Releases: containerd/nerdctl
v1.6.1
Changes
-
nerdctl network ls
: -
nerdctl image convert
: -
nerdctl compose ps
:- Add
--filter
,--status
,--quiet
,--services
, and--all
flags (#2509, thanks to @tanghaowillow)
- Add
-
Misc:
- CNI: prioritize
/opt/cni/bin
over/usr/lib/cni
(#2541)
- CNI: prioritize
-
nerdctl-full
:- update containerd (1.7.7), slirp4netns (1.2.2), containerd-fuse-overlayfs (1.0.7), Kubo (0.23.0) (#2556)
Full changes: https://github.com/containerd/nerdctl/milestone/32
Thanks to @ginglis13 @henry118 @tanghaowillow @tces1 @testwill @yankay @zhuangqh
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.6.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.6.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.6.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 24752128 2023-10-12 02:15 nerdctl
-rwxr-xr-x root/root 21618 2023-10-12 02:14 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7187 2023-10-12 02:14 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.6.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-10-12 02:26 bin/
-rwxr-xr-x 0/0 27623705 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 53353409 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3788344 2023-10-12 02:22 bin/bypass4netns
-rwxr-xr-x 0/0 5283840 2023-10-12 02:23 bin/bypass4netnsd
-rwxr-xr-x 0/0 57479768 2023-10-12 02:24 bin/containerd
-rwxr-xr-x 0/0 9474048 2023-10-09 21:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21618 2023-10-12 02:24 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7187 2023-10-12 02:24 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12279808 2023-10-12 02:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20397229 2023-10-12 02:26 bin/ctd-decoder
-rwxr-xr-x 0/0 28926368 2023-10-12 02:24 bin/ctr
-rwxr-xr-x 0/0 29367290 2023-10-12 02:26 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1785448 2023-10-12 02:26 bin/fuse-overlayfs
-rwxr-xr-x 0/0 83712312 2023-10-05 17:02 bin/ipfs
-rwxr-xr-x 0/0 24731648 2023-10-12 02:24 bin/nerdctl
-rwxr-xr-x 0/0 10113536 2023-05-30 06:31 bin/rootlessctl
-rwxr-xr-x 0/0 11600435 2023-05-30 06:31 bin/rootlesskit
-rwxr-xr-x 0/0 15042424 2023-10-12 02:23 bin/runc
-rwxr-xr-x 0/0 2346328 2023-10-12 02:26 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-10-12 02:26 bin/tini
drwxr-xr-x 0/0 0 2023-10-12 02:25 lib/
drwxr-xr-x 0/0 0 2023-10-12 02:25 lib/systemd/
drwxr-xr-x 0/0 0 2023-10-12 02:25 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-10-12 02:25 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-10-12 02:22 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-10-12 02:25 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-10-12 02:25 libexec/
drwxrwxr-x 0/0 0 2023-10-12 02:25 libexec/cni/
-rwxr-xr-x 0/0 4016001 2023-05-09 19:53 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4531309 2023-05-09 19:53 libexec/cni/bridge
-rwxr-xr-x 0/0 10816051 2023-05-09 19:53 libexec/cni/dhcp
-rwxr-xr-x 0/0 4171248 2023-05-09 19:53 libexec/cni/dummy
-rwxr-xr-x 0/0 4649749 2023-05-09 19:53 libexec/cni/firewall
-rwxr-xr-x 0/0 4059321 2023-05-09 19:53 libexec/cni/host-device
-rwxr-xr-x 0/0 3444776 2023-05-09 19:53 libexec/cni/host-local
-rwxr-xr-x 0/0 4193323 2023-05-09 19:53 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3514598 2023-05-09 19:53 libexec/cni/loopback
-rwxr-xr-x 0/0 4227193 2023-05-09 19:53 libexec/cni/macvlan
-rwxr-xr-x 0/0 3955775 2023-05-09 19:53 libexec/cni/portmap
-rwxr-xr-x 0/0 4348835 2023-05-09 19:53 libexec/cni/ptp
-rwxr-xr-x 0/0 3716095 2023-05-09 19:53 libexec/cni/sbr
-rwxr-xr-x 0/0 2984504 2023-05-09 19:53 libexec/cni/static
-rwxr-xr-x 0/0 4258344 2023-05-09 19:53 libexec/cni/tap
-rwxr-xr-x 0/0 3603365 2023-05-09 19:53 libexec/cni/tuning
-rwxr-xr-x 0/0 4187498 2023-05-09 19:53 libexec/cni/vlan
-rwxr-xr-x 0/0 3754911 2023-05-09 19:53 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-10-12 02:24 share/
drwxr-xr-x 0/0 0 2023-10-12 02:24 share/doc/
drwxr-xr-x 0/0 0 2023-10-12 02:24 share/doc/nerdctl/
-rw-r--r-- 0/0 12386 2023-10-12 02:14 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-10-12 02:14 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-10-12 02:14 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-10-12 02:14 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-10-12 02:14 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 73625 2023-10-12 02:14 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-10-12 02:14 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-10-12 02:14 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 9128 2023-10-12 02:14 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-10-12 02:14 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-10-12 02:14 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-10-12 02:14 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 884 2023-10-12 02:14 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-10-12 02:14 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-10-12 02:14 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-10-12 02:14 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-10-12 02:14 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-10-12 02:14 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-10-12 02:14 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-10-12 02:14 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15657 2023-10-12 02:14 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-10-12 02:14 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 2020 2023-10-12 02:14 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0 10312 2023-10-12 02:14 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-10-12 02:26 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-10-12 02:26 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6300 2023-10-12 02:26 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.6.1
- containerd: v1.7.7
- runc: v1.1.9
- CNI plugins: v1.3.0
- BuildKit: v0.12.2
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.8
- RootlessKit: v1.1.1
- slirp4netns: v1.2.2
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.13
- containerd-fuse-overlayfs: v1.0.7
- Kubo (IPFS): v0.23.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.2/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.13/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.23.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/6490434410
The sha256sum of the SHA256SUMS file itself is 32242fd892d994e9b041aba52f1de3eb501d008ddb25e2655f696952ed35e35d
.
