feat(chrek): config refactor, /dev/shm support, and mount-policy rewrite (#5946)

deploy/helm/charts/platform/components/operator/templates/deployment.yaml

@@ -151,8 +151,9 @@ spec:
           - --checkpoint-enabled=true
           - --checkpoint-storage-type={{ .Values.checkpoint.storage.type }}
           - --checkpoint-signal-host-path={{ .Values.checkpoint.storage.signalHostPath }}
-          - --checkpoint-criu-timeout={{ .Values.checkpoint.criu.timeout }}
           - --checkpoint-init-container-image={{ .Values.checkpoint.initContainerImage }}
+          - --checkpoint-ready-for-checkpoint-file-path={{ .Values.checkpoint.readyForCheckpointFilePath }}
+          - --checkpoint-restore-marker-file-path={{ .Values.checkpoint.restoreMarkerFilePath }}
           {{- if eq .Values.checkpoint.storage.type "pvc" }}
           - --checkpoint-pvc-name={{ .Values.checkpoint.storage.pvc.pvcName }}
           - --checkpoint-pvc-base-path={{ .Values.checkpoint.storage.pvc.basePath }}

deploy/helm/charts/platform/values.yaml

@@ -216,6 +216,15 @@ dynamo-operator:
     # -- Whether to enable checkpoint/restore functionality
     enabled: false
 
+    # -- Image used for init containers in checkpoint jobs (e.g., signal file cleanup)
+    initContainerImage: "busybox:latest"
+
+    # -- Path written by worker when model is loaded and ready for checkpointing
+    readyForCheckpointFilePath: "/tmp/ready-for-checkpoint"
+
+    # -- Path written by restore-entrypoint after successful CRIU restore
+    restoreMarkerFilePath: "/tmp/dynamo-restored"
+
     # Storage configuration
     # These settings tell the operator where to find checkpoint storage
     # Must match the configuration in the chrek chart
@@ -247,12 +256,6 @@ dynamo-operator:
         # -- Reference to a docker config secret for registry authentication
         credentialsSecretRef: ""
 
-    # CRIU timeout configuration (shared across checkpoint and restore)
-    criu:
-      # -- CRIU operation timeout in seconds. Default: 21600 (6 hours)
-      timeout: "21600"
-
-
 # Grove component - distributed inference orchestration
 grove:
   # -- Whether to enable Grove for multi-node inference coordination, if enabled, the Grove operator will be deployed cluster-wide