gVisor recently rolled out a filesystem optimization which substantially improves filesystem performance for sandboxed workloads. It involves setting up a overlayfs mount for the container root filesystem in gVisor's user-space kernel. This blog has more details about how this optimization works and how much performance boost can be seen by certain workloads.