Release manager: Akihiro Suda (@AkihiroSuda)
v1.6.0
This release improves compatibility with Docker 23, adds the support for pushing SOCI images, and allows running Linux containers on FreeBSD.
Changes
-
nerdctl push
:- Support push with soci (#2467, thanks to @ningziwen)
-
nerdctl compose
: -
nerdctl attach
:- Implement
nerdctl attach
(#2108, thanks to @davidhsingyuchen)
- Implement
-
nerdctl volume create
: -
nerdctl version
:- Fulfill the version field from
debug/buildinfo
to supportgo install
(#2444) - Skip inspecting rootless daemon if the daemon is not running (2514)
- Fulfill the version field from
-
Misc:
-
nerdctl-full
: -
Project:
Full changes: https://github.com/containerd/nerdctl/milestone/29?closed=1
Thanks to
@akhramov
@austinvazquez @davidhsingyuchen @fahedouch @gabriel-samfira @metux @ningziwen @testwill @vsiravar @webwurst @yankay
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.6.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.6.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.6.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24567808 2023-09-19 06:48 nerdctl
-rwxr-xr-x root/root 21618 2023-09-19 06:47 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7187 2023-09-19 06:47 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.6.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-09-19 06:59 bin/
-rwxr-xr-x 0/0 27623705 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 53353409 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3788344 2023-09-19 06:55 bin/bypass4netns
-rwxr-xr-x 0/0 5283840 2023-09-19 06:55 bin/bypass4netnsd
-rwxr-xr-x 0/0 57355480 2023-09-19 06:57 bin/containerd
-rwxr-xr-x 0/0 10432512 2023-05-11 08:23 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21618 2023-09-19 06:57 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7187 2023-09-19 06:57 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12275712 2023-09-19 06:58 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20394184 2023-09-19 06:59 bin/ctd-decoder
-rwxr-xr-x 0/0 28830976 2023-09-19 06:57 bin/ctr
-rwxr-xr-x 0/0 29366269 2023-09-19 06:59 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1785448 2023-09-19 06:59 bin/fuse-overlayfs
-rwxr-xr-x 0/0 83555368 2023-08-08 18:07 bin/ipfs
-rwxr-xr-x 0/0 24539136 2023-09-19 06:57 bin/nerdctl
-rwxr-xr-x 0/0 10113536 2023-05-30 06:31 bin/rootlessctl
-rwxr-xr-x 0/0 11600435 2023-05-30 06:31 bin/rootlesskit
-rwxr-xr-x 0/0 15038440 2023-09-19 06:56 bin/runc
-rwxr-xr-x 0/0 2346328 2023-09-19 06:59 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-09-19 06:59 bin/tini
drwxr-xr-x 0/0 0 2023-09-19 06:58 lib/
drwxr-xr-x 0/0 0 2023-09-19 06:58 lib/systemd/
drwxr-xr-x 0/0 0 2023-09-19 06:58 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-09-19 06:58 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-09-19 06:55 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-09-19 06:58 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-09-19 06:58 libexec/
drwxrwxr-x 0/0 0 2023-09-19 06:58 libexec/cni/
-rwxr-xr-x 0/0 4016001 2023-05-09 19:53 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4531309 2023-05-09 19:53 libexec/cni/bridge
-rwxr-xr-x 0/0 10816051 2023-05-09 19:53 libexec/cni/dhcp
-rwxr-xr-x 0/0 4171248 2023-05-09 19:53 libexec/cni/dummy
-rwxr-xr-x 0/0 4649749 2023-05-09 19:53 libexec/cni/firewall
-rwxr-xr-x 0/0 4059321 2023-05-09 19:53 libexec/cni/host-device
-rwxr-xr-x 0/0 3444776 2023-05-09 19:53 libexec/cni/host-local
-rwxr-xr-x 0/0 4193323 2023-05-09 19:53 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3514598 2023-05-09 19:53 libexec/cni/loopback
-rwxr-xr-x 0/0 4227193 2023-05-09 19:53 libexec/cni/macvlan
-rwxr-xr-x 0/0 3955775 2023-05-09 19:53 libexec/cni/portmap
-rwxr-xr-x 0/0 4348835 2023-05-09 19:53 libexec/cni/ptp
-rwxr-xr-x 0/0 3716095 2023-05-09 19:53 libexec/cni/sbr
-rwxr-xr-x 0/0 2984504 2023-05-09 19:53 libexec/cni/static
-rwxr-xr-x 0/0 4258344 2023-05-09 19:53 libexec/cni/tap
-rwxr-xr-x 0/0 3603365 2023-05-09 19:53 libexec/cni/tuning
-rwxr-xr-x 0/0 4187498 2023-05-09 19:53 libexec/cni/vlan
-rwxr-xr-x 0/0 3754911 2023-05-09 19:53 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-09-19 06:57 share/
drwxr-xr-x 0/0 0 2023-09-19 06:57 share/doc/
drwxr-xr-x 0/0 0 2023-09-19 06:57 share/doc/nerdctl/
-rw-r--r-- 0/0 12386 2023-09-19 06:47 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-09-19 06:47 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-09-19 06:47 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-09-19 06:47 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-09-19 06:47 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 72895 2023-09-19 06:47 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-09-19 06:47 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-09-19 06:47 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 9128 2023-09-19 06:47 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-09-19 06:47 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-09-19 06:47 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-09-19 06:47 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 884 2023-09-19 06:47 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-09-19 06:47 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-09-19 06:47 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-09-19 06:47 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-09-19 06:47 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-09-19 06:47 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-09-19 06:47 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-09-19 06:47 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15657 2023-09-19 06:47 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-09-19 06:47 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 2003 2023-09-19 06:47 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0 10312 2023-09-19 06:47 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-09-19 06:59 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-09-19 06:59 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6300 2023-09-19 06:59 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.6.0
- containerd: v1.7.6
- runc: v1.1.9
- CNI plugins: v1.3.0
- BuildKit: v0.12.2
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.8
- RootlessKit: v1.1.1
- slirp4netns: v1.2.1
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.13
- containerd-fuse-overlayfs: v1.0.6
- Kubo (IPFS): v0.22.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.1/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.13/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.22.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days...
v1.5.0
-
nerdctl compose
now emulates Docker Compose v2.
