原文
Ultra-light footprint
Two static binaries provide the runtime and one shared content store for every application.
Docker-style compatibility
Familiar Dockerfile syntax, layer caching and incremental builds without a container daemon in production.
Host GPU integration
Bind host graphics drivers at launch instead of packaging a second driver stack in every image.
Secure system resource access
Declare access to DBus, sockets and devices. Grant only the resources an application needs.
Git-native versioning
Install any tag, branch or exact commit SHA, then pin the source that should receive updates.
One package model
Use the same manifest and command across systems, with an OCI image built for each architecture.