mirror_lxc/templates
Scott Moser 1a2da75b6e Add support for squashfs images in oci via atomfs
This adds support to the oci template for squashfs images.
It uses 'atomfs' from [1] to accomplish this.

Squashfs images (media type
application/vnd.stacker.image.layer.squashfs+zstd+verity) have several
benefits compared to tar+gz:

 * immediately mountable
 * read-only filesystem
 * verity data present in oci manifest.

I presented this at Fosdem 2023 at [2].

The 'atomfs' program can be replaced by passing '--mount-helper'
argument to the oci template.

    mount-helper mount oci:<oci_dir>:<oci_name> <mountpoint>
    mount-helper umount <mountpoint>

[1] https://github.com/project-machine/atomfs
[2] https://fosdem.org/2023/schedule/event/container_secure_storage/

Signed-off-by: Scott Moser <smoser@brickies.net>
2023-02-27 09:06:37 -05:00
..
lxc-busybox.in Replace deprecated backticks with $() construct 2021-10-28 20:15:29 +02:00
lxc-download.in lxc-download: Rely on HTTPS only 2022-01-17 21:15:53 -05:00
lxc-local.in templates: don't double quote 2021-09-27 12:42:22 +02:00
lxc-oci.in Add support for squashfs images in oci via atomfs 2023-02-27 09:06:37 -05:00
meson.build meson: Rework configuration variables 2022-06-02 16:50:00 -04:00