TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

191 点作者 polvi超过 9 年前

11 条评论

mkobit超过 9 年前
&gt; &quot;Despite the importance of a shared standard, after six months of effort the Open Container Initiative (OCI) body has yet to decide whether it should or should not develop and standardize an image format. Today, the primary focus of the OCI community is creating standards for the container runtime environment, rather than the container image. Specs for container runtime features are also a worthy discussion, but we think there is a more urgent need – and a more open, industry-wide upside – for a standard container image specification.&quot;<p>I haven&#x27;t been following the OCI at all, but could somebody shed some light as to why the runtime is the most important part to standardize? Also, any insight as to whether or not the container image format should be standardized?
评论 #11036564 未加载
评论 #11037757 未加载
评论 #11039959 未加载
23david超过 9 年前
Systemd-approved, nonetheless?<p>“I believe in the rkt model,” said Lennart Poettering, systemd lead developer. “Integrating container and service management, so that there’s a 1:1 mapping between containers and host services is an excellent idea. Resource management, introspection, life-cycle management of containers and services – all that tightly integrated with the OS; that’s how a container manager should be designed.”
u320超过 9 年前
I think we&#x27;re seeing a shift in focus in the container world from container runtimes such as Docker, to container orchestration systems such as Kubernetes. At some point the container runtime becomes just an implementation detail.<p>Unless Docker finds a way of moving up the stack they are going to have a hard time defending their current valuation. Their current efforts provides close to zero monetizable value.
评论 #11037815 未加载
评论 #11036825 未加载
Perceptes超过 9 年前
Congratulations to CoreOS and the rkt team. I&#x27;ve been waiting for this to really dig into rkt, as I am a big fan of how CoreOS has been approaching this project, and eager for a container system that is <i>not</i> Docker.
mixmastamyk超过 9 年前
Security is good, but it isn&#x27;t a big problem for my current local container apps. However, I&#x27;ve found Docker clumsy in various areas. Does this improve on the design any?<p>Also, is there a PPA planned for Ubuntu, or plans to get it into Debian soon, now that it has reached 1.0?
评论 #11037236 未加载
评论 #11037197 未加载
jamra超过 9 年前
If I&#x27;m developing on OS X, would it still be possible to use rkt?<p>How are the tools for managing your rkt deployments? Since Hashicorp supports it, I&#x27;m starting to think that I would be better off using their tooling to abstract myself from the specific container implementation.
评论 #11036809 未加载
kentt超过 9 年前
OT: Is rkt pronounced &#x27;are kay tee&#x27;?
评论 #11037166 未加载
评论 #11036729 未加载
评论 #11036731 未加载
DoubleMalt超过 9 年前
Any plans on supporting rkt for ARM? That would be a killer feature for me :)
评论 #11036505 未加载
评论 #11036538 未加载
评论 #11038275 未加载
inquisitiveio超过 9 年前
Good to see they are confident enough to cut a 1.0 release. We have been happily mixing the cgroup and kvm&#x2F;Clear Containers runtimes for a for a couple of months now.
jvoorhis超过 9 年前
TPM support caught my eye. Brushing off the controversy surrounding EFI secure boot, the TPM is the under-appreciated &quot;Secure Element&quot; in business laptops and high end servers.
tychuz超过 9 年前
Open source project hitting 1.0 - truly breaking news, especially when looking at all these JavaScript libraries.