v2.0.0

nerdctl v2.0 is released in unison with containerd v2.0, but it continues to work with containerd v1.6 and v1.7 too.

The release of nerdctl v2.1 is NOT planned to be synchronized with containerd v2.1.

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Added --systemd=(true|false|always) flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Added --ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Added --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Added --sig-proxy flag (#3043, thanks to @CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @yankay)
  • Added --attach flag (#3157, thanks to @CodeChanning)
  • The restriction for --name is relaxed to support longer names (#3279, thanks to @Shubhranshu153)
  • Added --security-opt systempaths=unconfined flag (#3533, thanks to @austinvazquez)
  • Added --network ns:<PATH> flag (#3538, thanks to @dancavallaro)
  • Added the support for oci-layout image references (#3537, thanks to @austinvazquez)
  • Added --log-driver=none flag (#3633, thanks to @coderbirju)
• nerdctl build:
  • Added --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Added --pull flag (#3074, thanks to @sondavidb)
  • Added the support for Windows (#2587, thanks to @TBBle)
  • Added the support for oci-layout build contexts (#3327, thanks to @austinvazquez)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @apostasie and @yankay)
• nerdctl inspect:
  • Added --size flag (#3021, thanks to @apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @apostasie)
  • Enhanced support for DHCP (#3001, thanks to @apostasie)
• nerdctl compose up:
  • Added --abort-on-container-exit flag (#2873, thanks to @alegrey91)
• nerdctl builder prune:
  • Added --all flag (#3316, thanks to @austinvazquez)
  • Added --force flag (#3316, thanks to @austinvazquez)
• nerdctl image prune:
  • Added --filter flag (#3319, thanks to @austinvazquez)
• nerdctl image load:
  • Added --quiet flag (#3551, thanks to @austinvazquez)
• nerdct-full:
  • Updated the components (containerd v2.0, runc v1.2, BuildKit v0.17, etc.). See the Included components below.
  • Removed IPFS (Kubo). Can be still installed manually. (#3532, thanks to @yankay)
• Misc:
  • Refactoring and stability improvements (Many PRs, thanks to @apostasie et al.)
• And more!

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @CerberusQc @CodeChanning @Iceber @Shikachuu @Shubhranshu153 @TBBle @THLIVSQAZ @TinaMor @abitrolly @alegrey91 @apostasie @austinvazquez @bobcallaway @cezar-r @chews93319 @coderbirju @curlwget @dancavallaro @djdongjin @dmcgowan @fahedouch @frits-v @fwilhe2 @haytok @jmpargana @kebe7jun @ktock @lingdie @manugupt1 @midnight-wonderer @minuk-dev @monirul @pendo324 @qianxi0410 @roman-kiselenko @sazzy4o @sondavidb @testwill @thaJeztah @xyz-li @yankay @zjumoon01 @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6, v1.7, or v2.0.

About the binaries

• Minimal (nerdctl-2.0.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  26366104 2024-11-06 00:32 nerdctl
-rwxr-xr-x root/root     22657 2024-11-06 00:32 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8708 2024-11-06 00:32 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-11-06 00:39 bin/
-rwxr-xr-x 0/0        29493543 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-11-06 00:38 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        60229721 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        15311568 2024-11-06 00:37 bin/bypass4netns
-rwxr-xr-x 0/0         5882008 2024-11-06 00:37 bin/bypass4netnsd
-rwxr-xr-x 0/0        38868944 2024-11-06 00:38 bin/containerd
-rwxr-xr-x 0/0        10494104 2024-11-05 23:12 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22657 2024-11-06 00:39 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8708 2024-11-06 00:39 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         7717016 2024-11-06 00:38 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        22214956 2024-11-06 00:39 bin/ctd-decoder
-rwxr-xr-x 0/0        19706008 2024-11-06 00:38 bin/ctr
-rwxr-xr-x 0/0        29814020 2024-11-06 00:39 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1789968 2024-11-06 00:39 bin/fuse-overlayfs
-rwxr-xr-x 0/0        26333336 2024-11-06 00:39 bin/nerdctl
-rwxr-xr-x 0/0        11346380 2024-08-17 19:28 bin/rootlessctl
-rwxr-xr-x 0/0        13089548 2024-08-17 19:28 bin/rootlesskit
-rwxr-xr-x 0/0        15921736 2024-11-06 00:37 bin/runc
-rwxr-xr-x 0/0         2354520 2024-11-06 00:39 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-11-06 00:39 bin/tini
drwxr-xr-x 0/0               0 2024-11-06 00:38 lib/
drwxr-xr-x 0/0               0 2024-11-06 00:38 lib/systemd/
drwxr-xr-x 0/0               0 2024-11-06 00:38 lib/systemd/system/
-rw-r--r-- 0/0            1325 2024-11-06 00:38 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1264 2024-11-06 00:37 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-11-06 00:38 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-11-06 00:38 libexec/
drwxr-xr-x 0/0               0 2024-11-06 00:38 libexec/cni/
-rw-r--r-- 0/0           11357 2024-10-15 09:37 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-10-15 09:37 libexec/cni/README.md
-rwxr-xr-x 0/0         4648054 2024-10-15 09:36 libexec/cni/bandwidth
-rwxr-xr-x 0/0         5283567 2024-10-15 09:37 libexec/cni/bridge
-rwxr-xr-x 0/0        12771199 2024-10-15 09:37 libexec/cni/dhcp
-rwxr-xr-x 0/0         4843811 2024-10-15 09:37 libexec/cni/dummy
-rwxr-xr-x 0/0         5312426 2024-10-15 09:36 libexec/cni/firewall
-rwxr-xr-x 0/0         4784447 2024-10-15 09:37 libexec/cni/host-device
-rwxr-xr-x 0/0         4047543 2024-10-15 09:37 libexec/cni/host-local
-rwxr-xr-x 0/0   ...

v2.0.0-rc.3

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Added --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Added --ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Added --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Added --sig-proxy flag (#3043, thanks to @CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @yankay)
  • Added --attach flag (#3157, thanks to @CodeChanning)
  • The restriction for --name is relaxed to support longer names (#3279, thanks to @Shubhranshu153)
  • Added --security-opt systempaths=unconfined flag (#3533, thanks to @austinvazquez)
  • Added --network ns:<PATH> flag (#3538, thanks to @dancavallaro)
  • Added the support for oci-layout image references (#3537, thanks to @austinvazquez)
• nerdctl build:
  • Added --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Added --pull flag (#3074, thanks to @sondavidb)
  • Added the support for Windows (#2587, thanks to @TBBle)
  • Added the support for oci-layout build contexts (#3327, thanks to @austinvazquez)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @apostasie and @yankay)
• nerdctl inspect:
  • Added --size flag (#3021, thanks to @apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @apostasie)
  • Enhanced support for DHCP (#3001, thanks to @apostasie)
• nerdctl compose up:
  • Added --abort-on-container-exit flag (#2873, thanks to @alegrey91)
• nerdctl builder prune:
  • Added --all flag (#3316, thanks to @austinvazquez)
  • Added --force flag (#3316, thanks to @austinvazquez)
• nerdctl image prune:
  • Added --filter flag (#3319, thanks to @austinvazquez)
• nerdctl image load:
  • Added --quiet flag (#3551, thanks to @austinvazquez)
• nerdct-full:
  • Updated the components. See the Included components below.
  • Removed IPFS (Kubo). Can be still installed manually. (#3532, thanks to @yankay)
• Misc:
  • Refactoring and stability improvements (Many PRs, thanks to @apostasie et al.)
• And more!

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @CerberusQc @CodeChanning @Iceber @Shikachuu @Shubhranshu153 @TBBle @THLIVSQAZ @TinaMor @abitrolly @alegrey91 @apostasie @austinvazquez @bobcallaway @cezar-r @chews93319 @curlwget @dancavallaro @djdongjin @dmcgowan @fahedouch @frits-v @fwilhe2 @haytok @jmpargana @kebe7jun @ktock @lingdie @manugupt1 @midnight-wonderer @minuk-dev @monirul @pendo324 @qianxi0410 @roman-kiselenko @sazzy4o @sondavidb @testwill @thaJeztah @xyz-li @yankay @zjumoon01 @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6, v1.7, or v2.0.

About the binaries

• Minimal (nerdctl-2.0.0-rc.3-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-rc.3-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-rc.3-linux-amd64.tar.gz

-rwxr-xr-x root/root  26316952 2024-10-24 12:51 nerdctl
-rwxr-xr-x root/root     22657 2024-10-24 12:50 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8708 2024-10-24 12:50 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-rc.3-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-10-24 12:58 bin/
-rwxr-xr-x 0/0        29866025 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-10-24 12:57 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        59727892 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        15311568 2024-10-24 12:56 bin/bypass4netns
-rwxr-xr-x 0/0         5882008 2024-10-24 12:56 bin/bypass4netnsd
-rwxr-xr-x 0/0        38794352 2024-10-24 12:57 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22657 2024-10-24 12:56 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8708 2024-10-24 12:56 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         7708824 2024-10-24 12:57 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        21810318 2024-10-24 12:57 bin/ctd-decoder
-rwxr-xr-x 0/0        19697816 2024-10-24 12:57 bin/ctr
-rwxr-xr-x 0/0        31136840 2024-10-24 12:57 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1789968 2024-10-24 12:57 bin/fuse-overlayfs
-rwxr-xr-x 0/0        26284184 2024-10-24 12:56 bin/nerdctl
-rwxr-xr-x 0/0        11346380 2024-08-17 19:28 bin/rootlessctl
-rwxr-xr-x 0/0        13089548 2024-08-17 19:28 bin/rootlesskit
-rwxr-xr-x 0/0        15967360 2024-10-24 12:56 bin/runc
-rwxr-xr-x 0/0         2354520 2024-10-24 12:57 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-10-24 12:57 bin/tini
drwxr-xr-x 0/0               0 2024-10-24 12:57 lib/
drwxr-xr-x 0/0               0 2024-10-24 12:57 lib/systemd/
drwxr-xr-x 0/0               0 2024-10-24 12:57 lib/systemd/system/
-rw-r--r-- 0/0            1325 2024-10-24 12:57 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1264 2024-10-24 12:55 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-10-24 12:57 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-10-24 12:57 libexec/
drwxr-xr-x 0/0               0 2024-10-24 12:57 libexec/cni/
-rw-r--r-- 0/0           11357 2024-10-15 09:37 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-10-15 09:37 libexec/cni/README.md
-rwxr-xr-x 0/0         4648054 2024-10-15 09:36 libexec/cni/bandwidth
-rwxr-xr-x 0/0         5283567 2024-10-15 09:37 libexec/cni/bridge
-rwxr-xr-x 0/0        12771199 2024-10-15 09:37 libexec/cni/dhcp
-rwxr-xr-x 0/0         4843811 2024-10-15 09:37 libexec/cni/dummy
-rwxr-xr-x 0/0         5312426 2024-10-15 09:36 libexec/cni/firewall
-rwxr-xr-x 0/0         4784447 2024-10-15 09:37 libexec/cni/host-device
-rwxr-xr-x 0/0         4047543 2024-10-15 09:37 libexec/cni/host-local
-rwxr-xr-x 0/0         4860660 2024-10-15 09:37 libexec/cni/ipvlan
-rwxr-xr-x 0/0         4107060 2024-10-15 09:37 libexec/cni/loopback
-rwxr-xr-x 0/0         4896553 2024-10-15 09:37 libexec/cni/macvlan
-rwxr-xr-x 0/0         4703145 2024-10-15 09:36 libexec/cni/portmap
-rwxr-xr-x 0/0         5068216 2024-10-15 09:37 libexec/cni/ptp
-rwxr-xr-x 0/...

v2.0.0-rc.2

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Add --sig-proxy flag (#3043, thanks to @CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @yankay)
  • Add --attach flag (#3157, thanks to @CodeChanning)
  • The restriction for --name is relaxed to support longer names (#3279, thanks to @Shubhranshu153)
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Add --pull flag (#3074, thanks to @sondavidb)
  • Support Windows (#2587, thanks to @TBBle)
  • Support oci-layout build contexts (#3327, thanks to @austinvazquez)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @apostasie and @yankay)
• nerdctl inspect:
  • Add --size flag (#3021, thanks to @apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @apostasie)
  • Enhanced support for DHCP (#3001, thanks to @apostasie)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)
• nerdctl builder prune:
  • Add --all flag (#3316, thanks to @austinvazquez)
  • Add --force flag (#3316, thanks to @austinvazquez)
• nerdctl image prune:
  • Add --filter flag (#3319, thanks to @austinvazquez)
• nerdct-full:
  • Updated the components. See the Included components below.
• Misc:
  • Refactoring and stability improvements
• And more!

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @CerberusQc @CodeChanning @Iceber @Shikachuu @Shubhranshu153 @TBBle @THLIVSQAZ @TinaMor @abitrolly @alegrey91 @austinvazquez @apostasie @baijia @curlwget @djdongjin @dmcgowan @fahedouch @frits-v @fwilhe2 @jmpargana @kebe7jun @ktock @lingdie @manugupt1 @midnight-wonderer @minuk-dev @monirul @pendo324 @qianxi0410 @roman-kiselenko @sazzy4o @sondavidb @testwill @thaJeztah @xyz-li @yankay @zjumoon01 @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6, v1.7, or v2.0.

About the binaries

• Minimal (nerdctl-2.0.0-rc.2-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-rc.2-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-rc.2-linux-amd64.tar.gz

-rwxr-xr-x root/root  26001560 2024-09-10 07:06 nerdctl
-rwxr-xr-x root/root     22657 2024-09-10 07:06 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8708 2024-09-10 07:06 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-rc.2-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-09-10 07:13 bin/
-rwxr-xr-x 0/0        29847294 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-09-10 07:13 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        59650658 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        15311568 2024-09-10 07:12 bin/bypass4netns
-rwxr-xr-x 0/0         5882008 2024-09-10 07:12 bin/bypass4netnsd
-rwxr-xr-x 0/0        38446832 2024-09-10 07:13 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22657 2024-09-10 07:12 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8708 2024-09-10 07:12 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        14901400 2024-09-10 07:13 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        21810226 2024-09-10 07:13 bin/ctd-decoder
-rwxr-xr-x 0/0        19841176 2024-09-10 07:12 bin/ctr
-rwxr-xr-x 0/0        31140204 2024-09-10 07:13 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1789968 2024-09-10 07:13 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67393688 2024-09-10 07:13 bin/ipfs
-rwxr-xr-x 0/0        25968792 2024-09-10 07:12 bin/nerdctl
-rwxr-xr-x 0/0        11346380 2024-08-17 19:28 bin/rootlessctl
-rwxr-xr-x 0/0        13089548 2024-08-17 19:28 bin/rootlesskit
-rwxr-xr-x 0/0        15835800 2024-09-10 07:12 bin/runc
-rwxr-xr-x 0/0         2354520 2024-09-10 07:13 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-09-10 07:13 bin/tini
drwxr-xr-x 0/0               0 2024-09-10 07:13 lib/
drwxr-xr-x 0/0               0 2024-09-10 07:13 lib/systemd/
drwxr-xr-x 0/0               0 2024-09-10 07:13 lib/systemd/system/
-rw-r--r-- 0/0            1312 2024-09-10 07:13 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1251 2024-09-10 07:11 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-09-10 07:13 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-09-10 07:13 libexec/
drwxr-xr-x 0/0               0 2024-09-10 07:13 libexec/cni/
-rw-r--r-- 0/0           11357 2024-06-17 15:51 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-06-17 15:51 libexec/cni/README.md
-rwxr-xr-x 0/0         4272898 2024-06-17 15:51 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4788191 2024-06-17 15:51 libexec/cni/bridge
-rwxr-xr-x 0/0        11419738 2024-06-17 15:51 libexec/cni/dhcp
-rwxr-xr-x 0/0         4424930 2024-06-17 15:51 libexec/cni/dummy
-rwxr-xr-x 0/0         4943846 2024-06-17 15:51 libexec/cni/firewall
-rwxr-xr-x 0/0         4345300 2024-06-17 15:51 libexec/cni/host-device
-rwxr-xr-x 0/0         3679575 2024-06-17 15:51 libexec/cni/host-local
-rwxr-xr-x 0/0         4443729 2024-06-17 15:51 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3750882 2024-06-17 15:51 libexec/cni/loopback
-rwxr-xr-x 0/0         4480422 2024-06-17 15:51 libexec/cni/macvlan
-rwxr-xr-x 0/0         4228332 2024-06-17 15:51 libexec/cni/portmap
-rwxr-xr-x 0/0         4602833 2024-06-17 15:51 libexec/cni/ptp
-rwxr-xr-x 0/0         3957166 2024-06-17 15:51 libexec/cni/sbr
-rwxr-xr-x 0/0         3223947 2024-06-17 15:51 libexec/cni/static
-rwxr-xr-x 0/0         4503742 2024-06-17 15:51 libexec/cni/tap
-rwxr-xr-x 0/0         3838043 2024-06-17 15:51 libexec/cni/tuning
-rwxr-xr-x 0/0         4440528 2024-06-17 15:51 libexec/cni/vlan
-rwxr-xr-x 0/0         4103500 2024-06-17 15:51 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-09-10 07:12 share/
drwxr-xr-x 0/0               0 2024-09-10 07:12 share/doc/
drw...

v1.7.7

Changes

• Several minor backports from v2.0 RC (#3422, thanks to @Shubhranshu153)

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6 or v1.7.

About the binaries

• Minimal (nerdctl-1.7.7-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-1.7.7-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-1.7.7-linux-amd64.tar.gz

-rwxr-xr-x root/root  25985176 2024-09-10 06:39 nerdctl
-rwxr-xr-x root/root     21916 2024-09-10 06:38 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7187 2024-09-10 06:38 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-1.7.7-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-09-10 06:46 bin/
-rwxr-xr-x 0/0        29847294 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0         4788191 2015-10-21 00:00 bin/buildkit-cni-bridge
-rwxr-xr-x 0/0         4943846 2015-10-21 00:00 bin/buildkit-cni-firewall
-rwxr-xr-x 0/0         3679575 2015-10-21 00:00 bin/buildkit-cni-host-local
-rwxr-xr-x 0/0         3750882 2015-10-21 00:00 bin/buildkit-cni-loopback
-rwxr-xr-x 0/0        59650658 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        15311568 2024-09-10 06:45 bin/bypass4netns
-rwxr-xr-x 0/0         5882008 2024-09-10 06:45 bin/bypass4netnsd
-rwxr-xr-x 0/0        39861392 2024-09-10 06:46 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21916 2024-09-10 06:45 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7187 2024-09-10 06:45 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12841112 2024-09-10 06:46 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        21810226 2024-09-10 06:46 bin/ctd-decoder
-rwxr-xr-x 0/0        19681432 2024-09-10 06:45 bin/ctr
-rwxr-xr-x 0/0        31140204 2024-09-10 06:46 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-09-10 06:46 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67393688 2024-09-10 06:46 bin/ipfs
-rwxr-xr-x 0/0        25956504 2024-09-10 06:45 bin/nerdctl
-rwxr-xr-x 0/0        11346380 2024-08-17 19:28 bin/rootlessctl
-rwxr-xr-x 0/0        13089548 2024-08-17 19:28 bin/rootlesskit
-rwxr-xr-x 0/0        15835800 2024-09-10 06:44 bin/runc
-rwxr-xr-x 0/0         2354520 2024-09-10 06:46 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-09-10 06:46 bin/tini
drwxr-xr-x 0/0               0 2024-09-10 06:46 lib/
drwxr-xr-x 0/0               0 2024-09-10 06:46 lib/systemd/
drwxr-xr-x 0/0               0 2024-09-10 06:46 lib/systemd/system/
-rw-r--r-- 0/0            1475 2024-09-10 06:46 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1414 2024-09-10 06:43 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-09-10 06:46 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-09-10 06:46 libexec/
drwxr-xr-x 0/0               0 2024-09-10 06:46 libexec/cni/
-rw-r--r-- 0/0           11357 2024-06-17 15:51 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-06-17 15:51 libexec/cni/README.md
-rwxr-xr-x 0/0         4272898 2024-06-17 15:51 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4788191 2024-06-17 15:51 libexec/cni/bridge
-rwxr-xr-x 0/0        11419738 2024-06-17 15:51 libexec/cni/dhcp
-rwxr-xr-x 0/0         4424930 2024-06-17 15:51 libexec/cni/dummy
-rwxr-xr-x 0/0         4943846 2024-06-17 15:51 libexec/cni/firewall
-rwxr-xr-x 0/0         4345300 2024-06-17 15:51 libexec/cni/host-device
-rwxr-xr-x 0/0         3679575 2024-06-17 15:51 libexec/cni/host-local
-rwxr-xr-x 0/0         4443729 2024-06-17 15:51 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3750882 2024-06-17 15:51 libexec/cni/loopback
-rwxr-xr-x 0/0         4480422 2024-06-17 15:51 libexec/cni/macvlan
-rwxr-xr-x 0/0         4228332 2024-06-17 15:51 libexec/cni/portmap
-rwxr-xr-x 0/0         4602833 2024-06-17 15:51 libexec/cni/ptp
-rwxr-xr-x 0/0         3957166 2024-06-17 15:51 libexec/cni/sbr
-rwxr-xr-x 0/0         3223947 2024-06-17 15:51 libexec/cni/static
-rwxr-xr-x 0/0         4503742 2024-06-17 15:51 libexec/cni/tap
-rwxr-xr-x 0/0         3838043 2024-06-17 15:51 libexec/cni/tuning
-rwxr-xr-x 0/0         4440528 2024-06-17 15:51 libexec/cni/vlan
-rwxr-xr-x 0/0         4103500 2024-06-17 15:51 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-09-10 06:45 share/
drwxr-xr-x 0/0               0 2024-09-10 06:45 share/doc/
drwxr-xr-x 0/0               0 2024-09-10 06:45 share/doc/nerdctl/
-rw-r--r-- 0/0           12480 2024-09-10 06:38 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-09-10 06:38 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-09-10 06:38 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-09-10 06:38 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2024-09-10 06:38 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           74639 2024-09-10 06:38 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-09-10 06:38 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-09-10 06:38 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2024-09-10 06:38 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2024-09-10 06:38 share/doc/nerdctl/docs/cvmfs.md
-rw-r--r-- 0/0            2435 2024-09-10 06:38 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2024-09-10 06:38 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2024-09-10 06:38 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2024-09-10 06:38 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3228 2024-09-10 06:38 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           14463 2024-09-10 06:38 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2024-09-10 06:38 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            2960 2024-09-10 06:38 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0            2596 2024-09-10 06:38 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2024-09-10 06:38 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1876 2024-09-10 06:38 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15657 2024-09-10 06:38 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5088 2024-09-10 06:38 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            2015 2024-09-10 06:38 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0           10312 2024-09-10 06:38 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2024-09-10 06:46 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1154 2024-09-10 06:46 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            6954 2024-09-10 06:46 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v1.7.7
- containerd: v1.7.22
- runc: v1.1.14
- CNI plugins: v1.5.1
- BuildKit: v0.15.2
- Stargz Snapshotter: v0.15.1
- imgcrypt: v1.1.11
- RootlessKit: v2.3.1
- slirp4netns: v1.3.1
- bypass4netns: v0.4.1
- fuse-overlayfs: v1.13
- containerd-fuse-overlayfs: v1.0.8
- Kubo (IPFS): v0.29.0
- Tini: v0.19.0
- buildg: v0.4.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.3.1/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.13/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.29.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/10787137852

