Docker,Rkt谁会笑到最后

AppC的全称是“Application Container Specification（标准应用容器规范）”，这个规范的制定不是为了服务于特定的Linux系统环境，其初衷在于制定一组不依赖于具体平台、技术、操作系统和编程语言的容器虚拟化规范，解除已经初露端倪的企业容器产品互不兼容、各自封闭发展的危机，防止更多技术壁垒的产生

正在制定中的AppC容器规范设计目标包括：

组件式工具：用于下载、部署和运行虚拟容器环境的操作工具应该相互独立、互不依赖且可被替换。 镜像安全性：镜像在因特网下载传输时应当使用加密协议，容器工具应当内置验证机制，以拒绝不安全来源的镜像。 操作去中心化：镜像分发应该支持可扩展的传输协议，未来允许引入P2P，甚至BitTorrent协议来提升镜像分发效率，且容器使用前不应需要登录特定的镜像仓库。 开放性标准：容器镜像的格式与元数据定义应该由社区设立统一协商制定，使得符合这一规范的不同容器产品能够共享镜像文件。 Rkt/coreos/rkt

rkt (pronounced"rock-it") is a CLI for running app containers on Linux. rkt is designed to be secure, composable, and standards-based.

Some of rkt's key features and goals include:

Security: rkt is developed with a principle of "secure-by-default", and includes a number of important security features like support forSELinux,TPM measurement, and running app containers inhardware-isolated VMs.Composability: rkt is designed for first-class integration with init systems (systemd, upstart) and cluster orchestration tools (fleet,Kubernetes,Nomad), and supportsswappable execution engines.Open standards and compatibility: rkt implements theappc specification, supports theContainer Networking Interface specification, and can also runDocker images.

For more on the background and motivation behind rkt, read the originallaunch announcement.

FreeBSD平台基于jails/ZFS

Jetpack/3ofcoins/jetpack

Jetpack is anexperimental and incompleteimplementation of theApp Container Specificationfor FreeBSD. It uses jails as isolation mechanism, and ZFS for layered storage.

This document uses some language used inRocket, the reference implementation of the App Container Specification. While the documentation will be expanded in the future, currently you need to be familiar at least with Rocket's README to understand everything.

Linux平台

Nose Cone/cdaylward/nosecone

Overview

Nose Cone is a C++App Containerimplementation that uses thelibappcApp Container library.