Releases: containerd/containerd
Releases · containerd/containerd
containerd 2.2.1
Welcome to the v2.2.1 release of containerd!
The first patch release for containerd 2.2 contains various fixes and improvements.
Highlights
Container Runtime Interface (CRI)
- Redact all query parameters in CRI error logs (#12546)
Image Distribution
- Fix image defaults on Darwin to usable configuration (#12544)
- Fix possible panic from WithMediaTypeKeyPrefix (#12516)
Runtime
- Update runc binary to v1.3.4 (#12593)
- Fix parsing of hugetlb..events files (containerd/cgroups#379)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Krisztian Litkey
- Markus Lehtonen
- Akihiro Suda
- Mike Brown
- Sebastiaan van Stijn
- Derek McGowan
- Heran Yang
- Wei Fu
- Phil Estes
- Samuel Karp
- Austin Vazquez
- Sascha Grunert
- Akhil Mohan
- Andrey Noskov
- Brian Goff
- CrazyMax
- Davanum Srinivas
- Gaurav Ghildiyal
- Neeraj Krishna Gopalakrishna
- Paweł Gronowski
- Tariq Ibrahim
- TomerLev
- Tõnis Tiigi
- bo.jiang
- ningmingxiao
Changes
53 commits
- Prepare release notes for v2.2.1 (#12677)
f6bae1f88Prepare release notes for v2.2.1
- cri,nri: bump NRI dependencies to v0.11.0 (#12701)
c22cf5d49cri,nri: pass any linux security profile to plugins.d7532de75cri,nri: pass any linux RDT constraints to plugins.ef36e6181cri,nri: pass any linux net devices to plugins.d56faf426cri,nri: pass any linux scheduler attributes to plugins.e1824d261cri,nri: pass any linux I/O priority to plugins.01d5490aego.{mod,sum}: bump NRI deps to v0.11.0, re-vendor.
- pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const (#12697)
58d23ab63pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const
- cri/nri: short-circuit nil adjustment. (#12672)
05ccbb3a7cri/nri: short-circuit nil adjustment.
- go.{mod,sum}: bump CDI deps to v1.1.0. (#12664)
c166a577dgo.{mod,sum} bump CDI deps to v1.1.0.
- go.mod: containerd/zfs v2.0.0; remove exclude rules (#12654)
- go.mod: github.com/containernetworking/plugins v1.9.0 (#12658)
8a5fc8641go.mod: github.com/containernetworking/plugins v1.9.0
- go.mod: golang.org/x/crypto v0.45.0 (#12638)
55c93d6fbgo.mod: golang.org/x/crypto v0.45.0
- ci :bump Go 1.24.11, 1.25.5 (#12625)
- core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor (#12622)
ed19c5420core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor
- ci: update CIFuzz actions to support Ubuntu 24.04 (#12632)
952237d9bci: update CIFuzz actions to support Ubuntu 24.04
- Update runc binary to v1.3.4 (#12593)
fb5b818a9runc: Update runc binary to v1.3.4
- : update containerd/cgroups from v3.1.0 to v3.1.2 (#12598)
- core/mount: should not call removeLoop when set autoclear (#12587)
41a69eb0dcore/mount: should not call removeLoop when set autoclear
- build(deps): bump github.com/opencontainers/selinux (#12589)
e3bf2b80bbuild(deps): bump github.com/opencontainers/selinux
- .github: skip 5 critest cases for window-2022 (#12584)
da8e846f9.github: skip 5 critest cases in window CI pipeline
- Fix image defaults on Darwin to usable configuration (#12544)
d154e234bUpdate the ctr pull defaults when using the transfer service09364216dFix transfer unpack defaults on darwin2055d3c62Update default differs on darwin9da97686dUse default writable size in erofs snapshotter for non-Linux hostseeb0f889aUpdate default erofs block size on macOS during erofs diff
- Redact all query parameters in CRI error logs (#12546)
c707f771afix: redact all query parameters in CRI error logs
- Revert "Implement io.ReaderAt on docker fetch reader" (#12542)
678f944ddRevert "Implement io.ReaderAt on docker fetch reader"
- Fix possible panic from WithMediaTypeKeyPrefix (#12516)
8b73c2de3remotes: fix possible panic from WithMediaTypeKeyPrefix
Changes from containerd/cgroups
13 commits
- ci: bump golangci-lint to v2.6.2 (containerd/cgroups#382)
- build(deps): bump actions/checkout from 5 to 6 (containerd/cgroups#381)
- ...
containerd 2.1.6
Welcome to the v2.1.6 release of containerd!
The sixth patch release for containerd 2.1 contains various fixes and updates.
Highlights
Runtime
- Update runc binary to v1.3.4 (#12618)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Akihiro Suda
- Derek McGowan
- Mike Brown
- Phil Estes
- Austin Vazquez
- Kirtana Ashok
- Andrey Noskov
- CrazyMax
- Davanum Srinivas
- Krisztian Litkey
- Maksym Pavlenko
- Michael Weibel
- Paweł Gronowski
- Sebastiaan van Stijn
- Wei Fu
Changes
28 commits
- Prepare release notes for v2.1.6 (#12653)
93f79087aPrepare release notes for v2.1.6
- go.mod: containerd/zfs v2.0.0 (#12655)
7e75db3a9build(deps): bump github.com/containerd/zfs/v2 from 2.0.0-rc.0 to 2.0.0
- cri/nri: short-circuit nil adjustment. (#12673)
2b8e11b12cri/nri: short-circuit nil adjustment.
- go.mod: github.com/containernetworking/plugins v1.9.0 (#12659)
69efd067cgo.mod: github.com/containernetworking/plugins v1.9.0
- go.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (#12639)
- core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor (#12623)
a4454c49acore/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor
- Update runc binary to v1.3.4 (#12618)
251f0a285runc: Update runc binary to v1.3.4
- ci: bump Go 1.24.11, 1.25.5 (#12626)
- ci: update CIFuzz actions to support Ubuntu 24.04 (#12633)
492987cccci: update CIFuzz actions to support Ubuntu 24.04
- build(deps): bump github.com/opencontainers/selinux (#12590)
55a25ec6ebuild(deps): bump github.com/opencontainers/selinux
- Redact all query parameters in CRI error logs (#12547)
b72d0dfe0fix: redact all query parameters in CRI error logs
- Update 2.1 branch to no longer build as latest (#12487)
ecd58bd65Update 2.1 branch to no longer build as latest
Changes from containerd/platforms
5 commits
- use windowsMatchComparer for OSVersion match order (containerd/platforms#25)
8c0d9f9use windowsMatchComparer for OSVersion match order
- Add WS2025 to Windows matcher and code optimizations (containerd/platforms#24)
Dependency Changes
- github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
- github.com/containerd/zfs/v2 v2.0.0-rc.0 -> v2.0.0
- github.com/containernetworking/plugins v1.7.1 -> v1.9.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/cyphar/filepath-securejoin v0.5.1 new
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/opencontainers/selinux v1.12.0 -> v1.13.1
- github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1
- golang.org/x/crypto v0.36.0 -> v0.45.0
- golang.org/x/mod v0.24.0 -> v0.29.0
- golang.org/x/net v0.38.0 -> v0.47.0
- golang.org/x/sync v0.14.0 -> v0.18.0
- golang.org/x/sys v0.33.0 -> v0.38.0
- golang.org/x/term v0.30.0 -> v0.37.0
- golang.org/x/text v0.23.0 -> v0.31.0
- google.golang.org/protobuf v1.36.6 -> v1.36.7
Previous release can be found at v2.1.5
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.
In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
containerd 1.7.30
Welcome to the v1.7.30 release of containerd!
The thirtieth patch release for containerd 1.7 contains various fixes
and updates.
Highlights
Container Runtime Interface (CRI)
- Fix NRI dropping requested CDI devices silently (#12650)
- Redact all query parameters in CRI error logs (#12551)
Runtime
- Update runc binary to v1.3.4 (#12619)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Akihiro Suda
- Austin Vazquez
- Mike Brown
- Wei Fu
- Andrey Noskov
- CrazyMax
- Davanum Srinivas
- Jin Dong
- Krisztian Litkey
- Maksym Pavlenko
- Paweł Gronowski
- Phil Estes
- Samuel Karp
Changes
26 commits
- Prepare release notes for v1.7.30 (#12652)
3d0ca6d2ePrepare release notes for v1.7.30
- Fix NRI dropping requested CDI devices silently (#12650)
0bc74f47ecri,nri: don't drop requested CDI devices silently.
- script/setup/install-cni: install CNI plugins v1.9.0 (#12660)
7db16b562script/setup/install-cni: install CNI plugins v1.9.0
- go.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (#12640)
- ci: bump Go 1.24.11, 1.25.5 (#12627)
- Update runc binary to v1.3.4 (#12619)
34b89a574runc: Update runc binary to v1.3.4
- ci: update CIFuzz actions to support Ubuntu 24.04 (#12635)
6e0dd8956ci: update CIFuzz actions to support Ubuntu 24.04
- build(deps): bump github.com/opencontainers/selinux (#12591)
3eea2a4afbuild(deps): bump github.com/opencontainers/selinux
- remove sha256-simd (#12576)
1194f5128remove sha256-simd
- .github: skip 5 critest cases for window-2022 (#12586)
ce2d3a67f.github: skip 5 critest cases in window CI pipeline
- Redact all query parameters in CRI error logs (#12551)
65271ea89fix: redact all query parameters in CRI error logs
Dependency Changes
- github.com/cyphar/filepath-securejoin v0.5.1 new
- github.com/opencontainers/selinux v1.11.0 -> v1.13.1
- golang.org/x/crypto v0.40.0 -> v0.45.0
- golang.org/x/mod v0.26.0 -> v0.29.0
- golang.org/x/net v0.42.0 -> v0.47.0
- golang.org/x/sync v0.16.0 -> v0.18.0
- golang.org/x/sys v0.34.0 -> v0.38.0
- golang.org/x/term v0.33.0 -> v0.37.0
- golang.org/x/text v0.27.0 -> v0.31.0
Previous release can be found at v1.7.29
containerd 2.2.0
Welcome to the v2.2.0 release of containerd!
The second minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the second time-based released for containerd.
Highlights
-
Add mount manager (#12063)
The mount manager is a new service that provides lifecycle management for filesystem mounts
to support more advanced use cases, such as:- Device formatting to create formatted filesystems (xfs, ext4) on-demand
- Mount activation to prepare devices such as loopbacks or network fileystems
- Mount transformation to allow mount arguments to be filled in dynamically from previous mounts
- Garbage collection of mounts to ensure temporary mounts are never leaked
-
Add conf.d include in the default config (#12323)
-
Add support for back references in the garbage collector (#12025)
Container Runtime Interface (CRI)
-
Pod Sandbox Metrics (#10691)
Full implementation of Kubernetes CRI pod-level metrics API
- ListPodSandboxMetrics: Query metrics for running pods/sandboxes
- ListMetricsDescriptors: Discover available metrics and their descriptions
-
Support image volume mount subpath (#11578)
Go client
- Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)
Image Distribution
-
Parallel Unpack (#12332)
Adds support for unpacking layers in parallel during pull operations. This feature is supported with overlayfs and EROFS snapshotters.
-
OCI Referrers Support (#12309)
Adds new referrers fetcher to remote registry interface using the new referrers endpoint added in OCI distribution-spec 1.1
-
Tar unpack progress through transfer service (#11921)
Image Storage
-
EROFS enhancements using mount manager (#12333)
Improvements to EROFS snapshotter using the new mount manager service
- Quota Support: Support for sized block devices as the upper layer for overlayfs
- Mount Lifecycle: Loopback setup, block device creation, and overlayfs argument formatting is moved to the
mount manager to be performed on-demand or within the runtime. - Mount handler: To allow optimization of EROFS mount types based on the current system
- macOS Support: EROFS snapshotter can now be used on Darwin to natively allow image pulls
- Tar index mode: Efficiently generate EROFS metadata backed by original tar content (#11919)
-
Add snapshotter and differ for block CIMs (#12050)
Node Resource Interface (NRI)
- Enable otel traces in NRI (#12082)
- Add WASM plugin support (containerd/nri#121)
Runtime
- Improve shim load time after restart by loading in parallel (#12142)
- Fix pidfd leak in UnshareAfterEnterUserns (#12167)
Deprecations
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Phil Estes
- Akihiro Suda
- Maksym Pavlenko
- Wei Fu
- Krisztian Litkey
- Mike Brown
- Akhil Mohan
- Markus Lehtonen
- Samuel Karp
- Sebastiaan van Stijn
- ningmingxiao
- Austin Vazquez
- yashsingh74
- Gao Xiang
- Kirtana Ashok
- Jin Dong
- Chris Henzie
- Aadhar Agarwal
- Etienne Champetier
- Henry Wang
- Rodrigo Campos
- Sascha Grunert
- Aleksa Sarai
- Eric Mountain
- Keith Mattix II
- Paweł Gronowski
- Tõnis Tiigi
- Adrien Delorme
- Apurv Barve
- Enji Cooper
- Kohei Tokunaga
- Max Jonas Werner
- Rehan Khan
- Yang Yang
- jinda.ljd
- jokemanfire
- Amit Barve
- Andrew Halaney
- Antonio Ojea
- Brian Goff
- Carlos Eduardo Arango Gutierrez
- Chenyang Yan
- Dawei Wei
- Divya Rani
- Evan Anderson
- Fabiano Fidêncio
- Iceber Gu
- Jared Ledvina
- Jonathan Perkin
- Jose Fernandez
- Karl Baumgartner
- Michael Weibel
- Osama Abdelkader
- Radostin Stoyanov
- Ruidong Cao
- Sameer
- Sergey Kanzhelev
- Swagat Bora
- Sylvain MOUQUET
- Tom Wieczorek
- Tycho Andersen
- Wuyue (Tony) Sun
- suranmiao
- tanhuaan
- wheat2018
- zounengren
Dependency Changes
- dario.cat/mergo v1.0.1 -> v1.0.2
- github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1
- github.com/StackExchange/wmi cbe66965904d new
- github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0
- github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
- github.com/containerd/console v1.0.4 -> v1.0.5
- github.com/containerd/containerd/api v1.9.0 -> v1.10.0
- github.com/containerd/go-cni v1.1.12 -> v1.1.13
- github.com/containerd/nri v0.8.0 -> v0.10.0
- github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2
- github.com/containernetworking/plugins v1.7.1 -> v1.8.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
- github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
- github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
- github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/go-ole/go-ole v1.2.6 new
- github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8
- github.com/google/certtostore v1.0.6 new
- github.com/google/deck 105ad94aa8ae new
- github.com/gorilla/websocket v1.5.0 -> e064f32e3674
- github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0
- github.com/hashicorp/errwrap v1.1.0 new
- github.com/intel/goresctrl v0.8.0 -> v0.10.0
- github.com/klauspost/compress v1.18.0 -> v1.18.1
- github.com/knqyf263/go-plugin v0.9.0 new
- github.com/moby/sys/capability v0.4.0 new
- github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
- github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2
- github.com/prometheus/client_golang v1.22.0 -> v1.23.2
- github.com/prometheus/client_model v0.6.1 -> v0.6.2
- github.com/prometheus/common v0.62.0 -> v0.66.1
- github.com/prometheus/procfs v0.15.1 -> v0.16.1
- github.com/stretchr/testify v1.10.0 -> v1.11.1
- github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
- github.com/tetratelabs/wazero v1.9.0 new
- github.com/urfave/cli/v2 v2.27.6 -> v2.27.7
- github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1
- go.etcd.io/bbolt v1.4.0 -> v1.4.3
- go.opentelemetry.io/otel v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0
- go.uber.org/goleak v1.3.0 new
- go.yaml.in/yaml/v2 v2.4.2 new
- golang.org/x/crypto v0.36.0 -> v0.41.0
- golang.org/x/mod v0.24.0 -> v0.29.0
- golang.org/x/net v0.38.0 -> v0.43.0
- golang.org/x/oauth2 v0.27.0 -> v0.30.0
- golang.org/x/sync v0.14.0 -> v0.17.0
- golang.org/x/sys v0.33.0 -> v0.37.0
- golang.org/x/term ...
