runc is lower level. Docker uses runc under the hood to run each individual container, and rkt is somewhere in the middle as far as features go

http://jvns.ca/blog/2016/10/02/i-just-want-to-run-a-containe...