News for hackers. Stuff that matters.

A comment on Faster Filesystem Access with Directfs. Parent comment

Re:Faster Filesystem Access with Directfs by esjeon on Thursday July 27, 2023 @08:40PM (#36901959)
I think it's a gVisor-specific concept. The page says:

> Directfs is a new filesystem access mode that uses these primitives to expose the container filesystem to the sandbox in a secure manner.

So, it's likely this is not a filesystem, but just an implementation detail.

[ Parent | on HN ]
Re:Faster Filesystem Access with Directfs by dilyevsky on Thursday July 27, 2023 @09:12PM (#36902088)
Yes, it's a gVisor feature. They basically utilize SCM_RIGHTS[0] Linux api to open files from the gofer process outside of sandbox and then pass opened fds into the sandbox.

[0] - https://blog.cloudflare.com/know-your-scm_rights/

[ Parent | on HN ]