docs: update

sc2-sys · Feb 3, 2025 · 668c4eb · 668c4eb
1 parent b46a1a4
commit 668c4eb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/image_pull.md b/docs/image_pull.md
@@ -27,6 +27,9 @@ do not have confidentiality requirements. To maintain integrity, we mount
 the image with `dm-verity`, and validate the `dm-verity` device as part of
 attestation.
 
+We choose to mount individual layers separately (rather than whole images),
+but we should measure that the former is actually better than the latter.
+
 We could mount encrypted images from the host to the guest, but we would be
 losing on the de-duplication opportunities in the host.