This change affects internal container names, e.g.,example_wordpress_1
→example-wordpress-1
. (#1644)
Changes
-
nerdctl run
:- Support lazy-pulling with SOCI (#2347, thanks to @CodeChanning @ningziwen)
- Add
--detach-keys
flag (#2128, thanks to @davidhsingyuchen) - Add
--volumes-from
flag (#2241, thanks to @ningziwen) - Fix a conflict on TCP port 49154 (#2263, thanks to @tces1)
-
nerdctl create
,nerdctl update
,nerdctl kill
: -
nerdctl network create
: -
nerdctl cp
: -
nerdctl push
:- Fix concurrent push (#2404, thanks to @zhenxuanxin)
-
nerdctl build
: -
nerdctl compose
:- Emulate Docker Compose v2 (#1644, thanks to @djdongjin)
- Support
shm_size
(#2267, thanks to @surenkov) - Support build secrets (#2278, thanks to @andrewbelu)
- Support
replicas = 0
(#2361, thanks to @yankay)
-
nerdctl-full
:- Update BuildKit (0.12.0), containerd (1.7.3), runc (1.1.8), Kubo (0.21.0) (#2734, #2401, thanks to @ginglis13)
Full changes: https://github.com/containerd/nerdctl/issues?q=is%3Aclosed+milestone%3Av1.5.0
Thanks to @CodeChanning @andrewbelu @austinvazquez @aznashwan @davidhsingyuchen @djdongjin @fahedouch @ginglis13 @ktock @mook-as @ningziwen @sbuckfelder @surenkov @suyanhanx @tces1 @vsiravar @weikequ @yankay @yldoge @zhenxuanxin
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.5.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.5.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.5.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24543232 2023-07-31 10:52 nerdctl
-rwxr-xr-x root/root 21622 2023-07-31 10:51 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7187 2023-07-31 10:51 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.5.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-07-31 11:02 bin/
-rwxr-xr-x 0/0 27632916 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 53356944 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3696856 2023-07-31 10:58 bin/bypass4netns
-rwxr-xr-x 0/0 5242880 2023-07-31 10:59 bin/bypass4netnsd
-rwxr-xr-x 0/0 57950744 2023-07-31 11:00 bin/containerd
-rwxr-xr-x 0/0 10432512 2023-05-11 08:23 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-07-31 11:00 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7187 2023-07-31 11:00 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12374016 2023-07-31 11:01 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20603375 2023-07-31 11:02 bin/ctd-decoder
-rwxr-xr-x 0/0 28951224 2023-07-31 11:00 bin/ctr
-rwxr-xr-x 0/0 29257695 2023-07-31 11:02 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1785384 2023-07-31 11:02 bin/fuse-overlayfs
-rwxr-xr-x 0/0 83672728 2023-07-03 08:56 bin/ipfs
-rwxr-xr-x 0/0 24514560 2023-07-31 11:00 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 14716256 2023-07-31 10:59 bin/runc
-rwxr-xr-x 0/0 2338128 2023-07-31 11:02 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-07-31 11:02 bin/tini
drwxr-xr-x 0/0 0 2023-07-31 11:01 lib/
drwxr-xr-x 0/0 0 2023-07-31 11:01 lib/systemd/
drwxr-xr-x 0/0 0 2023-07-31 11:01 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-07-31 11:01 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-07-31 10:58 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-07-31 11:01 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-07-31 11:01 libexec/
drwxrwxr-x 0/0 0 2023-07-31 11:01 libexec/cni/
-rwxr-xr-x 0/0 4016001 2023-05-09 19:53 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4531309 2023-05-09 19:53 libexec/cni/bridge
-rwxr-xr-x 0/0 10816051 2023-05-09 19:53 libexec/cni/dhcp
-rwxr-xr-x 0/0 4171248 2023-05-09 19:53 libexec/cni/dummy
-rwxr-xr-x 0/0 4649749 2023-05-09 19:53 libexec/cni/firewall
-rwxr-xr-x 0/0 4059321 2023-05-09 19:53 libexec/cni/host-device
-rwxr-xr-x 0/0 3444776 2023-05-09 19:53 libexec/cni/host-local
-rwxr-xr-x 0/0 4193323 2023-05-09 19:53 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3514598 2023-05-09 19:53 libexec/cni/loopback
-rwxr-xr-x 0/0 4227193 2023-05-09 19:53 libexec/cni/macvlan
-rwxr-xr-x 0/0 3955775 2023-05-09 19:53 libexec/cni/portmap
-rwxr-xr-x 0/0 4348835 2023-05-09 19:53 libexec/cni/ptp
-rwxr-xr-x 0/0 3716095 2023-05-09 19:53 libexec/cni/sbr
-rwxr-xr-x 0/0 2984504 2023-05-09 19:53 libexec/cni/static
-rwxr-xr-x 0/0 4258344 2023-05-09 19:53 libexec/cni/tap
-rwxr-xr-x 0/0 3603365 2023-05-09 19:53 libexec/cni/tuning
-rwxr-xr-x 0/0 4187498 2023-05-09 19:53 libexec/cni/vlan
-rwxr-xr-x 0/0 3754911 2023-05-09 19:53 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-07-31 11:00 share/
drwxr-xr-x 0/0 0 2023-07-31 11:00 share/doc/
drwxr-xr-x 0/0 0 2023-07-31 11:00 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-07-31 10:51 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-07-31 11:00 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-07-31 10:51 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-07-31 10:51 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-07-31 10:51 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 70914 2023-07-31 10:51 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-07-31 10:51 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-07-31 10:51 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 9128 2023-07-31 10:51 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-07-31 10:51 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-07-31 10:51 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-07-31 10:51 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-07-31 10:51 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-07-31 10:51 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-07-31 10:51 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-07-31 10:51 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-07-31 10:51 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-07-31 10:51 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-07-31 10:51 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-07-31 10:51 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15657 2023-07-31 10:51 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-07-31 10:51 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10312 2023-07-31 10:51 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-07-31 11:02 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-07-31 11:02 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6201 2023-07-31 11:02 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.5.0
- containerd: v1.7.3
- runc: v1.1.8
- CNI plugins: v1.3.0
- BuildKit: v0.12.0
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.12
- containerd-fuse-overlayfs: v1.0.6
- Kubo (IPFS): v0.21.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.12/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.21.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -...
v1.4.0
This release fixes an incompatibility with runc >= 1.1.6 (#2174).
