overlayfs

overlayfs copied to clipboard

Using snapshot fs mount does not protect against all changes on underlying layer

1

When mounting snpahsot fs over /real_fs there may still be references to the original /real_fs mount in running processes or other namespaces etc, so the snapshot fs mount itself cannot...

amir73il

Fixing this will require stacking address space operations

amir73il

readdir getattr and read from snapshot overlay can all race with copy up and read directly from the lower object *after* it has been modified. Fixing this will require a...

amir73il

This is the same problem overlayfs has with MMAP_SHARED r/o files that have been copied up and this will be resolved after adding stacked address space operations and overlay inode...

amir73il

Advice on `options overlay metacopy=off redirect_dir=off`

1

There is [advice from articles such as this one](https://mikeshade.com/posts/docker-native-overlay-diff/) to disable OverlayFS module options: `metacopy` + `redirect_dir`. On one of my systems both are enabled by default (personal system), while...

polarathene