Skip to content

Conversation

@dmcgowan
Copy link
Member

Generated release notes


containerd 2.2.1

Welcome to the v2.2.1 release of containerd!

The first patch release for containerd 2.2 contains various fixes and improvements.

Highlights

Container Runtime Interface (CRI)

  • Redact all query parameters in CRI error logs (#12546)

Image Distribution

  • Fix image defaults on Darwin to usable configuration (#12544)
  • Fix possible panic from WithMediaTypeKeyPrefix (#12516)

Runtime

  • Update runc binary to v1.3.4 (#12593)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

  • Krisztian Litkey
  • Markus Lehtonen
  • Derek McGowan
  • Akihiro Suda
  • Mike Brown
  • Wei Fu
  • Phil Estes
  • Austin Vazquez
  • Sascha Grunert
  • Sebastiaan van Stijn
  • Akhil Mohan
  • Andrey Noskov
  • Brian Goff
  • CrazyMax
  • Davanum Srinivas
  • Neeraj Krishna Gopalakrishna
  • Paweł Gronowski
  • Tõnis Tiigi
  • bo.jiang

Changes

41 commits

  • d5a717542 Prepare release notes for v2.2.1
  • go.{mod,sum}: bump CDI deps to v1.1.0. (#12664)
    • c166a577d go.{mod,sum} bump CDI deps to v1.1.0.
  • go.mod: containerd/zfs v2.0.0; remove exclude rules (#12654)
    • 73a08aa00 go.mod: remove exclude rules
    • cee08c8af build(deps): bump github.com/containerd/zfs/v2 from 2.0.0-rc.0 to 2.0.0
  • go.mod: github.com/containernetworking/plugins v1.9.0 (#12658)
    • 8a5fc8641 go.mod: github.com/containernetworking/plugins v1.9.0
  • go.mod: golang.org/x/crypto v0.45.0 (#12638)
    • 55c93d6fb go.mod: golang.org/x/crypto v0.45.0
  • ci :bump Go 1.24.11, 1.25.5 (#12625)
  • core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor (#12622)
    • ed19c5420 core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor
  • ci: update CIFuzz actions to support Ubuntu 24.04 (#12632)
    • 952237d9b ci: update CIFuzz actions to support Ubuntu 24.04
  • Update runc binary to v1.3.4 (#12593)
    • fb5b818a9 runc: Update runc binary to v1.3.4
  • : update containerd/cgroups from v3.1.0 to v3.1.2 (#12598)
    • 51582ed27 bump containerd/cgroups to v3.1.2
    • 50d0e4fd4 build(deps): bump github.com/containerd/cgroups/v3 from 3.1.0 to 3.1.1
  • core/mount: should not call removeLoop when set autoclear (#12587)
    • 41a69eb0d core/mount: should not call removeLoop when set autoclear
  • build(deps): bump github.com/opencontainers/selinux (#12589)
    • e3bf2b80b build(deps): bump github.com/opencontainers/selinux
  • .github: skip 5 critest cases for window-2022 (#12584)
    • da8e846f9 .github: skip 5 critest cases in window CI pipeline
  • Fix image defaults on Darwin to usable configuration (#12544)
    • d154e234b Update the ctr pull defaults when using the transfer service
    • 09364216d Fix transfer unpack defaults on darwin
    • 2055d3c62 Update default differs on darwin
    • 9da97686d Use default writable size in erofs snapshotter for non-Linux hosts
    • eeb0f889a Update default erofs block size on macOS during erofs diff
  • Redact all query parameters in CRI error logs (#12546)
    • c707f771a fix: redact all query parameters in CRI error logs
  • Revert "Implement io.ReaderAt on docker fetch reader" (#12542)
    • 678f944dd Revert "Implement io.ReaderAt on docker fetch reader"
  • Fix possible panic from WithMediaTypeKeyPrefix (#12516)
    • 8b73c2de3 remotes: fix possible panic from WithMediaTypeKeyPrefix

Changes from containerd/nri

49 commits

  • deps: bump runtime-spec to v1.3.0. (containerd/nri#243)
    • 29c5811 (v0.1.0) examples: lock NRI, runtime spec deps.
    • d812952 v010-adapter: lock NRI, runtime spec and tools deps.
    • 7dd7c7f api,runtime-tools: adjust for runtime-spec v1.3.0.
    • 5d5d4c4 go.{mod,sum}: update runtime-tools, runtime-spec to v1.3.0.
  • adaptation: ensure sync'ed plugins are fully registered in tests. (containerd/nri#234)
    • c840397 adaptation: ensure sync'ed plugins are fully registered in tests.
  • Fix wasm example (containerd/nri#237)
  • Makefile: build proto files unconditionally (containerd/nri#229)
    • d99f960 Fix dockerized proto build
    • 9623748 Makefile: build proto files unconditionally
    • 25d9391 build: ensure we use correct version of protoc and its deps.
  • adaptation: test with populated initial resources. (containerd/nri#231)
    • b6b98b5 adaptation: test with populated initial resources.
  • Install protoc locally in the source tree (containerd/nri#232)
    • 2394daa Install protoc locally in the source tree
  • plugins/logger: fix default event subscription mask. (containerd/nri#158)
    • 33b1db1 logger: fix default event subscription mask.
  • extract memory and CPU resource helpers (containerd/nri#210)
    • 7afb32a extract memory and CPU resource helpers
  • api: expose container user/group ID to plugins. (containerd/nri#230)
    • 22aeb46 docs: update README with container uid/gid info.
    • 71b0335 api,adaptation: add container uid/gid info.
  • contrib: add example for enabling per-container RDT monitoring (containerd/nri#228)
    • 91fbf06 contrib: add example for enabling per-container RDT monitoring
  • ci: enable image signing (containerd/nri#224)
  • golangci: disable QF1008 from staticcheck linter (containerd/nri#226)
    • 0b3b577 golangci: disable QF1008 from staticcheck linter
  • ci: bump golangci-lint to v2.4 (containerd/nri#225)
    • 9787127 Bump golangci-lint to v2.4
    • 1a50ff5 Add nolint directives
    • 00fa1a1 Add and fix comments for exported types
    • ac21da7 pkg/api/seccomp: add comments for exported functions
    • 3aff986 pkg/runtime-tools/generate: remove embedded field "Generator"
    • c0c4bb6 pkg/api/validate: add comments for exported methods
    • c0ba9da adaptation/builtin: add comment for exported symbols
  • .gitignore: revert hastily reviewed editor-specific addition. (containerd/nri#221)
    • 02376f3 .gitignore: add comment about global gitignore.
    • 9336a79 Revert "nit: Add .idea folder to gitignore"
  • nit: Add .idea folder to gitignore (containerd/nri#218)
    • f578ea2 nit: Add .idea folder to gitignore
  • chore: clean and unify nolint directives (containerd/nri#217)
    • 21741b9 chore: clean and unify nolint directives
  • Downgrade go to require 1.24.0 (containerd/nri#214)
    • d26e910 Downgrade go to require 1.24.0
  • Add dockerized target for building proto files (containerd/nri#211)
    • 13fcc07 Add dockerized target for building proto files

Dependency Changes

  • github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.2
  • github.com/containerd/nri v0.10.0 -> 3827d9da021a
  • github.com/containerd/zfs/v2 v2.0.0-rc.0 -> v2.0.0
  • github.com/containernetworking/plugins v1.8.0 -> v1.9.0
  • github.com/cyphar/filepath-securejoin v0.5.1 new
  • github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
  • github.com/opencontainers/runtime-tools 0ea5ed0382a2 -> edf4cb3d2116
  • github.com/opencontainers/selinux v1.12.0 -> v1.13.1
  • golang.org/x/crypto v0.41.0 -> v0.45.0
  • golang.org/x/net v0.43.0 -> v0.47.0
  • golang.org/x/sync v0.17.0 -> v0.18.0
  • golang.org/x/sys v0.37.0 -> v0.38.0
  • golang.org/x/term v0.34.0 -> v0.37.0
  • golang.org/x/text v0.28.0 -> v0.31.0
  • tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0
  • tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v2.2.0

Which file should I download?

  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

@github-project-automation github-project-automation bot moved this to Needs Triage in Pull Request Review Dec 12, 2025
@dosubot dosubot bot added area/cri Container Runtime Interface (CRI) area/distribution Image Distribution area/runtime Runtime labels Dec 12, 2025
@akhilerm
Copy link
Member

I would like to have this regression #12612 also fixed in 2.2.1 release.

@github-project-automation github-project-automation bot moved this from Needs Triage to Review In Progress in Pull Request Review Dec 16, 2025
@dmcgowan dmcgowan requested a review from fuweid December 16, 2025 16:46
@AkihiroSuda
Copy link
Member

LGTM after rebase

Signed-off-by: Derek McGowan <derek@mcg.dev>
@ningmingxiao
Copy link
Contributor

can you add this pr #12416 @dmcgowan @fuweid

@HamzaZo
Copy link

HamzaZo commented Dec 18, 2025

can we add the fix of #12503 it was fixed on cgroups containerd/cgroups#378

@AkihiroSuda
Copy link
Member

AkihiroSuda commented Dec 18, 2025

can we add the fix of #12503 it was fixed on cgroups containerd/cgroups#378

Already added

Should be highlighted in the release note? @dmcgowan

@dmcgowan dmcgowan merged commit dea7da5 into containerd:release/2.2 Dec 18, 2025
88 of 92 checks passed
@github-project-automation github-project-automation bot moved this from Review In Progress to Done in Pull Request Review Dec 18, 2025
@dmcgowan dmcgowan deleted the prepare-2.2.1 branch December 20, 2025 06:32
@HamzaZo
Copy link

HamzaZo commented Dec 22, 2025

Upgrading to v2.2.1 does not resolve the issue of #12503, as I am still encountering the same problem @AkihiroSuda

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/cri Container Runtime Interface (CRI) area/distribution Image Distribution area/runtime Runtime size/S

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.