The sha256sum of the SHA256SUMS file itself is 7dead4b0e0336c676bd0a848baeba1530a6f9f5fbb939fbdde589bb9816487f1 .

---

Release manager: @AkihiroSuda

v2.0.0-rc.1

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Add --sig-proxy flag (#3043, thanks to @CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @yankay)
  • Add --attach flag (#3157, thanks to @CodeChanning)
  • The restriction for --name is relaxed to support longer names (#3279, thanks to @Shubhranshu153)
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Add --pull flag (#3074, thanks to @sondavidb)
  • Support Windows (#2587, thanks to @TBBle)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @apostasie and @yankay)
• nerdctl inspect:
  • Add --size flag (#3021, thanks to @apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @apostasie)
  • Enhanced support for DHCP (#3001, thanks to @apostasie)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)
• nerdctl builder prune:
  • Add --all flag (#3316, thanks to @austinvazquez)
  • Add --force flag (#3316, thanks to @austinvazquez)
• nerdctl image prune:
  • Add --filter flag (#3319, thanks to @austinvazquez)
• nerdct-full:
  • (See the Included components below)
• And more!

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @CodeChanning @Iceber @Shikachuu @Shubhranshu153 @TBBle @THLIVSQAZ @TinaMor @abitrolly @alegrey91 @austinvazquez @apostasie @baijia @djdongjin @dmcgowan @fahedouch @frits-v @fwilhe2 @jmpargana @kebe7jun @ktock @lingdie @manugupt1 @midnight-wonderer @minuk-dev @monirul @qianxi0410 @roman-kiselenko @sazzy4o @sondavidb @testwill @thaJeztah @xyz-li @yankay @zjumoon01 @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6, v1.7, or v2.0.

About the binaries

• Minimal (nerdctl-2.0.0-rc.1-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-rc.1-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-rc.1-linux-amd64.tar.gz

-rwxr-xr-x root/root  25792664 2024-08-17 20:42 nerdctl
-rwxr-xr-x root/root     22657 2024-08-17 20:42 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8708 2024-08-17 20:42 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-rc.1-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-08-17 20:50 bin/
-rwxr-xr-x 0/0        29847294 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-08-17 20:49 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        59650658 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        15311568 2024-08-17 20:48 bin/bypass4netns
-rwxr-xr-x 0/0         5873816 2024-08-17 20:48 bin/bypass4netnsd
-rwxr-xr-x 0/0        37802288 2024-08-17 20:49 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22657 2024-08-17 20:48 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8708 2024-08-17 20:48 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        13099160 2024-08-17 20:49 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        21810253 2024-08-17 20:50 bin/ctd-decoder
-rwxr-xr-x 0/0        19042456 2024-08-17 20:48 bin/ctr
-rwxr-xr-x 0/0        31133415 2024-08-17 20:50 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1789968 2024-08-17 20:50 bin/fuse-overlayfs
-rwxr-xr-x 0/0        67381454 2024-08-17 20:49 bin/ipfs
-rwxr-xr-x 0/0        25759896 2024-08-17 20:48 bin/nerdctl
-rwxr-xr-x 0/0        11346380 2024-08-17 19:28 bin/rootlessctl
-rwxr-xr-x 0/0        13089548 2024-08-17 19:28 bin/rootlesskit
-rwxr-xr-x 0/0        15747848 2024-08-17 20:48 bin/runc
-rwxr-xr-x 0/0         2354520 2024-08-17 20:50 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-08-17 20:50 bin/tini
drwxr-xr-x 0/0               0 2024-08-17 20:49 lib/
drwxr-xr-x 0/0               0 2024-08-17 20:49 lib/systemd/
drwxr-xr-x 0/0               0 2024-08-17 20:49 lib/systemd/system/
-rw-r--r-- 0/0            1312 2024-08-17 20:49 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1251 2024-08-17 20:47 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-08-17 20:49 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-08-17 20:49 libexec/
drwxr-xr-x 0/0               0 2024-08-17 20:49 libexec/cni/
-rw-r--r-- 0/0           11357 2024-06-17 15:51 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-06-17 15:51 libexec/cni/README.md
-rwxr-xr-x 0/0         4272898 2024-06-17 15:51 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4788191 2024-06-17 15:51 libexec/cni/bridge
-rwxr-xr-x 0/0        11419738 2024-06-17 15:51 libexec/cni/dhcp
-rwxr-xr-x 0/0         4424930 2024-06-17 15:51 libexec/cni/dummy
-rwxr-xr-x 0/0         4943846 2024-06-17 15:51 libexec/cni/firewall
-rwxr-xr-x 0/0         4345300 2024-06-17 15:51 libexec/cni/host-device
-rwxr-xr-x 0/0         3679575 2024-06-17 15:51 libexec/cni/host-local
-rwxr-xr-x 0/0         4443729 2024-06-17 15:51 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3750882 2024-06-17 15:51 libexec/cni/loopback
-rwxr-xr-x 0/0         4480422 2024-06-17 15:51 libexec/cni/macvlan
-rwxr-xr-x 0/0         4228332 2024-06-17 15:51 libexec/cni/portmap
-rwxr-xr-x 0/0         4602833 2024-06-17 15:51 libexec/cni/ptp
-rwxr-xr-x 0/0         3957166 2024-06-17 15:51 libexec/cni/sbr
-rwxr-xr-x 0/0         3223947 2024-06-17 15:51 libexec/cni/static
-rwxr-xr-x 0/0         4503742 2024-06-17 15:51 libexec/cni/tap
-rwxr-xr-x 0/0         3838043 2024-06-17 15:51 libexec/cni/tuning
-rwxr-xr-x 0/0         4440528 2024-06-17 15:51 libexec/cni/vlan
-rwxr-xr-x 0/0         4103500 2024-06-17 15:51 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-08-17 20:48 share/
drwxr-xr-x 0/0               0 2024-08-17 20:48 share/doc/
drwxr-xr-x 0/0               0 2024-08-17 20:48 share/doc/nerdctl/
-rw-r--r-- 0/0           11888 2024-08-17 20:42 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-08-1...

v2.0.0-rc.0

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Add --sig-proxy flag (#3043, thanks to @CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @yankay)
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Add --pull flag (#3074, thanks to @sondavidb)
  • Support Windows (#2587, thanks to @TBBle)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @apostasie and @yankay)
• nerdctl inspect:
  • Add --size flag (#3021, thanks to @apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @apostasie)
  • Enhanced support for DHCP (#3001, thanks to @apostasie)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)
• nerdct-full:
  • (See the Included components below)
• And more!

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @CodeChanning @Shubhranshu153 @TBBle @abitrolly @alegrey91 @apostasie @baijia @djdongjin @dmcgowan @fahedouch @fwilhe2 @jmpargana @kebe7jun @ktock @manugupt1 @minuk-dev @monirul @qianxi0410 @roman-kiselenko @sazzy4o @sondavidb @testwill @yankay @zjumoon01 @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6, v1.7, or v2.0.

About the binaries

• Minimal (nerdctl-2.0.0-rc.0-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-rc.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-rc.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  25972888 2024-06-26 02:06 nerdctl
-rwxr-xr-x root/root     22774 2024-06-26 02:06 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8644 2024-06-26 02:06 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-rc.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-06-26 02:13 bin/
-rwxr-xr-x 0/0        29131037 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-06-26 02:13 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        57973271 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        14938456 2024-06-26 02:11 bin/bypass4netns
-rwxr-xr-x 0/0         5501080 2024-06-26 02:11 bin/bypass4netnsd
-rwxr-xr-x 0/0        37396984 2024-06-26 02:12 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22774 2024-06-26 02:11 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8644 2024-06-26 02:11 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12726424 2024-06-26 02:12 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        21182999 2024-06-26 02:13 bin/ctd-decoder
-rwxr-xr-x 0/0        18587800 2024-06-26 02:12 bin/ctr
-rwxr-xr-x 0/0        30334663 2024-06-26 02:13 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-06-26 02:13 bin/fuse-overlayfs
-rwxr-xr-x 0/0        66714127 2024-06-26 02:12 bin/ipfs
-rwxr-xr-x 0/0        25944216 2024-06-26 02:11 bin/nerdctl
-rwxr-xr-x 0/0        10663123 2024-04-26 01:36 bin/rootlessctl
-rwxr-xr-x 0/0        12363757 2024-04-26 01:36 bin/rootlesskit
-rwxr-xr-x 0/0        15407256 2024-06-26 02:11 bin/runc
-rwxr-xr-x 0/0         2354520 2024-06-26 02:13 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-06-26 02:13 bin/tini
drwxr-xr-x 0/0               0 2024-06-26 02:12 lib/
drwxr-xr-x 0/0               0 2024-06-26 02:12 lib/systemd/
drwxr-xr-x 0/0               0 2024-06-26 02:13 lib/systemd/system/
-rw-r--r-- 0/0            1312 2024-06-26 02:13 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1251 2024-06-26 02:10 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-06-26 02:13 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-06-26 02:12 libexec/
drwxr-xr-x 0/0               0 2024-06-26 02:12 libexec/cni/
-rw-r--r-- 0/0           11357 2024-06-17 15:51 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-06-17 15:51 libexec/cni/README.md
-rwxr-xr-x 0/0         4272898 2024-06-17 15:51 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4788191 2024-06-17 15:51 libexec/cni/bridge
-rwxr-xr-x 0/0        11419738 2024-06-17 15:51 libexec/cni/dhcp
-rwxr-xr-x 0/0         4424930 2024-06-17 15:51 libexec/cni/dummy
-rwxr-xr-x 0/0         4943846 2024-06-17 15:51 libexec/cni/firewall
-rwxr-xr-x 0/0         4345300 2024-06-17 15:51 libexec/cni/host-device
-rwxr-xr-x 0/0         3679575 2024-06-17 15:51 libexec/cni/host-local
-rwxr-xr-x 0/0         4443729 2024-06-17 15:51 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3750882 2024-06-17 15:51 libexec/cni/loopback
-rwxr-xr-x 0/0         4480422 2024-06-17 15:51 libexec/cni/macvlan
-rwxr-xr-x 0/0         4228332 2024-06-17 15:51 libexec/cni/portmap
-rwxr-xr-x 0/0         4602833 2024-06-17 15:51 libexec/cni/ptp
-rwxr-xr-x 0/0         3957166 2024-06-17 15:51 libexec/cni/sbr
-rwxr-xr-x 0/0         3223947 2024-06-17 15:51 libexec/cni/static
-rwxr-xr-x 0/0         4503742 2024-06-17 15:51 libexec/cni/tap
-rwxr-xr-x 0/0         3838043 2024-06-17 15:51 libexec/cni/tuning
-rwxr-xr-x 0/0         4440528 2024-06-17 15:51 libexec/cni/vlan
-rwxr-xr-x 0/0         4103500 2024-06-17 15:51 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-06-26 02:11 share/
drwxr-xr-x 0/0               0 2024-06-26 02:11 share/doc/
drwxr-xr-x 0/0               0 2024-06-26 02:11 share/doc/nerdctl/
-rw-r--r-- 0/0           12556 2024-06-26 02:06 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-06-26 02:06 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-06-26 02:06 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-06-26 02:06 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            4779 2024-06-26 02:06 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           76391 2024-06-26 02:06 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-06-26 02:06 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-06-26...

v2.0.0-beta.5

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit v2 and BuildKit v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Support Windows (#2587, thanks to @TBBle)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @Shubhranshu153 @TBBle @alegrey91 @baijia @djdongjin @dmcgowan @fahedouch @jmpargana @ktock @manugupt1 @minuk-dev @monirul @roman-kiselenko @sazzy4o @sondavidb @testwill @yankay @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6 or v1.7.

About the binaries

• Minimal (nerdctl-2.0.0-beta.5-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-beta.5-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-beta.5-linux-amd64.tar.gz

