# containerd v2.2.7 — containerd 2.2.7

- Product: containerd (https://whatsnew.fyi/product/containerd)
- Vendor: CNCF
- Date: 2026-08-12
- Version: v2.2.7
- Original notes: https://github.com/containerd/containerd/releases/tag/v2.2.7
- Permalink: https://whatsnew.fyi/product/containerd/releases/v2.2.7

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable
- **deprecated** — Deprecate checkpoint restore in CreateContainer
- **added** — Support non-UTF-8 binary environment variable values in CRI
- **added** — Add enable_criu configuration option and disable checkpoint restore codepaths when CRIU is not installed
- **added** — Enable OCI runtime feature introspection for non-runc runtimes in CRI
- **changed** — Enable log scrubbing by default on Windows
- **fixed** — Fix mount manager activation error when activation already exists

Welcome to the v2.2.7 release of containerd!

The seventh patch release for containerd 2.2 contains various fixes and updates.

###### Highlights

###### Container Runtime Interface (CRI)

* Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable ([#13937](https://github.com/containerd/containerd/pull/13937))
* Deprecate checkpoint restore in CreateContainer ([#13872](https://github.com/containerd/containerd/pull/13872))
* Support non-UTF-8 binary environment variable values in CRI ([#13455](https://github.com/containerd/containerd/pull/13455))
* Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option ([#13795](https://github.com/containerd/containerd/pull/13795))
* Enable OCI runtime feature introspection for non-runc runtimes in CRI ([#13779](https://github.com/containerd/containerd/pull/13779))

###### Runtime

* Enable log scrubbing by default on Windows ([#13882](https://github.com/containerd/containerd/pull/13882))
* Fix mount manager activation error when activation already exists ([#13823](https://github.com/containerd/containerd/pull/13823))

###### Breaking

* Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable ([#13937](https://github.com/containerd/containerd/pull/13937))

###### Deprecations

* Deprecate checkpoint restore in CreateContainer ([#13872](https://github.com/containerd/containerd/pull/13872))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

###### Contributors

* Samuel Karp
* Jordan Liggitt
* Akihiro Suda
* Amir Alavi
* Chris Henzie
* Derek McGowan
* Maksym Pavlenko
* Mike Brown
* Phil Estes

###### Changes
<details><summary>21 commits</summary>
<p>

  * [`43f299db6`](https://github.com/containerd/containerd/commit/43f299db6e087ef066e47c3cf41ee56723983eb3) Prepare release notes for v2.2.7
* cri: disable restore in CreateContainer by default ([#13937](https://github.com/containerd/containerd/pull/13937))
  * [`5c3a47036`](https://github.com/containerd/containerd/commit/5c3a47036ec08f8a7517a01a0baf113d6146eca0) cri: disable restore in CreateContainer by default
* Use ScrubLogs by default on Windows ([#13882](https://github.com/containerd/containerd/pull/13882))
  * [`4c93ae6d5`](https://github.com/containerd/containerd/commit/4c93ae6d5e7eaa5957887d469aa610763c2f8b42) ctr: add --scrub-logs flag for Windows
  * [`a124c7e35`](https://github.com/containerd/containerd/commit/a124c7e354da7252a363f3a3eaafb5a81a6d508e) cri/config: use ScrubLogs by default on Windows
* cri: deprecate restore in CreateContainer ([#13872](https://github.com/containerd/containerd/pull/13872))
  * [`c59d041d8`](https://github.com/containerd/containerd/commit/c59d041d84cb402b991338f2894c0637eb5dc608) cri: deprecate restore in CreateContainer
* Handle []byte envvar value for CRI ([#13455](https://github.com/containerd/containerd/pull/13455))
  * [`6cdc2ddce`](https://github.com/containerd/containerd/commit/6cdc2ddce8aa962135459e02d41ab84772e8e08e) Handle []byte envvar value
  * [`a60898833`](https://github.com/containerd/containerd/commit/a60898833909a6bb4c38cc1fa47d44434edfe9bf) update to v0.34.x kubernetes dependencies
* Fix mount manager activation error when already exists ([#13823](https://github.com/containerd/containerd/pull/13823))
  * [`54ecff6ca`](https://github.com/containerd/containerd/commit/54ecff6cabbbbf5b7ffa606cdeeba13131a03968) core/mount: Fix mount manager activation error when already exists
* Disable checkpoint restore codepath when CRIU is not installed ([#13795](https://github.com/containerd/containerd/pull/13795))
  * [`fd966ba29`](https://github.com/containerd/containerd/commit/fd966ba2904fc92c429fff41b0e4d6cd2384fe7c) github/workflows: install criu in node-e2e
  * [`7d41b25c9`](https://github.com/containerd/containerd/commit/7

_[Truncated at 4000 characters — full notes: https://github.com/containerd/containerd/releases/tag/v2.2.7]_