Post #687306

2026-03-11 07:06 UTC

8️⃣ Here&#39;s the 8th post highlighting key new features of the upcoming v260 release of systemd. #systemd260 #systemd In the 4th posting of this current series, we introduced the new .mstack/ directory type, for putting together service and container trees from stacks of overlayed directory trees and bind mounts, all in a self-descriptive directory. In v260 there&#39;s also one major user of this new concept: the importctl tool gained a new &quot;pull-oci&quot; verb for downloading OCI containers. What it…

Replies (2)

@pid_eins@mastodon.social 2026-03-11 07:08

…actually does is talk to the OCI registry, find all the layers, download them and unpacks them into a .mstack/ directory, then converts the OCI metadata into a .nspawn file, and is done. Or in other words, with this you can download any OCI container you like and then boot it with nspawn. Or in fact run it as a system service via RootMStack= in a unit file. it's still a bit barebones, since the focus so far has been on acquiring the container trees and getting them into executable shape, but…

Open ##1495858
@faeizmahrus@mastodon.social 2026-03-11 17:55

@pid_eins This is actually a fantastic addition. I tried out the functionality yesterday and was very impressed. This could replace podman for my usecases. Unfortunately, I faced some SELinux blocks on my Fedora machine, seems like Fedora doesn't have the necessary SELinux rules in place for systemd-nspawn.

Open ##1495883