containerd/nerdctl v2.1.4 on GitHub

This release adds many commands: nerdctl manifest (create|inspect|push|annotate|rm), nerdctl container export, and nerdctl image import.

Changes

nerdctl manifest create:
- Add nerdctl manifest create command (#4439, thanks to @ChengyuZhu6)
nerdctl manifest inspect:
- Add nerdctl manifest inspect command (#4413, thanks to @ChengyuZhu6)
nerdctl manifest push:
- Add nerdctl manifest push command (#4449, thanks to @ChengyuZhu6)
nerdctl manifest annotate:
- Add nerdctl manifest annotate command (#4442, thanks to @ChengyuZhu6)
nerdctl manifest rm:
- Add nerdctl manifest rm command (#4447, thanks to @ChengyuZhu6)
nerdctl container inspect:
- Add image info (#4471, thanks to @Shubhranshu153)
nerdctl container export:
- Add nerdctl container export command (#4405, thanks to @craigloewen-msft)
nerdctl image import:
- Add nerdctl image import command (#4456, thanks to @ChengyuZhu6)
nerdctl network create:
- Add com.docker.network.bridge.enable_icc network option (#4311, thanks to @swagatbora90)
- Add --internal flag (#4454, thanks to @ChangyuZhu6)
nerdctl namespace ls:
- Add --format flag (#4446, thanks to @SpiffyEight77)
nerdctl compose
- Support dockerfile_inline (#4305, thanks to @tushar5526)
nerdctl-full
- Update containerd (2.1.4), runc (1.3.1), CNI plugins (1.8.0), BuildKit (0.24.0), gomodjail (0.1.3), stargz-snapshotter (0.17.0) etc. (#4490, #4494, #4505)
Project:
- MAINTAINERS: move @manugupt1 to emeritus status (#4460, thanks to @manugupt1)
- MAINTAINERS: add @ChengyuZhu6 as a REVIEWER (#4472)

Full changes: https://github.com/containerd/nerdctl/milestone/54?closed=1
Thanks to @ChengyuZhu6 @Laitr0n @Shubhranshu153 @SpiffyEight77 @Swapnanil-Gupta @apostasie @craigloewen-msft @jonyhy96 @manugupt1 @ningmingxiao @swagatbora90 @tushar5526

Compatible containerd versions

This release of nerdctl is expected to be used with containerd v1.7, v2.0, or v2.1.
Some features may not work with other releases of containerd.

Note

Since this release, nerdctl is no longer tested with containerd v1.6.

About the binaries

Minimal (nerdctl-2.1.4-linux-amd64.tar.gz): nerdctl only
Full (nerdctl-full-2.1.4-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI

Minimal

Extract the archive to a path like /usr/local/bin or ~/bin .

tar Cxzvvf /usr/local/bin nerdctl-2.1.4-linux-amd64.tar.gz

-rwxr-xr-x root/root  29589688 2025-09-05 05:52 nerdctl
-rwxr-xr-x root/root     22657 2025-09-05 05:51 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root      8708 2025-09-05 05:51 containerd-rootless.sh

Full

Extract the archive to a path like /usr/local or ~/.local .

