13-15 November 2018
America/Vancouver timezone

Securely Migrating Untrusted Workloads with CRIU

13 Nov 2018, 15:15
Junior-Ballroom-AB (Sheraton Vancouver Wall Center)


Sheraton Vancouver Wall Center



Radoslaw Burny (Google)


While deploying a CRIU-based transparent checkpoint/restore task migration infrastructure at Google, one of the toughest challenges we faced was security. The infrastructure views the applications it runs as inherently untrusted, yet CRIU requires expansive privileges at times in order to successfully checkpoint and restore workloads. We found many cases where malignant workloads could trick CRIU into elevating their privileges during checkpoint/restore. We present our experience in securely checkpointing and restoring untrusted workloads with minimal Linux privileges while enabling the bulk of CRIU functionality. We'll discuss changes required to enable this usecase and make the case for an increased emphasis on security in checkpoint/restore.

Presentation Materials

Platinum sponsors

Gold sponsors

Silver sponsors

Catchbox sponsor
T-Shirt sponsor
Your browser is out of date!

Update your browser to view this website correctly. Update my browser now