[PATCHSET RFC v5 9/9] fuse4fs: run servers as a contained service

Darrick J. Wong
2025-09-16T00:24:02Z

Hi all,

In this final series of the fuse-iomap prototype, we package the newly
created fuse4fs server into a systemd socket service. This service can
be used by the "mount.service" helper in libfuse to implement untrusted
unprivileged mounts.

If you're going to start using this code, I strongly recommend pulling
from my git trees, which are linked below.

Comments and questions are, as always, welcome.

e2fsprogs git tree:
https://git.kernel.org/cgit/linux/kernel/git/djwong/e2fsprogs.git/log/?h=fuse4fs-service-container
---
Commits in this patchset:
* libext2fs: fix MMP code to work with unixfd IO manager
* fuse4fs: enable safe service mode
* fuse4fs: set proc title when in fuse service mode
* fuse4fs: set iomap backing device blocksize
---
MCONFIG.in | 1
configure | 181 +++++++++++++++++++++++++
configure.ac | 69 +++++++++
debian/fuse4fs.install | 2
fuse4fs/Makefile.in | 42 +++++-
fuse4fs/fuse4fs.c | 315 +++++++++++++++++++++++++++++++++++++++++--
fuse4fs/fuse4fs.socket.in | 14 ++
fuse4fs/fuse4fs@.service.in | 95 +++++++++++++
lib/config.h.in | 6 +
lib/ext2fs/mmp.c | 46 ++++++
util/subst.conf.in | 2
11 files changed, 750 insertions(+), 23 deletions(-)
create mode 100644 fuse4fs/fuse4fs.socket.in
create mode 100644 fuse4fs/fuse4fs@.service.in