v1.0.0

After nearly two years of development, nerdctl finally reached v1.0.0 🤓 .
A huge thanks to more than 80 contributors, 4,600 stargazers, and an uncountable number of users, for making this possible! 🎉

Also, Lima joined the CNCF Sandbox recently to popularize containerd/nerdctl for Mac users 🎉
Lima v0.13.0 will be released very soon with nerdctl v1.0.0.

---

Changes

• nerdctl run:

  • Add --log-driver=syslog (#1377, thanks to @yuchanns)
  • Add --log-opt=log-path=<LOGPATH> option for json-file logging drivers (#1428, thanks to @Bingmang)
  • Add --mac-address flag (#1407, thanks to @yuchanns)
  • Support --pid=container:<CONTAINER> (#1411, thanks to @minuk-dev)

• nerdctl build:

  • Support --build-arg args without explicit value (#1417, thanks to @alebcay)
  • Support --output=DIR as an alias of --output type=local,dest=<DIR> (#1459, thanks to @yuchanns)

• nerdctl compose:

  • Add nerdctl compose version command (#1389, thanks to @yardenshoham)

• IPFS:

  • Add more examples of Kubernetes (Kind) + IPFS (#1499, thanks to @ktock)

• Demo image (docker run -it --privileged ghcr.io/containerd/nerdctl:v1.0.0@sha256:f0222499716103ec12cfd7bc696dc8b8349280064a856684b42bb4e80c9bcbb7):

  • Configure BuildKit to use containerd worker (#1455)
  • Enable bash completions (#1455)

• nerdctl-full:

  • Update imgcrypt (1.1.7), BuildKit (0.10.5), stargz-snapshotter (0.12.1), Kubo (0.16.0) (#1454)

Full changes: https://github.com/containerd/nerdctl/milestone/23?closed=1
Thanks to @Bingmang @alebcay @davidhsingyuchen @fahedouch @iyear @ktock @manugupt1 @ningziwen @sshedi @yardenshoham @yuchanns

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.5 or v1.6.

About the binaries

• Minimal (nerdctl-1.0.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-1.0.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-1.0.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27639808 2022-10-21 13:11 nerdctl
-rwxr-xr-x root/root     21562 2022-10-21 13:10 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-10-21 13:10 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-1.0.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-10-21 13:28 bin/
-rwxr-xr-x 0/0        25370211 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0        39694633 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3602648 2022-10-21 13:21 bin/bypass4netns
-rwxr-xr-x 0/0         5107712 2022-10-21 13:22 bin/bypass4netnsd
-rwxr-xr-x 0/0        54681048 2022-10-21 13:24 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-10-21 13:22 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-10-21 13:22 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9764864 2022-10-21 13:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        59948992 2022-10-14 10:26 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20130655 2022-10-21 13:27 bin/ctd-decoder
-rwxr-xr-x 0/0        27913688 2022-10-21 13:24 bin/ctr
-rwxr-xr-x 0/0        28853414 2022-10-21 13:27 bin/ctr-enc
-rwxr-xr-x 0/0        30493408 2022-10-14 10:27 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-10-21 13:28 bin/fuse-overlayfs
-rwxr-xr-x 0/0        81162984 2022-10-04 10:42 bin/ipfs
-rwxr-xr-x 0/0        27607040 2022-10-21 13:22 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13785304 2022-10-21 13:22 bin/runc
-rwxr-xr-x 0/0         2338128 2022-10-21 13:27 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-10-21 13:28 bin/tini
drwxr-xr-x 0/0               0 2022-10-21 13:27 lib/
drwxr-xr-x 0/0               0 2022-10-21 13:27 lib/systemd/
drwxr-xr-x 0/0               0 2022-10-21 13:27 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-10-21 13:27 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-10-21 13:21 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-10-21 13:27 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-10-21 13:27 libexec/
drwxrwxr-x 0/0               0 2022-10-21 13:27 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-10-21 13:22 share/
drwxr-xr-x 0/0               0 2022-10-21 13:22 share/doc/
drwxr-xr-x 0/0               0 2022-10-21 13:22 share/doc/nerdctl/
-rw-r--r-- 0/0           72265 2022-10-21 13:10 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-10-21 13:22 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-10-21 13:10 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-10-21 13:10 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-10-21 13:10 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-10-21 13:10 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3030 2022-10-21 13:10 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-10-21 13:10 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-10-21 13:10 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-10-21 13:10 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-10-21 13:10 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-10-21 13:10 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-10-21 13:10 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13268 2022-10-21 13:10 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-10-21 13:10 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            1509 2022-10-21 13:10 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-10-21 13:10 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1308 2022-10-21 13:10 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-10-21 13:10 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5090 2022-10-21 13:10 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-10-21 13:10 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-10-21 13:28 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1149 2022-10-21 13:28 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5816 2022-10-21 13:28 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v1.0.0
- containerd: v1.6.8
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.5
- Stargz Snapshotter: v0.12.1
- imgcrypt: v1.1.7
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.16.0
- Tini: v0.19.0
- buildg: v0.4.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.16.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootle...

v0.23.0

This release features nerdctl compose run and nerdctl run --privileged-without-host-devices (safe privileged containers with Kata)

Changes

• nerdctl compose run:

  • Add nerdctl compose run command (#1340, #1351 thanks to @minuk-dev)

• nerdctl.toml:

  • Support setting experimental = false to disable experimental features. The default value remains true. Also settable via an env var $NERDCTL_EXPERIMENTAL=(true|false) (#1327, thanks to @fatelei)

• nerdctl run:

  • Add --privileged-without-host-devices flag, for safe privileged containers with Kata (#1291, thanks to @liubin)
  • Support 3rd party log URIs in --log-driver (#1354, thanks to @manugupt1)
  • Fix incompatibility with crun (#1352)

• nerdctl images:

  • Add --filter flag (#1307, thanks to @Zheaoli)

• nerdctl ps:

  • Add --filter flag (#1342, thanks to @yuchanns)

• nerdctl stats:

  • Fix output (#1298, thanks to @fahedouch)

• nerdctl network prune:

  • Exclude the default bridge network (#1304, thanks to @tal66)

• nerdctl volume ls:

  • Add --size flag (#1292, thanks to @manugupt1)
  • Add --filter flag (#1331, thanks to @yuchanns)

• nerdctl login:

  • Make the ServerAddress optional for the main docker registry (#1315, thanks to @ericpromislow, @ktock)

• nerdctl --help:

  • Simplify nerdctl --help (#135)

• Misc:

  • Update Go (1.19) (#1319)

• nerdctl-full:

  • Update containerd (1.6.8), runc (1.1.4), BuildKit (0.10.4), Kubo (0.15.0), bypass4netns (0.3.0) buildg (0.4.1) (#1317, #1346 #1348, #1365, thanks to @ktock)

Full changes: https://github.com/containerd/nerdctl/milestone/22?closed=1
Thanks to @Zheaoli @ericpromislow @fatelei @junnplus @liubin @ktock @manugupt1 @minuk-dev @tal66 @thaJeztah @yuchanns

About the binaries

• Minimal (nerdctl-0.23.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.23.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.23.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  28233728 2022-09-11 10:57 nerdctl
-rwxr-xr-x root/root     21562 2022-09-11 10:56 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-09-11 10:56 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.23.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-09-11 11:11 bin/
-rwxr-xr-x 0/0        25370211 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0        39685842 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3602648 2022-09-11 11:06 bin/bypass4netns
-rwxr-xr-x 0/0         5107712 2022-09-11 11:07 bin/bypass4netnsd
-rwxr-xr-x 0/0        54672856 2022-09-11 11:09 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-09-11 11:07 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-09-11 11:07 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9760768 2022-09-11 11:09 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20117912 2022-09-11 11:11 bin/ctd-decoder
-rwxr-xr-x 0/0        27905496 2022-09-11 11:08 bin/ctr
-rwxr-xr-x 0/0        28833045 2022-09-11 11:11 bin/ctr-enc
-rwxr-xr-x 0/0        30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-09-11 11:11 bin/fuse-overlayfs
-rwxr-xr-x 0/0        78751848 2022-08-30 10:50 bin/ipfs
-rwxr-xr-x 0/0        28200960 2022-09-11 11:07 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13780440 2022-09-11 11:07 bin/runc
-rwxr-xr-x 0/0         2338128 2022-09-11 11:11 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-09-11 11:11 bin/tini
drwxr-xr-x 0/0               0 2022-09-11 11:11 lib/
drwxr-xr-x 0/0               0 2022-09-11 11:11 lib/systemd/
drwxr-xr-x 0/0               0 2022-09-11 11:11 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-09-11 11:11 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-09-11 11:06 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-09-11 11:11 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-09-11 11:11 libexec/
drwxrwxr-x 0/0               0 2022-09-11 11:11 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-09-11 11:07 share/
drwxr-xr-x 0/0               0 2022-09-11 11:07 share/doc/
drwxr-xr-x 0/0               0 2022-09-11 11:07 share/doc/nerdctl/
-rw-r--r-- 0/0           68994 2022-09-11 10:56 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-09-11 11:07 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-09-11 10:56 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-09-11 10:56 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-09-11 10:56 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-09-11 10:56 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3030 2022-09-11 10:56 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-09-11 10:56 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-09-11 10:56 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-09-11 10:56 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-09-11 10:56 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-09-11 10:56 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-09-11 10:56 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13268 2022-09-11 10:56 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-09-11 10:56 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            1509 2022-09-11 10:56 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-09-11 10:56 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1308 2022-09-11 10:56 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-09-11 10:56 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5090 2022-09-11 10:56 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-09-11 10:56 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-09-11 11:11 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1150 2022-09-11 11:11 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5816 2022-09-11 11:11 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.23.0
- containerd: v1.6.8
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.4
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.15.0
- Tini: v0.19.0
- buildg: v0.4.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.15.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/3031541666

The sha256sum of the SHA256SUMS file itself is `0618af869428510f9cd77405b44535305fb02da9be03e5e4...

v0.22.2

Changes

Fix can't get final child's PID from pipe error on rootless (v0.22.1 regression) (#1289)

Full changes: https://github.com/containerd/nerdctl/milestone/21?closed=1

About the binaries

• Minimal (nerdctl-0.22.2-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.22.2-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.22.2-linux-amd64.tar.gz

-rwxr-xr-x root/root  27807744 2022-08-01 17:54 nerdctl
-rwxr-xr-x root/root     21562 2022-08-01 17:53 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-08-01 17:53 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.22.2-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-08-01 18:08 bin/
-rwxr-xr-x 0/0        25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0             349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0        39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339160 2022-08-01 18:02 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-08-01 18:03 bin/bypass4netnsd
-rwxr-xr-x 0/0        54217720 2022-08-01 18:05 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-08-01 18:03 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-08-01 18:03 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9650176 2022-08-01 18:05 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19699072 2022-08-01 18:08 bin/ctd-decoder
-rwxr-xr-x 0/0        27528120 2022-08-01 18:04 bin/ctr
-rwxr-xr-x 0/0        28345742 2022-08-01 18:08 bin/ctr-enc
-rwxr-xr-x 0/0        30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-08-01 18:08 bin/fuse-overlayfs
-rwxr-xr-x 0/0        78390320 2022-07-21 05:33 bin/ipfs
-rwxr-xr-x 0/0        27779072 2022-08-01 18:03 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13371904 2022-08-01 18:03 bin/runc
-rwxr-xr-x 0/0         2338128 2022-08-01 18:08 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-08-01 18:08 bin/tini
drwxr-xr-x 0/0               0 2022-08-01 18:07 lib/
drwxr-xr-x 0/0               0 2022-08-01 18:07 lib/systemd/
drwxr-xr-x 0/0               0 2022-08-01 18:07 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-08-01 18:07 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-08-01 18:02 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-08-01 18:07 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-08-01 18:07 libexec/
drwxrwxr-x 0/0               0 2022-08-01 18:07 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-08-01 18:03 share/
drwxr-xr-x 0/0               0 2022-08-01 18:03 share/doc/
drwxr-xr-x 0/0               0 2022-08-01 18:03 share/doc/nerdctl/
-rw-r--r-- 0/0           65820 2022-08-01 17:53 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-08-01 18:03 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-08-01 17:53 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-08-01 17:53 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-08-01 17:53 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-08-01 17:53 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-08-01 17:53 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-08-01 17:53 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-08-01 17:53 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-08-01 17:53 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-08-01 17:53 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-08-01 17:53 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-08-01 17:53 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13268 2022-08-01 17:53 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-08-01 17:53 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            1509 2022-08-01 17:53 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-08-01 17:53 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1308 2022-08-01 17:53 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-08-01 17:53 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-08-01 17:53 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-08-01 17:53 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-08-01 18:08 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1150 2022-08-01 18:08 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5898 2022-08-01 18:08 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.22.2
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.14.0
- Tini: v0.19.0
- buildg: v0.3.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.14.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2776790958

The sha256sum of the SHA256SUMS file itself is 9ca098ad449dd434344bcac3bec8ff47d60ae01ee08dbaea190c3f8a5776dfd8 .

v0.22.1

⚠️ This release was found to have a regression on certain host distributions including Fedora and Arch Linux: #1288
The regression was fixed in v0.22.2.

---

This release finally implements nerdctl system prune (with --all).
Also fixes an issue that is related to logging in to Docker Hub via Rancher Desktop (#1270).

Changes

• nerdctl system prune:

  • Add nerdctl system prune command. Needs --all. (#1264, thanks to @junnplus)

• nerdctl network prune:

  • Add nerdctl nwtwork prune command. (#1253, thanks to @junnplus)

• nerdctl run:

  • Add --oom-score-adj flag (#1255, thanks to @manugupt1)
  • Support --network=container:<container> for sharing netns (#1214, thanks to @t1anz0ng)

• nerdctl pull:

  • Pass https://index.docker.io/v1/ to GetAuthConfig() for Docker Hub (#1270, thanks to @jandubois).
    Fixes rancher-sandbox/rancher-desktop#2553 .

• nerdctl volume inspect:

  • Add --size flag to show the volume size (#1269, thanks to @manugupt1)

• nerdctl container inspect:

  • Show labels (#1265, thanks to @t1anz0ng)

• nerdctl ps:

  • Show labels (#1260, thanks to @minik-dev)

• nerdctl-full:

  • go-ipfs (0.13.1) was replaced with Kubo (0.14.0) (#1286)

Full changes: https://github.com/containerd/nerdctl/milestone/20?closed=1
Thanks to @Zheaoli @fahedouch @jandubois @junnplus @liubin @manugupt1 @minik-dev @t1anz0ng @tosonoe

About the binaries

• Minimal (nerdctl-0.22.1-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.22.1-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.22.1-linux-amd64.tar.gz

-rwxr-xr-x root/root  27807744 2022-08-01 14:30 nerdctl
-rwxr-xr-x root/root     21562 2022-08-01 14:28 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-08-01 14:28 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.22.1-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-08-01 14:46 bin/
-rwxr-xr-x 0/0        25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0             349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0        39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-08-01 14:40 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-08-01 14:40 bin/bypass4netnsd
-rwxr-xr-x 0/0        54205432 2022-08-01 14:42 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-08-01 14:41 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-08-01 14:41 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9650176 2022-08-01 14:43 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19699000 2022-08-01 14:46 bin/ctd-decoder
-rwxr-xr-x 0/0        27519928 2022-08-01 14:42 bin/ctr
-rwxr-xr-x 0/0        28347894 2022-08-01 14:46 bin/ctr-enc
-rwxr-xr-x 0/0        30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-08-01 14:46 bin/fuse-overlayfs
-rwxr-xr-x 0/0        78390320 2022-07-21 05:33 bin/ipfs
-rwxr-xr-x 0/0        27774976 2022-08-01 14:41 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13367256 2022-08-01 14:41 bin/runc
-rwxr-xr-x 0/0         2338128 2022-08-01 14:46 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-08-01 14:46 bin/tini
drwxr-xr-x 0/0               0 2022-08-01 14:45 lib/
drwxr-xr-x 0/0               0 2022-08-01 14:45 lib/systemd/
drwxr-xr-x 0/0               0 2022-08-01 14:45 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-08-01 14:45 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-08-01 14:39 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-08-01 14:45 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-08-01 14:45 libexec/
drwxrwxr-x 0/0               0 2022-08-01 14:45 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-08-01 14:41 share/
drwxr-xr-x 0/0               0 2022-08-01 14:41 share/doc/
drwxr-xr-x 0/0               0 2022-08-01 14:41 share/doc/nerdctl/
-rw-r--r-- 0/0           65820 2022-08-01 14:28 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-08-01 14:41 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-08-01 14:28 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-08-01 14:28 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-08-01 14:28 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-08-01 14:28 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-08-01 14:28 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-08-01 14:28 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-08-01 14:28 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-08-01 14:28 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-08-01 14:28 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-08-01 14:28 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-08-01 14:28 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13268 2022-08-01 14:28 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-08-01 14:28 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            1509 2022-08-01 14:28 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-08-01 14:28 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1308 2022-08-01 14:28 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-08-01 14:28 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-08-01 14:28 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-08-01 14:28 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-08-01 14:46 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1150 2022-08-01 14:46 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5898 2022-08-01 14:46 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.22.1
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.14.0
- Tini: v0.19.0
- buildg: v0.3.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.14.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2775572569

The sha256sum of the SHA256SUMS file itself is 19569a99eba413ca43a8b1edaf6964a791503bfe2452a547ff2f94568acd38d5 .

v0.22.0

This release adds nerdctl (container|image|volume) prune commands. No support for nerdctl (network|system) prune yet.

This release also introduces the support for Nydus Snapshotter and Containerfile.

Changes

• nerdctl container prune

  • Add nerdctl container prune command (#1180, thanks to @junnplus ; also thanks to @Shikachuu (#806) and @click2cloud-lamda (#997))

• nerdctl image prune

  • Add nerdctl image prune command (#1194, thanks to @junnplus ; also thanks to @Shikachuu (#806))

• nerdctl volume prune:

  • Add nerdctl volume prune command (#1208, thanks to @junnplus ; also thanks to @click2cloud-lamda (#997))

• nerdctl run:

  • Support Nydus Snapshotter (#1163, thanks to @loheagn)
  • Add --group-add flag (#1131, thanks to @junnplus)
  • Add --dns-search and --dns-opt flags (#1169, thanks to @junnplus)
  • Add --stop-signal and --stop-timeout flags (#1171, thanks to @junnplus)
  • Add --kernel-memory flag (NOP) (#1197, thanks to @ningmingxiao)

• nerdctl update:

  • Add --blkio-weight flag (#1205, thanks to @ningmingxiao)

• nerdctl build:

  • Fallback to Containerfile when Dockerfile is not present (#1219, thanks to @manugupt1)
  • Allow specifying multiple tags (#1173, thanks to @manugupt1)

• nerdctl images:

  • Add --names flag (#1164, thanks to @junnplus)

• nerdctl ps:

  • Add --size flag (#1177, thanks to @liubin)

• nerdctl version:

  • Display buildctl and runc version (#1209, #1229, thanks to @manugupt1)

• docs:

  • Add docs/nydus.md (#1198, thanks to @imeoer)
  • Add docs/overlaybd.md (#1212, thanks to @BigVan)

• nerdctl-full:

  • Update imgcrypt (1.1.6), stargz-snapshotter (0.12.0), IPFS (0.13.1), buildg (0.3.0) (#1227)

• MAINTAINERS:

  • Add Zheao Li @Zheaoli as a REVIEWER

Full changes: https://github.com/containerd/nerdctl/milestone/19?closed=1
Thanks to @BigVan @TianZong48 @Shikachuu @Zheaoli @click2cloud-lamda @fahedouch @ilmanzo @imeoer @junnplus @liubin @loheagn @manugupt1 @ningmingxiao @sondavidb

About the binaries

• Minimal (nerdctl-0.22.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.22.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.22.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27832320 2022-07-17 02:42 nerdctl
-rwxr-xr-x root/root     21562 2022-07-17 02:40 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-07-17 02:40 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.22.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-07-17 02:57 bin/
-rwxr-xr-x 0/0        25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0             349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0        39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-07-17 02:51 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-07-17 02:52 bin/bypass4netnsd
-rwxr-xr-x 0/0        54205432 2022-07-17 02:54 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-07-17 02:53 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-07-17 02:53 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9650176 2022-07-17 02:54 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19699024 2022-07-17 02:57 bin/ctd-decoder
-rwxr-xr-x 0/0        27519928 2022-07-17 02:53 bin/ctr
-rwxr-xr-x 0/0        28352054 2022-07-17 02:57 bin/ctr-enc
-rwxr-xr-x 0/0        30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-07-17 02:57 bin/fuse-overlayfs
-rwxr-xr-x 0/0        77796944 2022-07-06 15:25 bin/ipfs
-rwxr-xr-x 0/0        27803648 2022-07-17 02:53 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13367256 2022-07-17 02:53 bin/runc
-rwxr-xr-x 0/0         2338128 2022-07-17 02:57 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-07-17 02:57 bin/tini
drwxr-xr-x 0/0               0 2022-07-17 02:56 lib/
drwxr-xr-x 0/0               0 2022-07-17 02:56 lib/systemd/
drwxr-xr-x 0/0               0 2022-07-17 02:57 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-07-17 02:57 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-07-17 02:51 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-07-17 02:57 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-07-17 02:56 libexec/
drwxrwxr-x 0/0               0 2022-07-17 02:56 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-07-17 02:53 share/
drwxr-xr-x 0/0               0 2022-07-17 02:53 share/doc/
drwxr-xr-x 0/0               0 2022-07-17 02:53 share/doc/nerdctl/
-rw-r--r-- 0/0           64913 2022-07-17 02:40 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-07-17 02:53 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-07-17 02:40 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-07-17 02:40 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-07-17 02:40 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-07-17 02:40 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-07-17 02:40 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-07-17 02:40 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-07-17 02:40 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-07-17 02:40 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-07-17 02:40 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-07-17 02:40 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-07-17 02:40 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13215 2022-07-17 02:40 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-07-17 02:40 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            1509 2022-07-17 02:40 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-07-17 02:40 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1308 2022-07-17 02:40 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-07-17 02:40 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-07-17 02:40 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-07-17 02:40 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-07-17 02:57 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1146 2022-07-17 02:57 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5898 2022-07-17 02:57 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.22.0
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.13.1
- Tini: v0.19.0
- buildg: v0.3.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.13.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.s...

v0.21.0

This release adds new logging drivers and fix the regression of nerdctl compose up (#1071).

Changes

• nerdctl run:

  • Add --log-driver=journald (#1062, thanks to @fahedouch)
  • Add --log-driver=fluentd (#1073, thanks to @Zheaoli)
  • Add --oom-kill-disable flag (#1111, thanks to @ningmingxiao
  • Add --memory-swap flag (#1110, thanks to @ningmingxiao)
  • Add --memory-reservation flag (#1122, thanks to @ningmingxiao)
  • Add --memory-swappiness flag (#1122, thanks to @ningmingxiao)
  • Add --umask flag (#1140, thanks to @ningmingxiao)

• nerdctl compose up:

  • Fix failed to open "...-json.log" error (#1071, #1132)
  • Enable entrypoint as stringArray (#1070, thanks to @fahedouch)

• nerdctl start:

  • Add --attach flag (#1108, thanks to @mattfarina)

• nerdctl load:

  • Fail quickly when the stdin is empty (#1137, thanks to @manugupt1)

• nerdctl-full:

  • Update containerd (1.6.6), runc (1.1.3), fuse-overlayfs (1.9), IPFS (0.13.0), buildg (0.2.0) (#1095, #1096, #1120)

• Misc:

  • Persist the built-in default network config as a file (#1092, thanks to @junnplus)
  • Fix FreeBSD build (#1093, thanks to @akhramov)

Full changes: https://github.com/containerd/nerdctl/milestone/18?closed=1
Thanks to @Zheaoli @akhramov @fahedouch @gaffneyd4 @ktock @junnplus @manugupt1 @mattfarina @ningmingxiao

About the binaries

• Minimal (nerdctl-0.21.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.21.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.21.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  26992640 2022-06-18 16:01 nerdctl
-rwxr-xr-x root/root     21562 2022-06-18 16:00 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-06-18 16:00 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.21.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-06-18 16:18 bin/
-rwxr-xr-x 0/0        25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23040000 2022-06-01 03:22 bin/buildg
-rwxr-xr-x 0/0             349 2022-06-01 03:22 bin/buildg.sh
-rwxr-xr-x 0/0        39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-06-18 16:12 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-06-18 16:12 bin/bypass4netnsd
-rwxr-xr-x 0/0        54205432 2022-06-18 16:15 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-06-18 16:13 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-06-18 16:13 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9650176 2022-06-18 16:15 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19701064 2022-06-18 16:18 bin/ctd-decoder
-rwxr-xr-x 0/0        27519928 2022-06-18 16:14 bin/ctr
-rwxr-xr-x 0/0        28366414 2022-06-18 16:18 bin/ctr-enc
-rwxr-xr-x 0/0        29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0         1778112 2022-06-18 16:18 bin/fuse-overlayfs
-rwxr-xr-x 0/0        77796328 2022-06-09 15:10 bin/ipfs
-rwxr-xr-x 0/0        26959872 2022-06-18 16:13 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13367344 2022-06-18 16:13 bin/runc
-rwxr-xr-x 0/0         2338128 2022-06-18 16:18 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-06-18 16:18 bin/tini
drwxr-xr-x 0/0               0 2022-06-18 16:17 lib/
drwxr-xr-x 0/0               0 2022-06-18 16:17 lib/systemd/
drwxr-xr-x 0/0               0 2022-06-18 16:17 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-06-18 16:17 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-06-18 16:11 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-06-18 16:17 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-06-18 16:17 libexec/
drwxrwxr-x 0/0               0 2022-06-18 16:17 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-06-18 16:13 share/
drwxr-xr-x 0/0               0 2022-06-18 16:13 share/doc/
drwxr-xr-x 0/0               0 2022-06-18 16:13 share/doc/nerdctl/
-rw-r--r-- 0/0           71127 2022-06-18 16:00 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-06-18 16:13 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-06-18 16:00 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-06-18 16:00 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-06-18 16:00 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-06-18 16:00 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-06-18 16:00 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-06-18 16:00 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-06-18 16:00 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-06-18 16:00 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-06-18 16:00 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-06-18 16:00 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-06-18 16:00 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13215 2022-06-18 16:00 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-06-18 16:00 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3277 2022-06-18 16:00 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0           15626 2022-06-18 16:00 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-06-18 16:00 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-06-18 16:00 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-06-18 16:18 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1146 2022-06-18 16:18 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5694 2022-06-18 16:18 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.21.0
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.13.0
- Tini: v0.19.0
- buildg: v0.2.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.13.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2520980983

The sha256sum of the SHA256SUMS file itself is 719f1ccd19d0f4905d86c5d43070d9659a17378f16ef547f457514cb4e45b66a .

v0.20.0

This release adds the nerdctl builder debug command for interactive debugging of Dockerfile (#1049, thanks to @ktock).
See https://github.com/containerd/nerdctl/blob/v0.20.0/docs/builder-debug.md

Changes

• nerdctl builder debug:
  • Add nerdctl builder debug command for interactive debugging of Dockerfile (#1049, thanks to @ktock)
• nerdctl run:
  • Add restart types on-failure, unless-stopped (#999, thanks to @fahedouch)
  • Add --log-opt flag (#959, thanks to @fahedouch)
  • Add --ipc flag (#1057, thanks to @89luca98)
  • Add bind-nonrecursive mount option (#1044, thanks to @junnplus)
  • -t no longer needs -i to be specified together, and vice versa (#1014)
• nerdctl rename:
  • Add nerdctl rename command (#1020, thanks to @junnplus)
• nerdctl info:
  • Add --mode=native flag to show full plugin info (#1011)
• nerdctl-full:
  • Update containerd (1.6.4), runc (1.1.2), BuildKit (0.10.3), slirp4netns (1.2.0), RootlessKit (1.0.1), (#1012, #1025, #1038, #1063)
• Others:
  • Initial support for RISC-V (#1037). Needs runc 1.2 (opencontainers/runc#3446), containerd 1.7 (containerd/containerd#6882).

All changes: https://github.com/containerd/nerdctl/milestone/17?closed=1
Thanks to @89luca89 @Rajpratik71 @fahedouch @junnplus @ktock

About the binaries

• Minimal (nerdctl-0.20.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.20.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.20.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  26677248 2022-05-17 08:13 nerdctl
-rwxr-xr-x root/root     21562 2022-05-17 08:12 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-05-17 08:12 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.20.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-05-17 08:28 bin/
-rwxr-xr-x 0/0        25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        22855680 2022-05-12 09:42 bin/buildg
-rwxr-xr-x 0/0             349 2022-05-12 09:42 bin/buildg.sh
-rwxr-xr-x 0/0        39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-05-17 08:22 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-05-17 08:23 bin/bypass4netnsd
-rwxr-xr-x 0/0        54197208 2022-05-17 08:25 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-05-17 08:23 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-05-17 08:23 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9650176 2022-05-17 08:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19500834 2022-05-17 08:28 bin/ctd-decoder
-rwxr-xr-x 0/0        27515800 2022-05-17 08:24 bin/ctr
-rwxr-xr-x 0/0        28264703 2022-05-17 08:28 bin/ctr-enc
-rwxr-xr-x 0/0        29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0         2461616 2022-05-17 08:28 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67865136 2022-04-08 20:57 bin/ipfs
-rwxr-xr-x 0/0        26644480 2022-05-17 08:23 bin/nerdctl
-rwxr-xr-x 0/0         9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0        10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0        13365448 2022-05-17 08:23 bin/runc
-rwxr-xr-x 0/0         2338128 2022-05-17 08:28 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-05-17 08:28 bin/tini
drwxr-xr-x 0/0               0 2022-05-17 08:27 lib/
drwxr-xr-x 0/0               0 2022-05-17 08:27 lib/systemd/
drwxr-xr-x 0/0               0 2022-05-17 08:27 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-05-17 08:27 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-05-17 08:22 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-05-17 08:27 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-05-17 08:27 libexec/
drwxrwxr-x 0/0               0 2022-05-17 08:27 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-05-17 08:23 share/
drwxr-xr-x 0/0               0 2022-05-17 08:23 share/doc/
drwxr-xr-x 0/0               0 2022-05-17 08:23 share/doc/nerdctl/
-rw-r--r-- 0/0           68844 2022-05-17 08:12 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-05-17 08:23 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-05-17 08:12 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2673 2022-05-17 08:12 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-05-17 08:12 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1927 2022-05-17 08:12 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-05-17 08:12 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-05-17 08:12 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-05-17 08:12 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             598 2022-05-17 08:12 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-05-17 08:12 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1306 2022-05-17 08:12 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-05-17 08:12 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13215 2022-05-17 08:12 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-05-17 08:12 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3277 2022-05-17 08:12 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0           14159 2022-05-17 08:12 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-05-17 08:12 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-05-17 08:12 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-05-17 08:28 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1150 2022-05-17 08:28 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5694 2022-05-17 08:28 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.20.0
- containerd: v1.6.4
- runc: v1.1.2
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.2
- Tini: v0.19.0
- buildg: v0.0.3

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.2/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2337225755

The sha256sum of the SHA256SUMS file itself is 706fab96ae0fd7d859045bbb991a96fcc3658c6a20af596f237a88a70866d7f5 .

v0.19.0

This release finally implements the long-wanted nerdctl cp.

Changes

• nerdctl cp:

  • Add nerdctl cp command (#643, #995, thanks to @fahedouch)

• nerdctl run:

  • seccomp: relax restrictions depending on --cap-add (#977)
  • Add --init flag for enabling tini (#948, thanks to @Zheaoli)

• nerdctl build:

  • Fix content digest ... not found for multi-platform images (#952, thanks to @ktock)

• nerdctl push:

  • Add --ipfs-address flag to push to a remote IPFS node (#994, thanks to @aledbf)

• nerdctl inspect:

  • Add --type=(container|image) flag (#964, thanks to @89luca89)

• nerdctl container inspect:

  • Add Mounts field for Docker compatibility (#822, thanks to @liubin)

• nerdctl image inspect:

  • Fix the format of Created field for Docker compatibility (#944, thanks to @knqyf263)

• nerdctl volume rm:

  • Refuse removing volumes in use (#974, thanks to @click2cloud-lamda)

• nerdctl-full:

  • Update runc (1.1.1), BuildKit (0.10.1), stargz-snapshotter (0.11.4), IPFS (0.12.2) (#954, #967, #992)
  • Now nerdctl-<VERSION>-go-mod-vendor.tar.gz is attached to the release artifact, as a backup of go mod vendor (#991, but currently broken: #1005)

• GHCR:

  • Push a demo image to ghcr.io/containerd/nerdctl (#978, thanks to @Rajpratik71)

Full changes: https://github.com/containerd/nerdctl/milestone/16?closed=1
Thanks to @89luca89 @Rajpratik71 @Zheaoli @aledbf @click2cloud-lamda @fahedouch @knqyf263 @ktock @liubin

About the binaries

• Minimal (nerdctl-0.19.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.19.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.19.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27578368 2022-04-22 04:03 nerdctl
-rwxr-xr-x root/root     21562 2022-04-22 04:02 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-04-22 04:02 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.19.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-04-22 04:16 bin/
-rwxr-xr-x 0/0        25371420 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        39651613 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-04-22 04:11 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-04-22 04:11 bin/bypass4netnsd
-rwxr-xr-x 0/0        54127384 2022-04-22 04:13 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21562 2022-04-22 04:11 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-04-22 04:11 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9646080 2022-04-22 04:14 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19512431 2022-04-22 04:16 bin/ctd-decoder
-rwxr-xr-x 0/0        27503416 2022-04-22 04:13 bin/ctr
-rwxr-xr-x 0/0        28249236 2022-04-22 04:16 bin/ctr-enc
-rwxr-xr-x 0/0        29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0         2461616 2022-04-22 04:16 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67865136 2022-04-08 20:57 bin/ipfs
-rwxr-xr-x 0/0        27545600 2022-04-22 04:11 bin/nerdctl
-rwxr-xr-x 0/0         9491380 2022-03-25 10:40 bin/rootlessctl
-rwxr-xr-x 0/0        10907799 2022-03-25 10:40 bin/rootlesskit
-rwxr-xr-x 0/0        13365128 2022-04-22 04:12 bin/runc
-rwxr-xr-x 0/0         3669824 2022-04-22 04:16 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-04-22 04:16 bin/tini
drwxr-xr-x 0/0               0 2022-04-22 04:15 lib/
drwxr-xr-x 0/0               0 2022-04-22 04:15 lib/systemd/
drwxr-xr-x 0/0               0 2022-04-22 04:16 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-04-22 04:16 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-04-22 04:11 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-04-22 04:16 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-04-22 04:15 libexec/
drwxrwxr-x 0/0               0 2022-04-22 04:16 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-04-22 04:11 share/
drwxr-xr-x 0/0               0 2022-04-22 04:11 share/doc/
drwxr-xr-x 0/0               0 2022-04-22 04:11 share/doc/nerdctl/
-rw-r--r-- 0/0           66853 2022-04-22 04:02 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-04-22 04:11 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-04-22 04:02 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            3996 2022-04-22 04:02 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1927 2022-04-22 04:02 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-04-22 04:02 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-04-22 04:02 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2359 2022-04-22 04:02 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             537 2022-04-22 04:02 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-04-22 04:02 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1306 2022-04-22 04:02 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2405 2022-04-22 04:02 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13215 2022-04-22 04:02 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-04-22 04:02 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3277 2022-04-22 04:02 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0           14159 2022-04-22 04:02 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-04-22 04:02 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-04-22 04:02 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-04-22 04:16 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1135 2022-04-22 04:16 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5425 2022-04-22 04:16 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.19.0
- containerd: v1.6.2
- runc: v1.1.1
- CNI plugins: v1.1.1
- BuildKit: v0.10.1
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.0
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.2
- Tini: v0.19.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.2/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2205662252

The sha256sum of the SHA256SUMS file itself is 642cbab3f3d3c5f475ea9a687b6d70b4a53d5994f99d29d2629f9e7c6d0ddc6a .

v0.18.0

nerdctl build now supports local images in FROM ... lines of a Dockerfile, when BuildKit (>= 0.10) is configured to use containerd worker.

Changes

• nerdctl build:

  • Support using containerd worker, for efficiency and for supporting local base images (#858 #928, thanks to @ktock)

• nerdctl network create:

  • Switch away from CNI isolation plugin to firewall plugin (>= 1.1.0), with ingressPolicy (#838). nerdctl still uses the deprecated isolation plugin when it is installed. It is highly recommended to uninstall isolation plugin and install firewall plugin (>= 1.1.0) instead. The firewall plugin is included in the official CNI plugins.

• nerdctl run:

  • Support automatic host port assignment for nerdctl run -p (#824, thanks to @Zheaoli)
  • Add --ip option (#896 #926, thanks to @Zheaoli)

• nerdctl namespace:

  • Add nerdctl namespace (create|inspect|remove|update) commands (#874, thanks to @ningmingxiao)

• nerdctl push:

  • Add --allow-nondistributable-artifacts option (#803, thanks to @cpuguy83)

• Misc:

  • Update containerd library to 1.6.2 (#927). Contains fix for CVE-2022-24769: "Default inheritable capabilities for linux container should be empty" (low severity)
  • Update the build pipeline to use Go 1.18 (#914, thanks to @junnplus)

• nerdctl-full:

  • Update containerd (1.6.2), CNI plugins (1.1.1), stargz-snapshotter (0.11.3), IPFS (0.12.1), RootlessKit (1.0.0), imgcrypt (1.1.4) (#872 #921 #927 #939)

Full changes: https://github.com/containerd/nerdctl/milestone/15?closed=1
Thanks to @junnplus @Zheaoli @cpuguy83 @fahedouch @ktock @ningmingxiao

About the binaries

• Minimal (nerdctl-0.18.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.18.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.18.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27471872 2022-03-25 13:09 nerdctl
-rwxr-xr-x root/root     21502 2022-03-25 13:09 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      6972 2022-03-25 13:09 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.18.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-03-25 13:21 bin/
-rwxr-xr-x 0/0        25356617 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        39639750 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-03-25 13:16 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-03-25 13:17 bin/bypass4netnsd
-rwxr-xr-x 0/0        52210360 2022-03-25 13:19 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21502 2022-03-25 13:17 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            6972 2022-03-25 13:17 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9646080 2022-03-25 13:19 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        58658840 2022-03-16 02:19 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19495886 2022-03-25 13:21 bin/ctd-decoder
-rwxr-xr-x 0/0        26135224 2022-03-25 13:18 bin/ctr
-rwxr-xr-x 0/0        28255212 2022-03-25 13:21 bin/ctr-enc
-rwxr-xr-x 0/0        28884376 2022-03-16 02:19 bin/ctr-remote
-rwxr-xr-x 0/0         2461616 2022-03-25 13:21 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67859168 2022-03-17 21:18 bin/ipfs
-rwxr-xr-x 0/0        27439104 2022-03-25 13:17 bin/nerdctl
-rwxr-xr-x 0/0         9491380 2022-03-25 10:40 bin/rootlessctl
-rwxr-xr-x 0/0        10907799 2022-03-25 10:40 bin/rootlesskit
-rwxr-xr-x 0/0        13365008 2022-03-25 13:17 bin/runc
-rwxr-xr-x 0/0         3669824 2022-03-25 13:21 bin/slirp4netns
drwxr-xr-x 0/0               0 2022-03-25 13:21 lib/
drwxr-xr-x 0/0               0 2022-03-25 13:21 lib/systemd/
drwxr-xr-x 0/0               0 2022-03-25 13:21 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-03-25 13:21 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-03-25 13:16 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-03-25 13:21 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-03-25 13:21 libexec/
drwxrwxr-x 0/0               0 2022-03-25 13:21 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-03-25 13:17 share/
drwxr-xr-x 0/0               0 2022-03-25 13:17 share/doc/
drwxr-xr-x 0/0               0 2022-03-25 13:17 share/doc/nerdctl/
-rw-r--r-- 0/0           65691 2022-03-25 13:09 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-03-25 13:17 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-03-25 13:09 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            3996 2022-03-25 13:09 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1927 2022-03-25 13:09 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-03-25 13:09 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3192 2022-03-25 13:09 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2359 2022-03-25 13:09 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             537 2022-03-25 13:09 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-03-25 13:09 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1306 2022-03-25 13:09 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2405 2022-03-25 13:09 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13215 2022-03-25 13:09 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-03-25 13:09 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3277 2022-03-25 13:09 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0           14159 2022-03-25 13:09 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-03-25 13:09 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4918 2022-03-25 13:09 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-03-25 13:21 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1039 2022-03-25 13:21 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5348 2022-03-25 13:21 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.18.0
- containerd: v1.6.2
- runc: v1.1.0
- CNI plugins: v1.1.1
- BuildKit: v0.10.0
- Stargz Snapshotter: v0.11.3
- imgcrypt: v1.1.4
- RootlessKit: v1.0.0
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2040124371

The sha256sum of the SHA256SUMS file itself is 32ac32d88716610d582546a6b26e6443ac80746e0d635f987bfb5d5ab4fe5d6e .

v0.18.0-beta.0

Changes

(To be documented)

About the binaries

• Minimal (nerdctl-0.18.0-beta.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-0.18.0-beta.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.18.0-beta.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27467776 2022-03-24 10:04 nerdctl
-rwxr-xr-x root/root     21502 2022-03-24 10:02 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      6972 2022-03-24 10:02 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.18.0-beta.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-03-24 10:19 bin/
-rwxr-xr-x 0/0        25356617 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        39639750 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3339352 2022-03-24 10:13 bin/bypass4netns
-rwxr-xr-x 0/0         4984832 2022-03-24 10:13 bin/bypass4netnsd
-rwxr-xr-x 0/0        52210360 2022-03-24 10:16 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21502 2022-03-24 10:14 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            6972 2022-03-24 10:14 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9646080 2022-03-24 10:16 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        58658840 2022-03-16 02:19 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19317280 2022-03-24 10:19 bin/ctd-decoder
-rwxr-xr-x 0/0        26135224 2022-03-24 10:15 bin/ctr
-rwxr-xr-x 0/0        28023937 2022-03-24 10:19 bin/ctr-enc
-rwxr-xr-x 0/0        28884376 2022-03-16 02:19 bin/ctr-remote
-rwxr-xr-x 0/0         2461616 2022-03-24 10:19 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67859168 2022-03-17 21:18 bin/ipfs
-rwxr-xr-x 0/0        27439104 2022-03-24 10:14 bin/nerdctl
-rwxr-xr-x 0/0         9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0        10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0        13365016 2022-03-24 10:14 bin/runc
-rwxr-xr-x 0/0         3669824 2022-03-24 10:19 bin/slirp4netns
drwxr-xr-x 0/0               0 2022-03-24 10:18 lib/
drwxr-xr-x 0/0               0 2022-03-24 10:18 lib/systemd/
drwxr-xr-x 0/0               0 2022-03-24 10:19 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-03-24 10:18 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-03-24 10:12 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-03-24 10:18 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-03-24 10:18 libexec/
drwxrwxr-x 0/0               0 2022-03-24 10:18 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-03-24 10:14 share/
drwxr-xr-x 0/0               0 2022-03-24 10:14 share/doc/
drwxr-xr-x 0/0               0 2022-03-24 10:14 share/doc/nerdctl/
-rw-r--r-- 0/0           65691 2022-03-24 10:02 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-03-24 10:14 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3873 2022-03-24 10:02 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            3996 2022-03-24 10:02 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1848 2022-03-24 10:02 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3062 2022-03-24 10:02 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            3111 2022-03-24 10:02 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2359 2022-03-24 10:02 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             537 2022-03-24 10:02 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           13802 2022-03-24 10:02 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1306 2022-03-24 10:02 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2326 2022-03-24 10:02 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13134 2022-03-24 10:02 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1667 2022-03-24 10:02 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3198 2022-03-24 10:02 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0           14159 2022-03-24 10:02 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5368 2022-03-24 10:02 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4835 2022-03-24 10:02 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-03-24 10:19 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1047 2022-03-24 10:19 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5348 2022-03-24 10:19 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.18.0-beta.0
- containerd: v1.6.2
- runc: v1.1.0
- CNI plugins: v1.1.1
- BuildKit: v0.10.0
- Stargz Snapshotter: v0.11.3
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2033548329

The sha256sum of the SHA256SUMS file itself is 8a525c6192ef9f100fc90ae874a883bdcde1d1e8e2da06c66d1b4b65b9a8de4c .