-rwxr-xr-x root/root  25292800 2024-04-30 06:42 nerdctl
-rwxr-xr-x root/root     22774 2024-04-30 06:42 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8640 2024-04-30 06:42 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-beta.5-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-04-30 06:49 bin/
-rwxr-xr-x 0/0        30025107 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-04-30 06:49 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        57545823 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        14636760 2024-04-30 06:47 bin/bypass4netns
-rwxr-xr-x 0/0         5312512 2024-04-30 06:47 bin/bypass4netnsd
-rwxr-xr-x 0/0        38946168 2024-04-30 06:48 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22774 2024-04-30 06:47 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8640 2024-04-30 06:47 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12161024 2024-04-30 06:49 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20630617 2024-04-30 06:49 bin/ctd-decoder
-rwxr-xr-x 0/0        18870272 2024-04-30 06:48 bin/ctr
-rwxr-xr-x 0/0        29671743 2024-04-30 06:49 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-04-30 06:49 bin/fuse-overlayfs
-rwxr-xr-x 0/0        65589641 2024-04-30 06:48 bin/ipfs
-rwxr-xr-x 0/0        25264128 2024-04-30 06:47 bin/nerdctl
-rwxr-xr-x 0/0        10663123 2024-04-26 01:36 bin/rootlessctl
-rwxr-xr-x 0/0        12363757 2024-04-26 01:36 bin/rootlesskit
-rwxr-xr-x 0/0        15074072 2024-04-30 06:47 bin/runc
-rwxr-xr-x 0/0         2346328 2024-04-30 06:49 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-04-30 06:49 bin/tini
drwxr-xr-x 0/0               0 2024-04-30 06:49 lib/
drwxr-xr-x 0/0               0 2024-04-30 06:49 lib/systemd/
drwxr-xr-x 0/0               0 2024-04-30 06:49 lib/systemd/system/
-rw-r--r-- 0/0            1475 2024-04-30 06:49 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1414 2024-04-30 06:46 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-04-30 06:49 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-04-30 06:49 libexec/
drwxr-xr-x 0/0               0 2024-04-30 06:49 libexec/cni/
-rw-r--r-- 0/0           11357 2024-03-12 10:56 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-03-12 10:56 libexec/cni/README.md
-rwxr-xr-x 0/0         4119661 2024-03-12 10:56 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4662227 2024-03-12 10:56 libexec/cni/bridge
-rwxr-xr-x 0/0        11065251 2024-03-12 10:56 libexec/cni/dhcp
-rwxr-xr-x 0/0         4306546 2024-03-12 10:56 libexec/cni/dummy
-rwxr-xr-x 0/0         4751593 2024-03-12 10:56 libexec/cni/firewall
-rwxr-xr-x 0/0         4198427 2024-03-12 10:56 libexec/cni/host-device
-rwxr-xr-x 0/0         3560496 2024-03-12 10:56 libexec/cni/host-local
-rwxr-xr-x 0/0         4324636 2024-03-12 10:56 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3651038 2024-03-12 10:56 libexec/cni/loopback
-rwxr-xr-x 0/0         4355073 2024-03-12 10:56 libexec/cni/macvlan
-rwxr-xr-x 0/0         4095898 2024-03-12 10:56 libexec/cni/portmap
-rwxr-xr-x 0/0         4476535 2024-03-12 10:56 libexec/cni/ptp
-rwxr-xr-x 0/0         3861176 2024-03-12 10:56 libexec/cni/sbr
-rwxr-xr-x 0/0         3120090 2024-03-12 10:56 libexec/cni/static
-rwxr-xr-x 0/0         4381887 2024-03-12 10:56 libexec/cni/tap
-rwxr-xr-x 0/0         3743844 2024-03-12 10:56 libexec/cni/tuning
-rwxr-xr-x 0/0         4319235 2024-03-12 10:56 libexec/cni/vlan
-rwxr-xr-x 0/0         4008392 2024-03-12 10:56 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-04-30 06:47 share/
drwxr-xr-x 0/0               0 2024-04-30 06:47 share/doc/
drwxr-xr-x 0/0               0 2024-04-30 06:47 share/doc/nerdctl/
-rw-r--r-- 0/0           12395 2024-04-30 06:42 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-04-30 06:42 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-04-30 06:42 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-04-30 06:42 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3749 2024-04-30 06:42 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           75969 2024-04-30 06:42 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-04-30 06:42 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-04-30 06:42 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2024-04-30 06:42 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2024-04-30 06:42 share/doc/nerdctl/docs/cvmfs.md
-rw-r--r-- 0/0            2435 2024-04-30 06:42 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2024-04-30 06:42 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2024-04-30 06:42 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2024-04-30 06:42 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3273 2024-04-30 06:42 share/doc/nerdctl/docs/gpu.md
drwxr-xr-x 0/0               0 2024-04-30 06:42 share/doc/nerdctl/docs/images/
-rw-r--r-- 0/0          684421 2024-04-30 06:42 share/doc/nerdctl/docs/images/rootlessKit-network-design.png
-rw-r--r-- 0/0           14462 2024-04-30 06:42 share/doc/nerdctl/docs/ipfs.md
-rw-r...

v1.7.6

Changes

• rootless: fix nerdctl rm failure with AppArmor on Ubuntu >= 23.10 (#2730, #2958)
• nerdctl-full: update containerd (1.7.16) (#2958)

Full change: https://github.com/containerd/nerdctl/milestone/42?closed=1

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6 or v1.7.

About the binaries

• Minimal (nerdctl-1.7.6-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-1.7.6-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-1.7.6-linux-amd64.tar.gz

-rwxr-xr-x root/root  25116672 2024-04-30 06:21 nerdctl
-rwxr-xr-x root/root     21916 2024-04-30 06:20 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7187 2024-04-30 06:20 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-1.7.6-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-04-30 06:28 bin/
-rwxr-xr-x 0/0        27644700 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0        53374823 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         7277848 2024-04-30 06:26 bin/bypass4netns
-rwxr-xr-x 0/0         5308416 2024-04-30 06:26 bin/bypass4netnsd
-rwxr-xr-x 0/0        38946168 2024-04-30 06:27 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21916 2024-04-30 06:26 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7187 2024-04-30 06:26 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12161024 2024-04-30 06:28 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20630617 2024-04-30 06:28 bin/ctd-decoder
-rwxr-xr-x 0/0        18870272 2024-04-30 06:27 bin/ctr
-rwxr-xr-x 0/0        29671743 2024-04-30 06:28 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-04-30 06:28 bin/fuse-overlayfs
-rwxr-xr-x 0/0        65589641 2024-04-30 06:27 bin/ipfs
-rwxr-xr-x 0/0        25088000 2024-04-30 06:26 bin/nerdctl
-rwxr-xr-x 0/0        10666181 2024-03-05 22:20 bin/rootlessctl
-rwxr-xr-x 0/0        12358373 2024-03-05 22:20 bin/rootlesskit
-rwxr-xr-x 0/0        15074072 2024-04-30 06:26 bin/runc
-rwxr-xr-x 0/0         2346328 2024-04-30 06:28 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-04-30 06:28 bin/tini
drwxr-xr-x 0/0               0 2024-04-30 06:28 lib/
drwxr-xr-x 0/0               0 2024-04-30 06:28 lib/systemd/
drwxr-xr-x 0/0               0 2024-04-30 06:28 lib/systemd/system/
-rw-r--r-- 0/0            1475 2024-04-30 06:28 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1414 2024-04-30 06:25 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-04-30 06:28 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-04-30 06:28 libexec/
drwxr-xr-x 0/0               0 2024-04-30 06:28 libexec/cni/
-rw-r--r-- 0/0           11357 2024-03-12 10:56 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-03-12 10:56 libexec/cni/README.md
-rwxr-xr-x 0/0         4119661 2024-03-12 10:56 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4662227 2024-03-12 10:56 libexec/cni/bridge
-rwxr-xr-x 0/0        11065251 2024-03-12 10:56 libexec/cni/dhcp
-rwxr-xr-x 0/0         4306546 2024-03-12 10:56 libexec/cni/dummy
-rwxr-xr-x 0/0         4751593 2024-03-12 10:56 libexec/cni/firewall
-rwxr-xr-x 0/0         4198427 2024-03-12 10:56 libexec/cni/host-device
-rwxr-xr-x 0/0         3560496 2024-03-12 10:56 libexec/cni/host-local
-rwxr-xr-x 0/0         4324636 2024-03-12 10:56 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3651038 2024-03-12 10:56 libexec/cni/loopback
-rwxr-xr-x 0/0         4355073 2024-03-12 10:56 libexec/cni/macvlan
-rwxr-xr-x 0/0         4095898 2024-03-12 10:56 libexec/cni/portmap
-rwxr-xr-x 0/0         4476535 2024-03-12 10:56 libexec/cni/ptp
-rwxr-xr-x 0/0         3861176 2024-03-12 10:56 libexec/cni/sbr
-rwxr-xr-x 0/0         3120090 2024-03-12 10:56 libexec/cni/static
-rwxr-xr-x 0/0         4381887 2024-03-12 10:56 libexec/cni/tap
-rwxr-xr-x 0/0         3743844 2024-03-12 10:56 libexec/cni/tuning
-rwxr-xr-x 0/0         4319235 2024-03-12 10:56 libexec/cni/vlan
-rwxr-xr-x 0/0         4008392 2024-03-12 10:56 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-04-30 06:26 share/
drwxr-xr-x 0/0               0 2024-04-30 06:26 share/doc/
drwxr-xr-x 0/0               0 2024-04-30 06:26 share/doc/nerdctl/
-rw-r--r-- 0/0           12480 2024-04-30 06:20 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-04-30 06:20 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-04-30 06:20 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-04-30 06:20 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2024-04-30 06:20 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           74383 2024-04-30 06:20 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-04-30 06:20 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-04-30 06:20 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2024-04-30 06:20 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2024-04-30 06:20 share/doc/nerdctl/docs/cvmfs.md
-rw-r--r-- 0/0            2435 2024-04-30 06:20 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2024-04-30 06:20 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2024-04-30 06:20 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2024-04-30 06:20 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3228 2024-04-30 06:20 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           14463 2024-04-30 06:20 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2024-04-30 06:20 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            2960 2024-04-30 06:20 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0            2596 2024-04-30 06:20 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2024-04-30 06:20 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1876 2024-04-30 06:20 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15657 2024-04-30 06:20 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5088 2024-04-30 06:20 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            2015 2024-04-30 06:20 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0           10312 2024-04-30 06:20 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2024-04-30 06:28 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1154 2024-04-30 06:28 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            6578 2024-04-30 06:28 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v1.7.6
- containerd: v1.7.16
- runc: v1.1.12
- CNI plugins: v1.4.1
- BuildKit: v0.12.5
- Stargz Snapshotter: v0.15.1
- imgcrypt: v1.1.10
- RootlessKit: v2.0.2
- slirp4netns: v1.2.3
- bypass4netns: v0.4.0
- fuse-overlayfs: v1.13
- containerd-fuse-overlayfs: v1.0.8
- Kubo (IPFS): v0.27.0
- Tini: v0.19.0
- buildg: v0.4.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.3/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.13/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.27.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/8890214856

