diff --git a/meta-dstack/recipes-core/dstack-sysbox/files/sysbox-mgr.service b/meta-dstack/recipes-core/dstack-sysbox/files/sysbox-mgr.service
index 659c433..8bcfcd0 100644
--- a/meta-dstack/recipes-core/dstack-sysbox/files/sysbox-mgr.service
+++ b/meta-dstack/recipes-core/dstack-sysbox/files/sysbox-mgr.service
@@ -5,7 +5,7 @@ After=dstack-prepare.service
 
 [Service]
 Type=notify
-ExecStart=/usr/bin/sysbox-mgr --data-root /var/lib/sysbox
+ExecStart=/usr/bin/sysbox-mgr --data-root /var/lib/sysbox --disable-ovfs-on-idmapped-mount
 TimeoutStartSec=45
 TimeoutStopSec=90
 StartLimitInterval=0
diff --git a/meta-dstack/recipes-kernel/linux/files/dstack-sysbox.cfg b/meta-dstack/recipes-kernel/linux/files/dstack-sysbox.cfg
index 5b4b8ab..68827bb 100644
--- a/meta-dstack/recipes-kernel/linux/files/dstack-sysbox.cfg
+++ b/meta-dstack/recipes-kernel/linux/files/dstack-sysbox.cfg
@@ -1,2 +1,3 @@
 CONFIG_USER_NS=y
 CONFIG_CONFIGFS_FS=y
+CONFIG_OVERLAY_FS_METACOPY=y