Kubernetes and Checkpoint/Restore

on YouTube ↗39m

" summary

Claims that CRIU-based checkpoint/restore now works end-to-end in Kubernetes (merged for kubernetes 1.25), using kubelet APIs to call containerd/crio which invoke CRIU to produce tarball images pushed to registries. Demos show a stateful Python counter surviving reboot, fast startup by importing checkpoints and spawning multiple clones, and migration via registry restore; interactive migration still shows ~4s downtime. Implementation uses injected parasite code, respects PID namespaces, and restricts checkpoint archives to root for security.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 0:21Project background
3. 3:12Technical and use cases
4. 13:53Reboot and save demo
5. 16:47Quick startup demo
6. 21:13Live migration demo
7. 27:28CRIU internals
8. 35:07Future and conclusion

" related talks

• 26mKubernetes and Checkpoint RestoreAdrian Reber · KubeCon + CloudNativeCon North America 2021
• 27mState of Checkpoint/Restore in Kubernetes – Now With GPUsAdriane Reber · Shift 2025
• 37mTransparent, Infra-Level Checkpoint and Restore for Resilient AI/ML WorkloadsGaneshkumar Ashokavardhanan, Bernie Wu · KubeCon + CloudNativeCon Europe 2025
• 39mContainer Live MigrationAdrian Reber · DevConf.CZ 2021
• 32mForensic container checkpointing and analysisAdrian Reber · Kubernetes Community Days Zürich 2023
• 42mForensic container checkpointing and analysis - Adrian ReberAdrian Reber · ContainerDays 2023
• 32mEnd-to-End Encryption for Container Checkpointing in KubernetesRadostin Stoyanov · CloudNativeSecurityCon North America 2024
• 34mLetting Your Containers Dream of Electric SheepCyrill Troxler · KCD Zürich 2024