Compatibility

rkt supports the App Container (appc) spec and can also run Docker container images, providing flexibility and compatibility with various container formats.

Security

rkt is designed with security in mind, offering features like process isolation through Linux namespaces, user namespaces, and SELinux/AppArmor integration.

Isolation

rkt runs applications in their own stage1 environments, ensuring strong isolation between containers and better resource management.

Modularity

rkt is built with a modular architecture, allowing users to swap out the stage1 implementation to better fit their needs.

Lightweight

rkt avoids running a central daemon, thus using fewer system resources and simplifying debugging and monitoring.