Skip to content

feat(os): enable kernel backends for streamed container layers - #1509

Merged
kvinwang merged 3 commits into
nextfrom
feat/image-stream-kernel
Nov 1, 2026
Merged

kvinwang merged 3 commits into
nextfrom
feat/image-stream-kernel

Conversation

@kvinwang

@kvinwang kvinwang commented Nov 1, 2026 •

Copy link
Copy Markdown
Collaborator

Enable built-in kernel support for streamed container layers and the alternative storage paths under evaluation:

  • EROFS with xattrs, POSIX ACLs and security labels, including direct file backing.
  • ublk with io_uring and legacy command compatibility.
  • Explicit FUSE passthrough and io_uring support alongside the existing FUSE/loop/overlayfs configuration.
  • EROFS on-demand reads with fscache/cachefiles for an optional caching backend.

Only the mkosi kernel fragment changes. These options make the backends available without another OS rebuild; they do not install a snapshotter, start a cache daemon, or enable caching. The current loop/FUSE implementation keeps layer data off the guest disk. EROFS on-demand caching is an alternative, deprecated in Linux 6.18, and remains inactive unless explicitly configured by userspace. FUSE passthrough requires a trusted backing file; it must not bypass verification of untrusted host data.

Validation: Linux 6.18.40 with the current dstack kernel patches, fresh x86_64_defconfig + the full fragment + olddefconfig; full fragment assertions and LXC kernel checks passed. File-scoped prek hooks and git diff --check passed; REUSE lint passed on the initial change. No full kernel rebuild or boot test in this PR. The loop/FUSE prototype was exercised separately; alternative paths have not been benchmarked.

Signed-off-by: Kevin Wang <wy721@qq.com>
Signed-off-by: Kevin Wang <wy721@qq.com>
@kvinwang kvinwang changed the title feat(os): enable EROFS and ublk for streamed container layers feat(os): enable kernel backends for streamed container layers Nov 1, 2026
@kvinwang
kvinwang merged commit d268bd0 into next Nov 1, 2026
9 checks passed
@kvinwang
kvinwang deleted the feat/image-stream-kernel branch November 1, 2026 00:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant