Skip to content

Releases: cri-o/cri-o

v1.34.1

02 Oct 00:25
@github-actions github-actions
v1.34.1
8e14bff
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.34.1 Latest
Latest

CRI-O v1.34.1

The release notes have been generated for the commit range
v1.34.0...v1.34.1 on Thu, 02 Oct 2025 00:23:21 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.34.1.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --signature cri-o.amd64.v1.34.1.tar.gz.sig \
    --certificate cri-o.amd64.v1.34.1.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.34.1.tar.gz
> bom validate -e cri-o.amd64.v1.34.1.tar.gz.spdx -d cri-o

Changelog since v1.34.0

Changes by Kind

Uncategorized

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

openshift-cherrypick-robot
Assets 2
Loading

v1.33.5

02 Oct 00:24
@github-actions github-actions
v1.33.5
29ddd0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.33.5

CRI-O v1.33.5

The release notes have been generated for the commit range
v1.33.4...v1.33.5 on Thu, 02 Oct 2025 00:22:24 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.33.5.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.33.5 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.33.5 \
    --signature cri-o.amd64.v1.33.5.tar.gz.sig \
    --certificate cri-o.amd64.v1.33.5.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.33.5.tar.gz
> bom validate -e cri-o.amd64.v1.33.5.tar.gz.spdx -d cri-o

Changelog since v1.33.4

Changes by Kind

Bug or Regression

  • Fix log rotation not working for containers running with the kata-containers runtime (#9452, @littlejawa)

Uncategorized

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

littlejawa and openshift-cherrypick-robot
Loading

v1.32.9

02 Oct 00:24
@github-actions github-actions
v1.32.9
2de10fd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.32.9

CRI-O v1.32.9

The release notes have been generated for the commit range
v1.32.8...v1.32.9 on Thu, 02 Oct 2025 00:22:23 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.9.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.9 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.9 \
    --signature cri-o.amd64.v1.32.9.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.9.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.9.tar.gz
> bom validate -e cri-o.amd64.v1.32.9.tar.gz.spdx -d cri-o

Changelog since v1.32.8

Changes by Kind

Bug or Regression

  • Fix log rotation not working for containers running with the kata-containers runtime (#9451, @littlejawa)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

littlejawa
Loading

v1.31.13

02 Oct 00:24
@github-actions github-actions
v1.31.13
15789b8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.31.13

CRI-O v1.31.13

The release notes have been generated for the commit range
v1.31.12...v1.31.13 on Thu, 02 Oct 2025 00:22:29 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.13.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.13 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.13 \
    --signature cri-o.amd64.v1.31.13.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.13.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.13.tar.gz
> bom validate -e cri-o.amd64.v1.31.13.tar.gz.spdx -d cri-o

Changelog since v1.31.12

Changes by Kind

Bug or Regression

  • Fix log rotation not working for containers running with the kata-containers runtime (#9450, @littlejawa)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

littlejawa
Loading

v1.34.0

10 Sep 15:57
@github-actions github-actions
v1.34.0
d91a449
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.34.0

CRI-O v1.34.0

The release notes have been generated for the commit range
v1.33.0...v1.34.0 on Wed, 10 Sep 2025 15:54:36 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.34.0.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --signature cri-o.amd64.v1.34.0.tar.gz.sig \
    --certificate cri-o.amd64.v1.34.0.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.34.0.tar.gz
> bom validate -e cri-o.amd64.v1.34.0.tar.gz.spdx -d cri-o

Changelog since v1.33.0

Changes by Kind

Other

  • Log additional container information when stopping container. (#9302, @bitoku)
  • Updated NRI dependency to v0.10.0. Added configuration options for the built-in default validator NRI plugin. (#9415, @klihub)

Dependency-Change

Deprecation

API Change

  • Add HostNetwork field to the /info endpoint to inform cadvisor whether a container is in the host network or not. (#9411, @haircommander)

Feature

  • Added HugeTLB usage (container_hugetlb_usage_bytes) and maxUsage (container_hugetlb_max_usage_bytes) metrics. (#9257, @gavinkflam)
  • Added exec_cpu_affinity type which can specify cpu where exec command runs. (#9286, @bitoku)
  • Added container processes (container_processes) metric. (#9366, @gavinkflam)
  • Added feature to track conmon processes and emit containers_stopped_monitor_count{name="$ctr_name"} metric when it's stopped. (#9205, @bitoku)
  • Added feature to track conmon-rs processes and emit containers_stopped_monitor_count{name="$ctr_name"} metric when it's stopped. (#9348, @bitoku)
  • Added support for conmon-rs log driver and heaptrack config by using the monitor_env runtime configuration. (#9402, @saschagrunert)
  • Added support for conmon-rs streaming server on Exec and Attach. To enable it, set
    stream_websockets = true as part of the runtime handler configuration. (#9289, @saschagrunert)
  • Allow configuration of a default seccomp profile per runtime. (#9424, @gavinkflam)
  • Early pre-validate the configured pod runtime (conmon-rs) on config validation. (#9324, @saschagrunert)

Documentation

  • Fixed typos in CLI and error messages.
  • Deprecated CONTAINER_INCLUDED_POD_METRCIS CLI environment variable in favor of CONTAINER_INCLUDED_POD_METRICS. (#9299, @saschagrunert)
  • Updated tracing docs to use the latest jaeger image as well as simplify the configuration. (#9342, @saschagrunert)

