containerd/nerdctl v1.1.0 on GitHub

Compose is significantly improved in this release.

This release also celebrates the addition of the new committers @Zheaoli @junnplus and the new reviewers @yuchanns @manugupt1 .

Changes

nerdctl compose:
- New commands: nerdctl compose (stop|restart|rm|images|exec|pause|unpause|top|port) (#1494, #1533, #1534, #1555, #1598, #1621, #1609, #1628, thanks to @djdongjin)
- New flags: nerdctl compose ps --format=json (#1567, thanks to @djdongjin)
- New YAML properties: x-nerdctl-{verify,cosign-public-key,sign,cosign-private-key} (#1508, thanks to @djdongjin)
- Support ephemeral host ports (#1518, thanks to @zhan9san)
nerdctl image convert:
- New estargz flags: --estargz-min-chunk-size=<SIZE>, --estargz-external-toc, --estargz-keep-diff-id (#1504, thanks to @ktock)
- New zstd flags: --zstdchunked-record-in, --zstdchunked-compression-level, --zstdchunked-chunk-size (#1496, thanks to @djdongjin)
- Support OverlayBD (--overlaybd, --overlaybd-fs-type, --overlaybd-dbstr) (#1517, thanks to @HileQAQ)
nerdctl network rm:
- Support removing a network by ID (#1581, thanks to @Mihai22125)
Misc:
- Support /proc/sys/fs/binfmt_misc/rosetta, for enabling Rosetta 2 for Linux on Lima v0.14 or later (#1552)
- Removed the indirect dependency on github.com/btcsuite/btcd/btcec (secp256k1 elliptic curve cryptography library, NOT bitcoin daemon) that was introduced by the dependency on github.com/ipfs/go-ipfs-http-client and github.com/libp2p/go-libp2p-core for supporting IPFS.
  This is NOT a bitcoin mining/trading code, but caused confusion to some people due to its package name. https://github.com/containerd/nerdctl/pull/1626/files#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6L65-L80 (#1626, thanks to @bsalunke)
nerdctl-full:
- Update containerd (1.6.12), fuse-overlayfs (1.10), RootlessKit (1.1.0), Kubo (0.17.0), Stargz Snapshotter (0.13.0), BuildKit (0.10.6) (#1501, #1507, #1623)
Project:
- Rename the master branch to main (#1476, #1477, thanks to @fahedouch)
- Promote Zheao Li @Zheaoli from a REVIEWER to a COMMITTER (#1539)
- Add Hanchin Hsieh @yuchanns as a REVIEWER (#1540)
- Promote Ye Sijun @junnplus from a REVIEWER to a COMMITTER (#1544)
- Add Manu Gupta @manugupt1 as a REVIEWER (#1545)

Full changes: https://github.com/containerd/nerdctl/milestone/24?closed=1
Thanks to @HileQAQ @Mihai22125 @Zheaoli @airmelt @aman556 @aznashwan @bsalunke @davidhsingyuchen @djdongjin @fahedouch @ktock @liubin @loheagn @mAddmHacks @manugupt1 @minuk-dev @sschepens @yankay @yuchanns @yzxiu @zhan9san

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.5 or v1.6.

About the binaries

Minimal (nerdctl-1.1.0-linux-amd64.tar.gz): nerdctl only
Full (nerdctl-full-1.1.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-1.1.0-linux-amd64.tar.gz

