uname -a
id
dpkg-query -W '-f=${Package}	${Version}	${Architecture}
' bubblewrap criu apparmor libc6 util-linux
sysctl kernel.unprivileged_userns_clone kernel.apparmor_restrict_unprivileged_userns kernel.yama.ptrace_scope user.max_user_namespaces
/usr/bin/bwrap --version
/usr/local/sbin/criu --version
/home/ubuntu/timbal/.venv/bin/python --version
getcap /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
stat -Lc '%n %a %U:%G %s' /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
/usr/local/sbin/monolith-setpriv --clear-groups /usr/bin/bwrap --ro-bind /usr /usr --symlink usr/lib /lib --ro-bind /etc/ssl /etc/ssl --ro-bind /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf --ro-bind /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu --ro-bind /home/ubuntu/timbal /home/ubuntu/timbal --bind /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/workspace /workspace --ro-bind /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/workspace/.timbal/criu /workspace/.timbal/criu --tmpfs /tmp --proc /proc --ro-bind /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu /home/ubuntu/.local/share/uv/python/cpython-3.12-linux-aarch64-gnu --dev-bind /dev/null /dev/null --dev-bind /dev/zero /dev/zero --dev-bind /dev/urandom /dev/urandom --dev-bind /dev/random /dev/random --tmpfs /dev/shm --chdir /workspace --unshare-pid --unshare-user --as-pid-1 --uid 0 --gid 0 /home/ubuntu/timbal/.venv/bin/python -u /workspace/.timbal/criu/warmup_shim.py /workspace
/usr/local/sbin/criu dump --unprivileged --tree 2615109 --images-dir /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/workspace/.timbal/criu/images --file-locks --tcp-close --external 'net[4026531833]:extRootNetNS' --external 'mnt[]' --enable-external-masters --manage-cgroups=ignore -v4 -o /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/evidence/dump.log
/usr/local/sbin/criu restore -d --restore-sibling --unprivileged --tcp-close --root /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/workspace/.timbal/criu/root --images-dir /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/workspace/.timbal/criu/images --external 'mnt[]' --enable-external-masters --manage-cgroups=ignore --inherit-fd 'fd[4]:extRootNetNS' --pidfile /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/restore.pid -v4 -o /home/ubuntu/monolith/diagnostics/criu-3127-ab-20260916/runs/criu-3127-eavza6t3/evidence/restore.log --inherit-fd 'fd[0]:pipe:[1203860853]' --inherit-fd 'fd[1]:pipe:[1203860854]' --inherit-fd 'fd[2]:pipe:[1203860855]'
