From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id 2F8181FF0E5 for ; Wed, 15 Jul 2026 12:00:35 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id D2427213E9; Wed, 15 Jul 2026 12:00:34 +0200 (CEST) Message-ID: <571464e9-756b-4b80-9f1f-1b6905b247b5@proxmox.com> Date: Wed, 15 Jul 2026 12:00:27 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [RFC container/storage] OCI image OverlayFS integration proposal To: zedv@physik.fu-berlin.de, Proxmox VE development discussion References: <5709a436-fb72-4fa5-8bdc-702c3e96a5a7@proxmox.com> Content-Language: en-US From: Filip Schauer In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1784109610036 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.167 Adjusted score from AWL reputation of From: address DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) RCVD_IN_DNSWL_LOW -0.7 Sender listed at https://www.dnswl.org/, low trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: XTMBAJX4QHHXITOO3UZN2MZ33JS2MG6F X-Message-ID-Hash: XTMBAJX4QHHXITOO3UZN2MZ33JS2MG6F X-MailFrom: f.schauer@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: On 14/07/2026 16:11, Jörg Behrmann wrote: > Hi! > > I usually only watch from the sidelines, but this just tumbled through my mail > client while I was waiting for a build to finish. I've not read the whole > proposel, so excuse me if this comment is silly… > > On Tue, Jul 14, 2026 at 03:19:09PM +0200, Filip Schauer wrote: >> Directory structure of the content type: >> ``` >> oci/ >> +-- layers/ >> |   +-- sha256-111.../ >> |   +-- sha256-222.../ >> |   `-- by-blob-id/ >> |       +-- sha256-abc... >> |       `-- sha256-def... >> `-- images/ >>     +-- sha256-9f86d081... >>     `-- sha256-2c26b46b... >> ``` >> > This looks a bit like composefs. I grepped through your proposal and didn't see > it mentioned. > > - The original C project https://github.com/composefs/composefs > - The Rust rewrite https://github.com/composefs/composefs-rs > > RH built this because of their bootc plans. I'm not a fan of that and also not > much a fan of OCI containers themselves, but I know the people working on it and > they are nice and the project does have some cool uses. > > There's a talk from last year's All Systems Go at [1] and you can find the > slides at [2]. The above reminded me particularly of slide 13 and later. > > I hope this isn't too far off from what you want to do. > > best regards, > Jörg Behrmann > > [1] https://media.ccc.de/v/all-systems-go-2025-362-uki-composefs-and-remote-attestation-for-bootable-containers > [2] https://cfp.all-systems-go.io/media/all-systems-go-2025/submissions/TNKPQS/resources/2025_All_Systems_Go_-_UKI_composefs_and_r9Z95aW.pdf Hello, thanks for pointing this out, composefs certainly looks interesting. As I understand it, composefs deduplicates at the individual file level, while my proposal deduplicates at the layer level. composefs is not yet packaged in Debian stable. That said, it might be something to keep in mind for a potential future extension. For the initial version however, I would rather keep things simple and stay aligned with the layer model defined by the OCI spec.