Today for e.g. Konflux we use a buildah container that runs as a pod (or sometimes for the privileged case directly on a temporary remote VM) and the built container image may live in the vfs storage backend.

So to improve the ergonomics behind making the two step:

• build a container image via buildah
• run the rechunker

It would be nice to be able to co-locate both into one container image so that the rechunker directly can operate on the image stored there.

OTOH, it should work today to export the image from the buildah vfs...well, ideally we can operate on oci: as input but that would take just a bit of work.

ref:

• do we need to run buildah containers always with BUILDAH_ISOLATION = chroot containers/buildah#5818