Bug or Regression

  • Fix a bug where CRI-O did not respect cases where the kubelet instructed it to unmask /proc for containers (#9285, @haircommander)
  • Fix a potential deadlock when an infra container is taking a long time to exit and the sandbox's readiness is blocked on the infra container's opLock (#9188, @haircommander)
  • Fix log rotation not working for containers running with the kata-containers runtime (#9433, @littlejawa)
  • Fix terminal resize race condition (#9246, @sohankunkerkar)
  • Fix the bug that pod can't be terminated when the process is uninterruptible sleep for a while. (#9256, @bitoku)
  • Fix the bug where it continues to emit a metric after it confirms the conmon is stopped once (#9333, @bitoku)
  • Fixed a bug which caused CDI injection by NRI plugins to not being honored. NRI plugins are now able to inject CDI devices into containers. (#9128, @klihub)
  • Fixed segmentation fault when trying to create a lot of pods at a time. (#9272, @bitoku)
  • Fixes a crash introduced in 1.33.0 when cleaning up a pod that uses HostPorts
    on a system that has either just iptables (but not nftables) or just nftables
    (but not iptables). (#9222, @danwinship)
  • Handle missing network namespace gracefully during networkStop (#9301, @sohankunkerkar)
  • Server: add real-time memory validation for limit updates (#9385, @sohankunkerkar)
  • Server: delay CDI device injection, to ensure that CDI Spec edits take precedence over image defaults and the Pod Spec. (#9292, @klihub)
  • Server: ensure CNI teardown prevents IP leaks with missing netns (#9372, @sohankunkerkar)

Other (Cleanup or Flake)

  • Changed CONTAINER USER: … debug log message to become Container user: "…". (#9420, @saschagrunert)

Uncategorized

  • Enable shortname enforcement, requiring shortnames to be unambiguous if there are multiple entries that could be pulled from the list of 'unqualified-search-registries'. Generally, users should not enable 'unqualified-search-registries' but if they must be used, they should be unambiguous (#9401, @haircommander)

Dependencies

Added

  • github.com/alibabacloud-go/tea-utils/v2: v2.0.7
  • github.com/cenkalti/backoff/v5: v5.0.3
  • github.com/go-piv/piv-go/v2: v2.3.0
  • github.com/go-viper/mapstructure/v2: v2.3.0
  • github.com/google/go-github/v72: v72.0.0
  • github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
  • github.com/grpc-ecosystem/go-grpc-middleware/v2: [v2.3.0](https:...
Read more

Contributors

danwinship, saschagrunert, and 6 other contributors
Loading

v1.33.4

02 Sep 09:40
@github-actions github-actions
v1.33.4
60c6d8d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.33.4

CRI-O v1.33.4

The release notes have been generated for the commit range
v1.33.3...v1.33.4 on Tue, 02 Sep 2025 09:38:10 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.33.4.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.33.4 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.33.4 \
    --signature cri-o.amd64.v1.33.4.tar.gz.sig \
    --certificate cri-o.amd64.v1.33.4.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.33.4.tar.gz
> bom validate -e cri-o.amd64.v1.33.4.tar.gz.spdx -d cri-o

Changelog since v1.33.3

Changes by Kind

Uncategorized

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

openshift-cherrypick-robot
Loading

v1.32.8

02 Sep 00:26
@github-actions github-actions
v1.32.8
6140265
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.32.8

CRI-O v1.32.8

The release notes have been generated for the commit range
v1.32.7...v1.32.8 on Tue, 02 Sep 2025 00:23:41 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.8.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.8 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.8 \
    --signature cri-o.amd64.v1.32.8.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.8.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.8.tar.gz
> bom validate -e cri-o.amd64.v1.32.8.tar.gz.spdx -d cri-o

Changelog since v1.32.7

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Loading

v1.31.12

02 Sep 00:25
@github-actions github-actions
v1.31.12
2cea339
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.31.12

CRI-O v1.31.12

The release notes have been generated for the commit range
v1.31.11...v1.31.12 on Tue, 02 Sep 2025 00:23:42 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.12.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.12 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.12 \
    --signature cri-o.amd64.v1.31.12.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.12.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.12.tar.gz
> bom validate -e cri-o.amd64.v1.31.12.tar.gz.spdx -d cri-o

Changelog since v1.31.11

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Loading

v1.33.3

02 Aug 00:27
@github-actions github-actions
v1.33.3
94372b0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.33.3

CRI-O v1.33.3

The release notes have been generated for the commit range
v1.33.2...v1.33.3 on Sat, 02 Aug 2025 00:25:53 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.33.3.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.33.3 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.33.3 \
    --signature cri-o.amd64.v1.33.3.tar.gz.sig \
    --certificate cri-o.amd64.v1.33.3.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.33.3.tar.gz
> bom validate -e cri-o.amd64.v1.33.3.tar.gz.spdx -d cri-o

Changelog since v1.33.2

Changes by Kind

Bug or Regression

  • Server: delay CDI device injection, to ensure that CDI Spec edits take precedence over image defaults and the Pod Spec. (#9295, @klihub)

Uncategorized

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Contributors

klihub and openshift-cherrypick-robot
Loading

v1.32.7

02 Aug 00:28
@github-actions github-actions
v1.32.7
71d5a61
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.32.7

CRI-O v1.32.7

The release notes have been generated for the commit range
v1.32.6...v1.32.7 on Sat, 02 Aug 2025 00:25:49 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.7.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.7 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.7 \
    --signature cri-o.amd64.v1.32.7.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.7.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.7.tar.gz
> bom validate -e cri-o.amd64.v1.32.7.tar.gz.spdx -d cri-o

Changelog since v1.32.6

Changes by Kind

Bug or Regression

  • Server: delay CDI device injection, to ensure that CDI Spec edits take precedence over image defaults and the Pod Spec. (#9296, @klihub)

Uncategorized

  • Fix the bug that pod can't be terminated when the process is uninterruptible sleep for a while. (#9326, @bitoku)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Contributors

klihub and bitoku
Loading