docs: Snapshot alpha documentation (README + usage/reference/operations guides) - #132

printf '%s\n' '--- applicable repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -type f -name '*.md' -print
printf '%s\n' '--- target file outline and relevant source ---'
ast-grep outline docs/guides/sglang/app.py
sed -n '1,150p' docs/guides/sglang/app.py
printf '%s\n' '--- scoped learnings ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/learnings -type f -maxdepth 2 -print -exec sed -n '1,160p' {} \;

printf '%s\n' '--- repository-wide conventions ---'
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/conventions/repo-wide.md
printf '%s\n' '--- runtime declarations near the SGLang guide ---'
fd -i 'Dockerfile|pyproject.toml|requirements.*|environment.*|.*\.ya?ml$' . | head -120
printf '%s\n' '--- Python version references bound to this guide or image ---'
rg -n -i 'python|sglang|app\.py' docs/guides/sglang .github Dockerfile* pyproject.toml requirements* 2>/dev/null | head -160

printf '%s\n' '--- pinned SGLang runtime and deployment contract ---'
cat -n docs/guides/sglang/Dockerfile.sglang
sed -n '24,82p' docs/guides/sglang/deployment.yaml

#!/bin/bash
set -eu

echo '--- scoped repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -type f -name '*.md' -print \
  | sort \
  | while read -r f; do
      case "$f" in
        */docs/*|*/learnings/*) echo "### $f"; head -80 "$f";;
      esac
    done

echo '--- deployment file ---'
cat -n docs/guides/sglang/deployment.yaml | sed -n '1,90p'

echo '--- exact profile references ---'
rg -n -C 3 --hidden --glob '!node_modules' --glob '!dist' \
  'block-iouring\.json|localhostProfile|seccompProfile|seccomp' .

echo '--- Snapshot installation/provisioning references ---'
rg -n -C 3 --hidden --glob '!node_modules' --glob '!dist' \
  'Snapshot|snapshot|kubelet|seccomp.*profile|profiles/' docs deploy charts helm manifests .github 2>/dev/null || true

#!/bin/bash
set -eu

echo '--- SGLang guide files and instructions ---'
find docs/guides/sglang -maxdepth 2 -type f -print | sort
rg -n -C 4 'helm|install|Snapshot|seccomp|profile|node' docs/guides/sglang docs/operations/install.md docs/operations/security.md charts/snapshot/README.md

echo '--- chart template files related to seccomp and node agents ---'
find charts/snapshot -maxdepth 3 -type f -print | sort | grep -E 'templates|seccomp|daemon|config|values|README'
rg -n -C 5 'block-iouring|seccomp\.deploy|ConfigMap|initContainer|hostPath|DaemonSet|kubelet' charts/snapshot/templates charts/snapshot/values.yaml charts/snapshot/README.md

#!/bin/bash
set -eu

echo '--- agent DaemonSet scheduling and profile init ---'
cat -n charts/snapshot/templates/daemonset.yaml | sed -n '35,115p'

echo '--- install readiness contract ---'
cat -n docs/operations/install.md | sed -n '1,35p'
cat -n docs/operations/security.md | sed -n '16,24p'

echo '--- SGLang guide complete file ---'
cat -n docs/guides/sglang/deployment.yaml | sed -n '1,220p'

#!/bin/bash
set -eu

printf '%s\n' '--- repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print \
  -exec sh -c 'echo "--- $1"; head -80 "$1"' _ {} \;

printf '%s\n' '--- Dockerfile ---'
cat -n docs/guides/sglang/Dockerfile.sglang

printf '%s\n' '--- deployment ---'
cat -n docs/guides/sglang/deployment.yaml

printf '%s\n' '--- SGLang guide files ---'
find docs/guides/sglang -maxdepth 2 -type f -print

printf '%s\n' '--- Snapshot/TUN references ---'
rg -n -i 'snapshot|tun|/dev/net/tun|checkpoint|restore|capabilit|securityContext|runAsNonRoot|allowPrivilegeEscalation' docs/guides/sglang .github 2>/dev/null || true

#!/bin/bash
set -eu

printf '%s\n' '--- all TUN and privilege references ---'
rg -n -i 'tun|TUNSET|NET_ADMIN|CAP_NET|checkpoint|restore|privilege|capability|runAsNonRoot|allowPrivilegeEscalation|securityContext' \
  --glob '!vendor/**' --glob '!node_modules/**' .

