containerd v2.2.6

Welcome to the v2.2.6 release of containerd!

The sixth patch release for containerd 2.2 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

• Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#13696)
• Reject CreateContainer calls when the target sandbox is not running (#13669)
• Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks (#13644)

Image Distribution

• Limit fallback to /blobs endpoint during ref resolution to prevent content store pollution (#13620)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Chris Henzie
• Phil Estes
• Akihiro Suda
• Joseph Zhang
• Maksym Pavlenko
• crawfordxx
• lauralorenz

Changes

• Prepare release notes for v2.2.6 (#13751)
  • 701734d2f Prepare release notes for v2.2.6
• CI: migrate Vagrant to Lima (#13745)
  • 672ea355f CI: migrate Vagrant to Lima
• Update go to 1.26.5/1.25.12 (#13726)
  • d7eba3f42 Update go to 1.26.5/1.25.12
• ci: pin fog-json to resolve gem conflict (#13714)
  • 8f123e4f7 ci: pin fog-json to resolve gem conflict
• Fix nil pointer dereference in NRI GetIPs (#13696)
  • d3e1a2be9 Fix nil pointer dereference in NRI GetIPs
• cri: reject CreateContainer when sandbox is not running (#13669)
  • 872a9502e cri: reject CreateContainer when sandbox is not running
• Add defer in event of mid-function failures in RunPodSandbox to avoid mount leaks (#13644)
  • ba7605ee7 Add deferred call to ShutdownSandbox to avoid leaks
• fix: avoid content storage pollution by limiting the fallback on ref resolution (#13620)
  • 36c4275ee fix:avoid content storage pollution by limiting the fallback on ref resolution

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.2.5

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.