The sha256sum of the SHA256SUMS file itself is a443c7f8ef507fcaefd49f4774440f010ab8105eb8df9247c0d153e89a0da940 .

---

Release manager: Akihiro Suda (@AkihiroSuda)

v2.0.0-beta.4

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit v2 and BuildKit v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
  • Support Windows (#2587, thanks to @TBBle)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @Shubhranshu153 @TBBle @alegrey91 @djdongjin @dmcgowan @fahedouch @jmpargana @ktock @manugupt1 @minuk-dev @monirul @roman-kiselenko @sazzy4o @sondavidb @testwill @yankay @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6 or v1.7.

About the binaries

• Minimal (nerdctl-2.0.0-beta.4-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-beta.4-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-beta.4-linux-amd64.tar.gz

-rwxr-xr-x root/root  25251840 2024-04-09 02:08 nerdctl
-rwxr-xr-x root/root     22774 2024-04-09 02:08 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8640 2024-04-09 02:08 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-beta.4-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-04-09 02:16 bin/
-rwxr-xr-x 0/0        30015045 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-04-09 02:15 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        57529541 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        14636760 2024-04-09 02:14 bin/bypass4netns
-rwxr-xr-x 0/0         5312512 2024-04-09 02:14 bin/bypass4netnsd
-rwxr-xr-x 0/0        38978936 2024-04-09 02:15 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22774 2024-04-09 02:13 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8640 2024-04-09 02:13 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12161024 2024-04-09 02:15 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20630617 2024-04-09 02:16 bin/ctd-decoder
-rwxr-xr-x 0/0        18866176 2024-04-09 02:14 bin/ctr
-rwxr-xr-x 0/0        29671743 2024-04-09 02:16 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-04-09 02:16 bin/fuse-overlayfs
-rwxr-xr-x 0/0        65589641 2024-04-09 02:15 bin/ipfs
-rwxr-xr-x 0/0        25223168 2024-04-09 02:13 bin/nerdctl
-rwxr-xr-x 0/0        10666181 2024-03-05 22:20 bin/rootlessctl
-rwxr-xr-x 0/0        12358373 2024-03-05 22:20 bin/rootlesskit
-rwxr-xr-x 0/0        15074072 2024-04-09 02:14 bin/runc
-rwxr-xr-x 0/0         2346328 2024-04-09 02:16 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-04-09 02:16 bin/tini
drwxr-xr-x 0/0               0 2024-04-09 02:15 lib/
drwxr-xr-x 0/0               0 2024-04-09 02:15 lib/systemd/
drwxr-xr-x 0/0               0 2024-04-09 02:15 lib/systemd/system/
-rw-r--r-- 0/0            1475 2024-04-09 02:15 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1414 2024-04-09 02:13 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-04-09 02:15 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-04-09 02:15 libexec/
drwxr-xr-x 0/0               0 2024-04-09 02:15 libexec/cni/
-rw-r--r-- 0/0           11357 2024-03-12 10:56 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-03-12 10:56 libexec/cni/README.md
-rwxr-xr-x 0/0         4119661 2024-03-12 10:56 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4662227 2024-03-12 10:56 libexec/cni/bridge
-rwxr-xr-x 0/0        11065251 2024-03-12 10:56 libexec/cni/dhcp
-rwxr-xr-x 0/0         4306546 2024-03-12 10:56 libexec/cni/dummy
-rwxr-xr-x 0/0         4751593 2024-03-12 10:56 libexec/cni/firewall
-rwxr-xr-x 0/0         4198427 2024-03-12 10:56 libexec/cni/host-device
-rwxr-xr-x 0/0         3560496 2024-03-12 10:56 libexec/cni/host-local
-rwxr-xr-x 0/0         4324636 2024-03-12 10:56 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3651038 2024-03-12 10:56 libexec/cni/loopback
-rwxr-xr-x 0/0         4355073 2024-03-12 10:56 libexec/cni/macvlan
-rwxr-xr-x 0/0         4095898 2024-03-12 10:56 libexec/cni/portmap
-rwxr-xr-x 0/0         4476535 2024-03-12 10:56 libexec/cni/ptp
-rwxr-xr-x 0/0         3861176 2024-03-12 10:56 libexec/cni/sbr
-rwxr-xr-x 0/0         3120090 2024-03-12 10:56 libexec/cni/static
-rwxr-xr-x 0/0         4381887 2024-03-12 10:56 libexec/cni/tap
-rwxr-xr-x 0/0         3743844 2024-03-12 10:56 libexec/cni/tuning
-rwxr-xr-x 0/0         4319235 2024-03-12 10:56 libexec/cni/vlan
-rwxr-xr-x 0/0         4008392 2024-03-12 10:56 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-04-09 02:13 share/
drwxr-xr-x 0/0               0 2024-04-09 02:13 share/doc/
drwxr-xr-x 0/0               0 2024-04-09 02:13 share/doc/nerdctl/
-rw-r--r-- 0/0           12395 2024-04-09 02:08 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-04-09 02:08 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-04-09 02:08 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-04-09 02:08 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3749 2024-04-09 02:08 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           75969 2024-04-09 02:08 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-04-09 02:08 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-04-09 02:08 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2024-04-09 02:08 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2024-04-09 02:08 share/doc/nerdctl/docs/cvmfs.md
-rw-r--r-- 0/0            2435 2024-04-09 02:08 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2024-04-09 02:08 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2024-04-09 02:08 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2024-04-09 02:08 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3273 2024-04-09 02:08 share/doc/nerdctl/docs/gpu.md
drwxr-xr-x 0/0               0 2024-04-09 02:08 share/doc/nerdctl/docs/images/
-rw-r--r-- 0/0          684421 2024-04-09 02:08 share/doc/nerdctl/docs/images/rootlessKit-network-design.png
-rw-r--r-- 0/0           14462 2024-04-09 02:08 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/...

v2.0.0-beta.3

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit v2 and BuildKit v0.13 (included in nerdctl-full-*.tar.gz).

