5 ms·

small aside, but it looks like rkt is not going to be that replacement. Recent disclosure of vulnerabilities in rkt that Redhat are apparently not going to bot

• hardwaresofton 7y ago
  rkt is basically dead and so is rktnetes. However, docker internals have basically been replaced with containerd[0] in this point -- the two front runners in the battle to actually run your containers (and power higher level abstraction tools like docker) are containerd[0] and cri-o[1]. I personally prefer containerd, but there are a lot of people who are obsessed with cri-o (big company backers, from what I can remember), despite the fact that it's chronically behind on features (for example alternate runtimes, runtimeClass support), but they're both excellent. Note that there are also other projects like podman[2] that also aim to serve as docker replacements. Discussion on containerd shim in docker can be found on google group[3] way back in 2016. [0]: https://github.com/containerd https://github.com/containerd [1]: https://github.com/cri-o/cri-o https://github.com/cri-o/cri-o [2]: https://github.com/containers/libpod https://github.com/containers/libpod [3]: https://groups.google.com/forum/#!topic/docker-dev/zaZFlvIx1_k https://groups.google.com/forum/#!topic/docker-dev/zaZFlvIx1...