How Docker's overlay2 driver stores image layers and container writes: lower, upper, merged, copy-up, on-disk anatomy, kernel options, and where it performs badly.