Skip to content

TSC offset randomization on restore #3

@WaylandYang

Description

@WaylandYang

Problem

All children resume with parent's TSC value. Identical wall-clock across children opens timing attacks and breaks log correlation.

Approach

Firecracker exposes TSC config on snapshot/restore. Surface via forkd-vmm::ForkOpts.

Acceptance

  • ForkOpts { randomize_tsc: true } produces children with distinct TSC offsets
  • Default = true

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requesthelp wantedExtra attention is needed

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions