mount.composefs(8)

NAME
mount.composefs - mount a composefs filesystem image

SYNOPSIS
mount.composefs [-o OPTIONS] IMAGE TARGETDIR

DESCRIPTION
The composefs project uses EROFS image file to store metadata, and one or more separate directories containing content-addressed backing data for regular files.

mount.composefs mounts such an EROFS file in combination with a given set of basedir at the specified location. It can be called directly, or as a mount helper by running mount -t composefs ....

OPTIONS
The provided IMAGE argument must be a valid composefs (EROFS) metadata image. The TARGETDIR will be used as a mount target.

mount.composefs accepts the following colon-separated mount options when passed via the -o OPTIONS argument.

basedir=PATH
    This path will be used to resolve non-empty file references stored in the composefs metadata image. A primary use case is to have this be the same path provided to mkcomposefs --digest-store=PATH.

    Multiple paths can be specified, separated by :.

digest=DIGEST
    The image file is validated to have the specified fs-verity digest before being used. This allows a chain of trust the ensures only the expected data is ever visible in the mount.

    This option also implies verity.

idmap=PATH
    Specify a path to a user namespace whose ID mapping should be used. The typical format for this type of path is /proc/<pid>/ns/user

verity
    If this is specified, all files in the IMAGE must specify an fs-verity digest, and all the files in the base dirs must have a matching fs-verity digest.

    Note: This needs support for the overlayfs "verity" option in the kernel, which was added in 6.6rc1.

ro  Mounts the filesystem read-only. This is mainly useful when using upperdir as unlayered composefs images are naturally readonly.

rw  Overrides a previous ro option

upperdir
    Specify an upper dir in the overlayfs mount that composefs uses. This allows a writable layer on top of the composefs image. See overlayfs docs for details.

workdir
    Specifies an overlayfs workdir to go with upperdir.

SEE ALSO
composefs-info(1), mount.composefs(1)

composefs upstream ⟨https://github.com/containers/composefs⟩