rkt 1.14.0 发布了。Rocket (也叫 rkt)是 CoreOS 推出的一款容器引擎,和 Docker 类似,帮助开发者打包应用和依赖包到可移植容器中,简化搭环境等部署工作。Rocket 和 Docker 不同的地方在于,Rocket 没有 Docker 那些为企业用户提供的“友好功能”,比如云服务加速工具、集群系统等。反过来说,Rocket 想做的,是一个更纯粹的业界标准。
该版本更新了 coreos和kvm flavors,在 api-service
中修复了一些bug以及更改了cgroups-related,更好的启发式也相继出台以避免在不支持的环境中使用覆盖。
发行说明:
主要更新如下:
New features and UX changes
-
stage1: update to CoreOS 1151.0.0 and systemd v231 (#3122).
-
common: fall back to non-overlay with ftype=0 (#3105).
-
rkt: honor insecure-options in run-prepared (#3138).
Bug fixes
-
stage0: fix golint warnings (#3099).
-
rkt: avoid possible panic in api-server (#3111).
-
rkt/run: allow --set-env-file files with comments (#3115).
-
scripts/install-rkt: add wget as dependency (#3124).
-
install-rkt.sh: scripts: Fix missing files in .deb when using install-rkt.sh (#3127).
-
tests: check for run-prepared with insecure options (#3139).
Other changes
-
seccomp/docker: update docker whitelist to include mlock (#3126). This updates the
@docker/default-whitelist
to include mlock-related syscalls (mlock, mlock2, mlockall). -
build: add PowerPC (#2936).
-
scripts: install-rkt.sh: fail install-pak on errors (#3150). When install-pak (called from install-rkt.sh) fails at some point abort packaging.
-
api_service: Rework cgroup detection (#3072). Use the
subcgroup
file hint provided by some stage1s rather than machined registration. -
Documentation/devel: add make images target (#3142). This introduces the possibility to generate graphivz based PNG images using a new
images
make target. -
vendor: update appc/spec to 0.8.7 (#3143).
-
stage1/kvm: avoid writing misleading subcgroup (#3107).
-
vendor: update go-systemd to v12 (#3125).
-
scripts: bump coreos.com/rkt/builder image version (#3092). This bumps rkt-builder version to 1.0.2, in order to work with seccomp filtering.
-
export: test export for multi-app pods (#3075).
-
Documentation updates: (#3146, #2954, #3128, #2953, #3103, #3087, #3097, #3096, #3095, #3089)
下载: