GSoC completed projects - Revision history

Radostin at 12:53, 25 January 2026

2026-01-25T12:53:32Z

Radostin: /* Forensic analysis of container checkpoints */

2026-01-25T12:50:04Z

Forensic analysis of container checkpoints

Radostin at 12:48, 25 January 2026

2026-01-25T12:48:42Z

Radostin at 12:29, 25 January 2026

2026-01-25T12:29:53Z

Radostin: /* Add support for arm64 Guarded Control Stack (GCS) */

2026-01-25T12:25:55Z

Add support for arm64 Guarded Control Stack (GCS)

Radostin at 12:24, 25 January 2026

2026-01-25T12:24:22Z

Radostin: /* Coordinated checkpointing of distributed applications */

2025-09-18T06:26:47Z

Coordinated checkpointing of distributed applications

Radostin: /* Coordinated checkpointing of distributed applications */

2025-09-17T21:04:18Z

Coordinated checkpointing of distributed applications

Radostin: /* Coordinated checkpointing of distributed applications */

2025-09-17T21:03:00Z

Coordinated checkpointing of distributed applications

Radostin at 20:46, 17 September 2025

2025-09-17T20:46:18Z

@@ Line 79: / Line 79: @@
 '''Details:'''
 * Skill level: intermediate
 * Language: Go

← Older revision		Revision as of 12:50, 25 January 2026
Line 138:		Line 138:


−	The Go implementation of the [[crit]] tool was developed during GSoC 2022 to enable native Go–based decoding and encoding of CRIU [[images]]. In GSoC 2023, this tool was integrated with [https://github.com/checkpoint-restore/checkpointctl checkpointctl] to enable forensic analysis capabilities for container checkpoints. Behouba Manassé implemented support for memory forensics by extending the Go version of the crit tool and checkpointctl with support for parsing memory pages, and displaying information about the command-line arguments and environment variables when analysing checkpoints with the <code>inspect</code> command. Prajwal Nadig build upon his previous work during GSoC 2022, by implementing capabilities for analysing the process tree, open files, and sockets within a checkpoint, as well as introducing CI tests.	+	The Go implementation of the [[crit]] tool was developed during GSoC 2022 to enable native Go–based decoding and encoding of CRIU [[images]]. In GSoC 2023, this tool was integrated with [https://github.com/checkpoint-restore/checkpointctl checkpointctl] to enable forensic analysis capabilities for container checkpoints. Behouba Manassé implemented support for memory forensics by extending the Go version of the crit tool and checkpointctl with support for parsing memory pages (<code>checkpointctl memparse</code>), and displaying information about the command-line arguments and environment variables when analysing checkpoints with the <code>checkpointctl inspect</code> command. Prajwal Nadig build upon his previous work during GSoC 2022, by implementing capabilities for analysing the process tree, open files, and sockets within a checkpoint, as well as introducing CI tests.

	'''Links:'''		'''Links:'''

@@ Line 133: / Line 133: @@
 === Forensic analysis of container checkpoints ===
-'''Summary:''' Extending go-crit with capabilities for forensic analysis
+'''Summary:''' Extending go-crit and checkpointctl with capabilities for forensic analysis
 '''Merged:''' https://github.com/checkpoint-restore/checkpointctl
-The go-crit tool is still in its early stages of development. To effectively utilise this new feature, the checkpointctl tool would be extended to display information about the processes included in a container checkpoint and their runtime state (e.g., memory, open files, sockets, etc).
+The Go implementation of the [[crit]] tool was developed during GSoC 2022 to enable native Go–based decoding and encoding of CRIU [[images]]. In GSoC 2023, this tool was integrated with [https://github.com/checkpoint-restore/checkpointctl checkpointctl] to enable forensic analysis capabilities for container checkpoints. Behouba Manassé implemented support for memory forensics by extending the Go version of the crit tool and checkpointctl with support for parsing memory pages, and displaying information about the command-line arguments and environment variables when analysing checkpoints with the <code>inspect</code> command. Prajwal Nadig build upon his previous work during GSoC 2022, by implementing capabilities for analysing the process tree, open files, and sockets within a checkpoint, as well as introducing CI tests.
 '''Links:'''
@@ Line 146: / Line 145: @@
 * https://kubernetes.io/blog/2022/12/05/forensic-container-checkpointing-alpha/
 === Restrict checks for open/mmaped files ===

