Releases: containerd/nerdctl
v1.3.0
Changes
Key features :
- New Maintainers' guide is available. This is the first GA release managed by a non-core maintainer 😎
- Support notation for signing and verifying signatures
- Many windows refacto and improvements are embedded in this GA release
- Fix operation not permitted with
systemd-homed
for rootless mode (#2056 , thanks to @AkihiroSuda )
-
nerdctl run
:- Port Windows device support from containerd (#2079, thanks to @adamrehn)
- Resolve special ip host-gateway (#1978, thanks to @ningziwen)
-
nerdctl push
:- Support -q in nerdctl push(#2132, thanks to @djdongjin )
-
nerdctl inspect
:- Support State.Error field in inspect command (#2073, thanks to @fahedouch)
-
nerdctl image inspect
:- Add support for showing image size on inspect (#2110 , thanks to @manugupt1)
-
nerdctl compose
:- Add support for profiles (#2042 , thanks to @danishprakash)
-
nerdctl top
:- Fix the top command on Windows (#2038 , thanks to @dardelean)
-
nerdctl help
: -
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/28?closed=1
thanks to @djdongjin @fahedouch @yuchanns @aznashwan @manugupt1 @dardelean @ktock @adamrehn @ningziwen @AkihiroSuda @suyanhanx @davidhsingyuchen @danishprakash @developer-guy
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.3.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.3.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.3.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24920064 2023-04-05 12:22 nerdctl
-rwxr-xr-x root/root 21622 2023-04-05 12:21 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-04-05 12:21 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.3.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-04-05 12:35 bin/
-rwxr-xr-x 0/0 27080076 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 52016425 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3692760 2023-04-05 12:31 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-04-05 12:31 bin/bypass4netnsd
-rwxr-xr-x 0/0 57380280 2023-04-05 12:33 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-04-05 12:33 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-04-05 12:33 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12324864 2023-04-05 12:34 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20532693 2023-04-05 12:35 bin/ctd-decoder
-rwxr-xr-x 0/0 28883704 2023-04-05 12:33 bin/ctr
-rwxr-xr-x 0/0 29179519 2023-04-05 12:35 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1784312 2023-04-05 12:35 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81600768 2023-03-20 13:08 bin/ipfs
-rwxr-xr-x 0/0 24899584 2023-04-05 12:33 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13660920 2023-04-05 12:32 bin/runc
-rwxr-xr-x 0/0 2338128 2023-04-05 12:35 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-04-05 12:35 bin/tini
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/systemd/
drwxr-xr-x 0/0 0 2023-04-05 12:34 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-04-05 12:34 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-04-05 12:30 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-04-05 12:34 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-04-05 12:34 libexec/
drwxrwxr-x 0/0 0 2023-04-05 12:34 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-04-05 12:21 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-04-05 12:33 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-04-05 12:21 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-04-05 12:21 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-04-05 12:21 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 68011 2023-04-05 12:21 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-04-05 12:21 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-04-05 12:21 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 8040 2023-04-05 12:21 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-04-05 12:21 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-04-05 12:21 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-04-05 12:21 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-04-05 12:21 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-04-05 12:21 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-04-05 12:21 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-04-05 12:21 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-04-05 12:21 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-04-05 12:21 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-04-05 12:21 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-04-05 12:21 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-04-05 12:21 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-04-05 12:21 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-04-05 12:21 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-04-05 12:35 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1151 2023-04-05 12:35 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6117 2023-04-05 12:35 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.3.0
- containerd: v1.7.0
- runc: v1.1.5
- CNI plugins: v1.2.0
- BuildKit: v0.11.5
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.11
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.19.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.11/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.19.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available fo...
v1.3.0-beta.0
Changes
Key features :
- New Maintainers' guide is available. This is the first beta release managed by a non-core maintainer 😎
- Support notation for signing and verifying signatures
- Many windows refacto and improvements are embedded in this pre-release
- Fix operation not permitted with
systemd-homed
for rootless mode (#2056 , thanks to @AkihiroSuda )
-
nerdctl run
:- Port Windows device support from containerd (#2079, thanks to @adamrehn)
- Resolve special ip host-gateway (#1978, thanks to @ningziwen)
-
nerdctl push
:- Support -q in nerdctl push(#2132, thanks to @djdongjin )
-
nerdctl inspect
:- Support State.Error field in inspect command (#2073, thanks to @fahedouch)
-
nerdctl image inspect
:- Add support for showing image size on inspect (#2110 , thanks to @manugupt1)
-
nerdctl compose
:- Add support for profiles (#2042 , thanks to @danishprakash)
-
nerdctl top
:- Fix the top command on Windows (#2038 , thanks to @dardelean)
-
nerdctl help
: -
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/28?closed=1
thanks to @djdongjin @fahedouch @yuchanns @aznashwan @manugupt1 @dardelean @ktock @adamrehn @ningziwen @AkihiroSuda @suyanhanx @davidhsingyuchen @danishprakash
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6 or v1.7.
