containerd/nerdctl v0.15.0 on GitHub

Key features: nerdctl pull --verify=cosign, nerdctl push --sign=cosign, OverlayBD (block device images)

Changes:

nerdctl pull:
- Support verifying Cosign signatures: nerdctl pull --verify=cosign (#556 #606, thanks to @developer-guy @Dentrax)
- Support OverlayBD (block device images) (#603, thanks to @BigVan)
- Add --quiet option (#599, thanks to @Junnplus)
nerdctl push:
- Support signing Cosign signatures: nerdctl push --sign=cosign (#556 #606, thanks to @developer-guy @Dentrax)
nerdctl build:
- Add --iidfile option (#589, thanks to @Junnplus)
nerdctl commit:
- Add --change 'CMD ["foo", "bar"]' option (#552 #572, thanks to @tomfeigin)
nerdctl load:
- Support loading gzipped archive (#587, thanks to @Junnplus)
nerdctl image convert:
- Add --zstdchunked option (#575, thanks to @zchee)
nerdctl exec:
- Add --user option (#601, thanks to @Junnplus)
nerdctl ps:
- Add --latest and --last options (#598, thanks to @Junnplus)
nerdctl stats:
- Support showing network I/O stats on cgroup v2 hosts (#548, thanks to @fahedouch)
nerdctl compose:
- Add nerdctl compose up --scale option (#602, thanks to @Junnplus)
- Add nerdctl compose config command (#5871, thanks to @afbjorklund)
- Support ulimits (#593, thanks to @Junnplus)
- Support interpolating host env vars (#570, thanks to @fahedouch)
nerdctl-full:
- Update runc (1.0.3) (#596)
docs:
- Add docs/faq.md for FAQs and Troubleshooting (#578 #579 thanks to @fahedouch)
MAINTAINERS:
- Add Kohei Tokunaga @ktock as a COMMITTER (#561)
- Add James Sturtevant @jsturtevant as a REVIEWER (#562)
- Promote Fahed Dorgaa @fahedouch from a REVIEWER to a COMMITTER (#563)

Other changes: https://github.com/containerd/nerdctl/milestone/10?closed=1
Thanks to @BigVan @Dentrax @Junnplus @afbjorklund @developer-guy @fahedouch @jsturtevant @ktock @tomfeigin @zchee

About the binaries

Minimal (nerdctl-0.15.0-linux-amd64.tar.gz): nerdctl only
Full (nerdctl-full-0.15.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-0.15.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  27734016 2021-12-14 09:19 nerdctl
-rwxr-xr-x root/root     17308 2021-12-14 09:18 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      6972 2021-12-14 09:18 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-0.15.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2021-12-14 09:30 bin/
-rwxr-xr-x 0/0        25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0        49858624 2021-12-14 09:28 bin/containerd
-rwxr-xr-x 0/0         9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           17308 2021-12-14 09:27 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            6972 2021-12-14 09:27 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         8376320 2021-12-14 09:28 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        56691128 2021-11-18 10:54 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        19142397 2021-12-14 09:30 bin/ctd-decoder
-rwxr-xr-x 0/0        27080960 2021-12-14 09:27 bin/ctr
-rwxr-xr-x 0/0        28005324 2021-12-14 09:30 bin/ctr-enc
-rwxr-xr-x 0/0        29106648 2021-11-18 10:54 bin/ctr-remote
-rwxr-xr-x 0/0         2461920 2021-12-14 09:30 bin/fuse-overlayfs
-rwxr-xr-x 0/0        61998400 2021-10-01 17:37 bin/ipfs
-rwxr-xr-x 0/0        27705344 2021-12-14 09:27 bin/nerdctl
-rwxr-xr-x 0/0         9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0        10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0        13414864 2021-12-14 09:27 bin/runc
-rwxr-xr-x 0/0         3669824 2021-12-14 09:30 bin/slirp4netns
drwxr-xr-x 0/0               0 2021-12-14 09:30 lib/
drwxr-xr-x 0/0               0 2021-12-14 09:30 lib/systemd/
drwxr-xr-x 0/0               0 2021-12-14 09:30 lib/systemd/system/
-rw-r--r-- 0/0            1331 2021-12-14 09:30 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2021-12-14 09:26 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2021-12-14 09:30 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2021-12-14 09:30 libexec/
drwxrwxr-x 0/0               0 2021-12-14 09:30 libexec/cni/
-rwxr-xr-x 0/0         3990800 2021-09-07 19:48 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4409304 2021-09-07 19:48 libexec/cni/bridge
-rwxr-xr-x 0/0         9784253 2021-09-07 19:49 libexec/cni/dhcp
-rwxr-xr-x 0/0         4553440 2021-09-07 19:48 libexec/cni/firewall
-rwxr-xr-x 0/0         4009601 2021-09-07 19:48 libexec/cni/host-device
-rwxr-xr-x 0/0         3402808 2021-09-07 19:49 libexec/cni/host-local
-rwxr-xr-x 0/0         4144654 2021-09-07 19:48 libexec/cni/ipvlan
-rwxr-xr-x 0/0         2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0         3472123 2021-09-07 19:48 libexec/cni/loopback
-rwxr-xr-x 0/0         4216875 2021-09-07 19:48 libexec/cni/macvlan
-rwxr-xr-x 0/0         3924908 2021-09-07 19:48 libexec/cni/portmap
-rwxr-xr-x 0/0         4337802 2021-09-07 19:48 libexec/cni/ptp
-rwxr-xr-x 0/0         3682127 2021-09-07 19:48 libexec/cni/sbr
-rwxr-xr-x 0/0         2967017 2021-09-07 19:49 libexec/cni/static
-rwxr-xr-x 0/0         3622640 2021-09-07 19:48 libexec/cni/tuning
-rwxr-xr-x 0/0         4140657 2021-09-07 19:48 libexec/cni/vlan
-rwxr-xr-x 0/0         3715972 2021-09-07 19:48 libexec/cni/vrf
drwxr-xr-x 0/0               0 2021-12-14 09:27 share/
drwxr-xr-x 0/0               0 2021-12-14 09:27 share/doc/
drwxr-xr-x 0/0               0 2021-12-14 09:27 share/doc/nerdctl/
-rw-r--r-- 0/0           55565 2021-12-14 09:18 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2021-12-14 09:27 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            1848 2021-12-14 09:18 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3111 2021-12-14 09:18 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2040 2021-12-14 09:18 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             445 2021-12-14 09:18 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           10205 2021-12-14 09:18 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1196 2021-12-14 09:18 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2326 2021-12-14 09:18 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           12965 2021-12-14 09:18 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1667 2021-12-14 09:18 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            3198 2021-12-14 09:18 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0             689 2021-12-14 09:18 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            3626 2021-12-14 09:18 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            4835 2021-12-14 09:18 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2021-12-14 09:31 share/doc/nerdctl-full/
-rw-r--r-- 0/0             959 2021-12-14 09:30 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            4968 2021-12-14 09:31 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v0.15.0
- containerd: v1.5.8
- runc: v1.0.3
- CNI plugins: v1.0.1
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.10.1
- imgcrypt: v1.1.2
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- fuse-overlayfs: v1.7.1
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.10.0

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/vv1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/vv1.7.1/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/vv0.10.0/LICENSE)
- bin/runc (Apache License 2.0) is statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE))
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1577056310

The sha256sum of the SHA256SUMS file itself is e74cb341fc4c060e54d9844bf057dc392b443df2bfb978420d293595fdc34ec8 .