[CRIU] [PATCH v5 2/3] Do not error out in RPC mode with wrong config file entries

Andrei Vagin avagin at gmail.com
Sat Dec 29 01:41:38 MSK 2018


On Thu, Dec 27, 2018 at 02:07:56PM +0000, Radostin Stoyanov wrote:
> On 26/12/2018 21:42, Andrei Vagin wrote:
> >> Relates: https://github.com/checkpoint-restore/criu/issues/578
> >>
> >> If the config parser finds a unknown option in the configuration file,
> >> the wrong option is printed out and CRIU exits.
> >>
> >> In RPC mode this is not the best thing to do, as CRIU might not be able
> >> to print the message to the user.
> > It is a bad explanation, because with your first patch the user will see
> > errors. I am not sure why we need to ignore unknown options in config
> > files. It looks dangerous, because the user can do a typo and will not
> > notice it.
> >
> A user could make a typo and they should be able to notice it in the log
> file but
> if CRIU exits with an error, this will break the checkpoint/restore
> functionality of
> container engines.
> 
> An example of a software that has such behaviour is sshd. If a user
> makes a typo in
> the /etc/ssh/sshd_config file, after "systemctl restart sshd", they will
> no longer be
> able to connect via ssh. Although, for security reasons, the behaviour
> of sshd
> might be appropriate, I think that in the case of CRIU, showing a
> message, instead
> of exiting with an error, would be more user-friendly.

Yes and no. I understand the sshd reasons, but they can be applied to
criu restore, but not to criu dump, IMHO.

Our goal is to not loose states of processes:
1. criu dump doesn't have to be destructive:
  * in case of any error, processes have to continue running
  * it is better to fail rather than dump wrong or incomplete state

2. sometimes we really may want to restore processes even if there is
some problem

> 
> Radostin


More information about the CRIU mailing list