whisperos/cladder

Multilayer Container Cladding

Cladder

A proof of concept utility that takes two arguments, a source directory and a destination directory.

The src directory is turned into a lz4hc-squashfs archive and then mounted onto a destination directory with tmpfs overlayed ontop of it to make it writeable.

A possible use is to download a source code repo and then build it, and throw away the tempoary build files.

Requirements

System/Runtime

• Linux Kernel supporting squashfs and overlayfs, and iptables-dev installed

Toolchain

• GCC or Clang
• libc

Compiling

v=$(curl 'https://api.github.com/repos/whisperos/cladder/tags' 2>&1 | awk '/name/{print $2;}' | sed -e 's/"//g' -e 's/,$//')
curl -L https://github.com/whisperos/cladder/releases/download/${v}/cladder-${v#v}.tar.gz | tar x - 
cd cladder-${v#v}
./configure --prefix=/usr CFLAGS="-march=native -mtune=native -O2"
make
sudo make install

cladder's Issues

Container build utility

must support bootstraping libc
this is probably were, CI/CD, dependencies/packaging, and remote repo get built.

Set CLONE_NEWNET

create veth in parent

Documention and blog post about a minimal container

probably just a github page, use hugo-docs

Container -> initramfs

add remote fetch

set uid & gid map after CLONE_NEWUSER