EROFS and containers
summary
EROFS is a block‑based, immutable image filesystem with fixed block alignment, chunk deduplication, per‑file compression and optional metadata compression; it already ships in RHEL 9/10, Amazon/Alibaba/Azure/Oracle Linux and on billions of devices. Implementations add fireback mounts to avoid loop devices, parallel unpacking in containerd for about 20% faster image pulls, and a VMDK‑based layer merge to present one block device; Netflix reports 2–3× faster container launch. Ongoing work targets host–guest page‑cache sharing and FSverity integration for image integrity; unprivileged mounts remain under policy debate.
AI-written summary · about
chapters (7)
- 0:00Introduction and welcome
- 1:03What is EROFS and its features
- 8:12EROFS in container use cases
- 15:03EROFS integration with container runtimes
- 22:14Mounting in user namespaces discussion
- 28:15Security concerns and threat model
- 31:02Q&A
related talks
40mEROFS: Current Status and Future Plans
15mLightning Talk: EROFS: An Image-based Filesystem for Containers
57mEROFS: Past, Present, and Future
32mEROFS, What Are We Doing Now For Containers?
33mEROFS Everywhere: An Image-Based Kernel Approach for Various Use Cases
38mEROFS, an Introduction and our Smartphone Practice
11mEROFS as a replacement for EXT4 and Squashfs
38mEROFS, an Introduction and our Smartphone Practice