containerd 2.1.5
Welcome to the v2.1.5 release of containerd!
The fifth patch release for containerd 2.1 contains various fixes and updates.
Security Updates
-
containerd
-
runc
Highlights
Container Runtime Interface (CRI)
- Disable event subscriber during task cleanup (#12410)
- Add SystemdCgroup to default runtime options (#12253)
- Fix userns with container image VOLUME mounts that need copy (#12242)
Image Distribution
- Ensure errContentRangeIgnored error when range-get request is ignored (#12312)
Runtime
- Update runc binary to v1.3.3 (#12478)
Deprecations
- Postpone v2.2 deprecation items to v2.3 (#12431)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Phil Estes
- Akihiro Suda
- Derek McGowan
- Austin Vazquez
- Rodrigo Campos
- Maksym Pavlenko
- Wei Fu
- ningmingxiao
- Akhil Mohan
- Henry Wang
- Andrew Halaney
- Divya Rani
- Jose Fernandez
- Swagat Bora
- wheat2018
Changes
58 commits
- Prepare release notes for v2.1.5 (#12483)
- Update runc binary to v1.3.3 (#12478)
3d713d3d0runc: Update runc binary to v1.3.3
- Update GHA runners to use latest images for basic binaries build (#12470)
de4221cb7Update GHA runners to use latest images for basic binaries build
- ci: bump Go 1.24.9, 1.25.3 (#12467)
2045b1920ci: bump Go 1.24.9, 1.25.3
- Update GHA runners to use latest image for most jobs (#12468)
21ec7cc7dUpdate GHA runners to use latest image for most jobs
- CI: update Fedora to 43 (#12449)
893b5f92eCI: update Fedora to 43
- Postpone v2.2 deprecation items to v2.3 (#12431)
6374a8f9dPostpone v2.2 deprecation items to v2.3
- CI: skip ubuntu-24.04-arm on private repos (#12427)
98e0e73deCI: skip ubuntu-24.04-arm on private repos
- Disable event subscriber during task cleanup (#12410)
a3770cf83cri/server/podsandbox: disable event subscriber
- Fix lost container logs from quickly closing io (#12377)
7d9f09ba0bugfix:fix container logs lost because io close too quickly
- ci: bump Go 1.24.8 (#12360)
d1cab3cc5ci: bump Go 1.24.8
- Prevent goroutine hangs during ProgressTracker shutdown (#12336)
9b57a4d35Prevent goroutine hangs during ProgressTracker shutdown
- Ensure errContentRangeIgnored error when range-get request is ignored (#12312)
ca3de4fe7Ensure errContentRangeIgnored error when range-get request is ignored by registry
- Remove additional fuzzers from instrumentation repo (#12313)
dfffe3d9cRemove additional fuzzers from CI
- update release builds to 1.24.7 and add 1.25.1 to CI (#12258)
c54585ba7update release builds to 1.24.7 and add 1.25.1 to CI
- runc:Update runc binary to v1.3.1 (#12277)
f0a48ce38runc:Update runc binary to v1.3.1
- Add SystemdCgroup to default runtime options (#12253)
f13f8c431add SystemdCgroup to default runtime options
- install-runhcs-shim: fetch target commit instead of tags (#12256)
42bb71e1einstall-runhcs-shim: fetch target commit instead of tags
- Fix userns with container image VOLUME mounts that need copy (#12242)
- Fix overlayfs issues related to user namespace (#12222)
f40bfc46bcore/mount: Retry unmounting idmapped directories1f51d2deacore/mount: Test cleanup of DoPrepareIDMappedOverlay()8fbf8c503core/mount: Properly cleanup on doPrepareIDMappedOverlay errorsb9d678e15core/mount: Don't call nil function on errors583fe2d24core/mount: Only idmap once per overlayfs, not per layer
- Add documentation for cgroup_writable field (#12229)
4832b4d15Add documentation for cgroup_writable field
- fix: create bootstrap.json with 0644 permission (#12183)
3c174cf64fix: create bootstrap.json with 0644 permission
- ci: bump Go 1.23.12, 1.24.6 (#12186)
74b0505ebci: bump Go 1.23.12, 1.24.6
- sys: fix pidfd leak in UnshareAfterEnterUserns (#12179)
5ef6ea747sys: fix pidfd leak in UnshareAfterEnterUserns
Dependency Changes
This release has no dependency changes
Previous release can be found at v2.1.4
Which file should I download?