About the binaries
- Minimal (
nerdctl-1.3.0-beta.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.3.0-beta.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.3.0-beta.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 24907776 2023-03-30 14:36 nerdctl
-rwxr-xr-x root/root 21622 2023-03-30 14:35 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-03-30 14:35 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.3.0-beta.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-03-30 14:46 bin/
-rwxr-xr-x 0/0 27066377 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51980414 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3692760 2023-03-30 14:43 bin/bypass4netns
-rwxr-xr-x 0/0 5238784 2023-03-30 14:43 bin/bypass4netnsd
-rwxr-xr-x 0/0 57371448 2023-03-30 14:45 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-03-30 14:44 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-03-30 14:44 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 12320768 2023-03-30 14:45 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59637768 2023-03-08 10:08 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20518887 2023-03-30 14:46 bin/ctd-decoder
-rwxr-xr-x 0/0 28874872 2023-03-30 14:44 bin/ctr
-rwxr-xr-x 0/0 29176335 2023-03-30 14:46 bin/ctr-enc
-rwxr-xr-x 0/0 26664136 2023-03-08 10:08 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-03-30 14:46 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81852800 2023-01-30 14:42 bin/ipfs
-rwxr-xr-x 0/0 24883200 2023-03-30 14:44 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13660280 2023-03-30 14:44 bin/runc
-rwxr-xr-x 0/0 2338128 2023-03-30 14:46 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-03-30 14:46 bin/tini
drwxr-xr-x 0/0 0 2023-03-30 14:45 lib/
drwxr-xr-x 0/0 0 2023-03-30 14:45 lib/systemd/
drwxr-xr-x 0/0 0 2023-03-30 14:46 lib/systemd/system/
-rw-r--r-- 0/0 1475 2023-03-30 14:46 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1414 2023-03-30 14:42 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-03-30 14:46 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-03-30 14:45 libexec/
drwxrwxr-x 0/0 0 2023-03-30 14:45 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-03-30 14:35 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-03-30 14:44 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-03-30 14:35 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-03-30 14:35 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-03-30 14:35 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 68011 2023-03-30 14:35 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-03-30 14:35 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 5329 2023-03-30 14:35 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 8040 2023-03-30 14:35 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-03-30 14:35 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2023-03-30 14:35 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-03-30 14:35 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-03-30 14:35 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-03-30 14:35 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-03-30 14:35 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-03-30 14:35 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2936 2023-03-30 14:35 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2596 2023-03-30 14:35 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-03-30 14:35 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-03-30 14:35 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-03-30 14:35 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-03-30 14:35 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-03-30 14:35 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-03-30 14:46 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1158 2023-03-30 14:46 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6117 2023-03-30 14:46 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.3.0-beta.0
- containerd: v1.7.0
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.3
- Stargz Snapshotter: v0.14.3
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.1
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.18.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The buil...
v1.2.1
This release updates the containerd library to fix CVE-2023-25173 (GHSA-hmfx-3pcx-653p , Supplementary groups are not set up properly
).
Note
To fix CVE-2023-25173 for
nerdctl build
, you have to wait for the release of BuildKit v0.11.4, or install BuildKit manually with moby/buildkit#3668 .
The CVE doesn't seem to be problematic fornerdctl build
though.
Changes
-
nerdctl logs
:- Accept Ctrl-C in CRI log viewer (#1972, thanks to @zhaojizhuang)
-
nerdctl rename
:- Support Windows (#1993, thanks to @dardelean)
-
nerdctl rmi
:- Fix checking containers with deleted image (#1998, thanks to @djdongjin)
-
nerdctl system prune
:- Fix confirmation prompt (#2036, #2039, #2044, thanks to @suyanhanx)
-
nerdctl compose down
:- Fix checking networks that are in use (#2051, thanks to @Retrospection)
-
nerdctl-full:
- Update containerd (1.6.19), BuildKit (0.11.3), Kubo (0.18.1) (#2047)
-
misc:
- Update containerd library to v1.7.0-rc.0 to fix CVE-2023-25173 (GHSA-hmfx-3pcx-653p) (#2019, #2055)
- Update Go to 1.20 (#2025)
-
Lots of refactoring
Full changes: https://github.com/containerd/nerdctl/milestone/27?closed=1
Thanks to @MimeLyc @Retrospection @brunohenriquy @dardelean @davidhsingyuchen @djdongjin @manugupt1 @rkonfj @suyanhanx @zhaojizhuang
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.2.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.2.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.2.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 25595904 2023-02-28 04:13 nerdctl
-rwxr-xr-x root/root 21622 2023-02-28 04:12 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-02-28 04:12 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.2.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-02-28 04:23 bin/
-rwxr-xr-x 0/0 27066377 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51980414 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3679064 2023-02-28 04:20 bin/bypass4netns
-rwxr-xr-x 0/0 5210112 2023-02-28 04:20 bin/bypass4netnsd
-rwxr-xr-x 0/0 55054136 2023-02-28 04:22 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-02-28 04:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-02-28 04:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9830400 2023-02-28 04:22 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58983200 2023-01-26 12:59 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20416279 2023-02-28 04:23 bin/ctd-decoder
-rwxr-xr-x 0/0 28246072 2023-02-28 04:21 bin/ctr
-rwxr-xr-x 0/0 29073157 2023-02-28 04:23 bin/ctr-enc
-rwxr-xr-x 0/0 26628320 2023-01-26 12:59 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-02-28 04:23 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81852800 2023-01-30 14:42 bin/ipfs
-rwxr-xr-x 0/0 25567232 2023-02-28 04:21 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13624920 2023-02-28 04:20 bin/runc
-rwxr-xr-x 0/0 2338128 2023-02-28 04:23 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-02-28 04:23 bin/tini
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/systemd/
drwxr-xr-x 0/0 0 2023-02-28 04:22 lib/systemd/system/
-rw-r--r-- 0/0 1331 2023-02-28 04:22 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2023-02-28 04:19 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-02-28 04:22 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-02-28 04:22 libexec/
drwxrwxr-x 0/0 0 2023-02-28 04:22 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/nerdctl/
-rw-r--r-- 0/0 12358 2023-02-28 04:12 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-02-28 04:21 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-02-28 04:12 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-02-28 04:12 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-02-28 04:12 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 67311 2023-02-28 04:12 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-02-28 04:12 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2023-02-28 04:12 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2023-02-28 04:12 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-02-28 04:12 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 854 2023-02-28 04:12 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-02-28 04:12 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-02-28 04:12 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-02-28 04:12 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-02-28 04:12 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-02-28 04:12 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2023-02-28 04:12 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-02-28 04:12 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-02-28 04:12 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-02-28 04:12 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-02-28 04:12 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-02-28 04:12 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-02-28 04:23 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2023-02-28 04:23 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6014 2023-02-28 04:23 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.2.1
- containerd: v1.6.19
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.3
- Stargz Snapshotter: v0.14.1
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.1
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.18.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/4289468997
The sha256sum of the SHA256SUMS file itself is f1c5fee1ad7fc7641b867947a971c56c1d12cd9a6fb6482813fbd39542499577
.
v1.2.0
Tons of refactoring happened in this release. Thanks to all the contributors for working on this.
This release also features:
- Experimental support for reading Kubernetes container logs (
nerdctl --namespace=k8s.io logs <CONTAINERID>
) - Improved compose error messages
- Enhanced support for Windows
Note
Upgrade notice
The CNI plugins package bundled with the
nerdctl-full
distribution is upgraded to v1.2.0 in this release.Some users of rootless mode may face an error like
open /etc/cni/tuning/allowlist.conf: permission denied
when/etc/cni
is created with the0700
permission on the host.In this case, run
sudo chmod 0755 /etc/cni
on the host.
Changes
nerdctl logs
:- Experimental support for reading Kubernetes container logs (#1847, #1958, thanks to @zhaojizhuang)
nerdctl run
:- Support specifying
-t
and-d
in conjunction (#1642, thanks to @yzxiu) - Add
--uts
flag (#1683, thanks to @dcantah) - Add
--cgroup-parent
flag (#1782, thanks to @dcantah) - Windows: Add
nerdctl run --isolation=host
for running Host Process containers (#795, thanks to @jsturtevant) - Windows: Add
nerdctl run --isolation=hyperv
(#1848, thanks to @dardelean)
- Support specifying
nerdctl images
:- Add
--filter dangling=true
filter (#1785, thanks to @manugupt1)
- Add
nerdctl build
:- Propagate
SOURCE_DATE_EPOCH
from the client env to the build arg (#1926)
- Propagate
nerdctl compose create
:- Add
nerdctl compose create
command (#1668, thanks to @djdongjin)
- Add
nerdctl compose start
:- Add
nerdctl compose start
command (#1656, thanks to @djdongjin)
- Add
nerdctl compose up
:- Show detailed errors again (#1943)
nerdctl compose down
:- Add
--remove-orphans
flag (#1366, thanks to @stillfox-lee)
- Add
- IPFS:
- Refactoring:
- Docs:
- Move the command reference from
README.md
todocs/command-reference.md
(#1880, thanks to @djdongjin)
- Move the command reference from
- nerdctl-full:
- Project:
- Add Jing Dong (@djdongjin) as a REVIEWER (#1649)
Full changes: https://github.com/containerd/nerdctl/milestone/25?closed=1
Thanks to @Iceber @Laitr0n @Rajpratik71 @STRRL @Zheaoli @aman556 @austinvazquez @ayewo @dardelean @davidhsingyuchen @dcantah @djdongjin @fahedouch @ginglis13 @jsturtevant @ktock @manugupt1 @miles170 @stillfox-lee @suyanhanx @thaJeztah @weikequ @yzxiu @zhaojizhuang
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.2.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.2.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.2.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 25739264 2023-01-31 02:23 nerdctl
-rwxr-xr-x root/root 21622 2023-01-31 02:23 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2023-01-31 02:23 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.2.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2023-01-31 02:37 bin/
-rwxr-xr-x 0/0 27066289 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 51992719 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602712 2023-01-31 02:31 bin/bypass4netns
-rwxr-xr-x 0/0 5111808 2023-01-31 02:32 bin/bypass4netnsd
-rwxr-xr-x 0/0 55108536 2023-01-31 02:34 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21622 2023-01-31 02:32 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2023-01-31 02:32 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9768960 2023-01-31 02:34 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58983200 2023-01-26 12:59 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20333208 2023-01-31 02:37 bin/ctd-decoder
-rwxr-xr-x 0/0 28135832 2023-01-31 02:33 bin/ctr
-rwxr-xr-x 0/0 29080179 2023-01-31 02:37 bin/ctr-enc
-rwxr-xr-x 0/0 26628320 2023-01-26 12:59 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2023-01-31 02:37 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81736760 2023-01-23 14:59 bin/ipfs
-rwxr-xr-x 0/0 25710592 2023-01-31 02:32 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13784704 2023-01-31 02:32 bin/runc
-rwxr-xr-x 0/0 2338128 2023-01-31 02:37 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2023-01-31 02:37 bin/tini
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/systemd/
drwxr-xr-x 0/0 0 2023-01-31 02:36 lib/systemd/system/
-rw-r--r-- 0/0 1331 2023-01-31 02:36 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2023-01-31 02:31 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2023-01-31 02:36 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2023-01-31 02:36 libexec/
drwxrwxr-x 0/0 0 2023-01-31 02:36 libexec/cni/
-rwxr-xr-x 0/0 3859475 2023-01-16 21:42 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4299004 2023-01-16 21:42 libexec/cni/bridge
-rwxr-xr-x 0/0 10167415 2023-01-16 21:42 libexec/cni/dhcp
-rwxr-xr-x 0/0 3986082 2023-01-16 21:42 libexec/cni/dummy
-rwxr-xr-x 0/0 4385098 2023-01-16 21:42 libexec/cni/firewall
-rwxr-xr-x 0/0 3870731 2023-01-16 21:42 libexec/cni/host-device
-rwxr-xr-x 0/0 3287319 2023-01-16 21:42 libexec/cni/host-local
-rwxr-xr-x 0/0 3999593 2023-01-16 21:42 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3353028 2023-01-16 21:42 libexec/cni/loopback
-rwxr-xr-x 0/0 4029261 2023-01-16 21:42 libexec/cni/macvlan
-rwxr-xr-x 0/0 3746163 2023-01-16 21:42 libexec/cni/portmap
-rwxr-xr-x 0/0 4161070 2023-01-16 21:42 libexec/cni/ptp
-rwxr-xr-x 0/0 3550152 2023-01-16 21:42 libexec/cni/sbr
-rwxr-xr-x 0/0 2845685 2023-01-16 21:42 libexec/cni/static
-rwxr-xr-x 0/0 3437180 2023-01-16 21:42 libexec/cni/tuning
-rwxr-xr-x 0/0 3993252 2023-01-16 21:42 libexec/cni/vlan
-rwxr-xr-x 0/0 3586502 2023-01-16 21:42 libexec/cni/vrf
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/nerdctl/
-rw-r--r-- 0/0 12339 2023-01-31 02:23 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2023-01-31 02:32 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2023-01-31 02:23 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2023-01-31 02:23 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2023-01-31 02:23 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 67464 2023-01-31 02:23 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1846 2023-01-31 02:23 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2023-01-31 02:23 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2023-01-31 02:23 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2023-01-31 02:23 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 854 2023-01-31 02:23 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2023-01-31 02:23 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2023-01-31 02:23 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2023-01-31 02:23 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 14463 2023-01-31 02:23 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2023-01-31 02:23 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2023-01-31 02:23 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2023-01-31 02:23 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2023-01-31 02:23 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2023-01-31 02:23 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2023-01-31 02:23 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2023-01-31 02:23 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2023-01-31 02:37 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2023-01-31 02:37 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 6014 2023-01-31 02:37 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.2.0
- containerd: v1.6.16
- runc: v1.1.4
- CNI plugins: v1.2.0
- BuildKit: v0.11.2
- Stargz Snapshotter: v0.14.1
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.18.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL ...
v1.1.0
Compose is significantly improved in this release.
This release also celebrates the addition of the new committers @Zheaoli @junnplus and the new reviewers @yuchanns @manugupt1 .
Changes
-
nerdctl compose
:- New commands:
nerdctl compose (stop|restart|rm|images|exec|pause|unpause|top|port)
(#1494, #1533, #1534, #1555, #1598, #1621, #1609, #1628, thanks to @djdongjin) - New flags:
nerdctl compose ps --format=json
(#1567, thanks to @djdongjin) - New YAML properties:
x-nerdctl-{verify,cosign-public-key,sign,cosign-private-key}
(#1508, thanks to @djdongjin) - Support ephemeral host ports (#1518, thanks to @zhan9san)
- New commands:
-
nerdctl image convert
:- New estargz flags:
--estargz-min-chunk-size=<SIZE>
,--estargz-external-toc
,--estargz-keep-diff-id
(#1504, thanks to @ktock) - New zstd flags:
--zstdchunked-record-in
,--zstdchunked-compression-level
,--zstdchunked-chunk-size
(#1496, thanks to @djdongjin) - Support OverlayBD (
--overlaybd
,--overlaybd-fs-type
,--overlaybd-dbstr
) (#1517, thanks to @HileQAQ)
- New estargz flags:
-
nerdctl network rm
:- Support removing a network by ID (#1581, thanks to @Mihai22125)
-
Misc:
- Support
/proc/sys/fs/binfmt_misc/rosetta
, for enabling Rosetta 2 for Linux on Lima v0.14 or later (#1552) - Removed the indirect dependency on
github.com/btcsuite/btcd/btcec
(secp256k1 elliptic curve cryptography library, NOT bitcoin daemon) that was introduced by the dependency ongithub.com/ipfs/go-ipfs-http-client
andgithub.com/libp2p/go-libp2p-core
for supporting IPFS.
This is NOT a bitcoin mining/trading code, but caused confusion to some people due to its package name. https://github.com/containerd/nerdctl/pull/1626/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6L65-L80 (#1626, thanks to @bsalunke)
- Support
-
nerdctl-full
: -
Project:
Full changes: https://github.com/containerd/nerdctl/milestone/24?closed=1
Thanks to @HileQAQ @Mihai22125 @Zheaoli @airmelt @aman556 @aznashwan @bsalunke @davidhsingyuchen @djdongjin @fahedouch @ktock @liubin @loheagn @mAddmHacks @manugupt1 @minuk-dev @sschepens @yankay @yuchanns @yzxiu @zhan9san
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.1.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.1.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.1.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 28536832 2022-12-12 01:12 nerdctl
-rwxr-xr-x root/root 21563 2022-12-12 01:11 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-12-12 01:11 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.1.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-12-12 01:26 bin/
-rwxr-xr-x 0/0 25485993 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 39552521 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602712 2022-12-12 01:21 bin/bypass4netns
-rwxr-xr-x 0/0 5111808 2022-12-12 01:21 bin/bypass4netnsd
-rwxr-xr-x 0/0 55100344 2022-12-12 01:23 bin/containerd
-rwxr-xr-x 0/0 10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21563 2022-12-12 01:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-12-12 01:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9768960 2022-12-12 01:23 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 60561376 2022-11-11 13:22 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20333008 2022-12-12 01:26 bin/ctd-decoder
-rwxr-xr-x 0/0 28135832 2022-12-12 01:22 bin/ctr
-rwxr-xr-x 0/0 29082227 2022-12-12 01:26 bin/ctr-enc
-rwxr-xr-x 0/0 30609440 2022-11-11 13:23 bin/ctr-remote
-rwxr-xr-x 0/0 1783392 2022-12-12 01:26 bin/fuse-overlayfs
-rwxr-xr-x 0/0 80964832 2022-11-22 14:33 bin/ipfs
-rwxr-xr-x 0/0 28504064 2022-12-12 01:21 bin/nerdctl
-rwxr-xr-x 0/0 9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0 11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0 13784656 2022-12-12 01:22 bin/runc
-rwxr-xr-x 0/0 2338128 2022-12-12 01:26 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-12-12 01:26 bin/tini
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/systemd/
drwxr-xr-x 0/0 0 2022-12-12 01:25 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-12-12 01:25 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-12-12 01:20 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-12-12 01:25 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-12-12 01:25 libexec/
drwxrwxr-x 0/0 0 2022-12-12 01:25 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/nerdctl/
-rw-r--r-- 0/0 77438 2022-12-12 01:11 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-12-12 01:21 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-12-12 01:11 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-12-12 01:11 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-12-12 01:11 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-12-12 01:11 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2022-12-12 01:11 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 7328 2022-12-12 01:11 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-12-12 01:11 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 787 2022-12-12 01:11 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14217 2022-12-12 01:11 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-12-12 01:11 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-12-12 01:11 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-12-12 01:11 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-12-12 01:11 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2596 2022-12-12 01:11 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-12-12 01:11 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2022-12-12 01:11 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-12-12 01:11 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5088 2022-12-12 01:11 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 10370 2022-12-12 01:11 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-12-12 01:26 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1152 2022-12-12 01:26 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5816 2022-12-12 01:26 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.1.0
- containerd: v1.6.12
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.6
- Stargz Snapshotter: v0.13.0
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.17.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license a...
