containerd 2.2.3-dd.0

v2.2.3-dd.0

v2.2.3 Release

containerd 2.3.0-beta.2

Welcome to the v2.3.0-beta.2 release of containerd!
This is a pre-release of containerd

The third minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with
the Kubernetes release schedule, with new minor releases about every 4 months. The
containerd 2.3 release is also the first annual LTS (Long Term Stable) release under
this new schedule, with support planned for at least two years. Direct upgrades
between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

This is a beta release and some functionality is still under development.

Highlights

• Add transfer types for container filesystem copy (#13165)
• Introduce shim bootstrap protocol (#12786)
• Add option to inject trace ID to logs (#13117)
• Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#13113)
• Update plugin config migration to run on load (#12608)
• Detect vendor in cdi specs to generate device IDs for --gpus (#12839)
• Update sandbox API to include spec field (#12840)

Container Runtime Interface (CRI)

• Allow containers to use user namespaces with host networking (#12518)
• Unpack images with per-layer labels for specific runtime (#12835)
• Populate ImageId field in container status (#12787)
• Set annotations parameter in CreateSandbox request (#12566)

Image Distribution

• Support zstd-wrapped EROFS layers (#13185)
• Add EROFS layer media type (#12567)

Image Storage

• Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

Node Resource Interface (NRI)

• Pass container user (uid, gids) to plugins (#12769)
• Pass seccomp policy to plugins (#12768)
• Pass any POSIX rlimits to plugins (#12765)
• Pass extended container status to NRI. (#12770)
• Pass injected CDI devices to plugins (#12767)
• Pass linux sysctl to plugins (#12766)

Runtime

• Add configured socket directory to shim bootstrap protocol (#12785)
• Fix binary logging driver not blocking container start on failure (#12595)
• Use new filtered cgroups stats API (#12901)
• Update OOMKilled event handling (#12714)

Snapshotters

• Propagate parent chain ID and diff ID via labels during snapshot preparation (#13071)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Maksym Pavlenko
• Derek McGowan
• Sebastiaan van Stijn
• Krisztian Litkey
• Wei Fu
• Samuel Karp
• Akihiro Suda
• Phil Estes
• Markus Lehtonen
• Mike Brown
• Davanum Srinivas
• Gao Xiang
• ChengyuZhu6
• Akhil Mohan
• Chris Henzie
• Hudson Zhu
• Kazuyoshi Kato
• Sergey Kanzhelev
• ningmingxiao
• Aadhar Agarwal
• Andrew Halaney
• Apurv Barve
• HirazawaUi
• Michael Zappa
• Paweł Gronowski
• Brian Goff
• Fabiano Fidêncio
• Hasan Siddiqui
• Jintao Zhang
• Paulo Oliveira
• Shiv Tyagi
• Austin Vazquez
• Avinesh Singh
• Esteban Ginez
• Henry Wang
• Jin Dong
• Jérôme Poulin
• Luke Hinds
• Sascha Grunert
• majianhan
• markdodgson
• Adrien Delorme
• Albin Kerouanton
• Alex Chernyakhovsky
• Andrey Noskov
• Andrey Smirnov
• Annie Cherkaev
• Anuj Singh
• Champ-Goblem
• Chris Adeniyi-Jones
• Cindia-blue
• CrazyMax
• Danny Canter
• Evan Lezar
• Fletcher Woodruff
• Gaurav Ghildiyal
• Harsh Rawat
• Hayato Kiwata
• Joseph Zhang
• Justin Chadwell
• Kal
• Manuel de Brito Fontes
• Neeraj Krishna Gopalakrishna
• Pierluigi Lenoci
• Ricardo Branco
• Rob Murray
• Rodrigo Campos
• Shachar Tal
• Shaobao Feng
• Shiming Zhang
• Tariq Ibrahim
• Tim Windelschmidt
• Tõnis Tiigi
• Wade Simmons
• Weixie Cui
• Will Jordan
• Yohei Yamamoto
• You Binhao
• Youfu Zhang
• apurv15
• bo.jiang
• chris-henderson-alation
• jinda.ljd
• qiuxue