-rwxr-xr-x root/root  28536832 2022-12-12 01:12 nerdctl
-rwxr-xr-x root/root     21563 2022-12-12 01:11 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      7032 2022-12-12 01:11 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-1.1.0-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2022-12-12 01:26 bin/
-rwxr-xr-x 0/0        25485993 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0        23724032 2022-09-05 09:52 bin/buildg
-rwxr-xr-x 0/0        39552521 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0         3602712 2022-12-12 01:21 bin/bypass4netns
-rwxr-xr-x 0/0         5111808 2022-12-12 01:21 bin/bypass4netnsd
-rwxr-xr-x 0/0        55100344 2022-12-12 01:23 bin/containerd
-rwxr-xr-x 0/0        10219520 2022-11-09 07:56 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           21563 2022-12-12 01:21 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            7032 2022-12-12 01:21 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         9768960 2022-12-12 01:23 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        60561376 2022-11-11 13:22 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        20333008 2022-12-12 01:26 bin/ctd-decoder
-rwxr-xr-x 0/0        28135832 2022-12-12 01:22 bin/ctr
-rwxr-xr-x 0/0        29082227 2022-12-12 01:26 bin/ctr-enc
-rwxr-xr-x 0/0        30609440 2022-11-11 13:23 bin/ctr-remote
-rwxr-xr-x 0/0         1783392 2022-12-12 01:26 bin/fuse-overlayfs
-rwxr-xr-x 0/0        80964832 2022-11-22 14:33 bin/ipfs
-rwxr-xr-x 0/0        28504064 2022-12-12 01:21 bin/nerdctl
-rwxr-xr-x 0/0         9847163 2022-11-15 11:19 bin/rootlessctl
-rwxr-xr-x 0/0        11311662 2022-11-15 11:19 bin/rootlesskit
-rwxr-xr-x 0/0        13784656 2022-12-12 01:22 bin/runc
-rwxr-xr-x 0/0         2338128 2022-12-12 01:26 bin/slirp4netns
-rwxr-xr-x 0/0          870496 2022-12-12 01:26 bin/tini
drwxr-xr-x 0/0               0 2022-12-12 01:25 lib/
drwxr-xr-x 0/0               0 2022-12-12 01:25 lib/systemd/
drwxr-xr-x 0/0               0 2022-12-12 01:25 lib/systemd/system/
-rw-r--r-- 0/0            1331 2022-12-12 01:25 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1270 2022-12-12 01:20 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2022-12-12 01:25 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2022-12-12 01:25 libexec/
drwxrwxr-x 0/0               0 2022-12-12 01:25 libexec/cni/
-rwxr-xr-x 0/0         3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0         4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0         9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0         4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0         3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0         3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0         3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0         3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0         3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0         3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0         4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0         3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0         2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0         3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0         3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0         3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0               0 2022-12-12 01:21 share/
drwxr-xr-x 0/0               0 2022-12-12 01:21 share/doc/
drwxr-xr-x 0/0               0 2022-12-12 01:21 share/doc/nerdctl/
-rw-r--r-- 0/0           77438 2022-12-12 01:11 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2022-12-12 01:21 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2022-12-12 01:11 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2022-12-12 01:11 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            3996 2022-12-12 01:11 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0            1846 2022-12-12 01:11 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            3030 2022-12-12 01:11 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            7328 2022-12-12 01:11 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            2435 2022-12-12 01:11 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             787 2022-12-12 01:11 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14217 2022-12-12 01:11 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0            1197 2022-12-12 01:11 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            2439 2022-12-12 01:11 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0           13268 2022-12-12 01:11 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            1748 2022-12-12 01:11 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            2596 2022-12-12 01:11 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2022-12-12 01:11 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1876 2022-12-12 01:11 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15626 2022-12-12 01:11 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            5088 2022-12-12 01:11 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0           10370 2022-12-12 01:11 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2022-12-12 01:26 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1152 2022-12-12 01:26 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            5816 2022-12-12 01:26 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v1.1.0
- containerd: v1.6.12
- runc: v1.1.4
- CNI plugins: v1.1.1
- BuildKit: v0.10.6
- Stargz Snapshotter: v0.13.0
- imgcrypt: v1.1.7
- RootlessKit: v1.1.0
- slirp4netns: v1.2.0
- bypass4netns: v0.3.0
- fuse-overlayfs: v1.10
- containerd-fuse-overlayfs: v1.0.5
- Kubo (IPFS): v0.17.0
- Tini: v0.19.0
- buildg: v0.4.1

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.10/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/kubo/blob/v0.17.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/3671727596

The sha256sum of the SHA256SUMS file itself is 605a166e0c9310a5e93c409fbfb86b51db803c4de362eb5bd62fc072b88f36c8 .