composefs
composefs copied to clipboard
containers
Upstream dependencies
To make it easier to track things, lets use this issue to track the current state (and to have discussions about this).
Current state:
-
The use of data-only lower layers (to hide all possible files in the basedir) we need the lazy-lower-data support which was added in 6.5.
-
To use the LCFS_MOUNT_FLAGS_REQUIRE_VERITY (or -o verity) options you need the
overlay veritypatches, which was added in 6.6rc1. -
Overlayfs also requires erofs support for chunked files. This was added in linux 5.15.
-
To be able to store overlayfs lower directories (nested overlayfs) some overlay patches will be needed, these are being discussed on the list.
With this merge: https://github.com/torvalds/linux/commit/63580f669d7ff5aa5a1fa2e3994114770a491722 (will be in 6.6) we now support the LCFS_MOUNT_FLAGS_REQUIRE_VERITY flag upstream.
- Overlayfs also requires erofs support for chunked files. This was added in linux 5.15.
Why is support for chunked files needed? Perhaps I'm mistaken, but I'd expect the erofs image to have no actual data, so chunks would not be needed.
@jluebbe All the files on the erofs need to be the same size as the backing file (typically using some form of hole). To do that size-effectively in erofs we use chunked files with a null backing block.