@@ Line 199: / Line 199: @@
 '''Links:'''
 * [[CRIT (Go library)]]
-* https://github.com/snprajwal/gsoc-2022
+* [https://github.com/snprajwal/gsoc-2022 Final Report]
 === Support sparse ghosts ===

@@ Line 47: / Line 47: @@
 '''Details:'''
 * Contributor: [https://github.com/svilenkov Igor Svilenkov Bozic]
-* [https://github.com/checkpoint-restore/criu/pull/2725 Final Report]
+* [https://github.com/checkpoint-restore/criu/pull/2725 Pull Request for CRIU]
 * [https://drive.google.com/file/d/1Uoz_E5K-1zRcZwEWXKVcsNtxmdzDIpiY/view?usp=sharing Presentation Recording]
 * Linux Plumbers Conference Talk: [https://lpc.events/event/19/contributions/2237/ Guarded Control Stack on arm64: Challenges in Enabling Shadow Stack Support for CRIU]

@@ Line 22: / Line 22: @@
 * Expected size: 350 hours
 * Mentors: Radostin Stoyanov <rstoyanov@fedoraproject.org>, Prajwal S N <prajwalnadig21@gmail.com>, Adrian Reber <areber@redhat.com>
 === Kubernetes operator for managing container checkpoints ===

@@ Line 13: / Line 13: @@
 seamless integration with the checkpointing functionality of Kubernetes.
 * [https://github.com/behouba/gsoc-2025 Final Report]
 * [https://docs.google.com/presentation/d/e/2PACX-1vTNV6nObjjlGwH9wR555WJVC8k1jYhTCJ9GeHsFXlRUe91YRXESPHw2GtYKzsUJ1l907z_cic6PQHio/pub Presentation Slides]
 * [https://youtu.be/fzXDqbq2X3s Presentation Recording]
 * Skill level: intermediate
 * Language: Rust / Go / C

← Older revision		Revision as of 20:46, 17 September 2025
Line 1:		Line 1:
		+	=== Coordinated checkpointing of distributed applications ===
		+
		+	'''Summary:''' Enable coordinated container checkpointing with Kubernetes.
		+
		+	Checkpointing support has been recently introduced in Kubernetes, where the
		+	smallest deployable unit is a Pod (a group of containers). Kubernetes is often
		+	used to deploy applications that are distributed across multiple nodes.
		+	However, checkpointing such distributed applications requires a coordination
		+	mechanism to synchronize the checkpoint and restore operations. To address this
		+	challenge, we have developed a new tool called <code>criu-coordinator</code>
		+	that relies on the action-script functionality of CRIU to enable synchronization
		+	in distributed environments. This project aims to extend this tool to enable
		+	seamless integration with the checkpointing functionality of Kubernetes.
		+
		+	'''Links:'''
		+	* https://github.com/checkpoint-restore/criu-coordinator
		+	* https://lpc.events/event/18/contributions/1803/
		+	* https://sched.co/1YeT4
		+	* https://kubernetes.io/blog/2022/12/05/forensic-container-checkpointing-alpha/
		+
		+	'''Details:'''
		+	* Skill level: intermediate
		+	* Language: Rust / Go / C
		+	* Expected size: 350 hours
		+	* Mentors: Radostin Stoyanov <rstoyanov@fedoraproject.org>, Prajwal S N <prajwalnadig21@gmail.com> Adrian Reber <areber@redhat.com>
		+	* Suggested by: Radostin Stoyanov <rstoyanov@fedoraproject.org>
		+
		+
	=== Kubernetes operator for managing container checkpoints ===		=== Kubernetes operator for managing container checkpoints ===