转载

Rocket v1.12.0发布，一款容器引擎

Rkt项目最初的发起者是CoreOS公司。CoreOS公司与其核心产品CoreOS操作系统是实至名归的最早一批Docker企业级用户，伴随着Docker从最初的0.1版本一直走到正式发布的1.0版本。起初两者相互促进，合作甚好。然而，随着Docker在容器界一家独大的趋势越来越明显，其周边的生态逐渐的从单纯的围绕构建容器化应用服务，发展成了自上而下的集群规范体系，甚至部分取代了操作系统的服务进程调度工作。这种臃肿而受Docker单方面控制的容器规范，是CoreOS系统所不待见的，他们想要一个更加开放而中立的容器标准。2014年12月，CoreOS公布了自己的容器计划，并在几个月后结合社区中的容器实践，着手制定新的开放应用容器规范，Rkt则作为此规范中的一个具体实现而继续发展。

更新日志

新特性和UX更改

cli: rename --cap-retain and --cap-remove to --caps-* (#2994).
stage1: apply seccomp isolators (#2753). This introduces support for appc seccomp isolators.
scripts: add /etc/rkt owned by group rkt-admin in setup-data-dir.sh (#2944).
rkt: add --caps-retain and --caps-remove to prepare (#3007).
store: allow users in the rkt group to delete images (#2961).
api_service: cache pod manifest (#2891). Manifest caching considerably improves api-service performances.
store: tell the user to run as root on db update (#2966).
stage1: disabling cgroup namespace in systemd-nspawn (#2989). For more information seesystemd#3589.
fly: copy rkt-resolv.conf in the app (#2982).
store: decouple aci store and treestore implementations (#2919).
store: record ACI fetching information (#2960).

Bug修复

stage1/init: fix writing of /etc/machine-id (#2977).
rkt-monitor: multiple fixes (#2927, #2988).
rkt: don't errwrap cli_apps errors (#2958).
pkg/tar/chroot: avoid errwrap in function called by multicall (#2997).
networking: apply CNI args to the default networks as well (#2985).
trust: provide InsecureSkipTLSCheck to pubkey manager (#3016).
api_service: update grpc version (#3015).
fetcher: httpcaching fixes (#2965).

其他改变

build,stage1/init: set interpBin at build time for src flavor (#2978).
common: introduce RemoveEmptyLines() (#3004).
glide: update docker2aci to v0.12.3 (#3026). This fixes multiple bugs in layers ordering for Docker images.
glide: update go-systemd to v11 (#2970). This fixes a buggy corner-case in journal seeking (implicit seek to head).
docs: document capabilities overriding (#2917, #2991).
issue template: add '/n' to the end of environment output (#3008).
functional tests: multiple fixes (#2999, #2979, #3014).