Allow skipping iptables/nftables invocation.

Make it possible to skip network lock to enable uses that break connections
anyway to work without iptables/nftables being present.

Signed-off-by: Michał Mirosław <emmir@google.com>
This commit is contained in:
Michał Mirosław 2022-09-12 16:17:43 +02:00 committed by Andrei Vagin
parent d0ac547b3d
commit c97cc6a6ce
9 changed files with 24 additions and 1 deletions

View file

@ -457,6 +457,9 @@ The 'mode' may be one of the following:
*nftables*::: Use nftables rules to drop the packets.
*skip*::: Don't lock the network. If *--tcp-close* is not used, the network
must be locked externally to allow CRIU to dump TCP connections.
*restore*
~~~~~~~~~
Restores previously checkpointed processes.