Closed n1hility closed 1 month ago
PTAL @Gregory-Pereira @lmilbaum , another high priority fix
// cc @rhatdan
LGTM @giuseppe @nalind PTAL
Backing up a second, we should support kernel native idmapping and shouldn't need to chown I think...
I don't think idmapping was supported in RHEL for 9.4.
Right yeah we are on 5.14 and this was added to overlay in 5.19 right?
Not sure of the numbers but sounds right.
OK yes I guess overlayfs idmapping is only going to be for RHEL10 so far unless further backports happen.
The use of a uid map leads to a new layer with all files chowned. This takes several seconds due to the size of the instructlab container (26GB). Normally this would be a one time cost where the idmap layer is cached and reusued accross container creations; however, since the container is stored on a read-only additional image store, no caching is performed.
Address the problem by creating a derived empty contianer in mutable container storage. This allows the 1k idmap layer to be created in the smae area, yet reuses the layers in additional image store.