Rocket is a new container runtime created by CoreOS as an alternative to Docker. It aims to address some perceived flaws in Docker's design by having composable components for building, running, and distributing containers. It uses a new App Container format and tools like rkt and actool for working with containers. The document demonstrates migrating a Docker container to Rocket and running it, showing Rocket's capabilities. It also discusses the initial reactions and debate surrounding Rocket's introduction.

1. Very Early Review - Rocket
(App Container runtime)
Dec 3, 2014
by @subicura (Chungsub Kim)

3. from 2013/06
Alex Polvi
Brandon Philips
Michael Marineau

4. docker
CoreOS use docker
docker contributor
etcd
A highly-available key value store
standalone
widespread adoption and use outside CoreOS itself
fleetd
A Distributed init System

5. OpenSource
CoreOS ❤️ OpenSource
many open source = about 100 github projects

6. quay.io
Secure hosting for private Docker repositories

7. client
+ …

8. new container runtime

9. composability
Unix philosophy
independent and composable
clean integration points
building images
running images
uploading
downloading
overlay networking
all compiled into one monolithic binary
running primarily as root on your server
central daemon
App Container Runtime
rkt - fetch/run/…
actool - build/validation/…
docker container -> docker platform

10. security
isolation
crypto
image auditing
application identity
Metadata Server
unique identity
signing
central daemon
docker process model - where everything runs through a
central daemon - is “fundamentally flawed”. so rewrite!

11. standard
standard specification
proposing a standard
app-container
tar/gzip/bzip2/xz/…
docker spec
App Container Image
The standard container manifesto was removed in docker.

12. discovery
simple
golang’s vanity URL convention
without running their own registry
alternative protocol
such BitTorrent
simple
docker hub
docker registry
App Container Discovery
simple & support alternative protocol

13. DEMO

14. install rocket
os ubuntu 14.04.1
id root
library sudo apt-get install libseccomp-dev
$ curl -L https://github.com/coreos/rocket/releases/download/v0.1.0/rocket-v0.1.0.
tar.gz -o rocket-v0.1.0.tar.gz
$ tar xzvf rocket-v0.1.0.tar.gz
$ cd rocket-v0.1.0
$ mv rkt /usr/local/bin
$ mv actool /usr/local/bin
$ rkt help
$ actool help

15. create ACI
$ mkdir sample
$ cd sample
$ mkdir -p rootfs/bin
$ cd rootfs/bin
$ curl -L https://github.com/subicura/sample-go-server/releases/download/
1.0.0/sample-go-server -o sample
$ chmod +x sample
$ cd ../..
$ vi manifest.json
$ actool validate manifest.json #manifest.json: valid AppManifest
$ actool build --app-manifest manifest.json rootfs sample.aci
$ actool validate sample.aci #sample.aci: valid app container image

16. manifest.json
{
"acVersion": "1.0.0",
"acKind": "AppManifest",
"name": "subicura.com/sample-1.0.0",
"os": "linux",
"arch": "amd64",
"exec": [
"/bin/sample"
],
"ports": [
{
"name": "www",
"protocol": "tcp",
"port": 5000
}
],
"annotations": {
"authors": "Chungsub Kim <subicura@subicura.com>"
}
}

17. fly rocket!
$ mv sample.aci sample.tar # no type returned from DetectFileType issue
$ gzip sample.tar -c > sample.aci # use gzip
$ rkt run sample.aci
$ curl http://localhost:5000
or
$ rkt run https://github.com/subicura/sample-go-server/releases/download/
1.0.0/sample.aci

18. docker migration???
$ docker pull coreos/etcd
$ mkdir -p etcd/rootfs
$ cd etcd
$ docker run --name=etcd coreos/etcd
$ docker export etcd | sudo tar -x -C rootfs -f -
$ docker kill etcd
$ docker rm etcd
$ vi manifest.json
$ actool build --app-manifest manifest.json rootfs etcd.aci
$ mv etcd.aci etcd.tar # no type returned from DetectFileType issue
$ gzip etcd.tar -c > etcd.aci # use gzip
$ rkt run etcd.aci
$ curl http://localhost:4001/version

19. manifest.json
{
"acVersion": "1.0.0",
"acKind": "AppManifest",
"name": "coreos.com/etcd",
"os": "linux",
"arch": "amd64",
"exec": [
"/etcd -name node0"
],
"ports": [
{
"name": "etcdclient",
"protocol": "tcp",
"port": 4001
},
{
"name": "etcdclieetcdraftnt",
"protocol": "tcp",
"port": 7001
}
],
"annotations": {
"authors": "Chungsub Kim <subicura@subicura.com>"
}
}

20. CONTAINER WARS

21. Github Star

22. Docker’s response

23. News

24. use Docker
use ACI Spec?
Rocket & Docker

25. Link
• https://github.com/coreos/rocket
• https://coreos.com/blog/rocket/
• http://www.youtube.com/watch?v=U3UmFQbUsN8
• http://blog.docker.com/2014/12/initial-thoughts-on-the-rocket-announcement/
• https://github.com/subicura/sample-go-server

26. Rocket is rocket?
THANK YOU