1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
|
#ifndef __CR_OPTIONS_H__
#define __CR_OPTIONS_H__
#include <stdbool.h>
#include "common/config.h"
#include "common/list.h"
#include "int.h"
#include "image.h"
/* Configuration and CLI parsing order defines */
#define PARSING_GLOBAL_CONF 1
#define PARSING_USER_CONF 2
#define PARSING_ENV_CONF 3
#define PARSING_CMDLINE_CONF 4
#define PARSING_ARGV 5
#define PARSING_RPC_CONF 6
#define PARSING_LAST 7
#define SET_CHAR_OPTS(__dest, __src) \
do { \
char *__src_dup = xstrdup(__src); \
if (!__src_dup) \
abort(); \
xfree(opts.__dest); \
opts.__dest = __src_dup; \
} while (0)
/*
* CPU capability options.
*/
#define CPU_CAP_NONE (0u << 0) /* Don't check capability at all */
#define CPU_CAP_FPU (1u << 0) /* Only FPU capability required */
#define CPU_CAP_CPU (1u << 1) /* Strict CPU capability required */
#define CPU_CAP_INS (1u << 2) /* Instructions CPU capability */
#define CPU_CAP_IMAGE (1u << 3) /* Write capability on dump and read on restore*/
#define CPU_CAP_ALL (CPU_CAP_FPU | CPU_CAP_CPU | CPU_CAP_INS)
#define CPU_CAP_DEFAULT (CPU_CAP_FPU | CPU_CAP_INS)
struct cg_root_opt {
struct list_head node;
char *controller;
char *newroot;
};
/*
* Pre-dump variants
*/
#define PRE_DUMP_SPLICE 1 /* Pre-dump using parasite */
#define PRE_DUMP_READ 2 /* Pre-dump using process_vm_readv syscall */
/*
* Cgroup management options.
*/
#define CG_MODE_IGNORE (0u << 0) /* Zero is important here */
#define CG_MODE_NONE (1u << 0)
#define CG_MODE_PROPS (1u << 1)
#define CG_MODE_SOFT (1u << 2)
#define CG_MODE_FULL (1u << 3)
#define CG_MODE_STRICT (1u << 4)
#define CG_MODE_DEFAULT (CG_MODE_SOFT)
/*
* Network locking method
*/
enum NETWORK_LOCK_METHOD {
NETWORK_LOCK_IPTABLES,
NETWORK_LOCK_NFTABLES,
};
#define NETWORK_LOCK_DEFAULT NETWORK_LOCK_IPTABLES
/*
* Ghost file size we allow to carry by default.
*/
#define DEFAULT_GHOST_LIMIT (1 << 20)
#define DEFAULT_TIMEOUT 10
enum FILE_VALIDATION_OPTIONS {
/*
* This constant indicates that the file validation should be tried with the
* file size method by default.
*/
FILE_VALIDATION_FILE_SIZE,
/*
* This constant indicates that the file validation should be tried with the
* build-ID method by default.
*/
FILE_VALIDATION_BUILD_ID
};
/* This constant dictates which file validation method should be tried by default. */
#define FILE_VALIDATION_DEFAULT FILE_VALIDATION_BUILD_ID
struct irmap;
struct irmap_path_opt {
struct list_head node;
struct irmap *ir;
};
enum criu_mode {
CR_UNSET = 0,
CR_DUMP,
CR_PRE_DUMP,
CR_RESTORE,
CR_LAZY_PAGES,
CR_CHECK,
CR_PAGE_SERVER,
CR_SERVICE,
CR_SWRK,
CR_DEDUP,
CR_CPUINFO,
CR_EXEC_DEPRECATED,
CR_SHOW_DEPRECATED,
};
struct cr_options {
int final_state;
int check_extra_features;
int check_experimental_features;
union {
int restore_detach;
bool daemon_mode;
};
int restore_sibling;
bool ext_unix_sk;
int shell_job;
int handle_file_locks;
int tcp_established_ok;
int tcp_close;
int evasive_devices;
int link_remap_ok;
int log_file_per_pid;
int pre_dump_mode;
bool swrk_restore;
char *output;
char *root;
char *pidfile;
char *freeze_cgroup;
struct list_head ext_mounts;
struct list_head inherit_fds;
struct list_head external;
struct list_head join_ns;
char *libdir;
int use_page_server;
unsigned short port;
char *addr;
int ps_socket;
int track_mem;
char *img_parent;
int auto_dedup;
unsigned int cpu_cap;
int force_irmap;
char **exec_cmd;
unsigned int manage_cgroups;
char *new_global_cg_root;
char *cgroup_props;
char *cgroup_props_file;
struct list_head new_cgroup_roots;
char *cgroup_yard;
bool autodetect_ext_mounts;
int enable_external_sharing;
int enable_external_masters;
bool aufs; /* auto-detected, not via cli */
bool overlayfs;
#ifdef CONFIG_BINFMT_MISC_VIRTUALIZED
bool has_binfmt_misc; /* auto-detected */
#endif
size_t ghost_limit;
struct list_head irmap_scan_paths;
bool lsm_supplied;
char *lsm_profile;
char *lsm_mount_context;
unsigned int timeout;
unsigned int empty_ns;
int tcp_skip_in_flight;
bool lazy_pages;
char *work_dir;
int network_lock_method;
int skip_file_rwx_check;
/*
* When we scheduler for removal some functionality we first
* deprecate it and it sits in criu for some time. By default
* the deprecated stuff is not working, but it's still possible
* to turn one ON while the code is in.
*/
int deprecated_ok;
int display_stats;
int weak_sysctls;
int status_fd;
bool orphan_pts_master;
int stream;
pid_t tree_id;
int log_level;
char *imgs_dir;
char *tls_cacert;
char *tls_cacrl;
char *tls_cert;
char *tls_key;
int tls;
int tls_no_cn_verify;
/* This stores which method to use for file validation. */
int file_validation_method;
/* Shows the mode criu is running at the moment: dump/pre-dump/restore/... */
enum criu_mode mode;
int mntns_compat_mode;
/* Remember the program name passed to main() so we can use it in
* error messages elsewhere.
*/
char *argv_0;
/*
* This contains the eUID of the current CRIU user. It
* will only be set to a non-zero value if CRIU has
* the necessary capabilities to run as non root.
* CAP_CHECKPOINT_RESTORE or CAP_SYS_ADMIN
*/
uid_t uid;
/* This contains the value from /proc/pid/status: CapEff */
u32 cap_eff[CR_CAP_SIZE];
};
extern struct cr_options opts;
extern char *rpc_cfg_file;
extern int parse_options(int argc, char **argv, bool *usage_error, bool *has_exec_cmd, int state);
extern int check_options(void);
extern void init_opts(void);
#endif /* __CR_OPTIONS_H__ */
|
