container-snap: Atomic Updates from OCI Images using Podman’s Btrfs Driver
summary
Prototype plugin container-snap delivers atomic OS updates by creating btrfs subvolumes directly from OCI images and integrating with transactional-update (tukit) so a pulled image can become the next bootable root. It uses Podman’s btrfs driver to store each image as a subvolume, demo runs successfully in VMs, but requires manual copying of host /etc files, reinstalling the bootloader for kernel updates, UX polish, and a pending patch to tukit before real-world deployment.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:46Atomic updates matter
- 2:33Bootable containers from OCI
- 4:42How container-snap works
- 6:47Podman’s Btrfs driver
- 8:14Demo: container-snap
- 10:25Limitations and future
- 12:12Q&A
related talks
25mIntroduction to Bootable Containers
25mFrom Terminal to Container: Tracing Podman Run
39mContainer Live Migration
30mPodman 6.0 — The Next Evolution of Rootless Containerization
39mPodman - create, run and secure Linux containers
38mDeep Dive: containerd
34mPodman 101 and Beyond!
31mcontainerd Introduction and Deep Dive