-
Notifications
You must be signed in to change notification settings - Fork 169
docs: Move composefs tracking from issue #1190 to docs #1941
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||||
|---|---|---|---|---|---|---|---|---|
|
|
@@ -3,8 +3,6 @@ | |||||||
| Experimental features are subject to change or removal. Please | ||||||||
| do provide feedback on them. | ||||||||
|
|
||||||||
| Tracking issue: <https://github.com/bootc-dev/bootc/issues/1190> | ||||||||
|
|
||||||||
| ## Overview | ||||||||
|
|
||||||||
| The composefs backend is an experimental alternative storage backend that uses [composefs-rs](https://github.com/containers/composefs-rs) instead of ostree for storing and managing bootc system deployments. | ||||||||
|
|
@@ -84,8 +82,6 @@ EORUN | |||||||
| # Final image: copy the sealed UKI into place | ||||||||
| FROM rootfs | ||||||||
| COPY --from=sealed-uki /out/*.efi /boot/EFI/Linux/ | ||||||||
| # Remove raw kernel/initramfs (now embedded in UKI) | ||||||||
| RUN rm -f /usr/lib/modules/*/vmlinuz /usr/lib/modules/*/initramfs.img | ||||||||
| ``` | ||||||||
|
|
||||||||
| This pattern works because: | ||||||||
|
|
@@ -140,21 +136,24 @@ To use sealed images, the container image must have a UKI and systemd-boot insta | |||||||
|
|
||||||||
| There is a `--composefs-backend` option for `bootc install` to explicitly select a composefs backend apart from sealed images; this is not as heavily tested yet. | ||||||||
|
|
||||||||
| ## Current Limitations | ||||||||
| ## Known Issues | ||||||||
|
|
||||||||
| The composefs backend is experimental; on-disk formats are subject to change. | ||||||||
|
|
||||||||
| ### Deployment blockers | ||||||||
|
|
||||||||
| - [Garbage collection](https://github.com/containers/composefs-rs/pull/200): Old deployments are not cleaned up | ||||||||
| - [SELinux enforcement](https://github.com/bootc-dev/bootc/issues/1826): Currently requires `enforcing=0` | ||||||||
| - [OCI registry install](https://github.com/bootc-dev/bootc/issues/1703): Installing from registry can fail due to config mismatch | ||||||||
|
|
||||||||
| ### Important | ||||||||
|
|
||||||||
| - **Experimental**: The on-disk formats are subject to change | ||||||||
| - **UX refinement**: The user experience for building and managing sealed images is still being improved | ||||||||
| - **SELinux**: Currently uses `enforcing=0` in the kernel command line (see [#1826](https://github.com/bootc-dev/bootc/issues/1826)) | ||||||||
| - **kargs.d**: Custom kernel arguments from `/usr/lib/bootc/kargs.d` are not yet automatically included in sealed UKIs | ||||||||
| - [Sealed image build UX](https://github.com/bootc-dev/bootc/issues/1498): Streamlined tooling for building sealed images | ||||||||
| - **kargs.d**: Custom kernel arguments from `/usr/lib/bootc/kargs.d` not yet included in sealed UKIs | ||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This can only happen with UKI addons as we can not modify the kargs of signed UKIs
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Collaborator
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Right, but this is about automatically inserting those kargs when generating a UKI at build time. |
||||||||
|
|
||||||||
| ## Related Issues | ||||||||
| ### Long-term | ||||||||
|
|
||||||||
| - [#1190](https://github.com/bootc-dev/bootc/issues/1190) - composefs-native backend (main tracker) | ||||||||
| - [#1498](https://github.com/bootc-dev/bootc/issues/1498) - Sealed image build UX + implementation | ||||||||
| - [#1703](https://github.com/bootc-dev/bootc/issues/1703) - OCI config mismatch issues | ||||||||
| - [#1826](https://github.com/bootc-dev/bootc/issues/1826) - SELinux enforcement with composefs | ||||||||
| - [#20](https://github.com/bootc-dev/bootc/issues/20) - Unified storage (long-term goal) | ||||||||
| - [#806](https://github.com/bootc-dev/bootc/issues/806) - UKI/systemd-boot tracker | ||||||||
| - [Unified storage](https://github.com/bootc-dev/bootc/issues/20) | ||||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. It appears the tracker for UKI/systemd-boot improvements (#806) was omitted from the new 'Known Issues' section. The PR description mentions this as a long-term goal, and it was present in the old 'Related Issues' list. It would be good to include it here for completeness.
Suggested change
|
||||||||
|
|
||||||||
| ## Additional Resources | ||||||||
|
|
||||||||
|
|
||||||||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The use of bold formatting for the
kargs.ditem is inconsistent with the other items in this list, which are either links or plain text. For better visual consistency, I suggest removing the bolding.