Content-Addressable Overlay Filesystem for Linux - ComposeFS / HN

• Using Composefs in OSTree - The idea is that instead of checking out a hardlinked directory and passing that on the kernel commandline we build a composefs image, enable fs-verity on it and put its filename and digest on the kernel command line instead.

Mount overlayfs within unprivileged user namespace

$ unshare --mount -r			# create a new mount namespace. (with --map-root-user)
mkdir upperdir lowerdir mergeddir
mount -t overlay -o lowerdir=/path/to/lowerdir,upperdir=/path/to/upperdir,workdir=/path/to/workdir overlay /path/to/mergeddir

see also

• Introduction to the OverlayFS
  • Overlay Filesystem
• Podman is gaining rootless overlay support - Podman can use native overlay file system with the Linux kernel versions 5.13. Up until now, we have been using fuse-overlayfs.
• composefs - The composefs project combines several underlying Linux features to provide a very flexible mechanism to support read-only mountable filesystem trees, stacking on top of an underlying “lower” Linux filesystem.
• unionfs-fuse - A userspace unionfs implementation