rkt 1.7.0 发布了。
Rocket (也叫 rkt)是 CoreOS 推出的一款容器引擎,和 Docker 类似,帮助开发者打包应用和依赖包到可移植容器中,简化搭环境等部署工作。Rocket 和 Docker 不同的地方在于,Rocket 没有 Docker 那些为企业用户提供的“友好功能”,比如云服务加速工具、集群系统等。反过来说,Rocket 想做的,是一个更纯粹的业界标准。
更新内容:
新特性和UX更新
-
stage1: implement no-new-privs linux isolator (#2677).
-
stage0: disable OverlayFS by default when working on ZFS (#2600).
-
stage1: (partially) restrict access to procfs and sysfs paths (#2683).
-
stage1: clean up pod cgroups on GC (#2655).
-
stage1/prepare-app: don't mount /sys/fs/cgroup in stage2 (#2681).
-
stage0: complain and abort on conflicting CLI flags (#2666).
-
stage1: update CoreOS image signing key (#2659).
-
api_service: Implement GetLogs RPC request (#2662).
-
networking: update to CNI v0.3.0 (#3696).
Bug修复
-
api: fix image size reporting (#2501).
-
build: fix build failures on manpages/bash-completion target due to missing GOPATH (#2646).
-
dist: fix "other" permissions so rkt list can work without root/rkt-admin (#2698).
-
kvm: fix logging network plugin type (#2635).
-
kvm: transform flannel network to allow teardown (#2647).
-
rkt: fix panic on rm a non-existing pod with uuid-file (#2679).
-
stage1/init: work around
cgroup/SCM_CREDENTIALS
race (#2645). -
gc: mount stage1 on GC (#2704).
-
stage1: fix network files leak on GC (#2319).
其他更新
-
deps: remove unused dependencies (#2703).
-
deps: appc/spec, k8s, protobuf updates (#2697).
-
deps: use tagged release of github.com/shirou/gopsutil (#2705).
-
deps: bump docker2aci to v0.11.1 (#2719).
-
Documentation updates (#2620, #2700, #2637, #2591, #2651, #2699, #2631).
-
Test improvements (#2587, #2656, #2676, #2554, #2690, #2674, #2665, #2649, #2643, #2637,#2633).
下载地址:https://github.com/coreos/rkt/releases/tag/v1.7.0