Reinventing Container Linux for the Wasm Era (and More) with System Extensions
summary
Flatcar reworks a container-optimized Linux by using system extensions (sysexts) as raw disk images loaded at boot to compose an immutable root plus overlays, replacing torcx and moving containerd as a CeX out of the core image. Tools: CeX Bakery and a bake script produce images; systemd‑csex update polls HTTPS for three update modes (OS‑independent, OS‑dependent, baked). Use cases: per‑cloud OEM agents, Cluster API control‑plane overlay, and swapping in a Wasm runtime; it works now but UX and rollout policy features remain rudimentary.
AI-written summary · about
chapters (22)
- 0:00Flatcar and System Extensions intro
- 1:03Container vs general-purpose Linux
- 4:37Special-purpose Linux challenges
- 7:09Composable system extensions
- 9:57Legacy tools replacement
- 11:20OEM partitions and tools
- 12:46Kubernetes node provisioning
- 14:31Building extensions with Flatcar
- 17:24Flatcar configuration
- 19:08Updating system extensions
- 23:27Embedding extensions in images
- 24:28Wasm-optimized Linux
- 26:38Wasm runtimes in Flatcar
- 27:43Takeaways and broader applications
- 29:25Getting involved
- 31:30Q&A: Portable format and systemd
- 32:33Q&A: Wasm adoption
- 33:37Q&A: Extensions vs OS tree
- 34:41Q&A: Packages vs extensions
- 35:46Q&A: RPM OS3 and extensions
- 36:07Q&A: Cluster updates and caching
- 38:36Q&A: Containers and extensions
related talks
18mUsing Systemd to Ship Container Runtimes. How?
09mLightning Talk: Shipping Container Runtimes as Systemd-Sysext Images
28mRunning Linux-Based Containers on Wasm and Browser with Container2wasm Converter
33msystemd-sysext in Prod: What We Learned Extending /usr Without a Package Manager
31mDistributing and Running Containers for Wasm-Enabled Environments
33mThe "what" and "why" of Flatcar Linux, a friendly fork of Container Linux
41mOptimizing Microservices with WebAssembly and Linux Containers: Exploring Hybrid Contain...
46mFrom chroot to Docker, Podman, and now Wasm modules: 40 years of container evolution