printf '%s\n' '--- SGLang application ---'
cat -n docs/guides/sglang/app.py

printf '%s\n' '--- relevant CRIU and agent outlines ---'
for d in agent/internal/criu agent; do
  if [ -d "$d" ]; then
    ast-grep outline "$d" 2>/dev/null || true
  fi
done

#!/bin/bash
set -eu

printf '%s\n' '--- exact TUN references outside generated CRDs ---'
rg -n -i '(/dev/net/tun|tun)' \
  agent cmd config deploy docs test e2e charts \
  --glob '!**/*crd*.yaml' --glob '!**/zz_generated*' 2>/dev/null || true

printf '%s\n' '--- SGLang application ---'
cat -n docs/guides/sglang/app.py

printf '%s\n' '--- CRIU network and privilege-related source ---'
rg -n -i 'network|namespace|cap|root|uid|user|privilege' agent/internal/criu agent/internal/executor agent/internal 2>/dev/null \
  --glob '*.go' | head -300

#!/bin/bash
# During a restore, readiness must not become true before post-restore serving readiness.
set -euo pipefail

namespace="${TENSORRT_LLM_NAMESPACE:?set TENSORRT_LLM_NAMESPACE}"
pod="$(kubectl get pods --namespace "$namespace" \
  --selector app=tensorrt-llm-source \
  --output jsonpath='{.items[0].metadata.name}')"

while kubectl get pod "$pod" --namespace "$namespace" >/dev/null 2>&1; do
  ready="$(kubectl get pod "$pod" --namespace "$namespace" \
    --output jsonpath='{.status.conditions[?(@.type=="Ready")].status}')"
  restored="$(kubectl exec --namespace "$namespace" "$pod" -- \
    test -f /snapshot-control/trtllm-restore-ready && echo True || echo False)"
  printf 'pod_ready=%s restore_api_ready=%s\n' "$ready" "$restored"
  sleep 1
done

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- applicable repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print

printf '%s\n' '--- target file outline ---'
ast-grep outline docs/guides/tensorrt-llm/app.py
ast-grep outline docs/guides/tensorrt-llm/deployment.yaml

printf '%s\n' '--- relevant source ---'
cat -n docs/guides/tensorrt-llm/app.py | sed -n '1,135p'
cat -n docs/guides/tensorrt-llm/deployment.yaml | sed -n '1,90p'

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- repository-wide and chart conventions ---'
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/conventions/repo-wide.md
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/conventions/charts.md
printf '%s\n' '--- relevant learnings ---'
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/learnings/charts-snapshot.md

printf '%s\n' '--- marker and restore references ---'
rg -n -C 3 'ready-for-snapshot|trtllm-restore-ready|restore-complete|DYN_SNAPSHOT_RESTORE_STANDBY|tensorrt-llm-source' \
  docs/guides/tensorrt-llm docs | head -240

printf '%s\n' '--- guide context ---'
cat -n docs/guides/tensorrt-llm.md | sed -n '1,130p'

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- analogous restored-readiness implementation ---'
cat -n docs/guides/vllm/app.py | sed -n '75,145p'
cat -n docs/guides/vllm/deployment.yaml | sed -n '40,75p'
cat -n docs/guides/vllm.md | sed -n '35,55p'

printf '%s\n' '--- snapshot control-volume and restore lifecycle contracts ---'
rg -n -C 4 'snapshot-control|restore-complete|restore-ready|readinessProbe|RESTORE_STANDBY|checkpoint.source|checkpoint-source|restore pod|restore Pods' \
  . --glob '!docs/guides/tensorrt-llm/app.py' --glob '!docs/guides/tensorrt-llm/deployment.yaml' \
  --glob '!vendor/**' --glob '!node_modules/**' | head -320

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- restore-pod manifest and probe propagation ---'
cat -n operator/cmd/snapshotctl/restore.go | sed -n '1,105p'
cat -n operator/internal/protocol/restore.go | sed -n '1,100p'

printf '%s\n' '--- control-file definitions and writes ---'
cat -n api/v1alpha1/constants.go | sed -n '40,95p'
rg -n -C 5 'ReadyForSnapshotFile|RestoreCompleteFile|ready-for-snapshot|restore-complete' \
  agent operator --glob '*.go' | head -260

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- restore probe shaping ---'
cat -n operator/internal/protocol/restore.go | sed -n '88,155p'
cat -n operator/internal/protocol/restore.go | sed -n '185,214p'

printf '%s\n' '--- source and restore pod control-volume semantics ---'
cat -n operator/internal/protocol/volume.go 2>/dev/null | sed -n '1,140p' || true
rg -n -C 3 'func EnsureControlVolume|emptyDir|per-pod emptyDir|NewRestorePod' \
  operator/internal/protocol api/v1alpha1 | head -220

