Skip to content

TSC offset randomization on restore #3

@WaylandYang

Description

@WaylandYang

Problem

All children resume with parent's TSC value. Identical wall-clock across children opens timing attacks and breaks log correlation.

Approach

Firecracker exposes TSC config on snapshot/restore. Surface via forkd-vmm::ForkOpts.

Acceptance

  • ForkOpts { randomize_tsc: true } produces children with distinct TSC offsets
  • Default = true

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requesthelp wantedExtra attention is needed

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions