| CARVIEW |
Select Language
HTTP/2 200
date: Sun, 27 Jul 2025 20:03:51 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"16af99d5a8fcda258d93807b67e500a9"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=FuEZhxg5JtlbCDP3PNREdGh4wgMfR8%2BOK5WWR2OFFwlGHkl1jL16mGkBSiovifrRQquQ5QW%2BchejZcVhezActsYz%2FfBlCclhcRPaVXlexiGXoib8CQgphG192ru8zWKGMnIhpqOwZgb%2Fjjg7vqFRqKrgKeoosloTyvyC4fcZlYkdDxil8cLlZGMuoSnOE5VRlM3Jayla0rK6iaBpqW1pb08lTvOAU7RYWyhIrZwwlwC00m%2BNq%2FGBkC2SaSBe375T7D1p7eGnefw102i8myNpbA%3D%3D--Ce01cAwMl6002bIF--ciPavnTqXsm0%2BUeJExA7Zg%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.596845954.1753646630; Path=/; Domain=github.com; Expires=Mon, 27 Jul 2026 20:03:50 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Mon, 27 Jul 2026 20:03:50 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: E82E:872F4:11361AB:169A362:68868626
Release containerd 2.0.3 · containerd/containerd · GitHub
Loading
Skip to content
Navigation Menu
{{ message }}
-
Notifications
You must be signed in to change notification settings - Fork 3.6k
containerd 2.0.3
Compare
·
926 commits
to main
since this release
06b99ca
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Welcome to the v2.0.3 release of containerd!
The third patch release for containerd 2.0 includes various bug fixes and updates.
Highlights
- Update remote content to break up writes to avoid grpc message size limits (#11457)
- Update runc binary to v1.2.5 (#11394)
Container Runtime Interface (CRI)
- Fix privileged container sysfs can't be rw because pod is ro by default (#11456)
- Fix recursive RLock() mutex acquisition (containerd/go-cni#126)
Node Resource Interface (NRI)
- Fix initial sync race when registering NRI plugins (#11329)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Derek McGowan
- Akihiro Suda
- Mike Brown
- Phil Estes
- Akhil Mohan
- Chifeng Cai
- Krisztian Litkey
- Wei Fu
- Andrey Smirnov
- Austin Vazquez
- Chris Henzie
- Jing Xu
- Jonathan A. Sternberg
- Jose Fernandez
- Kirtana Ashok
- Lei Liu
- Maksym Pavlenko
- Michael Zappa
- Samuel Karp
- fengwei0328
- zounengren
Changes
42 commits
- Prepare release notes for v2.0.3 (#11443)
b8dde9189Prepare release notes for v2.0.3
- Update remote content to break up writes to avoid grpc message size limits (#11457)
eaa7ca80dproxy: break up writes from the remote writer to avoid grpc limits
- Fix privileged container sysfs can't be rw because pod is ro by default (#11456)
c7f64196fFix privileged container sysfs can't be rw because pod is ro by default
- go.{mod,sum}: bump CDI deps to v.0.8.1. (#11430)
92ae2951fUpdate CDI dependency to v0.8.1.
- Prefer runtime options for PluginInfo request (#11446)
569af34cbPrefer runtime options for PluginInfo request
- pkg: prevent oom watcher from depending on shim pkg (#11439)
0ce93e16aprevent oom watcher depend on shim pkg.
- CI: arm64-8core-32gb -> ubuntu-24.04-arm (#11436)
f3284aa68CI: arm64-8core-32gb -> ubuntu-24.04-arm
- Revert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG" (#11403)
b5313993cRevert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG"
- move the device after the options when using mkfs.ext4 (#11411)
f95a426b8move the device after the options when using mkfs.ext4
- update build to go1.23.6, test go1.24.0 (#11410)
4d19a6adfupdate build to go1.23.6, test go1.24.0
- build(deps): bump actions/cache from 4.1.2 to 4.2.0 (#11405)
c738c3aabbuild(deps): bump actions/cache from 4.1.2 to 4.2.0
- Upgrade x/net to 0.33.0 to fix vulnerability GHSA-w32m-9786-jp63 (#11387)
- Update install-imgcrypt to allow change install repo (#11357)
0785bd8ccUpdate install-imgcrypt to allow change install repo
- Update runc binary to v1.2.5 (#11394)
697c59c63Update runc binary to v1.2.5
- Update go-cni version to fix Race Condition issue (#11269)
06891f899fix go-cni race condition
- Fix initial sync race when registering NRI plugins (#11329)
79cdbf61bcri,nri: block NRI plugin sync. during event processing.
- Update github.com/containerd/imgcrypt to v2.0.0 (#11325)
9d5cfce83Update github.com/containerd/imgcrypt to v2.0.0
- Move CDI device spec out of the OCI package (#11265)
- update to go1.23.5 / go1.22.11 (#11297)
1f4e5688eupdate to go1.23.5 / go1.22.11
- build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#11263)
3a6ab80d0build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
Changes from containerd/go-cni
2 commits
- Fix recursive RLock() mutex acquisition (containerd/go-cni#126)
75a2440fix: recursive RLock() mutex acquision
Dependency Changes
- github.com/containerd/go-cni v1.1.11 -> v1.1.12
- github.com/containerd/imgcrypt/v2 v2.0.0-rc.1 -> v2.0.0
- github.com/containers/ocicrypt v1.2.0 -> v1.2.1
- github.com/petermattis/goid 4fcff4a6cae7 new
- github.com/sasha-s/go-deadlock v0.3.5 new
- github.com/smallstep/pkcs7 v0.1.1 new
- golang.org/x/crypto v0.28.0 -> v0.31.0
- golang.org/x/net v0.30.0 -> v0.33.0
- golang.org/x/oauth2 v0.22.0 -> v0.23.0
- golang.org/x/sync v0.8.0 -> v0.10.0
- golang.org/x/sys v0.26.0 -> v0.28.0
- golang.org/x/term v0.25.0 -> v0.27.0
- golang.org/x/text v0.19.0 -> v0.21.0
- google.golang.org/grpc v1.67.1 -> v1.68.1
- google.golang.org/protobuf v1.35.1 -> v1.35.2
- tags.cncf.io/container-device-interface v0.8.0 -> v0.8.1
Previous release can be found at v2.0.2
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
Assets 25
2 people reacted
You can’t perform that action at this time.