rkt 1.13.0 发布了。Rocket （也叫 rkt）是 CoreOS 推出的一款容器引擎，和 Docker 类似，帮助开发者打包应用和依赖包到可移植容器中，简化搭环境等部署工作。Rocket 和 Docker 不同的地方在于，Rocket 没有 Docker 那些为企业用户提供的“友好功能”，比如云服务加速工具、集群系统等。反过来说，Rocket 想做的，是一个更纯粹的业界标准。

本次版本新特性和 UX 的改进：

• export: name flag for exporting multi-app pods (#3030).

• stage1: limit device node creation/reading/writing with DevicePolicy= and DeviceAllow= (#3027,#3058).

• rkt: implements --insecure-options={capabilities,paths,seccomp,run-all} (#2983).

Bug 修复：

• kvm: use a properly formatted comment for iptables chains (#3038). rkt was using the chain name as comment, which could lead to confusion.

• pkg/label: supply mcsdir as function argument to InitLabels() (#3045).

• api_service: improve machined call error output (#3059).

• general: fix old appc/spec version in various files (#3055).

• rkt/pubkey: use custom http client including timeout (#3084).

• dist: remove quotes from rkt-api.service ExecStart (#3079).

• build: multiple fixes (#3042, #3041, #3046).

• configure: disable tests on host flavor with systemd <227 (#3047).

其他改进：

• travis: add go 1.7, bump go 1.5/1.6 (#3077).

• api_service: Add lru cache to cache image info (#2910).

• scripts: add curl as build dependency (#3070).

• vendor: use appc/spec 0.8.6 and k8s.io/kubernetes v1.3.0 (#3063).

• common: use fileutil.IsExecutable() (#3023).

• build: Stop printing irrelevant invalidation messages (#3050).

• build: Make generating clean files simpler to do (#3057).

• Documentation: misc changes (#3053, #2911, #3035, #3036, #3037, #2945, #3083, #3076, #3033,#3064, #2932).

• functional tests: misc fixes (#3049).

下载地址：https://github.com/coreos/rkt/releases/tag/v1.13.0