Also introduces support for Cosign keyless mode (#2185).
Changes
-
nerdctl create
: -
nerdctl exec
:- Fix console size (#2182, thanks to @ChangJH-Mark)
-
nerdctl logs
: -
nerdctl images
:- Silence
Silence WARN[0000] failed to get unpacked size of image
(#2245)
- Silence
-
nerdctl pull
:- Support cosign keyless mode (#2185)
-
nerdctl system prune
:- skip pruning build cache if buildkit is not running (#2246)
-
nerdctl compose
:- Support cosign keyless mode (#2207, thanks to @ningziwen)
-
nerdctl-full: update runc (1.1.7), containerd (1.7.1), CNI plugins (1.3.0), BuildKit (0.11.6), Kubo (0.20.0)
containerd-fuse-overlayfs (1.0.6), fuse-overlayfs (1.1.2) (#2174, #2228, #2230)- fuse-overlayfs was relicensed from GPL-3.0-or-later to GPL-2.0-or-later: containers/fuse-overlayfs#392
Full changes: https://github.com/containerd/nerdctl/milestone/30?closed=1
Thanks to @ChangJH-Mark @Laitr0n @chzhuo @dardelean @dcantah @gerbercloud @imeoer @ningziwen @yuchanns
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.4.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.4.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.4.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24379392 2023-05-20 14:30 nerdctl
-rwxr-xr-x root/root 21622 2023-05-20 14:29 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7187 2023-05-20 14:29 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.4.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-05-20 14:43 bin/
-rwxr-xr-x 0/0 27083291 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 52023485 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3688664 2023-05-20 14:39 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-05-20 14:39 bin/bypass4netnsd
-rwxr-xr-x 0/0 57913112 2023-05-20 14:42 bin/containerd
-rwxr-xr-x 0/0 10432512 2023-05-11 08:23 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-05-20 14:41 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7187 2023-05-20 14:41 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12349440 2023-05-20 14:42 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20526993 2023-05-20 14:43 bin/ctd-decoder
-rwxr-xr-x 0/0 28917496 2023-05-20 14:41 bin/ctr
-rwxr-xr-x 0/0 29190395 2023-05-20 14:43 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1785384 2023-05-20 14:43 bin/fuse-overlayfs
-rwxr-xr-x 0/0 82803928 2023-05-09 10:49 bin/ipfs
-rwxr-xr-x 0/0 24350720 2023-05-20 14:41 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13669536 2023-05-20 14:40 bin/runc
-rwxr-xr-x 0/0 2338128 2023-05-20 14:43 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-05-20 14:43 bin/tini
drwxr-xr-x 0/0 0 2023-05-20 14:42 lib/
drwxr-xr-x 0/0 0 2023-05-20 14:42 lib/systemd/
drwxr-xr-x 0/0 0 2023-05-20 14:43 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-05-20 14:43 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-05-20 14:38 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-05-20 14:43 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-05-20 14:42 libexec/
drwxrwxr-x 0/0 0 2023-05-20 14:42 libexec/cni/
-rwxr-xr-x 0/0 4016001 2023-05-09 19:53 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4531309 2023-05-09 19:53 libexec/cni/bridge
-rwxr-xr-x 0/0 10816051 2023-05-09 19:53 libexec/cni/dhcp
-rwxr-xr-x 0/0 4171248 2023-05-09 19:53 libexec/cni/dummy
-rwxr-xr-x 0/0 4649749 2023-05-09 19:53 libexec/cni/firewall
-rwxr-xr-x 0/0 4059321 2023-05-09 19:53 libexec/cni/host-device
-rwxr-xr-x 0/0 3444776 2023-05-09 19:53 libexec/cni/host-local
-rwxr-xr-x 0/0 4193323 2023-05-09 19:53 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3514598 2023-05-09 19:53 libexec/cni/loopback
-rwxr-xr-x 0/0 4227193 2023-05-09 19:53 libexec/cni/macvlan
-rwxr-xr-x 0/0 3955775 2023-05-09 19:53 libexec/cni/portmap
-rwxr-xr-x 0/0 4348835 2023-05-09 19:53 libexec/cni/ptp
-rwxr-xr-x 0/0 3716095 2023-05-09 19:53 libexec/cni/sbr
-rwxr-xr-x 0/0 2984504 2023-05-09 19:53 libexec/cni/static
-rwxr-xr-x 0/0 4258344 2023-05-09 19:53 libexec/cni/tap
-rwxr-xr-x 0/0 3603365 2023-05-09 19:53 libexec/cni/tuning
-rwxr-xr-x 0/0 4187498 2023-05-09 19:53 libexec/cni/vlan
-rwxr-xr-x 0/0 3754911 2023-05-09 19:53 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-05-20 14:41 share/
drwxr-xr-x 0/0 0 2023-05-20 14:41 share/doc/
drwxr-xr-x 0/0 0 2023-05-20 14:41 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-05-20 14:29 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-05-20 14:41 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-05-20 14:29 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-05-20 14:29 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-05-20 14:29 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 70607 2023-05-20 14:29 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-05-20 14:29 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-05-20 14:29 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 9128 2023-05-20 14:29 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-05-20 14:29 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-05-20 14:29 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-05-20 14:29 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-05-20 14:29 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-05-20 14:29 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-05-20 14:29 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-05-20 14:29 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-05-20 14:29 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-05-20 14:29 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-05-20 14:29 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-05-20 14:29 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-05-20 14:29 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-05-20 14:29 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-05-20 14:29 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-05-20 14:43 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-05-20 14:43 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6201 2023-05-20 14:43 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.4.0
- containerd: v1.7.1
- runc: v1.1.7
- CNI plugins: v1.3.0
- BuildKit: v0.11.6
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.12
- containerd-fuse-overlayfs: v1.0.6
- Kubo (IPFS): v0.20.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.12/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.20.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/5032691620
The sha256sum of the SHA256SUMS file itself is 8d7149cf90edf33a588f1103da79f996279da87503bbf02e5630e3876de95a31
.
Release manager: Akihiro Suda (@AkihiroSuda)
v1.3.1
Changes
nerdctl run
:nerdctl push
:- Fix cosign regression in nerdctl v1.3.0 (#2172, thanks to @ningziwen)
nerdctl compose
:- Implement
Bind.CreateHostPath
(#2150)
- Implement
- nerdctl-full:
- Update Kubo to v0.19.1 (#2181)
Full changes: https://github.com/containerd/nerdctl/milestone/26?closed=1
Thanks to @austinvazquez @ktock @mook-as @ningziwen @vsiravar
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.3.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.3.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.3.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 24952832 2023-04-14 06:13 nerdctl
-rwxr-xr-x root/root 21622 2023-04-14 06:12 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-04-14 06:12 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.3.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-04-14 06:26 bin/
-rwxr-xr-x 0/0 27080076 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 52016425 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3692760 2023-04-14 06:21 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-04-14 06:22 bin/bypass4netnsd
-rwxr-xr-x 0/0 57380280 2023-04-14 06:24 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-04-14 06:23 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-04-14 06:23 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12324864 2023-04-14 06:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20532693 2023-04-14 06:26 bin/ctd-decoder
-rwxr-xr-x 0/0 28883704 2023-04-14 06:23 bin/ctr
-rwxr-xr-x 0/0 29179519 2023-04-14 06:26 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1784312 2023-04-14 06:26 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81638824 2023-04-05 19:20 bin/ipfs
-rwxr-xr-x 0/0 24924160 2023-04-14 06:23 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13660920 2023-04-14 06:23 bin/runc
-rwxr-xr-x 0/0 2338128 2023-04-14 06:26 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-04-14 06:26 bin/tini
drwxr-xr-x 0/0 0 2023-04-14 06:25 lib/
drwxr-xr-x 0/0 0 2023-04-14 06:25 lib/systemd/
drwxr-xr-x 0/0 0 2023-04-14 06:25 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-04-14 06:25 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-04-14 06:21 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-04-14 06:25 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-04-14 06:25 libexec/
drwxrwxr-x 0/0 0 2023-04-14 06:25 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-04-14 06:23 share/
drwxr-xr-x 0/0 0 2023-04-14 06:23 share/doc/
drwxr-xr-x 0/0 0 2023-04-14 06:23 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-04-14 06:12 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-04-14 06:23 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-04-14 06:12 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-04-14 06:12 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-04-14 06:12 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 68011 2023-04-14 06:12 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-04-14 06:12 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-04-14 06:12 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 8040 2023-04-14 06:12 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-04-14 06:12 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-04-14 06:12 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-04-14 06:12 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-04-14 06:12 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-04-14 06:12 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-04-14 06:12 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-04-14 06:12 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-04-14 06:12 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-04-14 06:12 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-04-14 06:12 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-04-14 06:12 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-04-14 06:12 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-04-14 06:12 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-04-14 06:12 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-04-14 06:26 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-04-14 06:26 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6117 2023-04-14 06:26 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.3.1
- containerd: v1.7.0
- runc: v1.1.5
- CNI plugins: v1.2.0
- BuildKit: v0.11.5
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.11
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.19.1
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.11/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.19.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/4696934691
The sha256sum of the SHA256SUMS file itself is 91dac8444a59adb6ef90ca6c05f26c8ed3d47b0e1f90800f4c945390af268a38
.
Release manager: Akihiro Suda @AkihiroSuda
v1.3.0
Changes
Key features :
- New Maintainers' guide is available. This is the first GA release managed by a non-core maintainer 😎
- Support notation for signing and verifying signatures
- Many windows refacto and improvements are embedded in this GA release
- Fix operation not permitted with
systemd-homed
for rootless mode (#2056 , thanks to @AkihiroSuda )
-
nerdctl run
:- Port Windows device support from containerd (#2079, thanks to @adamrehn)
- Resolve special ip host-gateway (#1978, thanks to @ningziwen)
-
nerdctl push
:- Support -q in nerdctl push(#2132, thanks to @djdongjin )
-
nerdctl inspect
:- Support State.Error field in inspect command (#2073, thanks to @fahedouch)
-
nerdctl image inspect
:- Add support for showing image size on inspect (#2110 , thanks to @manugupt1)
-
nerdctl compose
:- Add support for profiles (#2042 , thanks to @danishprakash)
-
nerdctl top
:- Fix the top command on Windows (#2038 , thanks to @dardelean)
-
nerdctl help
: -
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/28?closed=1
thanks to @djdongjin @fahedouch @yuchanns @aznashwan @manugupt1 @dardelean @ktock @adamrehn @ningziwen @AkihiroSuda @suyanhanx @davidhsingyuchen @danishprakash @developer-guy
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.3.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.3.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.3.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24920064 2023-04-05 12:22 nerdctl
-rwxr-xr-x root/root 21622 2023-04-05 12:21 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-04-05 12:21 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.3.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-04-05 12:35 bin/
-rwxr-xr-x 0/0 27080076 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 52016425 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3692760 2023-04-05 12:31 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-04-05 12:31 bin/bypass4netnsd
-rwxr-xr-x 0/0 57380280 2023-04-05 12:33 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-04-05 12:33 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-04-05 12:33 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12324864 2023-04-05 12:34 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20532693 2023-04-05 12:35 bin/ctd-decoder
-rwxr-xr-x 0/0 28883704 2023-04-05 12:33 bin/ctr
-rwxr-xr-x 0/0 29179519 2023-04-05 12:35 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1784312 2023-04-05 12:35 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81600768 2023-03-20 13:08 bin/ipfs
-rwxr-xr-x 0/0 24899584 2023-04-05 12:33 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13660920 2023-04-05 12:32 bin/runc
-rwxr-xr-x 0/0 2338128 2023-04-05 12:35 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-04-05 12:35 bin/tini
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/systemd/
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-04-05 12:34 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-04-05 12:30 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-04-05 12:34 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-04-05 12:34 libexec/
drwxrwxr-x 0/0 0 2023-04-05 12:34 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-04-05 12:21 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-04-05 12:21 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-04-05 12:21 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-04-05 12:21 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 68011 2023-04-05 12:21 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-04-05 12:21 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-04-05 12:21 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 8040 2023-04-05 12:21 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-04-05 12:21 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-04-05 12:21 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-04-05 12:21 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-04-05 12:21 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-04-05 12:21 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-04-05 12:21 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-04-05 12:21 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-04-05 12:21 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-04-05 12:21 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-04-05 12:21 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-04-05 12:21 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-04-05 12:21 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-04-05 12:21 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-04-05 12:21 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-04-05 12:35 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-04-05 12:35 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6117 2023-04-05 12:35 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.3.0
- containerd: v1.7.0
- runc: v1.1.5
- CNI plugins: v1.2.0
- BuildKit: v0.11.5
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.11
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.19.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.11/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.19.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available fo...
