New issue
Advanced search Search tips

Issue 841787 link

Starred by 87 users

Issue metadata

Status: Started
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Feature



Sign in to add a comment

support fuse in termina images

Project Member Reported by vapier@chromium.org, May 10

Issue description

should investigate enabling fuse in our termina images.  i thought it had already been looked at (at least lightly), but can't find details in a quick search.
 
Labels: Hotlist-Crostini-Platform
Cc: pkern@google.com
Taking into account the limitation of the containers for loading custom kernel modules, having the working fuse will be very valuable. 
Enabling fuse in the kernel would allow snapd to work in containers via squashfuse.  Would be a great small addition.
Taking into account the limitation of the containers for loading custom kernel modules, having the working fuse will be very valuable. 

One can mount Google Drive inside the container for instance. 
> Taking into account the limitation of the containers for loading custom kernel modules, having the working fuse will be very valuable.

You can simply tell LXD to load the kernel module by setting

linux.kernel_modules

either in the default profile to apply to all containers or to specific containers by adding it to the container's config. :)
Fuse support would enable the use of gocryptfs, which would be very useful for me.
> You can simply tell LXD to load the kernel module by setting

Unfortunately, Fuse not not appear to be in termina's kernel, otherwise you'd be right.  At least, I'm not seeing /dev/fuse.  Something I'm missing?

I've been waiting for this for a while to the point where I've considered enabling developer mode to just add it myself.
FUSE is not enabled in the current termina kernels
re: kernel modules in general, we have set CONFIG_MODULES=n so no modules can be loaded at runtime.

Unprivileged fuse mounts should be enabled in 4.18, so we can look at this more closely after the next CrOS kernel rebase.

Comment 11 by smbar...@chromium.org, Nov 13 (3 days ago)

Labels: M-72
Owner: smbar...@chromium.org
Status: Started (was: Available)
We have 4.19 now, so this turned out to be as easy as flipping the kernel config and adding /dev/fuse to tremplin.

This might need libfuse 3.0 to work, which isn't in Debian stretch. But I was able to build and mount the hello world example from libfuse master, so we'll at least be ready when buster comes around.

Comment 12 by vapier@chromium.org, Nov 13 (3 days ago)

M72 feature freeze technically was last week, so seems like M73 material

Comment 13 by smbar...@chromium.org, Nov 13 (3 days ago)

Labels: -M-72 M-73

Sign in to add a comment