Link-LXC-USERCR

From Linux Checkpoint / Restart Wiki
Jump to: navigation, search

Note: This page is still under construction. Feel free to fix obvious mistakes or email sukadev@linux.vnet.ibm.com.

Contents

Overview

The following instructions describe the process to build/install components necessary to checkpoint/restart (C/R) LXC containers using the C/R implementation being pushed into mainline.

The three main components to be built/installed are:

  • C/R enabled Linux kernel
  • USERCR - the user-space component of checkpoint/restart
  • LXC

Each of these components must currently be built from source from their git trees. The instructions below describe how to get the sources, checkout appropriate versions, build/install the components.

Terminology

Statefile / checkpoint-image - this refers to the file in which the application state is saved after a successful checkpoint.

LXC - This refers to implementation of linux containers. Specifically this refers to the git tree git://lxc.git.sourceforge.net/gitroot/lxc/lxc.

Stack - The C/R functionality has only been tested with these specific sets of commit ids for the three components (kernel, USERCR and LXC). In this document a stack refers to a set of matching commit ids and is identified by an LXC release.

USERCR - The user-space commands/library components that utilize the kernel system calls to checkpoint/restart applications. Specifically this refers to the git tree: git://www.linux-cr.org/pub/git/user-cr.git

Basic debugging of C/R

There is a strong dependency between each of these components (USERCR and Linux kernel are tightly coupled as are USERCR and LXC) so it is important to ensure the versions match up correctly. Otherwise attempts to checkpoint/restart typically fail with terse -EINVAL or -EBUSY errors.

If this happens, usually more debug information is found in dmesg output. If lxc-checkpoint fails some additional error information can be found by running

  • $ /bin/ckptinfo -ev <checkpoint-statefile>

Get sources

Get kernel, USERCR and LXC sources using following commands:

Kernel sources

   $ cd /root
   $ git clone  git://www.linux-cr.org/pub/git/linux-cr.git linux-cr

USERCR sources

   cd /root
   $ git clone git://www.linux-cr.org/pub/git/user-cr.git user-cr

LXC sources

   $ cd /root
   $ git clone git://lxc.git.sourceforge.net/gitroot/lxc/lxc lxc.git

Choose a stack

The commit ids for each of the components (kernel, USERCR, LXC) must be in sync for the entire "stack" to work correctly. In time, as new fixes go into each of these trees, new "stacks" become available. Choose a stack based on the LXC release below and use the commit ids from that stack in the build instructions to build the stack.

LXC 0.6.5 based stack

To use this stack, use the following values in the build instructions below

   - LXC_RELEASE = 0.6.5
   - KERNEL_COMMIT_ID = 0fdca57255b8b5bc9a4f107bee7f1e47d2630cb3
   - USERCR_COMMIT_ID = fa382a1758ef395858b1bea530ccdb4e1360b76f
   - LXC_COMMIT_ID = f78a1f32f41f6acbbf0b78e6498736dbd22e2301

You can use the following commands/output to verify the above commit ids.

   $ (cd /root/linux-cr && git log --pretty=short -1 $KERNEL_COMMIT_ID)
   commit 0fdca57255b8b5bc9a4f107bee7f1e47d2630cb3
   Author: Dan Smith <danms@us.ibm.com>
       Disable softirqs when taking the socket queue lock
   $ (cd /root/user-cr && git log --pretty=short -1 $USERCR_COMMIT_ID)
   commit fa382a1758ef395858b1bea530ccdb4e1360b76f
   Author: Sukadev Bhattiprolu <sukadev@linux.vnet.ibm.com>
       Add keep_frozen field to struct app_restart_args
   $ (cd /root/lxc-git && git log --pretty=short -1 $LXC_COMMIT_ID)
   commit f78a1f32f41f6acbbf0b78e6498736dbd22e2301
   Author: Daniel Lezcano <daniel.lezcano@free.fr>
       fix when console is not specified

LXC-0.7.1 based stack

To use this stack, use the following values in the build instructions

   - LXC_RELEASE = 0.7.1
   - KERNEL_COMMIT_ID = c97ab066d8f45d2458f36fdb1e457630fb5f1278
   - USERCR_COMMIT_ID = f67877308e2ff8faedf79b204b26b70f03bcd562
   - LXC_COMMIT_ID = cba56779c893aac20d42d65cfa10db966c24d9b7

You can use the following commands to verify the above commit ids

   $ (cd /root/linux-cr && git log --pretty=short -1 $KERNEL_COMMIT_ID)
   commit c97ab066d8f45d2458f36fdb1e457630fb5f1278
   Author: Dan Smith <danms@us.ibm.com>
       Fix potential restart failure on uninitialized sockets
   $ (cd /root/user-cr && git log --pretty=short -1 $USERCR_COMMIT_ID)
   commit f67877308e2ff8faedf79b204b26b70f03bcd562
   Author: Christoffer Dall <christofferdall@christofferdall.dk>
       ARM: Added user space support for c/r on ARM
   $ (cd /root/lxc-git && git log --pretty=short -1 $LXC_COMMIT_ID)
   commit cba56779c893aac20d42d65cfa10db966c24d9b7
   Author: Daniel Lezcano <daniel.lezcano@free.fr>
       lxc-0.7.1

Build/install C/R-enabled Linux kernel

Checkout appropriate kernel-commit

Find the KERNEL_COMMIT_ID for the stack/LXC-RELEASE you chose above and run following commands:

   $ cd /root/linux-cr
   $ git checkout -b test-1 $KERNEL_COMMIT_ID

Apply kernel patches

If any patches are needed for the kernel tree, they will be in the $LXC_RELEASE/kernel-patches directory of: http://lxc.sourceforge.net/patches/lxc+usercr/, where LXC_RELEASE is set above.