#!/bin/bash
set -eu
printf '%s\n' '--- repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print
for f in /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/*/*.md; do
  [ -f "$f" ] || continue
  printf '\n--- %s ---\n' "$f"
  head -120 "$f"
done
printf '%s\n' '--- README relevant references ---'
rg -n -C 4 'restore-container-map|restore-from|PodSnapshotContent|SnapshotJob' README.md
printf '%s\n' '--- tracked files likely defining the annotation ---'
rg -n -C 5 'restore-container-map|RestoreContainer|container.map|container_map' --glob '!README.md' --glob '!**/vendor/**' .

printf '%s\n' '--- repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print
printf '%s\n' '--- target excerpt ---'
sed -n '1,80p' docs/development/benchmarks.md

printf '%s\n' '--- repository-wide conventions ---'
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/conventions/repo-wide.md
printf '%s\n' '--- CRIU-related learning ---'
cat /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/learnings/agent-internal-criu.md
printf '%s\n' '--- relevant repository references ---'
rg -n -i 'CRIU restore|checkpointed host|safetensors|cuda-checkpoint|GPU restore|process image' --glob '!docs/development/benchmarks.md' .

printf '%s\n' '--- CRIU restore implementation ---'
sed -n '1,145p' agent/internal/criu/restore.go
printf '%s\n' '--- restore orchestration ---'
sed -n '60,130p' agent/internal/executor/restore.go
printf '%s\n' '--- CUDA restore path ---'
sed -n '330,405p' agent/internal/cuda/cuda.go

#!/usr/bin/env bash
set -u

printf '%s\n' '--- restore mapping implementation ---'
rg -n -C 8 'restore-container-map|restore_container_map|container.*map|Restore.*Container' \
  operator agent api --glob '*.go' || true

printf '%s\n' '--- documentation contract ---'
sed -n '40,48p' docs/reference/cli.md
sed -n '93,108p' docs/reference/api.md

#!/usr/bin/env bash
set -u

printf '%s\n' '--- repository conventions and learnings for documentation/CLI ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print
for f in /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85/*/*.md; do
  case "$f" in
    *documentation*|*cli*|*operator*|*snapshot*) printf '%s\n' "--- $f"; head -80 "$f";;
  esac
done

printf '%s\n' '--- CLI prerequisite and snapshotctl restore path ---'
sed -n '35,52p' docs/reference/cli.md
rg -n -C 6 'snapshotctl|RestoreContainerMapAnnotation|RestoreContainerMappingsFromAnnotations|preflightRestore|restorePlan|manifest' \
  cmd cli operator api docs --glob '*.go' --glob '*.md' 2>/dev/null | head -240

#!/usr/bin/env bash
set -u

printf '%s\n' '--- snapshotctl files ---'
fd -i 'snapshotctl|README.md' operator docs | head -80

printf '%s\n' '--- snapshotctl implementation and README ---'
rg -n -C 8 'NewRestorePod|PodOptions|restore-from|restore-container-map|manifest|TargetContainer|container name' \
  operator/cmd operator/internal --glob '*.go' --glob '*.md' | head -260

#!/usr/bin/env bash
set -u

printf '%s\n' '--- restore CLI flow ---'
sed -n '95,180p' operator/cmd/snapshotctl/main.go
sed -n '1,220p' operator/cmd/snapshotctl/restore.go 2>/dev/null || true

printf '%s\n' '--- snapshotctl README restore contract ---'
rg -n -C 8 'restore|manifest|container|annotation' operator/cmd/snapshotctl/README.md

#!/usr/bin/env bash
set -u

rg -n -C 8 'nvidia.com/Restored|Restored.*condition|condition.*Restored' \
  agent operator api docs --glob '*.{go,md}' || true

#!/usr/bin/env bash
set -u

printf '%s\n' '--- repository conventions ---'
find /tmp/coderabbit-repo-knowledge/ai-dynamo-snapshot-44b65c85 -maxdepth 2 -type f -name '*.md' -print

printf '%s\n' '--- condition writers and restore flow ---'
rg -n -C 10 \
  'applyRestoredCondition\(|restoreInProgressReason|restoreSucceededReason|restoreFailedReason|restorePartiallySucceededReason|RestoredCondition' \
  agent/internal/controller api/v1alpha1 docs/guides/restore.md docs/reference/api.md \
  --glob '*.{go,md}' || true