v1.3.0-beta.0
Changes
Key features :
- New Maintainers' guide is available. This is the first beta release managed by a non-core maintainer 😎
- Support notation for signing and verifying signatures
- Many windows refacto and improvements are embedded in this pre-release
- Fix operation not permitted with
systemd-homed
for rootless mode (#2056 , thanks to @AkihiroSuda )
-
nerdctl run
:- Port Windows device support from containerd (#2079, thanks to @adamrehn)
- Resolve special ip host-gateway (#1978, thanks to @ningziwen)
-
nerdctl push
:- Support -q in nerdctl push(#2132, thanks to @djdongjin )
-
nerdctl inspect
:- Support State.Error field in inspect command (#2073, thanks to @fahedouch)
-
nerdctl image inspect
:- Add support for showing image size on inspect (#2110 , thanks to @manugupt1)
-
nerdctl compose
:- Add support for profiles (#2042 , thanks to @danishprakash)
-
nerdctl top
:- Fix the top command on Windows (#2038 , thanks to @dardelean)
-
nerdctl help
: -
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/28?closed=1
thanks to @djdongjin @fahedouch @yuchanns @aznashwan @manugupt1 @dardelean @ktock @adamrehn @ningziwen @AkihiroSuda @suyanhanx @davidhsingyuchen @danishprakash
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.3.0-beta.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.3.0-beta.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.3.0-beta.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24907776 2023-03-30 14:36 nerdctl
-rwxr-xr-x root/root 21622 2023-03-30 14:35 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-03-30 14:35 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.3.0-beta.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-03-30 14:46 bin/
-rwxr-xr-x 0/0 27066377 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51980414 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3692760 2023-03-30 14:43 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-03-30 14:43 bin/bypass4netnsd
-rwxr-xr-x 0/0 57371448 2023-03-30 14:45 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-03-30 14:44 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-03-30 14:44 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12320768 2023-03-30 14:45 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20518887 2023-03-30 14:46 bin/ctd-decoder
-rwxr-xr-x 0/0 28874872 2023-03-30 14:44 bin/ctr
-rwxr-xr-x 0/0 29176335 2023-03-30 14:46 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-03-30 14:46 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81852800 2023-01-30 14:42 bin/ipfs
-rwxr-xr-x 0/0 24883200 2023-03-30 14:44 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13660280 2023-03-30 14:44 bin/runc
-rwxr-xr-x 0/0 2338128 2023-03-30 14:46 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-03-30 14:46 bin/tini
drwxr-xr-x 0/0 0 2023-03-30 14:45 lib/
drwxr-xr-x 0/0 0 2023-03-30 14:45 lib/systemd/
drwxr-xr-x 0/0 0 2023-03-30 14:46 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-03-30 14:46 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-03-30 14:42 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-03-30 14:46 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-03-30 14:45 libexec/
drwxrwxr-x 0/0 0 2023-03-30 14:45 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-03-30 14:35 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-03-30 14:35 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-03-30 14:35 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-03-30 14:35 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 68011 2023-03-30 14:35 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-03-30 14:35 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-03-30 14:35 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 8040 2023-03-30 14:35 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-03-30 14:35 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-03-30 14:35 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-03-30 14:35 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-03-30 14:35 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-03-30 14:35 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-03-30 14:35 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-03-30 14:35 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-03-30 14:35 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-03-30 14:35 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-03-30 14:35 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-03-30 14:35 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-03-30 14:35 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-03-30 14:35 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-03-30 14:35 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-03-30 14:46 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1158 2023-03-30 14:46 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6117 2023-03-30 14:46 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.3.0-beta.0
- containerd: v1.7.0
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.3
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.1
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.18.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The buil...
v1.2.1
This release updates the containerd library to fix CVE-2023-25173 (GHSA-hmfx-3pcx-653p , Supplementary groups are not set up properly
).
Note
To fix CVE-2023-25173 for
nerdctl build
, you have to wait for the release of BuildKit v0.11.4, or install BuildKit manually with moby/buildkit#3668 .
The CVE doesn't seem to be problematic fornerdctl build
though.
Changes
-
nerdctl logs
:- Accept Ctrl-C in CRI log viewer (#1972, thanks to @zhaojizhuang)
-
nerdctl rename
:- Support Windows (#1993, thanks to @dardelean)
-
nerdctl rmi
:- Fix checking containers with deleted image (#1998, thanks to @djdongjin)
-
nerdctl system prune
:- Fix confirmation prompt (#2036, #2039, #2044, thanks to @suyanhanx)
-
nerdctl compose down
:- Fix checking networks that are in use (#2051, thanks to @Retrospection)
-
nerdctl-full:
- Update containerd (1.6.19), BuildKit (0.11.3), Kubo (0.18.1) (#2047)
-
misc:
- Update containerd library to v1.7.0-rc.0 to fix CVE-2023-25173 (GHSA-hmfx-3pcx-653p) (#2019, #2055)
- Update Go to 1.20 (#2025)
-
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/27?closed=1
Thanks to @MimeLyc @Retrospection @brunohenriquy @dardelean @davidhsingyuchen @djdongjin @manugupt1 @rkonfj @suyanhanx @zhaojizhuang
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.2.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.2.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.2.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 25595904 2023-02-28 04:13 nerdctl
-rwxr-xr-x root/root 21622 2023-02-28 04:12 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-02-28 04:12 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.2.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-02-28 04:23 bin/
-rwxr-xr-x 0/0 27066377 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51980414 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3679064 2023-02-28 04:20 bin/bypass4netns
-rwxr-xr-x 0/0 5210112 2023-02-28 04:20 bin/bypass4netnsd
-rwxr-xr-x 0/0 55054136 2023-02-28 04:22 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-02-28 04:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-02-28 04:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9830400 2023-02-28 04:22 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58983200 2023-01-26 12:59 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20416279 2023-02-28 04:23 bin/ctd-decoder
-rwxr-xr-x 0/0 28246072 2023-02-28 04:21 bin/ctr
-rwxr-xr-x 0/0 29073157 2023-02-28 04:23 bin/ctr-enc
-rwxr-xr-x 0/0 26628320 2023-01-26 12:59 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-02-28 04:23 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81852800 2023-01-30 14:42 bin/ipfs
-rwxr-xr-x 0/0 25567232 2023-02-28 04:21 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13624920 2023-02-28 04:20 bin/runc
-rwxr-xr-x 0/0 2338128 2023-02-28 04:23 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-02-28 04:23 bin/tini
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/systemd/
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/systemd/system/
-rw-r--r-- 0/0 1331 2023-02-28 04:22 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2023-02-28 04:19 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-02-28 04:22 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-02-28 04:22 libexec/
drwxrwxr-x 0/0 0 2023-02-28 04:22 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-02-28 04:12 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-02-28 04:12 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-02-28 04:12 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-02-28 04:12 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 67311 2023-02-28 04:12 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-02-28 04:12 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2023-02-28 04:12 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2023-02-28 04:12 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-02-28 04:12 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 854 2023-02-28 04:12 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-02-28 04:12 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-02-28 04:12 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-02-28 04:12 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-02-28 04:12 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-02-28 04:12 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2023-02-28 04:12 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-02-28 04:12 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-02-28 04:12 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-02-28 04:12 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-02-28 04:12 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-02-28 04:12 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-02-28 04:23 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2023-02-28 04:23 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6014 2023-02-28 04:23 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.2.1
- containerd: v1.6.19
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.3
- Stargz Snapshotter: v0.14.1
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.1
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.18.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/4289468997
The sha256sum of the SHA256SUMS file itself is f1c5fee1ad7fc7641b867947a971c56c1d12cd9a6fb6482813fbd39542499577
.
v1.2.0
Tons of refactoring happened in this release. Thanks to all the contributors for working on this.
This release also features:
- Experimental support for reading Kubernetes container logs (
nerdctl --namespace=k8s.io logs <CONTAINERID>
) - Improved compose error messages
- Enhanced support for Windows
Note
Upgrade notice
The CNI plugins package bundled with the
nerdctl-full
distribution is upgraded to v1.2.0 in this release.Some users of rootless mode may face an error like
open /etc/cni/tuning/allowlist.conf: permission denied
when/etc/cni
is created with the0700
permission on the host.In this case, run
sudo chmod 0755 /etc/cni
on the host.
Changes
nerdctl logs
:- Experimental support for reading Kubernetes container logs (#1847, #1958, thanks to @zhaojizhuang)
nerdctl run
:- Support specifying
-t
and-d
in conjunction (#1642, thanks to @yzxiu) - Add
--uts
flag (#1683, thanks to @dcantah) - Add
--cgroup-parent
flag (#1782, thanks to @dcantah) - Windows: Add
nerdctl run --isolation=host
for running Host Process containers (#795, thanks to @jsturtevant) - Windows: Add
nerdctl run --isolation=hyperv
(#1848, thanks to @dardelean)
- Support specifying
nerdctl images
:- Add
--filter dangling=true
filter (#1785, thanks to @manugupt1)
- Add
nerdctl build
:- Propagate
SOURCE_DATE_EPOCH
from the client env to the build arg (#1926)
- Propagate
nerdctl compose create
:- Add
nerdctl compose create
command (#1668, thanks to @djdongjin)
- Add
nerdctl compose start
:- Add
nerdctl compose start
command (#1656, thanks to @djdongjin)
- Add
nerdctl compose up
:- Show detailed errors again (#1943)
nerdctl compose down
:- Add
--remove-orphans
flag (#1366, thanks to @stillfox-lee)
- Add
- IPFS:
- Refactoring:
- Docs:
- Move the command reference from
README.md
todocs/command-reference.md
(#1880, thanks to @djdongjin)
- Move the command reference from
- nerdctl-full:
- Project:
- Add Jing Dong (@djdongjin) as a REVIEWER (#1649)
Full changes: https://github.com/containerd/nerdctl/milestone/25?closed=1
Thanks to @Iceber @Laitr0n @Rajpratik71 @STRRL @Zheaoli @aman556 @austinvazquez @ayewo @dardelean @davidhsingyuchen @dcantah @djdongjin @fahedouch @ginglis13 @jsturtevant @ktock @manugupt1 @miles170 @stillfox-lee @suyanhanx @thaJeztah @weikequ @yzxiu @zhaojizhuang
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.2.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.2.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.2.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 25739264 2023-01-31 02:23 nerdctl
-rwxr-xr-x root/root 21622 2023-01-31 02:23 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-01-31 02:23 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.2.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-01-31 02:37 bin/
-rwxr-xr-x 0/0 27066289 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51992719 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602712 2023-01-31 02:31 bin/bypass4netns
-rwxr-xr-x 0/0 5111808 2023-01-31 02:32 bin/bypass4netnsd
-rwxr-xr-x 0/0 55108536 2023-01-31 02:34 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-01-31 02:32 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-01-31 02:32 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9768960 2023-01-31 02:34 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58983200 2023-01-26 12:59 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20333208 2023-01-31 02:37 bin/ctd-decoder
-rwxr-xr-x 0/0 28135832 2023-01-31 02:33 bin/ctr
-rwxr-xr-x 0/0 29080179 2023-01-31 02:37 bin/ctr-enc
-rwxr-xr-x 0/0 26628320 2023-01-26 12:59 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-01-31 02:37 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81736760 2023-01-23 14:59 bin/ipfs
-rwxr-xr-x 0/0 25710592 2023-01-31 02:32 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13784704 2023-01-31 02:32 bin/runc
-rwxr-xr-x 0/0 2338128 2023-01-31 02:37 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-01-31 02:37 bin/tini
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/systemd/
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/systemd/system/
-rw-r--r-- 0/0 1331 2023-01-31 02:36 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2023-01-31 02:31 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-01-31 02:36 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-01-31 02:36 libexec/
drwxrwxr-x 0/0 0 2023-01-31 02:36 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/nerdctl/
-rw-r--r-- 0/0 12339 2023-01-31 02:23 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-01-31 02:23 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-01-31 02:23 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-01-31 02:23 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 67464 2023-01-31 02:23 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-01-31 02:23 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2023-01-31 02:23 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2023-01-31 02:23 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-01-31 02:23 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 854 2023-01-31 02:23 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-01-31 02:23 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-01-31 02:23 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-01-31 02:23 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-01-31 02:23 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-01-31 02:23 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2023-01-31 02:23 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-01-31 02:23 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-01-31 02:23 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-01-31 02:23 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-01-31 02:23 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-01-31 02:23 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-01-31 02:37 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2023-01-31 02:37 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6014 2023-01-31 02:37 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.2.0
- containerd: v1.6.16
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.2
- Stargz Snapshotter: v0.14.1
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL ...
