Seems that the new virtio-fs can be used for the root filesystem of a libvirt VM. That would allow propellor to keep updating the filesystem as it would just be a chroot on the KVM host, rather than an opaque image file.

--spwhitton