Get those patches, and use, say, git am -3 to apply each of the patches in the directory to the kernel tree.

   $ git am -3 kernel-patches/0001-patch
   $ git am -3 kernel-patches/0002-patch
   etc

Setup kernel config

Ensure following tokens are set in the kernel .config:

  CONFIG_CHECKPOINT_SUPPORT=y
  CONFIG_SYSVIPC_CHECKPOINT=y
  CONFIG_CHECKPOINT=y
  CONFIG_NETNS_CHECKPOINT=y
  CONFIG_CHECKPOINT_DEBUG=y
  CONFIG_CGROUPS=y
  CONFIG_CGROUP_FREEZER=y
  CONFIG_NAMESPACES=y
  CONFIG_CGROUP_NS=y
  CONFIG_UTS_NS=y
  CONFIG_IPC_NS=y
  CONFIG_USER_NS=y
  CONFIG_PID_NS=y
  CONFIG_NET_NS=y
  CONFIG_FREEZER=y

To work around build issues with unexported symbols reported against this kernel version, ensure that the following symbols are each y or n, but not m: CONFIG_IPV6, CONFIG_MACVLAN, and CONFIG_VETH.

Build, install kernel

Build/install the linux kernel using the normal build procedure (make oldconfig, make, install vmlinuz, install modules, edit grub/lilo etc) and reboot on new kernel.

Reboot on new kernel

After every reboot, ensure '-o newinstance' mount option to /dev/pts works (see Documentation/filesystems/devpts.txt for details). In short, run following commands on each reboot:

  $ rm /dev/ptmx
  $ ln -s pts/ptmx /dev/ptmx
  $ chmod 666 /dev/pts/ptmx

Disable nscd if it is running -- nscd can cause file descriptors to be passed between mount namespaces, which is not supported by the current C/R code.

Build/install USERCR

Checkout appropriate USERCR commit

Find the USERCR_COMMIT_ID for the stack/LXC-RELEASE you chose above and run following commands:

   cd /root/user-cr
   $ git checkout -b test-1 $USERCR_COMMIT_ID

Apply USERCR patches

If any patches are needed for the USERCR tree, they will be available in $LXC_RELEASE/usercr-patches directory of: http://lxc.sourceforge.net/patches/lxc+usercr/, where LXC_RELEASE is set above.

Get those patches, and use, say, git am -3 to apply each of the patches in the directory to the USERCR tree.

   $ git am -3 usercr-patches/0001-patch
   $ git am -3 usercr-patches/0002-patch
   etc


Build and install USERCR binaries

Build USERCR by pointing to corresponding kernel-source tree we used above and install binaries. This should create restart.o and checkpoint.o needed by LXC, which, for now, are left in the current directory.

Note: You may need to compile checkpoint.o and restart.o with -fPIC compiler option.

   $ KERNELSRC=/root/linux-cr make 
   $ ls restart.o checkpoint.o
   restart.o   checkpoint.o
   $ make install

Build/install LXC

Checkout appropriate LXC commit

   Find the LXC_COMMIT_ID for the stack/LXC-RELEASE you chose above and run following commands:
   $ cd /root/lxc.git
   $ git checkout -b test-1 $LXC_COMMIT_ID

Apply LXC patches

Get the patch set from $LXC_RELEASE/lxc-patches directory of http://lxc.sourceforge.net/patches/lxc+usercr/, where LXC_RELEASE is set above

Apply each of the patches in the directory to the LXC git tree

   $ git am -3 lxc-patches/0001-patch
   $ git am -3 lxc-patches/0002-patch
   etc

Configure, build, install LXC binaries

Configure/build/install LXC binaries using following commands. The configure command will fail if /root/user-cr specified below, does not contain checkpoint.o, restart.o and app-checkpoint.h files

   $ ./autogen.sh
   $ ./configure --with-libcr=/root/user-cr
   $ make
   $ make install

Checkpoint/restart a simple LXC container

Checkpoint/restart a simple container to verify a successful build of the LXC and Checkpoint/restart stack.

   $ lxc-execute --name foo --rcfile lxc-no-netns.conf -- /bin/sleep 1000
   $ lxc-checkpoint --name foo --statefile /root/lxc-foo.ckpt
   $ lxc-stop --name foo
   $ lxc-restart --name foo --statefile /root/lxc-foo.ckpt
   $ lxc-stop --name foo

Checkpoint/restart an LXC container running a VNC server

VI editing session in a VNC session

Run a "vi" editing session inside a VNC server using "twm" window manager

   $ cat /root/.vnc/xstartup
   #!/bin/sh
   xsetroot -solid grey
   vncconfig -iconic &
   xterm -geometry 80x24+10+10 -ls -title "$VNCDESKTOP Desktop" &
   twm &
   $ lxc-execute --name foo --rcfile lxc-no-netns.conf -- /usr/bin/vncserver :1
   $ vncviewer :1
   # Open a vi session in vnc viewer
   $ lxc-checkpoint --name foo  --statefile /root/vnc.ckpt
   $ lxc-stop --name foo
   $ lxc-restart --pause --name foo --statefile /root/vnc.ckpt
   # Leaves the server frozen due to --pause
   $ lxc-unfreeze --name foo
   $ vncviewer :1
   # Should bring up the old VNC session with vi window
Personal tools