Skip to content
containerd 2.0.0-beta.1

Welcome to the v2.0.0-beta.1 release of containerd!
*This is a pre-release of containerd*

The first major release of containerd 2.x focuses on the continued stability of
containerd's core feature set with an easy upgrade from containerd 1.x. This
release includes the stabilization of new features added in the last 1.x release
as well as the removal of features which were deprecated in 1.x. The goal is to
support the vast community of containerd users well into the future along with
their ever increasing deployment footprints and variety of use cases.

### Highlights

* Move packages based on contributing guide ([#9365](https://github.com/containerd/containerd/pull/9365))
* Update import and export to allow references to missing content  ([#9554](https://github.com/containerd/containerd/pull/9554))
* *: enable ARM64 runner ([#9456](https://github.com/containerd/containerd/pull/9456))
* Update RuntimeDefault seccomp profile to disallow io_uring related syscalls ([#9320](https://github.com/containerd/containerd/pull/9320))
* Expose usage of deprecated features ([#9258](https://github.com/containerd/containerd/pull/9258))
* Switch runc shim to task service v3 and fix restore ([#9233](https://github.com/containerd/containerd/pull/9233))
* Use Intel ISA-L's igzip if available ([#9200](https://github.com/containerd/containerd/pull/9200))
* Generalize plugin library ([#9214](https://github.com/containerd/containerd/pull/9214))
* Introduce top level config migration ([#9223](https://github.com/containerd/containerd/pull/9223))
* Add image delete target ([#8989](https://github.com/containerd/containerd/pull/8989))
* Use github.com/containerd/log ([#9086](https://github.com/containerd/containerd/pull/9086))
* Add support for image expiration during garbage collection ([#9022](https://github.com/containerd/containerd/pull/9022))
* Reduce the contention between ref lock and boltdb lock in content store ([#8792](https://github.com/containerd/containerd/pull/8792))
* Remove the CriuPath field from runc's options ([#8279](https://github.com/containerd/containerd/pull/8279))
* Remove support for config.toml `version = 1` ([#8275](https://github.com/containerd/containerd/pull/8275))
* Remove "containerd.io/restart.logpath" label ([#8264](https://github.com/containerd/containerd/pull/8264))
* Remove `aufs` snapshotter ([#8263](https://github.com/containerd/containerd/pull/8263))

#### Container Runtime Interface (CRI)

* Enable CDI by default ([#9621](https://github.com/containerd/containerd/pull/9621))
* Remove non-sandboxed CRI implementation ([#9228](https://github.com/containerd/containerd/pull/9228))
* Add image verifier transfer service plugin system based on a binary directory ([#8493](https://github.com/containerd/containerd/pull/8493))
* Add support for userns in stateless and stateful pods with idmap mounts (KEP-127, k8s >= 1.27) ([#8287](https://github.com/containerd/containerd/pull/8287))
* Use sandboxed CRI by default ([#8994](https://github.com/containerd/containerd/pull/8994))
* Implement RuntimeConfig CRI call ([#8722](https://github.com/containerd/containerd/pull/8722))
* Add support for user namespaces (KEP-127) ([#8803](https://github.com/containerd/containerd/pull/8803))
* Remove CRI v1alpha2 ([#8276](https://github.com/containerd/containerd/pull/8276))

#### Runtime

* Add sandboxer configuration and move sandbox controllers to plugins ([#8268](https://github.com/containerd/containerd/pull/8268))
* Remove `io.containerd.runtime.v1.linux` and `io.containerd.runc.v1` ([#8262](https://github.com/containerd/containerd/pull/8262))

#### Security Advisories

* [medium] RAPL accessible to a container [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)

#### Breaking

* Update RuntimeDefault seccomp profile to disallow io_uring related syscalls ([#9320](https://github.com/containerd/containerd/pull/9320))
* Move client to subpackage ([#9316](https://github.com/containerd/containerd/pull/9316))
* Remove CRI v1alpha2 ([#8276](https://github.com/containerd/containerd/pull/8276))
* Remove `io.containerd.runtime.v1.linux` and `io.containerd.runc.v1` ([#8262](https://github.com/containerd/containerd/pull/8262))
* Remove "containerd.io/restart.logpath" label ([#8264](https://github.com/containerd/containerd/pull/8264))
* Remove `aufs` snapshotter ([#8263](https://github.com/containerd/containerd/pull/8263))

#### Deprecations

* Deprecate go-plugin configuration option ([#9238](https://github.com/containerd/containerd/pull/9238))
* CNI conf_template in CRI is no longer deprecated ([#8637](https://github.com/containerd/containerd/pull/8637))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