tar Cxzvvf /usr/local nerdctl-full-2.1.4-linux-amd64.tar.gz

drwxr-xr-x 0/0               0 2025-09-05 06:00 bin/
-rwxr-xr-x 0/0        33536339 2025-09-03 12:19 bin/buildctl
-rwxr-xr-x 0/0        29909144 2025-05-12 13:10 bin/buildg
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-LICENSE -> ../libexec/cni/LICENSE
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-README.md -> ../libexec/cni/README.md
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0               0 2025-09-05 05:59 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0        66476450 2025-09-03 12:19 bin/buildkitd
-rwxr-xr-x 0/0        16541728 2025-09-05 05:58 bin/bypass4netns
-rwxr-xr-x 0/0         6389944 2025-09-05 05:58 bin/bypass4netnsd
-rwxr-xr-x 0/0        41207168 2025-09-05 05:59 bin/containerd
-rwxr-xr-x 0/0        12021944 2025-05-20 18:06 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0           22657 2025-09-05 06:00 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0            8708 2025-09-05 06:00 bin/containerd-rootless.sh
-rwxr-xr-x 0/0         8298680 2025-09-05 05:59 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0        57929912 2025-07-22 08:25 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0        23102830 2025-09-05 06:00 bin/ctd-decoder
-rwxr-xr-x 0/0        21643448 2025-09-05 05:58 bin/ctr
-rwxr-xr-x 0/0        30554301 2025-09-05 06:00 bin/ctr-enc
-rwxr-xr-x 0/0        22974648 2025-07-22 08:25 bin/ctr-remote
-rwxr-xr-x 0/0         1788872 2025-09-05 06:00 bin/fuse-overlayfs
-rwxr-xr-x 0/0         3985592 2025-09-05 05:58 bin/gomodjail
-rwxr-xr-x 0/0        29552824 2025-09-05 06:00 bin/nerdctl
-rwxr-xr-x 0/0        33546100 2025-09-05 06:00 bin/nerdctl.gomodjail
-rwxr-xr-x 0/0        12236796 2025-05-08 06:00 bin/rootlessctl
-rwxr-xr-x 0/0        14176992 2025-05-08 06:00 bin/rootlesskit
-rwxr-xr-x 0/0        17767200 2025-09-05 05:58 bin/runc
-rwxr-xr-x 0/0         2383224 2025-09-05 06:00 bin/slirp4netns
-rwxr-xr-x 0/0        56516792 2025-07-22 08:25 bin/stargz-fuse-manager
-rwxr-xr-x 0/0        10772664 2025-07-22 08:25 bin/stargz-store-helper
-rwxr-xr-x 0/0          870496 2025-09-05 06:00 bin/tini
drwxr-xr-x 0/0               0 2025-09-05 05:59 lib/
drwxr-xr-x 0/0               0 2025-09-05 05:59 lib/systemd/
drwxr-xr-x 0/0               0 2025-09-05 05:59 lib/systemd/system/
-rw-r--r-- 0/0            1309 2025-09-05 05:59 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0            1248 2025-09-05 05:57 lib/systemd/system/containerd.service
-rw-r--r-- 0/0             312 2025-09-05 05:59 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0               0 2025-09-05 05:59 libexec/
drwxr-xr-x 0/0               0 2025-09-01 15:29 libexec/cni/
-rw-r--r-- 0/0           11357 2025-09-01 15:29 libexec/cni/LICENSE
-rw-r--r-- 0/0            2343 2025-09-01 15:29 libexec/cni/README.md
-rwxr-xr-x 0/0         5042186 2025-09-01 15:29 libexec/cni/bandwidth
-rwxr-xr-x 0/0         5694189 2025-09-01 15:29 libexec/cni/bridge
-rwxr-xr-x 0/0        13719696 2025-09-01 15:29 libexec/cni/dhcp
-rwxr-xr-x 0/0         5251247 2025-09-01 15:29 libexec/cni/dummy
-rwxr-xr-x 0/0         5701763 2025-09-01 15:29 libexec/cni/firewall
-rwxr-xr-x 0/0         5159307 2025-09-01 15:29 libexec/cni/host-device
-rwxr-xr-x 0/0         4350430 2025-09-01 15:29 libexec/cni/host-local
-rwxr-xr-x 0/0         5273398 2025-09-01 15:29 libexec/cni/ipvlan
-rwxr-xr-x 0/0         4301450 2025-09-01 15:29 libexec/cni/loopback
-rwxr-xr-x 0/0         5306499 2025-09-01 15:29 libexec/cni/macvlan
-rwxr-xr-x 0/0         5107586 2025-09-01 15:29 libexec/cni/portmap
-rwxr-xr-x 0/0         5474778 2025-09-01 15:29 libexec/cni/ptp
-rwxr-xr-x 0/0         4521078 2025-09-01 15:29 libexec/cni/sbr
-rwxr-xr-x 0/0         3772408 2025-09-01 15:29 libexec/cni/static
-rwxr-xr-x 0/0         5330851 2025-09-01 15:29 libexec/cni/tap
-rwxr-xr-x 0/0         4384728 2025-09-01 15:29 libexec/cni/tuning
-rwxr-xr-x 0/0         5266939 2025-09-01 15:29 libexec/cni/vlan
-rwxr-xr-x 0/0         4684912 2025-09-01 15:29 libexec/cni/vrf
drwxr-xr-x 0/0               0 2025-09-05 05:57 share/
drwxr-xr-x 0/0               0 2025-09-05 06:00 share/doc/
drwxr-xr-x 0/0               0 2025-09-05 06:00 share/doc/nerdctl/
-rw-r--r-- 0/0           12101 2025-09-05 05:51 share/doc/nerdctl/README.md