v1.0.0
After nearly two years of development, nerdctl finally reached v1.0.0 🤓 .
A huge thanks to more than 80 contributors, 4,600 stargazers, and an uncountable number of users, for making this possible! 🎉
Also, Lima joined the CNCF Sandbox recently to popularize containerd/nerdctl for Mac users 🎉
Lima v0.13.0 will be released very soon with nerdctl v1.0.0.
Changes
-
nerdctl run
: -
nerdctl build
: -
nerdctl compose
:- Add
nerdctl compose version
command (#1389, thanks to @yardenshoham)
- Add
-
IPFS:
- Add more examples of Kubernetes (Kind) + IPFS (#1499, thanks to @ktock)
-
nerdctl-full:
- Update imgcrypt (1.1.7), BuildKit (0.10.5), stargz-snapshotter (0.12.1), Kubo (0.16.0) (#1454)
Full changes: https://github.com/containerd/nerdctl/milestone/23?closed=1
Thanks to @Bingmang @alebcay @davidhsingyuchen @fahedouch @iyear @ktock @manugupt1 @ningziwen @sshedi @yardenshoham @yuchanns
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.5 or v1.6.
About the binaries
- Minimal (
nerdctl-1.0.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-1.0.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-1.0.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27639808 2022-10-21 13:11 nerdctl
-rwxr-xr-x root/root 21562 2022-10-21 13:10 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-10-21 13:10 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-1.0.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-10-21 13:28 bin/
-rwxr-xr-x 0/0 25370211 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 39694633 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602648 2022-10-21 13:21 bin/bypass4netns
-rwxr-xr-x 0/0 5107712 2022-10-21 13:22 bin/bypass4netnsd
-rwxr-xr-x 0/0 54681048 2022-10-21 13:24 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-10-21 13:22 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-10-21 13:22 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9764864 2022-10-21 13:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59948992 2022-10-14 10:26 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20130655 2022-10-21 13:27 bin/ctd-decoder
-rwxr-xr-x 0/0 27913688 2022-10-21 13:24 bin/ctr
-rwxr-xr-x 0/0 28853414 2022-10-21 13:27 bin/ctr-enc
-rwxr-xr-x 0/0 30493408 2022-10-14 10:27 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-10-21 13:28 bin/fuse-overlayfs
-rwxr-xr-x 0/0 81162984 2022-10-04 10:42 bin/ipfs
-rwxr-xr-x 0/0 27607040 2022-10-21 13:22 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13785304 2022-10-21 13:22 bin/runc
-rwxr-xr-x 0/0 2338128 2022-10-21 13:27 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-10-21 13:28 bin/tini
drwxr-xr-x 0/0 0 2022-10-21 13:27 lib/
drwxr-xr-x 0/0 0 2022-10-21 13:27 lib/systemd/
drwxr-xr-x 0/0 0 2022-10-21 13:27 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-10-21 13:27 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-10-21 13:21 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-10-21 13:27 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-10-21 13:27 libexec/
drwxrwxr-x 0/0 0 2022-10-21 13:27 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-10-21 13:22 share/
drwxr-xr-x 0/0 0 2022-10-21 13:22 share/doc/
drwxr-xr-x 0/0 0 2022-10-21 13:22 share/doc/nerdctl/
-rw-r--r-- 0/0 72265 2022-10-21 13:10 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-10-21 13:22 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-10-21 13:10 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-10-21 13:10 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-10-21 13:10 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-10-21 13:10 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2022-10-21 13:10 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-10-21 13:10 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-10-21 13:10 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-10-21 13:10 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-10-21 13:10 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-10-21 13:10 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-10-21 13:10 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-10-21 13:10 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-10-21 13:10 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 1509 2022-10-21 13:10 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-10-21 13:10 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1308 2022-10-21 13:10 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-10-21 13:10 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5090 2022-10-21 13:10 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-10-21 13:10 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-10-21 13:28 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1149 2022-10-21 13:28 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5816 2022-10-21 13:28 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v1.0.0
- containerd: v1.6.8
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.5
- Stargz Snapshotter: v0.12.1
- imgcrypt: v1.1.7
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.16.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.16.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootle...