### Contributors

* Derek McGowan
* Akihiro Suda
* Wei Fu
* Phil Estes
* Sebastiaan van Stijn
* Samuel Karp
* Maksym Pavlenko
* Kazuyoshi Kato
* Rodrigo Campos
* dependabot[bot]
* Danny Canter
* Gabriel Adrian Samfira
* Iceber Gu
* Abel Feng
* Jin Dong
* Bjorn Neergaard
* Kirtana Ashok
* Kohei Tokunaga
* Austin Vazquez
* rongfu.leng
* Akhil Mohan
* Mike Brown
* Paul "TBBle" Hampson
* Krisztian Litkey
* Enrico Weigelt
* James Sturtevant
* Paweł Gronowski
* Ilya Hanov
* Marat Radchenko
* Cardy.Tang
* Hsing-Yu (David) Chen
* Justin Chadwell
* Brian Goff
* Bryant Biggs
* Davanum Srinivas
* Henry Wang
* Kay Yan
* Laura Brehm
* Markus Lehtonen
* Nashwan Azhari
* Shingo Omura
* Vinayak Goyal
* helen
* Aditi Sharma
* Charity Kathure
* Ed Bartosh
* James Jenkins
* Milas Bowman
* Aditya Ramani
* Amit Barve
* Artem Khramov
* Brad Davidson
* Chen Yiyang
* Cory Snider
* Djordje Lukic
* Ethan Lowman
* Jiang Liu
* Jordan Liggitt
* June Rhodes
* Mahamed Ali
* Michael Crosby
* Peteris Rudzusiks
* Sam Edwards
* Samruddhi Khandale
* Shuaiyi Zhang
* Steve Griffith
* VERNOU Cédric
* hang.jiang
* jerryzhuang
* lengrongfu
* Aaron Lehmann
* Alex Couture-Beil
* Alex Ellis
* Alex Rodriguez
* Alexandru Matei
* Amir M. Ghazanfari
* Anthony Nandaa
* Antonio Huete Jimenez
* Avi Deitcher
* Ben Foster
* Bin Xin
* BinBin He
* Brennan Kinney
* Craig Ingram
* Daisy Rong
* Edgar Lee
* Eng Zer Jun
* Etienne Champetier
* Evan Lezar
* Fahed Dorgaa
* Gary McDonald
* Iceber Gu
* James Lakin
* Jan Dubois
* Jaroslav Jindrak
* Jiongchi Yu
* Kern Walster
* Kevin Parsons
* Konstantin Khlebnikov
* Maksim An
* Pan Yibo
* Qasim Sarfraz
* Qiutong Song
* Robbie Buxton
* Robert-André Mauchin
* Shukui Yang
* Tianon Gravi
* Tony Fang
* Tõnis Tiigi
* Wang Xinwen
* William Chen
* Yibo Zhuang
* charles-chenzz
* chschumacher1994
* guangli.bao
* ningmingxiao
* pigletfly
* rokkiter
* roman-kiselenko
* wangxiang
* zhangpeng
* zhaojizhuang
* zounengren
* 吴小白
* 沈陵

### Dependency Changes

* **cloud.google.com/go/compute/metadata**                                         v0.2.3 **_new_**
* **dario.cat/mergo**                                                              v1.0.0 **_new_**
* **github.com/AdaLogics/go-fuzz-headers**                                         1f10f66a31bf -> ced1acdcaa24
* **github.com/AdamKorcz/go-118-fuzz-build**                                       5330a85ea652 -> 8075edf89bb0
* **github.com/Microsoft/go-winio**                                                v0.6.0 -> v0.6.1
* **github.com/Microsoft/hcsshim**                                                 v0.10.0-rc.7 -> v0.12.0-rc.2
* **github.com/cenkalti/backoff/v4**                                               v4.2.0 -> v4.2.1
* **github.com/cilium/ebpf**                                                       v0.9.1 -> v0.11.0
* **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 -> v0.6.1
* **github.com/containerd/cgroups/v3**                                             v3.0.1 -> v3.0.3
* **github.com/containerd/continuity**                                             v0.3.0 -> v0.4.3
* **github.com/containerd/go-runc**                                                v1.0.0 -> v1.1.0
* **github.com/containerd/log**                                                    v0.1.0 **_new_**
* **github.com/containerd/nri**                                                    v0.3.0 -> v0.5.0
* **github.com/containerd/plugin**                                                 7ec69893e1e7 **_new_**
* **github.com/containerd/ttrpc**                                                  v1.2.1 -> v1.2.2
* **github.com/containerd/typeurl/v2**                                             v2.1.0 -> v2.1.1
* **github.com/containernetworking/plugins**                                       v1.2.0 -> v1.4.0
* **github.com/distribution/reference**                                            v0.5.0 **_new_**
* **github.com/emicklei/go-restful/v3**                                            v3.10.1 -> v3.10.2
* **github.com/felixge/httpsnoop**                                                 v1.0.3 **_new_**
* **github.com/fsnotify/fsnotify**                                                 v1.6.0 -> v1.7.0
* **github.com/go-logr/logr**                                                      v1.2.3 -> v1.4.1
* **github.com/golang/protobuf**                                                   v1.5.2 -> v1.5.3
* **github.com/google/go-cmp**                                                     v0.5.9 -> v0.6.0
* **github.com/google/uuid**                                                       v1.3.0 -> v1.5.0
* **github.com/grpc-ecosystem/go-grpc-middleware**                                 v1.3.0 -> v1.4.0
* **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 -> v2.16.2
* **github.com/intel/goresctrl**                                                   v0.3.0 -> v0.6.0
* **github.com/klauspost/compress**                                                v1.16.0 -> v1.17.4
* **github.com/klauspost/cpuid/v2**                                                v2.0.4 -> v2.2.5
* **github.com/minio/sha256-simd**                                                 v1.0.0 -> v1.0.1
* **github.com/moby/sys/mountinfo**                                                v0.6.2 -> v0.7.1
* **github.com/moby/sys/user**                                                     v0.1.0 **_new_**
* **github.com/opencontainers/image-spec**                                         3a7f492d3f1b -> v1.1.0-rc5
* **github.com/opencontainers/runtime-spec**                                       v1.1.0-rc.1 -> 4fec88fd00a4
* **github.com/opencontainers/runtime-tools**                                      946c877fa809 -> 2e043c6bd626
* **github.com/pelletier/go-toml/v2**                                              v2.1.1 **_new_**
* **github.com/prometheus/client_golang**                                          v1.14.0 -> v1.17.0
* **github.com/prometheus/client_model**                                           v0.3.0 -> 9a2bf3000d16
* **github.com/prometheus/common**                                                 v0.37.0 -> v0.44.0
* **github.com/prometheus/procfs**                                                 v0.8.0 -> v0.11.1
* **github.com/sirupsen/logrus**                                                   v1.9.0 -> v1.9.3
* **github.com/stretchr/testify**                                                  v1.8.2 -> v1.8.4
* **github.com/urfave/cli**                                                        v1.22.12 -> v1.22.14
* **github.com/vishvananda/netns**                                                 2eb08e3e575f -> v0.0.4
* **go.etcd.io/bbolt**                                                             v1.3.7 -> v1.3.8
* **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.40.0 -> v0.46.1
* **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                v0.45.0 **_new_**
* **go.opentelemetry.io/otel**                                                     v1.14.0 -> v1.21.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.14.0 -> v1.19.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.14.0 -> v1.19.0
* **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.14.0 -> v1.19.0
* **go.opentelemetry.io/otel/metric**                                              v0.37.0 -> v1.21.0
* **go.opentelemetry.io/otel/sdk**                                                 v1.14.0 -> v1.21.0
* **go.opentelemetry.io/otel/trace**                                               v1.14.0 -> v1.21.0
* **go.opentelemetry.io/proto/otlp**                                               v0.19.0 -> v1.0.0
* **golang.org/x/exp**                                                             aacd6d4b4611 **_new_**
* **golang.org/x/mod**                                                             v0.7.0 -> v0.14.0
* **golang.org/x/net**                                                             v0.7.0 -> v0.19.0
* **golang.org/x/oauth2**                                                          v0.4.0 -> v0.13.0
* **golang.org/x/sync**                                                            v0.1.0 -> v0.6.0
* **golang.org/x/sys**                                                             v0.6.0 -> v0.16.0
* **golang.org/x/term**                                                            v0.5.0 -> v0.15.0
* **golang.org/x/text**                                                            v0.7.0 -> v0.14.0
* **golang.org/x/time**                                                            90d013bbcef8 -> v0.3.0
* **golang.org/x/tools**                                                           v0.5.0 -> v0.16.0
* **google.golang.org/appengine**                                                  v1.6.7 -> v1.6.8
* **google.golang.org/genproto/googleapis/api**                                    d307bd883b97 **_new_**
* **google.golang.org/genproto/googleapis/rpc**                                    995d672761c0 **_new_**
* **google.golang.org/grpc**                                                       v1.53.0 -> v1.60.1
* **google.golang.org/protobuf**                                                   v1.28.1 -> v1.32.0
* **k8s.io/api**                                                                   v0.26.2 -> v0.28.4
* **k8s.io/apimachinery**                                                          v0.26.2 -> v0.28.4
* **k8s.io/apiserver**                                                             v0.26.2 -> v0.28.2
* **k8s.io/client-go**                                                             v0.26.2 -> v0.28.4
* **k8s.io/component-base**                                                        v0.26.2 -> v0.28.4
* **k8s.io/cri-api**                                                               v0.26.2 -> v0.28.2
* **k8s.io/klog/v2**                                                               v2.90.1 -> v2.100.1
* **k8s.io/kubelet**                                                               v0.28.2 **_new_**
* **k8s.io/utils**                                                                 a5ecb0141aa5 -> d93618cff8a2
* **sigs.k8s.io/json**                                                             f223a00ba0e2 -> bc3834ca7abd

Previous release can be found at [v1.7.0](https://github.com/containerd/containerd/releases/tag/v1.7.0)
### Which file should I download?
* `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
* `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.

See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.