Skip to content

Snapshot follow up items #1479

Open
2 of 2 issues completed
Open

Description

@ludfjig

The following items are follow up items after #1459 was merged


After #1465 is merged, we also have the following items

  • Support multi-layer OCI snapshot (map scratch? Determined by benchmarks) #1551

  • Support core dumps for sandboxes created from snapshots #1617

  • max_guest_log_level is not plumbed through snapshot load.

  • The backing OCI directory must not be modified, truncated, renamed over, or deleted for the lifetime of a loaded Snapshot or any MultiUseSandbox built from it. On Linux this is unenforced. On Windows the OS refuses the operation with ERROR_USER_MAPPED_FILE (1224). Firecracker has the same constraint:

    The memory file (pointed by backend_path when using File backend type,
    or pointed by mem_file_path) must be considered immutable from
    Firecracker and host point of view. It backs the guest OS memory for read
    access through the page cache. External modification to this file corrupts
    the guest memory and leads to undefined behavior.

    firecracker docs

  • Typed error variants

  • Investigate Cross-hypervisor portability

  • Huge page support

  • "Golden snapshot" testing for checking ABI breaks

  • Atomic file operation for crash safety (load/save snapshot to disk)

  • Consider adding convenience method MultiUseSandbox::from_oci (or not)

  • Docs / examples for how to use with Oras/etc etc

Activity

  1. changed the title [-]Sandbox-from-sandbox follow up[/-] [+]Sandbox-from-snapshot follow up[/+] on Jun 10, 2026
  2. changed the title [-]Sandbox-from-snapshot follow up[/-] [+]Sandbox follow up items[/+] on Jun 16, 2026
  3. changed the title [-]Sandbox follow up items[/-] [+]Snapshot follow up items[/+] on Jun 16, 2026
  4. added
    release-blockerAdd this label to an issue that should stop a release from running whilst it is open
    on Jun 24, 2026
  5. ludfjig commented on Jun 24, 2026

    @ludfjig
    ContributorAuthor

    adding release-blocker to make sure we think hard about reseeding (or not) randomness during a snapshot restore, before we maka release

  6. removed
    release-blockerAdd this label to an issue that should stop a release from running whilst it is open
    on Jun 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    lifecycle/confirmedBug is verified or proposal seems reasonable

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions