Live data from Hacker News

The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

coreos.com

1–10 of 38 posts

Re: The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

#2
> "Despite the importance of a shared standard, after six months of effort the Open Container Initiative (OCI) body has yet to decide whether it should or should not develop and standardize an image format. Today, the primary focus of the OCI community is creating standards for the container runtime environment, rather than the container image. Specs for container runtime features are also a worthy discussion, but we think there is a more urgent need – and a more open, industry-wide upside – for a standard container image specification."

I haven't been following the OCI at all, but could somebody shed some light as to why the runtime is the most important part to standardize? Also, any insight as to whether or not the container image format should be standardized?

Re: The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

#5

Any plans on supporting rkt for ARM? That would be a killer feature for me :)

>Huawei has contributed to rkt in multiple ways, both with a container registry and by providing ARM support.

It looks like it already supports a bunch of different ARM targets[0].

[0]: https://github.com/appc/spec/blob/3972f6a1b657f38e30100d2a7e...

Re: The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

#6

Any plans on supporting rkt for ARM? That would be a killer feature for me :)

We aren't actively testing against it yet (although plan to in future), but have heard reports from the community that it works fine: https://github.com/coreos/rkt/pull/1766#issuecomment-1578394...

Re: The Security-Minded Container Engine by CoreOS: rkt Hits 1.0

#7
post #2

> "Despite the importance of a shared standard, after six months of effort the Open Container Initiative (OCI) body has yet to decide whether it should or should not develop and standardize an image format. Today, the primary focus of the OCI community is creating standards for the container runtime environment, rather than the container image. Specs for container runtime features are also a worthy discussion, but we…

I want to assume good faith, but OCI is starting to look like standard-washing. What good is runC if you have to use docker pull to download images first?
Post reply on HN