Changes

758 commits

• Prepare v2.3.0-beta.2 release (#13239)
  • 367937295 Update API to use latest beta tag
• Parameterize K8s version in node-e2e workflow (#13234)
  • 270916ad1 Parameterize K8s version in node-e2e workflow
• Add check for status code for GET requests (#12262)
  • bf5fe06f8 Use len for stripping http://
  • 2e856be03 Check for error status code on response to a get request
• Add support for conditional gc references in metadata (#12398)
  • 046421ab7 Breakout arguments to sendLabelRefs in gc
  • bd02dc1d7 Add support for conditional gc references in metadata
• build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#13227)
  • 34884e99d build(deps): bump actions/cache from 5.0.4 to 5.0.5
• Make shim socket directory use configured directory (#12785)
  • e07a1aa49 Add configuration for socket directory to the shim manager
  • 59c3464a0 Remove the unnecessary mkdir on the default state directory
  • d806373fe Make shim socket directory use configured state
• ctr: add EROFS image conversion support (#12555)
  • 64a2e62b5 erofs: wire os.features into conversion and selection
  • b320d3c85 ctr: add EROFS image conversion support
• snapshotter/erofs: avoid using overlay if fsmerge is enabled and no upperdir (#13213)
  • 3b357da49 snapshotter/erofs: avoid using overlay if fsmerge is enabled and no upperdir
• build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#13225)
  • a9acbcaae build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0
• build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1 (#13232)
  • a9e958070 build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#13226)
  • 54bb41881 build(deps): bump actions/github-script from 8.0.0 to 9.0.0
• build(deps): bump the golang-x group with 2 updates (#13228)
  • ef692c986 build(deps): bump the golang-x group with 2 updates
• update github.com/moby/spdystream v0.5.1 (#13215)
  • d15a46927 update github.com/moby/spdystream v0.5.1
• erofs-differ: support zstd-wrapped EROFS layers (#13185)
  • b9445fb9e erofs-differ: support zstd-wrapped EROFS layers
• core/remotes/docker: use SystemCertPool on Windows ([containerd#13128](https://github.com/conta...

containerd 2.1.5-dd.1

v2.1.5-dd.1

v2.1.5-dd.1 release

containerd 2.2.2-dd.0

v2.2.2-dd.0

Release v2.2.2-dd.0

containerd 2.1.5-dd.0

v2.1.5-dd.0

v2.1.5-dd.0

containerd 2.2.0-beta.0

Welcome to the v2.2.0-beta.0 release of containerd!
This is a pre-release of containerd

The second minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the second time-based released for containerd.

This is a beta release and some functionality is still under development.

Highlights

• Add support for back references in the garbage collector (#12025)

Go client

• Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

• Tar unpack progress through transfer service (#11921)

Image Storage

• Add snapshotter and differ for block CIMs (#12050)
• Add tar index mode to erofs snapshotter (#11919)

Node Resource Interface (NRI)

• Enable otel traces in NRI (#12082)
• Add WASM plugin support (containerd/nri#121)

Runtime

• Fix pidfd leak in UnshareAfterEnterUserns (#12167)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Phil Estes
• Derek McGowan
• Krisztian Litkey
• Akihiro Suda
• Maksym Pavlenko
• Mike Brown
• Wei Fu
• Markus Lehtonen
• Samuel Karp
• Sebastiaan van Stijn
• Austin Vazquez
• ningmingxiao
• yashsingh74
• Jin Dong
• Kirtana Ashok
• Etienne Champetier
• Rodrigo Campos
• Akhil Mohan
• Chris Henzie
• Gao Xiang
• Sascha Grunert
• Aleksa Sarai
• Eric Mountain
• Keith Mattix II
• Paweł Gronowski
• Adrien Delorme
• Enji Cooper
• Kohei Tokunaga
• Yang Yang
• jokemanfire
• Aadhar Agarwal
• Amit Barve
• Andrew Halaney
• Antonio Ojea
• Brian Goff
• Chenyang Yan
• Dawei Wei
• Divya Rani
• Fabiano Fidêncio
• Henry Wang
• Iceber Gu
• Jared Ledvina
• Jonathan Perkin
• Jose Fernandez
• Karl Baumgartner
• Radostin Stoyanov
• Rehan Khan
• Ruidong Cao
• Sameer
• Swagat Bora
• Sylvain MOUQUET
• Tom Wieczorek
• Tycho Andersen
• Ubuntu
• Wuyue (Tony) Sun
• jinda.ljd
• tanhuaan
• zounengren

