containerd v2.2.7

Welcome to the v2.2.7 release of containerd!

The seventh patch release for containerd 2.2 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

• Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13937)
• Deprecate checkpoint restore in CreateContainer (#13872)
• Support non-UTF-8 binary environment variable values in CRI (#13455)
• Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#13795)
• Enable OCI runtime feature introspection for non-runc runtimes in CRI (#13779)

Runtime

• Enable log scrubbing by default on Windows (#13882)
• Fix mount manager activation error when activation already exists (#13823)

Breaking

• Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13937)

Deprecations

• Deprecate checkpoint restore in CreateContainer (#13872)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Samuel Karp
• Jordan Liggitt
• Akihiro Suda
• Amir Alavi
• Chris Henzie
• Derek McGowan
• Maksym Pavlenko
• Mike Brown
• Phil Estes

Changes

• 43f299db6 Prepare release notes for v2.2.7
• cri: disable restore in CreateContainer by default (#13937)
  • 5c3a47036 cri: disable restore in CreateContainer by default
• Use ScrubLogs by default on Windows (#13882)
  • 4c93ae6d5 ctr: add --scrub-logs flag for Windows
  • a124c7e35 cri/config: use ScrubLogs by default on Windows
• cri: deprecate restore in CreateContainer (#13872)
  • c59d041d8 cri: deprecate restore in CreateContainer
• Handle []byte envvar value for CRI (#13455)
  • 6cdc2ddce Handle []byte envvar value
  • a60898833 update to v0.34.x kubernetes dependencies
• Fix mount manager activation error when already exists (#13823)
  • 54ecff6ca core/mount: Fix mount manager activation error when already exists
• Disable checkpoint restore codepath when CRIU is not installed (#13795)
  • fd966ba29 github/workflows: install criu in node-e2e
  • 7d41b25c9 cri: add enable_criu configuration option
  • 48116fa59 cri: validate CRIU availability and version early
• fix(cri): introspect OCI runtime features for non-runc runtimes (#13779)
  • 6a3d14e8a fix(cri): introspect OCI runtime features for non-runc runtimes
• ci: bound Go fuzzing by execution count (#13786)
  • 424b714f0 ci: bound Go fuzzing by execution count

Dependency Changes

• go.opentelemetry.io/otel v1.38.0 -> v1.41.0
• go.opentelemetry.io/otel/metric v1.38.0 -> v1.41.0
• go.opentelemetry.io/otel/trace v1.38.0 -> v1.41.0
• google.golang.org/protobuf v1.36.10 -> f2248ac996af
• k8s.io/api v0.34.1 -> v0.34.10
• k8s.io/apimachinery v0.34.1 -> v0.34.10
• k8s.io/client-go v0.34.1 -> v0.34.10
• k8s.io/cri-api v0.34.1 -> v0.34.10

Previous release can be found at v2.2.6

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.