v0.23.0
This release features nerdctl compose run
and nerdctl run --privileged-without-host-devices
(safe privileged containers with Kata)
Changes
-
nerdctl compose run
:- Add
nerdctl compose run
command (#1340, #1351 thanks to @minuk-dev)
- Add
-
nerdctl.toml
: -
nerdctl run
:- Add
--privileged-without-host-devices
flag, for safe privileged containers with Kata (#1291, thanks to @liubin) - Support 3rd party log URIs in
--log-driver
(#1354, thanks to @manugupt1) - Fix incompatibility with crun (#1352)
- Add
-
nerdctl images
: -
nerdctl ps
: -
nerdctl stats
:- Fix output (#1298, thanks to @fahedouch)
-
nerdctl network prune
: -
nerdctl volume ls
:- Add
--size
flag (#1292, thanks to @manugupt1) - Add
--filter
flag (#1331, thanks to @yuchanns)
- Add
-
nerdctl login
:- Make the ServerAddress optional for the main docker registry (#1315, thanks to @ericpromislow, @ktock)
-
nerdctl --help
:- Simplify
nerdctl --help
(#135)
- Simplify
-
Misc:
- Update Go (1.19) (#1319)
-
nerdctl-full:
Full changes: https://github.com/containerd/nerdctl/milestone/22?closed=1
Thanks to @Zheaoli @ericpromislow @fatelei @junnplus @liubin @ktock @manugupt1 @minuk-dev @tal66 @thaJeztah @yuchanns
About the binaries
- Minimal (
nerdctl-0.23.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.23.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.23.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 28233728 2022-09-11 10:57 nerdctl
-rwxr-xr-x root/root 21562 2022-09-11 10:56 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-09-11 10:56 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.23.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-09-11 11:11 bin/
-rwxr-xr-x 0/0 25370211 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0 39685842 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3602648 2022-09-11 11:06 bin/bypass4netns
-rwxr-xr-x 0/0 5107712 2022-09-11 11:07 bin/bypass4netnsd
-rwxr-xr-x 0/0 54672856 2022-09-11 11:09 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-09-11 11:07 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-09-11 11:07 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9760768 2022-09-11 11:09 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 20117912 2022-09-11 11:11 bin/ctd-decoder
-rwxr-xr-x 0/0 27905496 2022-09-11 11:08 bin/ctr
-rwxr-xr-x 0/0 28833045 2022-09-11 11:11 bin/ctr-enc
-rwxr-xr-x 0/0 30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-09-11 11:11 bin/fuse-overlayfs
-rwxr-xr-x 0/0 78751848 2022-08-30 10:50 bin/ipfs
-rwxr-xr-x 0/0 28200960 2022-09-11 11:07 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13780440 2022-09-11 11:07 bin/runc
-rwxr-xr-x 0/0 2338128 2022-09-11 11:11 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-09-11 11:11 bin/tini
drwxr-xr-x 0/0 0 2022-09-11 11:11 lib/
drwxr-xr-x 0/0 0 2022-09-11 11:11 lib/systemd/
drwxr-xr-x 0/0 0 2022-09-11 11:11 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-09-11 11:11 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-09-11 11:06 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-09-11 11:11 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-09-11 11:11 libexec/
drwxrwxr-x 0/0 0 2022-09-11 11:11 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-09-11 11:07 share/
drwxr-xr-x 0/0 0 2022-09-11 11:07 share/doc/
drwxr-xr-x 0/0 0 2022-09-11 11:07 share/doc/nerdctl/
-rw-r--r-- 0/0 68994 2022-09-11 10:56 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-09-11 11:07 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-09-11 10:56 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-09-11 10:56 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-09-11 10:56 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-09-11 10:56 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3030 2022-09-11 10:56 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-09-11 10:56 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-09-11 10:56 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-09-11 10:56 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-09-11 10:56 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-09-11 10:56 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-09-11 10:56 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-09-11 10:56 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-09-11 10:56 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 1509 2022-09-11 10:56 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-09-11 10:56 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1308 2022-09-11 10:56 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-09-11 10:56 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5090 2022-09-11 10:56 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-09-11 10:56 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-09-11 11:11 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1150 2022-09-11 11:11 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5816 2022-09-11 11:11 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.23.0
- containerd: v1.6.8
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.4
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.15.0
- Tini: v0.19.0
- buildg: v0.4.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.15.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/3031541666
The sha256sum of the SHA256SUMS file itself is `0618af869428510f9cd77405b44535305fb02da9be03e5e4...
