• Background
• Solution
• Open questions
• Rejected solutions
• Add a "destructive pull" operation to libOSTree
• mount --bind with a barrier directory
• bindfs