linuxkit/projects/memorizer
Avi Deitcher 14c29db5c2
Containerd v2.0.3 (#4112)
* containerd to semver v2.0.3

Signed-off-by: Avi Deitcher <avi@deitcher.net>

* containerd v2.0.3 plus commits to fix blkdiscard

Signed-off-by: Avi Deitcher <avi@deitcher.net>

* update containerd-dev dependencies

Signed-off-by: Avi Deitcher <avi@deitcher.net>

* updated pkg/init and pkg/containerd deps

Signed-off-by: Avi Deitcher <avi@deitcher.net>

---------

Signed-off-by: Avi Deitcher <avi@deitcher.net>
2025-03-06 17:12:07 +02:00
..
docs
kernel-memorizer Remove Notary and Content Trust 2021-03-30 14:51:11 +01:00
memorizer.yml Containerd v2.0.3 (#4112) 2025-03-06 17:12:07 +02:00
README.md

Memorizer

Memorizer is a tool to trace fine-grained intra-kernel operations. The goal is to track interactions with memory objects for the purpose of analyzing fine-grained interactions amongst components and execution contexts. Memorizer tracks the following object operations: creation (alloc), destruction (free), modify (store), access (load), call, and return.

Nathan D. ([@ndauten]) presented the umbrella project, Opportunistic Privilege Separation (OPS), and Memorizer at the 7/9/17 LinuxKit SIG and slides

Usage

See manual usage docs. Be careful though because if the event queues are not drained then the system will run out of memory.

For controlled use see script + readme. This script is not automatically inserted into the runtime yet.

Issues

  • KASAN is reporting some errors within itself. This is noisy. Can reduce the console log output level to < 3, e.g., echo 3 > /proc/sys/kernel/printk

  • Source should be included soon, but for now there is an image on Docker Hub.