feat: add containerd/fuse-overlayfs-snapshotter

[takumin]

containerd/fuse-overlayfs-snapshotter: fuse-overlayfs plugin for rootless containerd

$ aqua g -i containerd/fuse-overlayfs-snapshotter

[suzuki-shunsuke]

Thanks!

[suzuki-shunsuke]

I'm sorry but I'm not familiar with this tool, so could you tell us how to confirm aqua can support this tool?
Does this tool work by installing the binary containerd-fuse-overlayfs-grpc in PATH?

[takumin]

@suzuki-shunsuke
I've been working on it for a bit, but I get an error with the nerdctl command...

https://github.com/containerd/fuse-overlayfs-snapshotter#hard-way

step1: aqua install

$ cat << '__EOF__' > ~/.aqua.yaml
---
# aqua - Declarative CLI Version Manager
# https://aquaproj.github.io/
packages:
- name: containerd/nerdctl@v0.23.0
- name: containerd/containerd@v1.6.8
- name: containerd/fuse-overlayfs-snapshotter@v1.0.4
- name: containers/fuse-overlayfs@v1.9
- name: rootless-containers/rootlesskit@v1.0.1
- name: rootless-containers/slirp4netns@v1.2.0
__EOF__
$ aqua install --all

step2: containerd config

$ mkdir -p ~/.config/containerd
$ cat << __EOF__ > ~/.config/containerd/config.toml
version = 2
root = "$(echo $HOME)/.local/share/containerd"
state = "$(echo $XDG_RUNTIME_DIR)/containerd-rootless"

[grpc]
  address = "$(echo $XDG_RUNTIME_DIR)/containerd-rootless/containerd.sock"

[proxy_plugins]
  [proxy_plugins."fuse-overlayfs"]
    type = "snapshot"
    address = "$(echo $XDG_RUNTIME_DIR)/containerd-rootless/fuse-overlayfs.sock"
__EOF__

step3: running rootlesskit

$ rootlesskit \
  --net=slirp4netns --disable-host-loopback \
  --copy-up=/etc --copy-up=/run \
  --state-dir=$XDG_RUNTIME_DIR/containerd-rootless \
  sh -c "rm -rf /run/containerd ; sleep infinity"

step4: running containerd-fuse-overlayfs-grpc

$ nsenter -U --preserve-credentials -m -n -t $(cat $XDG_RUNTIME_DIR/containerd-rootless/child_pid) \
  sh -c "cd $(pwd) ; containerd-fuse-overlayfs-grpc $XDG_RUNTIME_DIR/containerd-rootless/fuse-overlayfs.sock $HOME/.local/share/containerd"

step5: running containerd

$ nsenter -U --preserve-credentials -m -n -t $(cat $XDG_RUNTIME_DIR/containerd-rootless/child_pid) \
  sh -c "cd $(pwd) ; containerd -c $HOME/.config/containerd/config.toml"

step6: running nerdctl

$ export CONTAINERD_SNAPSHOTTER=fuse-overlayfs
$ nerdctl -H $XDG_RUNTIME_DIR/containerd-rootless/containerd.sock run alpine

docker.io/library/alpine:latest:                                                  resolved       |++++++++++++++++++++++++++++++++++++++|
index-sha256:bc41182d7ef5ffc53a40b044e725193bc10142a1243f395ee852a8d9730fc2ad:    done           |++++++++++++++++++++++++++++++++++++++|
manifest-sha256:1304f174557314a7ed9eddb4eab12fed12cb0cd9809e4c28f29af86979a3c870: done           |++++++++++++++++++++++++++++++++++++++|
config-sha256:9c6f0724472873bb50a2ae67a9e7adcb57673a183cea8b06eb778dca859181b5:   done           |++++++++++++++++++++++++++++++++++++++|
layer-sha256:213ec9aee27d8be045c6a92b7eac22c9a64b44558193775a1a7f626352392b49:    done           |++++++++++++++++++++++++++++++++++++++|
elapsed: 5.4 s                                                                    total:  2.7 Mi (508.1 KiB/s)                                
FATA[0005] failed to create shim task: failed to mount rootfs component &{fuse3.fuse-overlayfs overlay [workdir=/home/takumi/.local/share/containerd/snapshots/3/work upperdir=/home/takumi/.local/share/containerd/snapshots/3/fs lowerdir=/home/takumi/.local/share/containerd/snapshots/1/fs]}: mount helper [mount.fuse3 [overlay /run/user/1000/containerd-rootless/io.containerd.runtime.v2.task/default/12a36a3820cce6ca4bb52c892fb9d951926ad4a7ac72e69f78113bd8eeb05c02/rootfs -o workdir=/home/takumi/.local/share/containerd/snapshots/3/work -o upperdir=/home/takumi/.local/share/containerd/snapshots/3/fs -o lowerdir=/home/takumi/.local/share/containerd/snapshots/1/fs -t fuse-overlayfs]] failed: "time=\"2022-10-15T18:10:11+09:00\" level=fatal msg=\"aqua failed\" aqua_version=1.20.2 env=linux/amd64 error=\"command is not found\" exe_name=fuse-overlayfs program=aqua\n": exit status 1: unknown

[takumin]

@suzuki-shunsuke
The nerdctl command fails, but the containerd-fuse-overlayfs-grpc command runs without problems, so I think it is OK to merge.

[suzuki-shunsuke]

Released. https://github.com/aquaproj/aqua-registry/releases/tag/v3.76.0