8
8
- [ Overview] ( #overview )
9
9
- [ Snapshot files management] ( #snapshot-files-management )
10
10
- [ Performance] ( #performance )
11
- - [ Known issues and limitations ] ( #known-issues-and-limitations )
11
+ - [ Known issues] ( #known-issues )
12
12
- [ Firecracker Snapshotting characteristics] ( #firecracker-snapshotting-characteristics )
13
13
- [ Snapshot versioning] ( #snapshot-versioning )
14
14
- [ Snapshot API] ( #snapshot-api )
23
23
- [ Snapshot security and uniqueness] ( #snapshot-security-and-uniqueness )
24
24
- [ Secure and insecure usage examples] ( #usage-examples )
25
25
- [ Reusing snapshotted states securely] ( #reusing-snapshotted-states-securely )
26
- - [ Known Issues] ( #known-issues )
27
- - [ Vsock device limitation] ( #vsock-device-limitation )
26
+ - [ Vsock device limitation] ( #vsock-device-limitation )
28
27
29
28
## About microVM snapshotting
30
29
@@ -84,7 +83,7 @@ resumed microVM.
84
83
The Firecracker snapshot design offers a very simple interface to interact with
85
84
snapshots but provides no functionality to package or manage them on the host.
86
85
Using snapshots in production is currently not recommended as there are open
87
- [ Known issues and limitations ] ( #known-issues-and-limitations ) .
86
+ [ Known issues] ( #known-issues ) .
88
87
89
88
The [ threat containment model] ( ../design.md#threat-containment ) states
90
89
that the host, host/API communication and snapshot files are trusted by Firecracker.
@@ -111,7 +110,7 @@ The baseline for snapshot resume latency target on Intel is under **8ms** with
111
110
5ms p90, and on ARM is under ** 3ms** for a microVM with the following specs:
112
111
2vCPU/512MB/1 block/1 net device.
113
112
114
- ### Known issues and limitations
113
+ ### Known issues
115
114
116
115
- High snapshot latency on 5.4+ host kernels - [ #2129 ] ( https://github.com/firecracker-microvm/firecracker/issues/2129 )
117
116
- Guest network connectivity is not guaranteed to be preserved after resume.
@@ -138,6 +137,10 @@ The baseline for snapshot resume latency target on Intel is under **8ms** with
138
137
creation. The disk contents are _ not_ explicitly flushed to their backing files.
139
138
- The API calls exposing the snapshotting functionality have clear ** Prerequisites**
140
139
that describe the requirements on when/how they should be used.
140
+ - The Firecracker microVM's MMDS config is included in the snapshot. However, the
141
+ data store is not persisted across snapshots.
142
+ - Configuration information for metrics and logs are not saved to the snapshot.
143
+ These need to be reconfigured on the restored microVM.
141
144
142
145
## Snapshot versioning
143
146
@@ -573,9 +576,7 @@ properties are preserved and guaranteed before resuming the workload.
573
576
We've started a discussion on how the Linux operating system might securely
574
577
handle being snapshotted [ here] ( https://lkml.org/lkml/2020/10/16/629 ) .
575
578
576
- ## Known Issues
577
-
578
- ### Vsock device limitation
579
+ ## Vsock device limitation
579
580
580
581
Vsock must be inactive during snapshot. Vsock device can break if snapshotted
581
582
while having active connections. Firecracker snapshots do not capture any
0 commit comments