- `co...
containerd 2.0.7
Welcome to the v2.0.7 release of containerd!
The seventh patch release for containerd 2.0 includes various bug fixes and updates.
Security Updates
-
containerd
-
runc
Highlights
Container Runtime Interface (CRI)
- Disable event subscriber during task cleanup (#12406)
- Add SystemdCgroup to default runtime options (#12254)
- Fix userns with container image VOLUME mounts that need copy (#12241)
Image Distribution
- Add dial timeout field to hosts toml configuration (#12136)
Runtime
- Update runc binary to v1.3.3 (#12479)
- Fix lost container logs from quickly closing io (#12376)
- Create bootstrap.json with 0644 permission (#12184)
- Fix pidfd leak in UnshareAfterEnterUserns (#12178)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Austin Vazquez
- Phil Estes
- Rodrigo Campos
- Wei Fu
- Akihiro Suda
- Derek McGowan
- Maksym Pavlenko
- ningmingxiao
- Kirtana Ashok
- Akhil Mohan
- Andrew Halaney
- Jin Dong
- Jose Fernandez
- Mike Baynton
- Philip Laine
- Swagat Bora
- wheat2018
Changes
56 commits
- Prepare release notes for v2.0.7 (#12482)
- Update runc binary to v1.3.3 (#12479)
b46dc6a67runc: Update runc binary to v1.3.3
- ci: bump Go 1.24.9; 1.25.3 (#12361)
5e9c82178Update GHA runners to use latest images for basic binaries build7f59248dcUpdate GHA runners to use latest image for most jobse1373e8a8ci: bump Go 1.24.9, 1.25.3e1a910a6aci: bump Go 1.24.8; 1.25.2fd04b7f17move exclude-dirs to issues.exclude-dirsb49377975update golangci-lint to v1.64.26e45022a1build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.009ce0f2a1build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2de63a740bbuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
- Fix lost container logs from quickly closing io (#12376)
f953ee8a3bugfix:fix container logs lost because io close too quickly
- CI: update Fedora to 43 (#12448)
f6f15f513CI: update Fedora to 43
- Disable event subscriber during task cleanup (#12406)
2a2329cbdcri/server/podsandbox: disable event subscriber
- CI: skip ubuntu-24.04-arm on private repos (#12428)
dfb954743CI: skip ubuntu-24.04-arm on private repos
- Remove additional fuzzers from instrumentation repo (#12420)
f6b02f6bbRemove additional fuzzers from CI
- runc:Update runc binary to v1.3.1 (#12275)
75c13ee3frunc:Update runc binary to v1.3.1
- Add SystemdCgroup to default runtime options (#12254)
427cdd06cadd SystemdCgroup to default runtime options
- install-runhcs-shim: fetch target commit instead of tags (#12255)
0b35e19fbinstall-runhcs-shim: fetch target commit instead of tags
- Fix userns with container image VOLUME mounts that need copy (#12241)
- Fix overlayfs issues related to user namespace (#12223)
05c0c99f4core/mount: Retry unmounting idmapped directoriesafdede4cecore/mount: Test cleanup of DoPrepareIDMappedOverlay()47205f814core/mount: Properly cleanup on doPrepareIDMappedOverlay errors6f4abd970core/mount: Don't call nil function on errorsa2f0d65d7core/mount: Only idmap once per overlayfs, not per layer1c32accd7Make ovl idmap mounts read-only
- ci: bump Go 1.23.12, 1.24.6 (#12187)
9e72e91e6ci: bump Go 1.23.12, 1.24.6
- Create bootstrap.json with 0644 permission (#12184)
009622e04fix: create bootstrap.json with 0644 permission
- Fix pidfd leak in UnshareAfterEnterUserns (#12178)
5bec0a332sys: fix pidfd leak in UnshareAfterEnterUserns
- Fix windows test failures (#12120)
- Add dial timeout field to hosts toml configuration (#12136)
b50cbbc98Add dial timeout field to hosts toml configuration
Dependency Changes
This release has no dependency changes
Previous release can be found...
containerd 1.7.29
Welcome to the v1.7.29 release of containerd!
The twenty-ninth patch release for containerd 1.7 contains various fixes
and updates including security patches.