Note

After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to
re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Add --systemd flag for running systemd in containers flag (#2785, thanks to @sazzy4o)
  • Add--ipc=(shareable|container:<container>) flag (#2757, thanks to @minuk-dev)
  • Add --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
• nerdctl build:
  • Add --attest, --sbom, and --provenance flags (#2786, thanks to @yankay)
• nerdctl compose up:
  • Add --abort-on-container-exit flag (#2873, thanks to @alegrey91)

Full changes: https://github.com/containerd/nerdctl/milestone/37?closed=1
Thanks to @Shubhranshu153 @alegrey91 @djdongjin @dmcgowan @fahedouch @jmpargana @ktock @manugupt1 @minuk-dev @monirul @roman-kiselenko @sazzy4o @sondavidb @testwill @yankay @zwpaper

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.6 or v1.7.

About the binaries

• Minimal (nerdctl-2.0.0-beta.3-linux-amd64.tar.gz): nerdctl only
• Full (nerdctl-full-2.0.0-beta.3-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.0.0-beta.3-linux-amd64.tar.gz

-rwxr-xr-x root/root  25243648 2024-04-03 15:15 nerdctl
-rwxr-xr-x root/root     22774 2024-04-03 15:15 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8640 2024-04-03 15:15 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.0.0-beta.3-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2024-04-03 15:22 bin/
-rwxr-xr-x 0/0        30015045 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2024-04-03 15:22 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        57529541 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         7277848 2024-04-03 15:20 bin/bypass4netns
-rwxr-xr-x 0/0         5308416 2024-04-03 15:20 bin/bypass4netnsd
-rwxr-xr-x 0/0        38885048 2024-04-03 15:22 bin/containerd
-rwxr-xr-x 0/0         9474048 2023-11-02 17:34 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22774 2024-04-03 15:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8640 2024-04-03 15:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0        12066816 2024-04-03 15:22 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        45903872 2023-10-31 08:57 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20634745 2024-04-03 15:22 bin/ctd-decoder
-rwxr-xr-x 0/0        18771968 2024-04-03 15:21 bin/ctr
-rwxr-xr-x 0/0        29669409 2024-04-03 15:22 bin/ctr-enc
-rwxr-xr-x 0/0        19931136 2023-10-31 08:58 bin/ctr-remote
-rwxr-xr-x 0/0         1785448 2024-04-03 15:22 bin/fuse-overlayfs
-rwxr-xr-x 0/0        65588315 2024-04-03 15:22 bin/ipfs
-rwxr-xr-x 0/0        25214976 2024-04-03 15:21 bin/nerdctl
-rwxr-xr-x 0/0        10666181 2024-03-05 22:20 bin/rootlessctl
-rwxr-xr-x 0/0        12358373 2024-03-05 22:20 bin/rootlesskit
-rwxr-xr-x 0/0        15074064 2024-04-03 15:21 bin/runc
-rwxr-xr-x 0/0         2346328 2024-04-03 15:22 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2024-04-03 15:22 bin/tini
drwxr-xr-x 0/0               0 2024-04-03 15:22 lib/
drwxr-xr-x 0/0               0 2024-04-03 15:22 lib/systemd/
drwxr-xr-x 0/0               0 2024-04-03 15:22 lib/systemd/system/
-rw-r--r-- 0/0            1475 2024-04-03 15:22 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1414 2024-04-03 15:20 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2024-04-03 15:22 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2024-04-03 15:22 libexec/
drwxr-xr-x 0/0               0 2024-04-03 15:22 libexec/cni/
-rw-r--r-- 0/0           11357 2024-03-12 10:56 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2024-03-12 10:56 libexec/cni/README.md
-rwxr-xr-x 0/0         4119661 2024-03-12 10:56 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4662227 2024-03-12 10:56 libexec/cni/bridge
-rwxr-xr-x 0/0        11065251 2024-03-12 10:56 libexec/cni/dhcp
-rwxr-xr-x 0/0         4306546 2024-03-12 10:56 libexec/cni/dummy
-rwxr-xr-x 0/0         4751593 2024-03-12 10:56 libexec/cni/firewall
-rwxr-xr-x 0/0         4198427 2024-03-12 10:56 libexec/cni/host-device
-rwxr-xr-x 0/0         3560496 2024-03-12 10:56 libexec/cni/host-local
-rwxr-xr-x 0/0         4324636 2024-03-12 10:56 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3651038 2024-03-12 10:56 libexec/cni/loopback
-rwxr-xr-x 0/0         4355073 2024-03-12 10:56 libexec/cni/macvlan
-rwxr-xr-x 0/0         4095898 2024-03-12 10:56 libexec/cni/portmap
-rwxr-xr-x 0/0         4476535 2024-03-12 10:56 libexec/cni/ptp
-rwxr-xr-x 0/0         3861176 2024-03-12 10:56 libexec/cni/sbr
-rwxr-xr-x 0/0         3120090 2024-03-12 10:56 libexec/cni/static
-rwxr-xr-x 0/0         4381887 2024-03-12 10:56 libexec/cni/tap
-rwxr-xr-x 0/0         3743844 2024-03-12 10:56 libexec/cni/tuning
-rwxr-xr-x 0/0         4319235 2024-03-12 10:56 libexec/cni/vlan
-rwxr-xr-x 0/0         4008392 2024-03-12 10:56 libexec/cni/vrf
drwxr-xr-x 0/0               0 2024-04-03 15:21 share/
drwxr-xr-x 0/0               0 2024-04-03 15:21 share/doc/
drwxr-xr-x 0/0               0 2024-04-03 15:21 share/doc/nerdctl/
-rw-r--r-- 0/0           12395 2024-04-03 15:15 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2024-04-03 15:15 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2024-04-03 15:15 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2024-04-03 15:15 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3749 2024-04-03 15:15 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           75969 2024-04-03 15:15 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2024-04-03 15:15 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            5329 2024-04-03 15:15 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2024-04-03 15:15 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2024-04-03 15:15 share/doc/nerdctl/docs/cvmfs.md
-rw-r--r-- 0/0            2435 2024-04-03 15:15 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2024-04-03 15:15 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2024-04-03 15:15 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2024-04-03 15:15 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3273 2024-04-03 15:15 share/doc/nerdctl/docs/gpu.md
drwxr-xr-x 0/0               0 2024-04-03 15:15 share/doc/nerdctl/docs/images/
-rw-r--r-- 0/0          684421 2024-04-03 15:15 share/doc/nerdctl/docs/images/rootlessKit-network-design.png
-rw-r--r-- 0/0           14462 2024-04-03 15:15 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2024-04-03 15:15 share/doc/nerdctl/doc...