v0.22.2
Changes
Fix can't get final child's PID from pipe
error on rootless (v0.22.1 regression) (#1289)
Full changes: https://github.com/containerd/nerdctl/milestone/21?closed=1
About the binaries
- Minimal (
nerdctl-0.22.2-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.22.2-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.22.2-linux-amd64.tar.gz
-rwxr-xr-x root/root 27807744 2022-08-01 17:54 nerdctl
-rwxr-xr-x root/root 21562 2022-08-01 17:53 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-08-01 17:53 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.22.2-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-08-01 18:08 bin/
-rwxr-xr-x 0/0 25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0 349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0 39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339160 2022-08-01 18:02 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-08-01 18:03 bin/bypass4netnsd
-rwxr-xr-x 0/0 54217720 2022-08-01 18:05 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-08-01 18:03 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-08-01 18:03 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9650176 2022-08-01 18:05 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19699072 2022-08-01 18:08 bin/ctd-decoder
-rwxr-xr-x 0/0 27528120 2022-08-01 18:04 bin/ctr
-rwxr-xr-x 0/0 28345742 2022-08-01 18:08 bin/ctr-enc
-rwxr-xr-x 0/0 30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-08-01 18:08 bin/fuse-overlayfs
-rwxr-xr-x 0/0 78390320 2022-07-21 05:33 bin/ipfs
-rwxr-xr-x 0/0 27779072 2022-08-01 18:03 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13371904 2022-08-01 18:03 bin/runc
-rwxr-xr-x 0/0 2338128 2022-08-01 18:08 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-08-01 18:08 bin/tini
drwxr-xr-x 0/0 0 2022-08-01 18:07 lib/
drwxr-xr-x 0/0 0 2022-08-01 18:07 lib/systemd/
drwxr-xr-x 0/0 0 2022-08-01 18:07 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-08-01 18:07 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-08-01 18:02 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-08-01 18:07 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-08-01 18:07 libexec/
drwxrwxr-x 0/0 0 2022-08-01 18:07 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-08-01 18:03 share/
drwxr-xr-x 0/0 0 2022-08-01 18:03 share/doc/
drwxr-xr-x 0/0 0 2022-08-01 18:03 share/doc/nerdctl/
-rw-r--r-- 0/0 65820 2022-08-01 17:53 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-08-01 18:03 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-08-01 17:53 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-08-01 17:53 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-08-01 17:53 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-08-01 17:53 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-08-01 17:53 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-08-01 17:53 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-08-01 17:53 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-08-01 17:53 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-08-01 17:53 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-08-01 17:53 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-08-01 17:53 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-08-01 17:53 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-08-01 17:53 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 1509 2022-08-01 17:53 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-08-01 17:53 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1308 2022-08-01 17:53 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-08-01 17:53 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-08-01 17:53 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-08-01 17:53 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-08-01 18:08 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1150 2022-08-01 18:08 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5898 2022-08-01 18:08 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.22.2
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.14.0
- Tini: v0.19.0
- buildg: v0.3.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.14.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2776790958
The sha256sum of the SHA256SUMS file itself is 9ca098ad449dd434344bcac3bec8ff47d60ae01ee08dbaea190c3f8a5776dfd8
.
v0.22.1
The regression was fixed in v0.22.2.
This release finally implements nerdctl system prune
(with --all
).
Also fixes an issue that is related to logging in to Docker Hub via Rancher Desktop (#1270).
Changes
-
nerdctl system prune
: -
nerdctl network prune
: -
nerdctl run
:- Add
--oom-score-adj
flag (#1255, thanks to @manugupt1) - Support
--network=container:<container>
for sharing netns (#1214, thanks to @t1anz0ng)
- Add
-
nerdctl pull
:- Pass
https://index.docker.io/v1/
toGetAuthConfig()
for Docker Hub (#1270, thanks to @jandubois).
Fixes rancher-sandbox/rancher-desktop#2553 .
- Pass
-
nerdctl volume inspect
:- Add
--size
flag to show the volume size (#1269, thanks to @manugupt1)
- Add
-
nerdctl container inspect
: -
nerdctl ps
:- Show labels (#1260, thanks to @minik-dev)
-
nerdctl-full
:- go-ipfs (0.13.1) was replaced with Kubo (0.14.0) (#1286)
Full changes: https://github.com/containerd/nerdctl/milestone/20?closed=1
Thanks to @Zheaoli @fahedouch @jandubois @junnplus @liubin @manugupt1 @minik-dev @t1anz0ng @tosonoe
About the binaries
- Minimal (
nerdctl-0.22.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.22.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.22.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 27807744 2022-08-01 14:30 nerdctl
-rwxr-xr-x root/root 21562 2022-08-01 14:28 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-08-01 14:28 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.22.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-08-01 14:46 bin/
-rwxr-xr-x 0/0 25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0 349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0 39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-08-01 14:40 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-08-01 14:40 bin/bypass4netnsd
-rwxr-xr-x 0/0 54205432 2022-08-01 14:42 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-08-01 14:41 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-08-01 14:41 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9650176 2022-08-01 14:43 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19699000 2022-08-01 14:46 bin/ctd-decoder
-rwxr-xr-x 0/0 27519928 2022-08-01 14:42 bin/ctr
-rwxr-xr-x 0/0 28347894 2022-08-01 14:46 bin/ctr-enc
-rwxr-xr-x 0/0 30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-08-01 14:46 bin/fuse-overlayfs
-rwxr-xr-x 0/0 78390320 2022-07-21 05:33 bin/ipfs
-rwxr-xr-x 0/0 27774976 2022-08-01 14:41 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13367256 2022-08-01 14:41 bin/runc
-rwxr-xr-x 0/0 2338128 2022-08-01 14:46 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-08-01 14:46 bin/tini
drwxr-xr-x 0/0 0 2022-08-01 14:45 lib/
drwxr-xr-x 0/0 0 2022-08-01 14:45 lib/systemd/
drwxr-xr-x 0/0 0 2022-08-01 14:45 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-08-01 14:45 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-08-01 14:39 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-08-01 14:45 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-08-01 14:45 libexec/
drwxrwxr-x 0/0 0 2022-08-01 14:45 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-08-01 14:41 share/
drwxr-xr-x 0/0 0 2022-08-01 14:41 share/doc/
drwxr-xr-x 0/0 0 2022-08-01 14:41 share/doc/nerdctl/
-rw-r--r-- 0/0 65820 2022-08-01 14:28 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-08-01 14:41 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-08-01 14:28 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-08-01 14:28 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-08-01 14:28 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-08-01 14:28 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-08-01 14:28 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-08-01 14:28 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-08-01 14:28 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-08-01 14:28 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-08-01 14:28 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-08-01 14:28 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-08-01 14:28 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13268 2022-08-01 14:28 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-08-01 14:28 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 1509 2022-08-01 14:28 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-08-01 14:28 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1308 2022-08-01 14:28 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-08-01 14:28 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-08-01 14:28 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-08-01 14:28 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-08-01 14:46 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1150 2022-08-01 14:46 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5898 2022-08-01 14:46 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.22.1
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- Kubo (IPFS): v0.14.0
- Tini: v0.19.0
- buildg: v0.3.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.14.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2775572569
The sha256sum of the SHA256SUMS file itself is 19569a99eba413ca43a8b1edaf6964a791503bfe2452a547ff2f94568acd38d5
.
v0.22.0
This release adds nerdctl (container|image|volume) prune
commands. No support for nerdctl (network|system) prune
yet.