Security Updates
-
containerd
-
runc
Highlights
Image Distribution
- Update differ to handle zstd media types (#12018)
Runtime
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Akihiro Suda
- Phil Estes
- Austin Vazquez
- Sebastiaan van Stijn
- ningmingxiao
- Maksym Pavlenko
- StepSecurity Bot
- wheat2018
Changes
38 commits
442cb34bdMerge commit from fork0450f046eFix directory permissionse5cb6ddb7Merge commit from forkc575d1b5ffix goroutine leak of container Attach- Prepare release notes for v1.7.29 (#12486)
1fc2daaf3Prepare release notes for v1.7.29
- Update runc binary to v1.3.3 (#12480)
3f5f9f872runc: Update runc binary to v1.3.3
- Update GHA images and bump Go 1.24.9; 1.25.3 (#12471)
667409fb6ci: bump Go 1.24.9, 1.25.3294f8c027Update GHA runners to use latest images for basic binaries buildcf66b4141Update GHA runners to use latest image for most jobsfa3e6fa18pkg/epoch: extract parsing SOURCE_DATE_EPOCH to a functionac334bffcpkg/epoch: fix tests on macOSd04b8721fpkg/epoch: replace some fmt.Sprintfs with strconv
- CI: update Fedora to 43 (#12450)
5cfedbf52CI: update Fedora to 43
- CI: skip ubuntu-24.04-arm on private repos (#12429)
cf99a012dCI: skip ubuntu-24.04-arm on private repos
- runc:Update runc binary to v1.3.1 (#12276)
4c77b8d07runc:Update runc binary to v1.3.1
- Fix lost container logs from quickly closing io (#12375)
d30024db2bugfix:fix container logs lost because io close too quickly
- ci: bump Go 1.24.8 (#12362)
f4b3d96f3ci: bump Go 1.24.8334fd8e4bupdate golangci-lint to v1.64.28a67abc4cDrop inactivated linter exportlooprefe4dbf08f0build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0d7db2ba06build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2d7182888fbuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.04be6c7e3bbuild(deps): bump actions/cache from 4.1.2 to 4.2.0a2e097e86build(deps): bump actions/checkout from 4.2.1 to 4.2.26de404d11build(deps): bump actions/cache from 4.1.1 to 4.1.2038a25584[StepSecurity] ci: Harden GitHub Actions
- Update differ to handle zstd media types (#12018)
eaeb4b6acUpdate differ to handle zstd media types
- ci: bump Go 1.23.12, 1.24.6 (#12188)
83c535339ci: bump Go 1.23.12, 1.24.6
Dependency Changes
This release has no dependency changes
Previous release can be found at v1.7.28
containerd API 1.10.0
api/v1.10.0
This tag was signed with the committer’s verified signature.
Welcome to the api/v1.10.0 release of containerd!
The 11th release for the containerd 1.x API aligns with the containerd 2.2 release.
Highlights
-
Add mount manager
The mount manager is a new service that provides lifecycle management for filesystem mounts
to support more advanced use cases, such as:- Device formatting to create formatted filesystems (xfs, ext4) on-demand
- Mount activation to prepare devices such as loopbacks or network fileystems
- Mount transformation to allow mount arguments to be filled in dynamically from previous mounts
- Garbage collection of mounts to ensure temporary mounts are never leaked (#12063)
Image Distribution
-
Parallel Unpack
Adds support for unpacking layers in parallel during pull operations. This feature is supported with overlayfs and EROFS snapshotters. (#12332)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Akihiro Suda
- Henry Wang
- Phil Estes
- Wei Fu
Changes
14 commits
- Prepare release notes for api/v1.10.0 (#12472)
69c855bb5Prepare release notes for api/v1.10.0
- api/go.mod: golang.org/x/net v0.38.0 (#12430)
4c7b94fceapi/go.mod: golang.org/x/net v0.38.0
- Prepare release notes for api/v1.10.0-rc.0 (#12408)
fbc7848f2Prepare release notes for api/v1.10.0-rc.0
- Add parallel unpack support (#12332)
0198b87fcImplement parallel unpack
- Prepare release notes for api/v1.10.0-beta.0 (#12346)
aa571f63cPrepare release notes for api/v1.10.0-beta.0
- Add mount manager (#12063)
Dependency Changes
- golang.org/x/net v0.37.0 -> v0.38.0
Previous release can be found at api/v1.9.0
containerd 2.2.0-rc.1
v2.2.0-rc.1
This tag was signed with the committer’s verified signature.
Welcome to the v2.2.0-rc.1 release of containerd!
This is a pre-release of containerd
The second minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the second time-based released for containerd.
Highlights
- Add mount manager (#12063)
- Add conf.d include in the default config (#12323)
- Add support for back references in the garbage collector (#12025)
Container Runtime Interface (CRI)
Go client
- Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)
Image Distribution
- Add parallel unpack support (#12332)
- Add referrers fetcher to remotes (#12309)
- Tar unpack progress through transfer service (#11921)
Image Storage
- Update erofs snapshotter to use mount manager (#12333)
- Add snapshotter and differ for block CIMs (#12050)
- Add tar index mode to erofs snapshotter (#11919)
