✨ RUN-42197: refuse an incompatible restore instead of failing inside CRIU - #135

Open

leeZardNav wants to merge 31 commits into

mainfrom

lirane/RUN-42197-restore-compatibility-checker-v2

Commits on Aug 30, 2026

feat(api): add restore compatibility policy table with no rules
leeZardNav
committed
cda38ee
feat(api): render a compatibility mismatch as one stable reason
leeZardNav
committed
25c294c
feat(agent): compare compatibility before claiming a restore
leeZardNav
committed
995119c
feat(agent): compare compatibility on the restore node
leeZardNav
committed
3bd0882
feat(agent): log a refused restore with a stable reason field
leeZardNav
committed
4af802a
feat: let one restore ask for the compatibility gates to be skipped
leeZardNav
committed
25d4d81
feat: let a node turn the restore compatibility gate off
leeZardNav
committed
7cc0878
feat(agent): read the node compatibility switch per restore
leeZardNav
committed
d67325d
feat(agent): describe the GPUs a container can see, on every path
leeZardNav
committed
9c3ec4b
feat(agent): bound every nvidia-smi call with a deadline
leeZardNav
committed
9a131bd
feat(agent): record in the manifest what the GPUs were
leeZardNav
committed
d64159d
feat(agent): read the node kernel version once at startup
leeZardNav
committed
493f7c7
feat(agent): record the capture node's kernel and arch
leeZardNav
committed
acaa024
feat(agent): record the captured container's image and its limits
leeZardNav
committed
8ee7353
feat(agent): fill the pod facts from the pod the reconciler already holds
leeZardNav
committed
2566113
feat(compat): refuse a restore onto a different CPU architecture
leeZardNav
committed
1e09a5e
feat(compat): refuse a restore onto a different or too-old kernel
leeZardNav
committed
747b1ed
feat(compat): refuse a restore into another build of the same image
leeZardNav
committed
d7558bf
feat(compat): refuse a restore into less memory than was captured
leeZardNav
committed
89651f9
feat(compat): refuse a restore into less CPU than was captured
leeZardNav
committed
df753fc
feat(compat): refuse a restore when a mounted path is not in the pod
leeZardNav
committed
f724f6f
feat(compat): refuse a restore onto a different GPU model
leeZardNav
committed
6240639
feat(compat): refuse a restore onto a different number of GPUs
leeZardNav
committed
73f6361
feat(compat): refuse a restore on a different or too-old GPU driver
leeZardNav
committed
76f33cc
feat(agent): report a refused restore on its pod
leeZardNav
committed
bdd2522
feat(agent): stop re-checking a restore that was already refused
leeZardNav
committed
ac22a6a
test(e2e): assert a real artifact records the machine it came from
leeZardNav
committed
a371fae
test(e2e): refuse a restore into a smaller memory limit
leeZardNav
committed
e5fc8ca
test(e2e): let a refused restore through with each kill switch
leeZardNav
committed
50f501c
fix(cuda): ignore discovery rows without GPU UUIDs
leeZardNav
committed
5a81faf
fix(compat): compare canonical runtime image IDs
leeZardNav
committed
1a25a63

Navigation Menu

Uh oh!

✨ RUN-42197: refuse an incompatible restore instead of failing inside CRIU - #135

✨ RUN-42197: refuse an incompatible restore instead of failing inside CRIU#135
leeZardNav wants to merge 31 commits into
mainfrom
lirane/RUN-42197-restore-compatibility-checker-v2

Commits on Aug 30, 2026

feat(api): add restore compatibility policy table with no rules

feat(api): render a compatibility mismatch as one stable reason

feat(agent): compare compatibility before claiming a restore

feat(agent): compare compatibility on the restore node

feat(agent): log a refused restore with a stable reason field

feat: let one restore ask for the compatibility gates to be skipped

feat: let a node turn the restore compatibility gate off

feat(agent): read the node compatibility switch per restore

feat(agent): describe the GPUs a container can see, on every path

feat(agent): bound every nvidia-smi call with a deadline

feat(agent): record in the manifest what the GPUs were

feat(agent): read the node kernel version once at startup

feat(agent): record the capture node's kernel and arch

feat(agent): record the captured container's image and its limits

feat(agent): fill the pod facts from the pod the reconciler already holds

feat(compat): refuse a restore onto a different CPU architecture

feat(compat): refuse a restore onto a different or too-old kernel

feat(compat): refuse a restore into another build of the same image

feat(compat): refuse a restore into less memory than was captured

feat(compat): refuse a restore into less CPU than was captured

feat(compat): refuse a restore when a mounted path is not in the pod

feat(compat): refuse a restore onto a different GPU model

feat(compat): refuse a restore onto a different number of GPUs

feat(compat): refuse a restore on a different or too-old GPU driver

feat(agent): report a refused restore on its pod

feat(agent): stop re-checking a restore that was already refused

test(e2e): assert a real artifact records the machine it came from

test(e2e): refuse a restore into a smaller memory limit

test(e2e): let a refused restore through with each kill switch

fix(cuda): ignore discovery rows without GPU UUIDs

fix(compat): compare canonical runtime image IDs