Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
    Pavel Tikhomirov
    @Snorch
    Cool, Congrats!!!
    Andrei Vagin
    @avagin
    @adrian:lisas.de good job! Congrats!
    Adrian Reber
    @adrian:lisas.de
    [m]
    @mihalicyn: have you seen this: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1973620 does this mean that CRIU is again broken on Ubuntu kernels?
    Alexander Mikhalitsyn
    @mihalicyn

    Ugh, something strange happening with that. It's a long story.

    1. Andrei has filled bug https://bugs.launchpad.net/ubuntu/impish/+source/linux/+bug/1967924
      because our patch https://kernel.ubuntu.com/git/ubuntu/ubuntu-hirsute.git/commit/?id=c9dae9237803b4ae3517f9599b33c6d4b6b9c0a4
      from 2021-05-07 12:11:00 was losed

    2. They ported this patch by themself and discovered that it leads to crash:
      https://bugs.launchpad.net/ubuntu/impish/+source/linux/+bug/1967924/comments/8
      issue was successfully fixed and I've reviewed this solution:
      https://bugs.launchpad.net/ubuntu/impish/+source/linux/+bug/1967924/comments/14

    3. For some reason fix for this patch wasn't squashed into the original commit, but instead applied on top, and then kernel release was came out without fix...
      [ https://lwn.net/Articles/899420/ ]

    AFAIK, right now kernels have no this problem and contains both patches.

    Adrian Reber
    @adrian:lisas.de
    [m]
    Thanks for the overview. Good to know.
    Alexander Mikhalitsyn
    @mihalicyn
    If something gets broken with that please ping me. I'm also looking on that but...
    Alexander Mikhalitsyn
    @mihalicyn
    and this version looks like not correct because it contains additional fput(file) that doesn't needed anymore because of https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/fs/overlayfs/file.c?h=hwe-5.15-next&id=2896900e22f8212606a1837d89a6bbce314ceeda
    Alexander Mikhalitsyn
    @mihalicyn
    JFYI: I've sent new patches for Ubuntu 22.04 kernels regarding this issue with overlayfs.
    https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1967924
    NoobTracker
    @NoobTracker
    Hello, I am unable to restore a program with criu as described here: https://www.youtube.com/watch?v=kjhuzSl6JYc
    Should I post the error messages?
    Adrian Reber
    @adrian:lisas.de
    [m]
    @NoobTracker: yes please, it would probably be better to open a GitHub issue
    NoobTracker
    @NoobTracker
    okay ...
    NoobTracker
    @NoobTracker
    hm, how do I replicate it ... my memory is sooo poor
    Alexander Mikhalitsyn
    @mihalicyn

    It's not your memory fault. Bugs tend to disappear when you try to reproduce them purposefully. :D

    https://en.wikipedia.org/wiki/Young%27s_interference_experiment

    NoobTracker
    @NoobTracker
    well I forgot the commands I typed in
    anyway, reproduced it
    NoobTracker
    @NoobTracker
    issue submitted
    Radostin Stoyanov
    @rst0git
    @NoobTracker you might need to set security.sandbox.content.level to 1 in about:config as criu does not yet support checkpoint of nested IPC namespaces
    https://wiki.mozilla.org/Security/Sandbox
    NoobTracker
    @NoobTracker
    @rst0git I don't think that I'm using any mozilla products ...
    firefox is installed, but not running
    NoobTracker
    @NoobTracker
    Does criu on fedora always print out "Looks good but some kernel features are missing which, depending on your process tree, may cause dump or restore failure."?
    Radostin Stoyanov
    @rst0git
    @NoobTracker What is the output of sudo criu check without --all?
    Radostin Stoyanov
    @rst0git
    @NoobTracker It looks like this was a bug in criu. I've opened a pull request with a fix: checkpoint-restore/criu#1955
    NoobTracker
    @NoobTracker
    @rst0git Thank you. Is that the entire bug?
    Radostin Stoyanov
    @rst0git
    @NoobTracker AppArmour is not supported on Fedora by default. This was causing the apparmor_stacking check to fail and print the message you mentioned above.
    The following command can be used to confirm this: sudo criu check --feature apparmor_stacking || echo 'apparmor stacking not supported'
    NoobTracker
    @NoobTracker

    AppArmour is not supported on Fedora by default. This was causing the apparmor_stacking check to fail and print the message you mentioned above.'`

    You mean Kali, right?

    Radostin Stoyanov
    @rst0git
    I was referring to the following question: "Does criu on fedora always print out ... ?"
    NoobTracker
    @NoobTracker
    Ahh, nvm
    NoobTracker
    @NoobTracker
    I've switched to Fedora and I can still dump successfully and I can't restore.
    Alexander Mikhalitsyn
    @mihalicyn
    can you show cat restore.log | grep Error ?
    NoobTracker
    @NoobTracker
    (00.447109) pie: 2562: Error (criu/pie/restorer.c:180): can't write lsm profile -13
    (00.447363) pie: 2562: Error (criu/pie/restorer.c:1968): Restorer fail 2562
    (00.447798) Error (criu/cr-restore.c:2536): Restoring FAILED.
    Alexander Mikhalitsyn
    @mihalicyn
    cat restore.log | grep lsm
    NoobTracker
    @NoobTracker
    (00.339232) pie: 2565: restoring lsm profile (current) unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
    (00.446113) pie: 2562: restoring lsm profile (current) unconfined_u:unconfined_r:xserver_t:s0-s0:c0.c1023
    (00.447109) pie: 2562: Error (criu/pie/restorer.c:180): can't write lsm profile -13
    NoobTracker
    @NoobTracker
    seems to be related to the apparmor stuff
    is there a quick fix, can I just use another distro?
    Adrian Reber
    @adrian:lisas.de
    [m]
    This is strange. It tries to restore the selinux labels but gets permission denied. What kind of system do you have?
    NoobTracker
    @NoobTracker
    It's a VM running Fedora
    Adrian Reber
    @adrian:lisas.de
    [m]
    Self compiled criu?
    NoobTracker
    @NoobTracker
    no, it's preinstalled I think
    Adrian Reber
    @adrian:lisas.de
    [m]
    Ah
    NoobTracker
    @NoobTracker
    at least I don't remember installing it but I tend to forget relevant details
    Adrian Reber
    @adrian:lisas.de
    [m]
    I think you either need to disable selinux or change the corresponding seboolean to allow criu
    Try setenforce 0 for a quick check to see if disabling selinux helps
    NoobTracker
    @NoobTracker
    okay ...
    Alexander Mikhalitsyn
    @mihalicyn
    Are you running criu restore from the root user or not?
    NoobTracker
    @NoobTracker
    I'm using sudo <whatever>. Since criu is the reason why I'm using Linux at all, idk if that means that I'm root

    Try setenforce 0 for a quick check to see if disabling selinux helps

    That works!

    NoobTracker
    @NoobTracker
    I'm trying to snapshot a program that has a memory footprint of ~100M when executed on my Windows machine, it's running through WINE. criu gets stuck after a second. Taking the snapshot should be done after a few minutes, right?