News for hackers. Stuff that matters.

A comment on Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF. Parent comment

Re:Red Hat to contribute container tech (Podman, bootc, Comp... by bombela on Thursday November 14, 2024 @02:57PM (#42140486)
The IO through fuse-overlay is performance limiting though. It's almost half the speed as overlay directly for layers with many tiny files.

Note that Linux allows you to mount overlay within a user namespace if you are root within the user namespace.

In other words, if you are root within a container; even though it is not root on the host; Linux accepte ton mount overlay filesystems (most filesystems are not allowed). `man user_namespace`

[ Parent | on HN ]
Re:Red Hat to contribute container tech (Podman, bootc, Comp... by nolist_policy on Thursday November 14, 2024 @03:56PM (#42141117)
You may need to do

  podman system reset
The Linux kernel only gained unprivileged overlay recently. Kernel fuse and fuse-overlay are incompatible so you need to wipe everything.

You may need to set

  [storage]
  
  driver = "overlay"
in storage conf as well.

https://docs.podman.io/en/stable/markdown/podman-system-rese...

[ Parent | on HN ]