runc-restore(8)

NAME
runc-restore - restore a container from a previous checkpoint

SYNOPSIS
runc restore [option ...] container-id

DESCRIPTION
Restores the container instance from a previously performed runc checkpoint.

OPTIONS

--console-socket path
    Path to an AF_UNIX socket which will receive a file descriptor referencing the master end of the console's pseudoterminal. See docs/terminals ⟨https://github.com/opencontainers/runc/blob/master/docs/terminals.md⟩.

--image-path path
    Set path to get criu image files to restore from.

--work-path path
    Set path for saving criu work files and logs. The default is to reuse the image files directory.

--tcp-established
    Allow checkpoint/restore of established TCP connections. See criu --tcp-establised option ⟨https://criu.org/CLI/opt/--tcp-established⟩.

--ext-unix-sk
    Allow checkpoint/restore of external unix sockets. See criu --ext-unix-sk option ⟨https://criu.org/CLI/opt/--ext-unix-sk⟩.

--shell-job
    Allow checkpoint/restore of shell jobs.

--file-locks
    Allow checkpoint/restore of file locks. See criu --file-locks option ⟨https://criu.org/CLI/opt/--file-locks⟩.

--manage-cgroups-mode soft|full|strict|ignore.
    Cgroups mode. Default is soft. See criu --manage-cgroups option ⟨https://criu.org/CLI/opt/--manage-cgroups⟩. In particular, to restore the container into a different cgroup, --manage-cgroups-mode ignore must be used during both checkpoint and restore, and the _containerid (or cgroupsPath property in OCI config, if set) must be changed.

--bundle|-b path
    Path to the root of the bundle directory. Default is current directory.

--detach|-d
    Detach from the container's process.

--pid-file path
    Specify the file to write the initial container process' PID to.

--no-subreaper
    Disable the use of the subreaper used to reap reparented processes.

--no-pivot
    Do not use pivot root to jail process inside rootfs. This should not be used except in exceptional circumstances, and may be unsafe from the security standpoint.

--empty-ns namespace
    Create a namespace, but don't restore its properties. See criu --empty-ns option ⟨https://criu.org/CLI/opt/--empty-ns⟩.

--auto-dedup
    Enable auto deduplication of memory images. See criu --auto-dedup option ⟨https://criu.org/CLI/opt/--auto-dedup⟩.

--lazy-pages
    Use lazy migration mechanism. This requires a running criu lazy-pages daemon. See criu --lazy-pages option ⟨https://criu.org/CLI/opt/--lazy-pages⟩.

--lsm-profile type:label
    Specify an LSM profile to be used during restore. Here type can either be apparamor or selinux, and label is a valid LSM label. For example, --lsm-profile "selinux:system_u:system_r:container_t:s0:c82,c137". By default, the checkpointed LSM profile is used upon restore.

--lsm-mount-context context
    Specify an LSM mount context to be used during restore. Only mounts with an existing context will have their context replaced. With this option it is possible to change SELinux mount options. Instead of mounting with the checkpointed context, the specified context will be used. For example, --lsm-mount-context "system_u:object_r:container_file_t:s0:c82,c137".

SEE ALSO
criu(8), runc-checkpoint(8), runc(8).