drwxr-xr-x 0/0               0 2025-09-05 05:51 share/doc/nerdctl/docs/
-rw-r--r-- 0/0            3953 2025-09-05 05:51 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0            2570 2025-09-05 05:51 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0            4779 2025-09-05 05:51 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0           88905 2025-09-05 05:51 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0            1814 2025-09-05 05:51 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0            7317 2025-09-05 05:51 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0            9128 2025-09-05 05:51 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0            5660 2025-09-05 05:51 share/doc/nerdctl/docs/cvmfs.md
drwxr-xr-x 0/0               0 2025-09-05 05:51 share/doc/nerdctl/docs/dev/
-rw-r--r-- 0/0           12701 2025-09-05 05:51 share/doc/nerdctl/docs/dev/auditing_dockerfile.md
-rw-r--r-- 0/0            8586 2025-09-05 05:51 share/doc/nerdctl/docs/dev/store.md
-rw-r--r-- 0/0            2879 2025-09-05 05:51 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0             906 2025-09-05 05:51 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0           14687 2025-09-05 05:51 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0             884 2025-09-05 05:51 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0            3273 2025-09-05 05:51 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0            2248 2025-09-05 05:51 share/doc/nerdctl/docs/healthchecks.md
drwxr-xr-x 0/0               0 2025-09-05 05:51 share/doc/nerdctl/docs/images/
-rw-r--r-- 0/0            1540 2025-09-05 05:51 share/doc/nerdctl/docs/images/nerdctl-white.svg
-rw-r--r-- 0/0            1462 2025-09-05 05:51 share/doc/nerdctl/docs/images/nerdctl.svg
-rw-r--r-- 0/0          684421 2025-09-05 05:51 share/doc/nerdctl/docs/images/rootlessKit-network-design.png
-rw-r--r-- 0/0           14462 2025-09-05 05:51 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0            2426 2025-09-05 05:51 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0            2960 2025-09-05 05:51 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0            2610 2025-09-05 05:51 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0            3277 2025-09-05 05:51 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0            1876 2025-09-05 05:51 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0           15657 2025-09-05 05:51 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0            9147 2025-09-05 05:51 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0            3933 2025-09-05 05:51 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0           10312 2025-09-05 05:51 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0               0 2025-09-05 05:51 share/doc/nerdctl/docs/testing/
-rw-r--r-- 0/0            4897 2025-09-05 05:51 share/doc/nerdctl/docs/testing/README.md
-rw-r--r-- 0/0           15430 2025-09-05 05:51 share/doc/nerdctl/docs/testing/tools.md
drwxr-xr-x 0/0               0 2025-09-05 06:00 share/doc/nerdctl-full/
-rw-r--r-- 0/0            1060 2025-09-05 06:00 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0            9603 2025-09-05 06:00 share/doc/nerdctl-full/SHA256SUMS

Included components

See share/doc/nerdctl-full/README.md:

# nerdctl (full distribution)
- nerdctl: v2.1.4
- containerd: v2.1.4
- runc: v1.3.1
- CNI plugins: v1.8.0
- BuildKit: v0.24.0
- Stargz Snapshotter: v0.17.0
- imgcrypt: v2.0.1
- slirp4netns: v1.3.3
- bypass4netns: v0.4.2
- fuse-overlayfs: v1.15
- containerd-fuse-overlayfs: v2.1.6
- Tini: v0.19.0
- buildg: v0.5.3
- RootlessKit: v2.3.5
- gomodjail: v0.1.3@cea529ddd971b677c67d8af7e936fbc62b35b98c

## License
- bin/slirp4netns:    [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.3.3/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.15/COPYING)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)

Quick start

Rootful

$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine

Rootless

$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine

Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/17484930617

The sha256sum of the SHA256SUMS file itself is 5c8dcb35f92468b40c58764f187711b2e4443c0ffa5d8154c8ab6a2542ecd667 .

Release manager: @AkihiroSuda