Dependency Changes

• dario.cat/mergo v1.0.1 -> v1.0.2
• github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1
• github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0
• github.com/containerd/console v1.0.4 -> v1.0.5
• github.com/containerd/go-cni v1.1.12 -> v1.1.13
• github.com/containerd/nri v0.8.0 -> v0.10.0
• github.com/containernetworking/plugins v1.7.1 -> v1.8.0
• github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
• github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
• github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
• github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
• github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.1
• github.com/go-logr/logr v1.4.2 -> v1.4.3
• github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8
• github.com/gorilla/websocket v1.5.0 -> e064f32e3674
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0
• github.com/intel/goresctrl v0.8.0 -> v0.9.0
• github.com/knqyf263/go-plugin v0.9.0 new
• github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
• github.com/prometheus/client_golang v1.22.0 -> v1.23.2
• github.com/prometheus/client_model v0.6.1 -> v0.6.2
• github.com/prometheus/common v0.62.0 -> v0.66.1
• github.com/prometheus/procfs v0.15.1 -> v0.16.1
• github.com/stretchr/testify v1.10.0 -> v1.11.1
• github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
• github.com/tetratelabs/wazero v1.9.0 new
• github.com/urfave/cli/v2 v2.27.6 -> v2.27.7
• github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1
• go.etcd.io/bbolt v1.4.0 -> v1.4.3
• go.opentelemetry.io/otel v1.35.0 -> v1.37.0
• go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0
• go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0
• go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0
• go.uber.org/goleak v1.3.0 new
• go.yaml.in/yaml/v2 v2.4.2 new
• golang.org/x/crypto v0.36.0 -> v0.41.0
• golang.org/x/mod v0.24.0 -> v0.28.0
• golang.org/x/net v0.38.0 -> v0.43.0
• golang.org/x/oauth2 v0.27.0 -> v0.30.0
• golang.org/x/sync v0.14.0 -> v0.17.0
• golang.org/x/sys v0.33.0 -> v0.36.0
• golang.org/x/term v0.30.0 -> v0.34.0
• golang.org/x/text v0.23.0 -> v0.28.0
• golang.org/x/time v0.7.0 -> v0.9.0
• google.golang.org/genproto/googleapis/api 56aae31c358a -> 8d1bb00bc6a7
• google.golang.org/genproto/googleapis/rpc 56aae31c358a -> 8d1bb00bc6a7
• google.golang.org/grpc v1.72.0 -> v1.75.1
• google.golang.org/protobuf v1.36.6 -> v1.36.9
• k8s.io/api v0.32.3 -> v0.34.1
• k8s.io/apimachinery v0.32.3 -> v0.34.1
• k8s.io/client-go v0.32.3 -> v0.34.1
• k8s.io/cri-api v0.32.3 -> v0.34.1
• k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397
• sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8
• sigs.k8s.io/randfill v1.0.0 new
• sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new
• sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v2.1.0

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

containerd 2.1.4-dd.0

v2.1.4-dd.0

Release v2.1.4-dd.0

containerd 2.1.3-image-volume-rw-shm

v2.1.3-image-volume-rw-shm

Writable image volumes with /dev/shm overlay

containerd 2.1.3-image-volume-rw.0

v2.1.3-image-volume-rw.0

POC: Writable image volumes with overlay filesystem

containerd 2.1.3-dd.0

v2.1.3-dd.0

Build 2.1.3-dd.0