v1.1.0
Compose is significantly improved in this release.
This release also celebrates the addition of the new committers @Zheaoli @junnplus and the new reviewers @yuchanns @manugupt1 .
Changes
-
nerdctl compose
:- New commands:
nerdctl compose (stop|restart|rm|images|exec|pause|unpause|top|port)
(#1494, #1533, #1534, #1555, #1598, #1621, #1609, #1628, thanks to @djdongjin) - New flags:
nerdctl compose ps --format=json
(#1567, thanks to @djdongjin) - New YAML properties:
x-nerdctl-{verify,cosign-public-key,sign,cosign-private-key}
(#1508, thanks to @djdongjin) - Support ephemeral host ports (#1518, thanks to @zhan9san)
- New commands:
-
nerdctl image convert
:- New estargz flags:
--estargz-min-chunk-size=<SIZE>
,--estargz-external-toc
,--estargz-keep-diff-id
(#1504, thanks to @ktock) - New zstd flags:
--zstdchunked-record-in
,--zstdchunked-compression-level
,--zstdchunked-chunk-size
(#1496, thanks to @djdongjin) - Support OverlayBD (
--overlaybd
,--overlaybd-fs-type
,--overlaybd-dbstr
) (#1517, thanks to @HileQAQ)
- New estargz flags:
-
nerdctl network rm
:- Support removing a network by ID (#1581, thanks to @Mihai22125)
-
Misc:
- Support
/proc/sys/fs/binfmt_misc/rosetta
, for enabling Rosetta 2 for Linux on Lima v0.14 or later (#1552) - Removed the indirect dependency on
github.com/btcsuite/btcd/btcec
(secp256k1 elliptic curve cryptography library, NOT bitcoin daemon) that was introduced by the dependency ongithub.com/ipfs/go-ipfs-http-client
andgithub.com/libp2p/go-libp2p-core
for supporting IPFS.
This is NOT a bitcoin mining/trading code, but caused confusion to some people due to its package name. https://github.com/containerd/nerdctl/pull/1626/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6L65-L80 (#1626, thanks to @bsalunke)
- Support
-
nerdctl-full
: -
Project:
Full changes: https://github.com/containerd/nerdctl/milestone/24?closed=1
Thanks to @HileQAQ @Mihai22125 @Zheaoli @airmelt @aman556 @aznashwan @bsalunke @davidhsingyuchen @djdongjin @fahedouch @ktock @liubin @loheagn @mAddmHacks @manugupt1 @minuk-dev @sschepens @yankay @yuchanns @yzxiu @zhan9san
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.1.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.1.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.1.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 28536832 2022-12-12 01:12 nerdctl
-rwxr-xr-x root/root 21563 2022-12-12 01:11 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-12-12 01:11 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.1.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-12-12 01:26 bin/
-rwxr-xr-x 0/0 25485993 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 39552521 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602712 2022-12-12 01:21 bin/bypass4netns
-rwxr-xr-x 0/0 5111808 2022-12-12 01:21 bin/bypass4netnsd
-rwxr-xr-x 0/0 55100344 2022-12-12 01:23 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21563 2022-12-12 01:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-12-12 01:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9768960 2022-12-12 01:23 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 60561376 2022-11-11 13:22 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20333008 2022-12-12 01:26 bin/ctd-decoder
-rwxr-xr-x 0/0 28135832 2022-12-12 01:22 bin/ctr
-rwxr-xr-x 0/0 29082227 2022-12-12 01:26 bin/ctr-enc
-rwxr-xr-x 0/0 30609440 2022-11-11 13:23 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2022-12-12 01:26 bin/fuse-overlayfs
-rwxr-xr-x 0/0 80964832 2022-11-22 14:33 bin/ipfs
-rwxr-xr-x 0/0 28504064 2022-12-12 01:21 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13784656 2022-12-12 01:22 bin/runc
-rwxr-xr-x 0/0 2338128 2022-12-12 01:26 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-12-12 01:26 bin/tini
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/systemd/
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-12-12 01:25 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-12-12 01:20 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-12-12 01:25 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-12-12 01:25 libexec/
drwxrwxr-x 0/0 0 2022-12-12 01:25 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/nerdctl/
-rw-r--r-- 0/0 77438 2022-12-12 01:11 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-12-12 01:11 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-12-12 01:11 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-12-12 01:11 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-12-12 01:11 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2022-12-12 01:11 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2022-12-12 01:11 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-12-12 01:11 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 787 2022-12-12 01:11 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2022-12-12 01:11 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-12-12 01:11 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-12-12 01:11 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-12-12 01:11 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-12-12 01:11 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2022-12-12 01:11 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-12-12 01:11 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2022-12-12 01:11 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-12-12 01:11 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2022-12-12 01:11 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2022-12-12 01:11 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-12-12 01:26 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2022-12-12 01:26 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5816 2022-12-12 01:26 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.1.0
- containerd: v1.6.12
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.6
- Stargz Snapshotter: v0.13.0
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.17.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license a...