feat(sdk): add sandbox checkpoint and restore APIs - #39
Draft
tianyuzhou95 wants to merge 5 commits into
Draft
Conversation
Expose a small synchronous checkpoint API in akernel-sdk with immutable checkpoint identities, restore-to-new-sandbox semantics, and explicit list and delete operations. Keep snapshot lifetime manual and default checkpoint timeouts to 180 seconds without adding TTL policy to the SDK. Adapt the default YuanRong sandbox backend, document the public contract, and add unit and integration coverage. Extend standalone GitHub CI to run checkpoint and restore scenarios for runsc and Firecracker on KVM runners. Signed-off-by: Tianyu Zhou <albert.zty@antgroup.com>
Advance sandboxd to the latest mainline checkpoint implementation and pin YuanRong to the coordinated reusable snapshot integration. This keeps the AKernel build on the current StartRequest-based restore contract instead of the obsolete implementation used by the earlier prototype. Signed-off-by: Tianyu Zhou <albert.zty@antgroup.com>
Enable YuanRong's snapshot data plane in both node startup modes and provide a stable checkpoint staging directory. Advance sandboxd and YuanRong to the implementations validated with the SDK checkpoint contract for runsc and Firecracker. Document the standalone storage and manual checkpoint lifecycle so operators do not confuse node-local staging with an SDK TTL or automatic expiration. Signed-off-by: Tianyu Zhou <albert.zty@antgroup.com>
Remove the static /etc/resolv.conf mount from standalone and Helm base OCI configuration. Sandboxd already prepares the resolver file for every sandbox, using the host resolver without an ACL and its managed resolver when an ACL is enabled, so carrying both mounts creates duplicate OCI destinations during checkpoint restore. Signed-off-by: Tianyu Zhou <albert.zty@antgroup.com>
Advance sandboxd and YuanRong together so the runtime capability response, guest handoff endpoints, FunctionSystem environment configuration, and RRT restore protocol use one compatible contract in AKernel builds. Signed-off-by: Tianyu Zhou <albert.zty@antgroup.com>
Chamberlain1998
pushed a commit
to Chamberlain1998/AKernel
that referenced
this pull request
Aug 26, 2026
Merge AKernel PR inclusionAI#39 with the local reload and failover API so both lifecycle surfaces remain available. Preserve the synchronized YuanRong snapshot implementation and advance sandboxd to b35d309, which adds the restore mount override fix on top of the PR checkpoint integration. Signed-off-by: ChamberlainJI <jichenglin1@huawei.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Testing
make sdk-checkmake deploy-script-check