uname -a
id
dpkg-query -W '-f=${Package}	${Version}	${Architecture}
' bubblewrap criu apparmor libc6 util-linux
sysctl kernel.unprivileged_userns_clone kernel.apparmor_restrict_unprivileged_userns kernel.yama.ptrace_scope user.max_user_namespaces
/usr/bin/bwrap --version
/usr/local/sbin/criu --version
/home/ubuntu/timbal/.venv/bin/python --version
getcap /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
stat -Lc '%n %a %U:%G %s' /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
/usr/local/sbin/monolith-setpriv --clear-groups /usr/bin/bwrap --ro-bind /usr /usr --symlink usr/lib /lib --ro-bind /etc/ssl /etc/ssl --ro-bind /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf --ro-bind /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu --ro-bind /home/ubuntu/timbal /home/ubuntu/timbal --bind /tmp/criu-3127-d5rr2lcu/workspace /workspace --ro-bind /tmp/criu-3127-d5rr2lcu/workspace/.timbal/criu /workspace/.timbal/criu --tmpfs /tmp --proc /proc --ro-bind /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu /home/ubuntu/.local/share/uv/python/cpython-3.12-linux-aarch64-gnu --dev-bind /dev/null /dev/null --dev-bind /dev/zero /dev/zero --dev-bind /dev/urandom /dev/urandom --dev-bind /dev/random /dev/random --tmpfs /dev/shm --chdir /workspace --unshare-pid --unshare-user --as-pid-1 --uid 0 --gid 0 /home/ubuntu/timbal/.venv/bin/python -u /workspace/.timbal/criu/warmup_shim.py /workspace
/usr/local/sbin/criu dump --unprivileged --tree 2714902 --images-dir /tmp/criu-3127-d5rr2lcu/workspace/.timbal/criu/images --file-locks --tcp-close --external 'net[4026531833]:extRootNetNS' --external 'mnt[]' --enable-external-masters --manage-cgroups=ignore -v4 -o /tmp/criu-3127-d5rr2lcu/evidence/dump.log
mountpoint -- /tmp/criu-self-bind-4shwu5b3/root
findmnt --json --mountpoint /tmp/criu-self-bind-4shwu5b3/root -o TARGET,SOURCE,FSTYPE,OPTIONS,VFS-OPTIONS,FS-OPTIONS,PROPAGATION,ID,PARENT
/usr/local/sbin/criu restore -d --restore-sibling --unprivileged --tcp-close --root /tmp/criu-self-bind-4shwu5b3/root --images-dir /tmp/criu-3127-d5rr2lcu/workspace/.timbal/criu/images --external 'mnt[]' --enable-external-masters --manage-cgroups=ignore --inherit-fd 'fd[4]:extRootNetNS' --pidfile /tmp/criu-3127-d5rr2lcu/restore.pid -v4 -o /tmp/criu-3127-d5rr2lcu/evidence/restore.log --inherit-fd 'fd[0]:pipe:[1203995573]' --inherit-fd 'fd[1]:pipe:[1203995574]' --inherit-fd 'fd[2]:pipe:[1203995575]'
