https://peertube.watch/videos/watch/44352853-05e5-45d9-bd0b-35f1bb06bcbd Virtual Machine snapshots intentionally duplicate the state of a running Virtual Machine, so that we can go back in time or spawn new, identical, VMs from it. However, snapshots capture state that is meant to be unique and/or secret, such as entropy seeds, UUIDs, network configuration etc. Recently, Linux added support for Virtual Machine Generation ID to de-duplicate the state of its internal PRNG upon Virtual Machine clone events. However, other parts of the kernel and user-space components lack proper mechanisms for adjusting. This can lead to functional issues, e.g. two VMs in the same network with the same network configuration, as well as security concerns, e.g. two user-space CSPRNGs returning identical "random" streams of bits. In this talk we will describe the snapshot safety problem and speak about existing mechanisms for tackling it and our efforts to extend those. Moreover, we will discuss why we believe that a solution to this problem calls for collaboration among the hypervisor, guest kernel and guest user-space. Finally, we will present our latest efforts for building mechanisms that allow tackling the issue end-to-end. Speaker: Babis Chalios, Track: Virtualization and Cloud Infrastructure devroom, Room: UB2.147, When: Saturday 3 February 2024, 15:30–16:00 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Presentation Slides, Firecracker, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “#snapsafety: de-duplicating state across Virtual Machine clones” by Babis Chalios, FOSDEM 2024. Original recording: 2024/ub2147/fosdem-2024-3021--snapsafety-de-duplicating-state-across-virtual-machine-clones.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Wed, 21 Oct 2026 23:04:00 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/44352853-05e5-45d9-bd0b-35f1bb06bcbd All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.