Freeze, Investigate, Recover - Unlocking Forensic Container Checkpointing With CRI-U

Explore how forensic container checkpointing revolutionizes Kubernetes resilience through CRIU (Checkpoint/Restore in Userspace) and its integration with CRI-O and Containerd in this 33-minute conference talk. Learn to move beyond traditional pod restart methods by implementing container-level checkpointing that captures complete application states, including memory, processes, and open files. Discover how CRI-U enables you to snapshot running containers for forensic analysis, seamless recovery, and live migration without losing valuable runtime data. Master techniques for securely capturing, analyzing, and restoring container states to minimize downtime and enhance security. Understand how this technology addresses critical challenges in debugging failed applications, investigating compromised containers, and migrating workloads while preserving complete runtime context. Gain practical insights into implementing forensic container checkpointing to unlock new possibilities in security forensics, failure recovery, and workload resilience within cloud-native environments.