Node Resource Interface (NRI)
- Enable otel traces in NRI (#12082)
- Add WASM plugin support (containerd/nri#121)
Runtime
- Improve shim load time after restart by loading in parallel (#12142)
- Fix pidfd leak in UnshareAfterEnterUserns (#12167)
Deprecations
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Phil Estes
- Akihiro Suda
- Maksym Pavlenko
- Wei Fu
- Krisztian Litkey
- Mike Brown
- Akhil Mohan
- Markus Lehtonen
- Samuel Karp
- Sebastiaan van Stijn
- ningmingxiao
- Austin Vazquez
- yashsingh74
- Gao Xiang
- Jin Dong
- Chris Henzie
- Kirtana Ashok
- Aadhar Agarwal
- Etienne Champetier
- Henry Wang
- Rodrigo Campos
- Sascha Grunert
- Aleksa Sarai
- Eric Mountain
- Keith Mattix II
- Paweł Gronowski
- Tõnis Tiigi
- Adrien Delorme
- Apurv Barve
- Enji Cooper
- Kohei Tokunaga
- Max Jonas Werner
- Rehan Khan
- Yang Yang
- jinda.ljd
- jokemanfire
- Amit Barve
- Andrew Halaney
- Antonio Ojea
- Brian Goff
- Carlos Eduardo Arango Gutierrez
- Chenyang Yan
- Dawei Wei
- Divya Rani
- Evan Anderson
- Fabiano Fidêncio
- Iceber Gu
- Jared Ledvina
- Jonathan Perkin
- Jose Fernandez
- Karl Baumgartner
- Osama Abdelkader
- Radostin Stoyanov
- Ruidong Cao
- Sameer
- Sergey Kanzhelev
- Swagat Bora
- Sylvain MOUQUET
- Tom Wieczorek
- Tycho Andersen
- Ubuntu
- Wuyue (Tony) Sun
- suranmiao
- tanhuaan
- zounengren
Dependency Changes
- dario.cat/mergo v1.0.1 -> v1.0.2
- github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1
- github.com/StackExchange/wmi cbe66965904d new
- github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0
- github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
- github.com/containerd/console v1.0.4 -> v1.0.5
- github.com/containerd/containerd/api v1.9.0 -> v1.10.0-rc.0
- github.com/containerd/go-cni v1.1.12 -> v1.1.13
- github.com/containerd/nri v0.8.0 -> v0.10.0
- github.com/containernetworking/plugins v1.7.1 -> v1.8.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
- github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
- github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
- github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/go-ole/go-ole v1.2.6 new
- github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8
- github.com/google/certtostore v1.0.6 new
- github.com/google/deck 105ad94aa8ae new
- github.com/gorilla/websocket v1.5.0 -> e064f32e3674
- github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0
- github.com/hashicorp/errwrap v1.1.0 new
- github.com/intel/goresctrl v0.8.0 -> v0.9.0
- github.com/klauspost/compress v1.18.0 -> v1.18.1
- github.com/knqyf263/go-plugin v0.9.0 new
- github.com/moby/sys/capability v0.4.0 new
- github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
- github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2
- github.com/prometheus/client_golang v1.22.0 -> v1.23.2
- github.com/prometheus/client_model v0.6.1 -> v0.6.2
- github.com/prometheus/common v0.62.0 -> v0.66.1
- github.com/prometheus/procfs v0.15.1 -> v0.16.1
- github.com/stretchr/testify v1.10.0 -> v1.11.1
- github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
- github.com/tetratelabs/wazero v1.9.0 new
- github.com/urfave/cli/v2 v2.27.6 -> v2.27.7
- github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1
- go.etcd.io/bbolt v1.4.0 -> v1.4.3
- go.opentelemetry.io/otel v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0
- go.uber.org/goleak v1.3.0 new
- go.yaml.in/yaml/v2 v2.4.2 new
- golang.org/x/crypto v0.36.0 -> v0.41.0
- golang.org/x/mod v0.24.0 -> v0.29.0
- golang.org/x/net v0.38.0 -> v0.43.0
- golang.org/x/oauth2 v0.27.0 -> v0.30.0
- golang.org/x/sync v0.14.0 -> v0.17.0
- golang.org/x/sys v0.33.0 -> v0.37.0
- golang.org/x/term v0.30.0 -> v0.34.0
- golang.org/x/text v0.23.0 -> v0.28.0
- golang.org/x/time v0.7.0 -> v0.14.0
- google.golang.org/genproto/googleapis/api 56aae31c358a -> a7a43d27e69b
- google.golang.org/genproto/googleapis/rpc 56aae31c358a -> a7a43d27e69b
- google.golang.org/grpc v1.72.0 -> v1.76.0
- google.golang.org/protobuf v1.36.6 -> v1.36.10
- k8s.io/api v0.32.3 -> v0.34.1
- k8s.io/apimachinery v0.32.3 -> v0.34.1
- k8s.io/client-go v0.32.3 -> v0.34.1
- k8s.io/cri-api v0.32.3 -> v0.34.1
- k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397
- sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8
- sigs.k8s.io/randfill v1.0.0 new
- sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new
- sigs.k8s.io/yaml v1.4.0 -> v1.6.0
Previous release can be found at v2.1.0
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).- `containerd-stat...
containerd 2.2.0-rc.0
v2.2.0-rc.0
This tag was signed with the committer’s verified signature.
Welcome to the v2.2.0-rc.0 release of containerd!
This is a pre-release of containerd
The second minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the second time-based released for containerd.
