[CRIU] Re: [PATCH 1/4] crtools: added command-line options for reading images over network socket

[Adrian Reber]

On Thu, Aug 16, 2012 at 07:57:47PM +0400, Pavel Emelyanov wrote:
> On 08/16/2012 07:52 PM, Adrian Reber wrote:
> > On Wed, Aug 15, 2012 at 02:52:41PM +0400, Pavel Emelyanov wrote:
> >> What if we need to pass images via secure networking channel? Will we
> >> have to wire an openssl code into crtools? Just a thought -- did you
> > 
> > Either openssl or using something like stunnel or ssh port forwarding.
> 
> Then your approach with re-opening sockets will significantly increase the
> freezetime, as ssl handshake is not very fast.
> 
> >> consider an opportunity to pass to crtools an establised socket fd instead
> >> of making it open one internally?
> > 
> > No, not all.
> 
> I think it's worth looking in that direction. Like
> 
> [root at dump_onode]# crtools dump -t 1234 | ssh root at restore.node crtools restore -t 1234

Yes, that looks like a good idea. Do you want the approach I started
also? Transferring the image over an unencrypted socket like in my
patch? Or only something like your example?

		Adrian