This release also introduces the support for Nydus Snapshotter and Containerfile
.
Changes
-
nerdctl container prune
- Add
nerdctl container prune
command (#1180, thanks to @junnplus ; also thanks to @Shikachuu (#806) and @click2cloud-lamda (#997))
- Add
-
nerdctl image prune
- Add
nerdctl image prune
command (#1194, thanks to @junnplus ; also thanks to @Shikachuu (#806))
- Add
-
nerdctl volume prune
:- Add
nerdctl volume prune
command (#1208, thanks to @junnplus ; also thanks to @click2cloud-lamda (#997))
- Add
-
nerdctl run
:- Support Nydus Snapshotter (#1163, thanks to @loheagn)
- Add
--group-add
flag (#1131, thanks to @junnplus) - Add
--dns-search
and--dns-opt
flags (#1169, thanks to @junnplus) - Add
--stop-signal
and--stop-timeout
flags (#1171, thanks to @junnplus) - Add
--kernel-memory
flag (NOP) (#1197, thanks to @ningmingxiao)
-
nerdctl update
:- Add
--blkio-weight
flag (#1205, thanks to @ningmingxiao)
- Add
-
nerdctl build
:- Fallback to
Containerfile
whenDockerfile
is not present (#1219, thanks to @manugupt1) - Allow specifying multiple tags (#1173, thanks to @manugupt1)
- Fallback to
-
nerdctl images
: -
nerdctl ps
: -
nerdctl version
:- Display buildctl and runc version (#1209, #1229, thanks to @manugupt1)
-
docs:
-
nerdctl-full:
- Update imgcrypt (1.1.6), stargz-snapshotter (0.12.0), IPFS (0.13.1), buildg (0.3.0) (#1227)
-
MAINTAINERS:
- Add Zheao Li @Zheaoli as a REVIEWER
Full changes: https://github.com/containerd/nerdctl/milestone/19?closed=1
Thanks to @BigVan @TianZong48 @Shikachuu @Zheaoli @click2cloud-lamda @fahedouch @ilmanzo @imeoer @junnplus @liubin @loheagn @manugupt1 @ningmingxiao @sondavidb
About the binaries
- Minimal (
nerdctl-0.22.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.22.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.22.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27832320 2022-07-17 02:42 nerdctl
-rwxr-xr-x root/root 21562 2022-07-17 02:40 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-07-17 02:40 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.22.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-07-17 02:57 bin/
-rwxr-xr-x 0/0 25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23629824 2022-07-01 07:19 bin/buildg
-rwxr-xr-x 0/0 349 2022-07-01 07:19 bin/buildg.sh
-rwxr-xr-x 0/0 39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-07-17 02:51 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-07-17 02:52 bin/bypass4netnsd
-rwxr-xr-x 0/0 54205432 2022-07-17 02:54 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-07-17 02:53 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-07-17 02:53 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9650176 2022-07-17 02:54 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 59631824 2022-07-11 12:47 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19699024 2022-07-17 02:57 bin/ctd-decoder
-rwxr-xr-x 0/0 27519928 2022-07-17 02:53 bin/ctr
-rwxr-xr-x 0/0 28352054 2022-07-17 02:57 bin/ctr-enc
-rwxr-xr-x 0/0 30124112 2022-07-11 12:47 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-07-17 02:57 bin/fuse-overlayfs
-rwxr-xr-x 0/0 77796944 2022-07-06 15:25 bin/ipfs
-rwxr-xr-x 0/0 27803648 2022-07-17 02:53 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13367256 2022-07-17 02:53 bin/runc
-rwxr-xr-x 0/0 2338128 2022-07-17 02:57 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-07-17 02:57 bin/tini
drwxr-xr-x 0/0 0 2022-07-17 02:56 lib/
drwxr-xr-x 0/0 0 2022-07-17 02:56 lib/systemd/
drwxr-xr-x 0/0 0 2022-07-17 02:57 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-07-17 02:57 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-07-17 02:51 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-07-17 02:57 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-07-17 02:56 libexec/
drwxrwxr-x 0/0 0 2022-07-17 02:56 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-07-17 02:53 share/
drwxr-xr-x 0/0 0 2022-07-17 02:53 share/doc/
drwxr-xr-x 0/0 0 2022-07-17 02:53 share/doc/nerdctl/
-rw-r--r-- 0/0 64913 2022-07-17 02:40 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-07-17 02:53 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-07-17 02:40 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-07-17 02:40 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-07-17 02:40 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-07-17 02:40 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-07-17 02:40 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-07-17 02:40 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-07-17 02:40 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-07-17 02:40 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-07-17 02:40 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-07-17 02:40 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-07-17 02:40 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13215 2022-07-17 02:40 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-07-17 02:40 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 1509 2022-07-17 02:40 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2022-07-17 02:40 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1308 2022-07-17 02:40 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15626 2022-07-17 02:40 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-07-17 02:40 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-07-17 02:40 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-07-17 02:57 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1146 2022-07-17 02:57 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5898 2022-07-17 02:57 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.22.0
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.12.0
- imgcrypt: v1.1.6
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.13.1
- Tini: v0.19.0
- buildg: v0.3.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.13.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.s...