Highlights
- Add mount manager (#12063)
- Add conf.d include in the default config (#12323)
- Add support for back references in the garbage collector (#12025)
Container Runtime Interface (CRI)
Go client
- Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)
Image Distribution
- Add parallel unpack support (#12332)
- Add referrers fetcher to remotes (#12309)
- Tar unpack progress through transfer service (#11921)
Image Storage
- Update erofs snapshotter to use mount manager (#12333)
- Add snapshotter and differ for block CIMs (#12050)
- Add tar index mode to erofs snapshotter (#11919)
Node Resource Interface (NRI)
- Enable otel traces in NRI (#12082)
- Add WASM plugin support (containerd/nri#121)
Runtime
- Improve shim load time after restart by loading in parallel (#12142)
- Fix pidfd leak in UnshareAfterEnterUserns (#12167)
Deprecations
- Postpone v2.2 deprecation items to v2.3 (#12417)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Phil Estes
- Akihiro Suda
- Maksym Pavlenko
- Krisztian Litkey
- Wei Fu
- Mike Brown
- Markus Lehtonen
- Sebastiaan van Stijn
- Samuel Karp
- ningmingxiao
- Akhil Mohan
- Austin Vazquez
- yashsingh74
- Gao Xiang
- Jin Dong
- Chris Henzie
- Kirtana Ashok
- Aadhar Agarwal
- Etienne Champetier
- Henry Wang
- Rodrigo Campos
- Sascha Grunert
- Aleksa Sarai
- Eric Mountain
- Keith Mattix II
- Paweł Gronowski
- Tõnis Tiigi
- Adrien Delorme
- Apurv Barve
- Enji Cooper
- Kohei Tokunaga
- Max Jonas Werner
- Rehan Khan
- Yang Yang
- jinda.ljd
- jokemanfire
- Amit Barve
- Andrew Halaney
- Antonio Ojea
- Brian Goff
- Carlos Eduardo Arango Gutierrez
- Chenyang Yan
- Dawei Wei
- Divya Rani
- Evan Anderson
- Fabiano Fidêncio
- Iceber Gu
- Jared Ledvina
- Jonathan Perkin
- Jose Fernandez
- Karl Baumgartner
- Osama Abdelkader
- Radostin Stoyanov
- Ruidong Cao
- Sameer
- Sergey Kanzhelev
- Swagat Bora
- Sylvain MOUQUET
- Tom Wieczorek
- Tycho Andersen
- Ubuntu
- Wuyue (Tony) Sun
- suranmiao
- tanhuaan
- zounengren
Dependency Changes
- dario.cat/mergo v1.0.1 -> v1.0.2
- github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1
- github.com/StackExchange/wmi cbe66965904d new
- github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0
- github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0
- github.com/containerd/console v1.0.4 -> v1.0.5
- github.com/containerd/containerd/api v1.9.0 -> v1.10.0-rc.0
- github.com/containerd/go-cni v1.1.12 -> v1.1.13
- github.com/containerd/nri v0.8.0 -> v0.10.0
- github.com/containernetworking/plugins v1.7.1 -> v1.8.0
- github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
- github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7
- github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
- github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0
- github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2
- github.com/go-logr/logr v1.4.2 -> v1.4.3
- github.com/go-ole/go-ole v1.2.6 new
- github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8
- github.com/google/certtostore v1.0.6 new
- github.com/google/deck 105ad94aa8ae new
- github.com/gorilla/websocket v1.5.0 -> e064f32e3674
- github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0
- github.com/hashicorp/errwrap v1.1.0 new
- github.com/intel/goresctrl v0.8.0 -> v0.9.0
- github.com/klauspost/compress v1.18.0 -> v1.18.1
- github.com/knqyf263/go-plugin v0.9.0 new
- github.com/moby/sys/capability v0.4.0 new
- github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee
- github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2
- github.com/prometheus/client_golang v1.22.0 -> v1.23.2
- github.com/prometheus/client_model v0.6.1 -> v0.6.2
- github.com/prometheus/common v0.62.0 -> v0.66.1
- github.com/prometheus/procfs v0.15.1 -> v0.16.1
- github.com/stretchr/testify v1.10.0 -> v1.11.1
- github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3
- github.com/tetratelabs/wazero v1.9.0 new
- github.com/urfave/cli/v2 v2.27.6 -> v2.27.7
- github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1
- go.etcd.io/bbolt v1.4.0 -> v1.4.3
- go.opentelemetry.io/otel v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0
- go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0
- go.uber.org/goleak v1.3.0 new
- go.yaml.in/yaml/v2 v2.4.2 new
- golang.org/x/crypto v0.36.0 -> v0.41.0
- golang.org/x/mod v0.24.0 -> v0.29.0
- golang.org/x/net v0.38.0 -> v0.43.0
- golang.org/x/oauth2 v0.27.0 -> v0.30.0
- golang.org/x/sync v0.14.0 -> v0.17.0
- golang.org/x/sys v0.33.0 -> v0.37.0
- golang.org/x/term v0.30.0 -> v0.34.0
- golang.org/x/text v0.23.0 -> v0.28.0
- golang.org/x/time v0.7.0 -> v0.14.0
- google.golang.org/genproto/googleapis/api 56aae31c358a -> a7a43d27e69b
- google.golang.org/genproto/googleapis/rpc 56aae31c358a -> a7a43d27e69b
- google.golang.org/grpc v1.72.0 -> v1.76.0
- google.golang.org/protobuf v1.36.6 -> v1.36.10
- k8s.io/api v0.32.3 -> v0.34.1
- k8s.io/apimachinery v0.32.3 -> v0.34.1
- k8s.io/client-go v0.32.3 -> v0.34.1
- k8s.io/cri-api v0.32.3 -> v0.34.1
- k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397
- sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8
- sigs.k8s.io/randfill v1.0.0 new
- sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new
- sigs.k8s.io/yaml v1.4.0 -> v1.6.0
Previous release can be found at v2.1.0
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux dis...