guides
- page-xfer: Support sending compressed page-server data over TLS
- cgroup: Clone /sys/fs/cgroup mount with OPEN_TREE_CLONE when dumping cgroup v2