Changes
-
nerdctl run:- Fix namestore directory regression:
/var/lib/nerdctl/1935db59/default/foo→/var/lib/nerdctl/1935db59/names/default/foo(#4535, thanks to @yankay) - Support mount manager (e.g., for erofs) (#4568, thanks to @hsiangkao)
- Fix namestore directory regression:
-
nerdctl checkpoint:- Add
nerdctl checkpoint (create|ls|rm)commands (#4484, #4515, #4562, thanks to @ChengyuZhu6)
- Add
-
nerdctl image convert:- Add
--estargz-gzip-helperflag (#4543, thanks to @escapefreeg)
- Add
-
nerdctl-full:
- Update containerd (2.2.0-rc.0), runc (1.3.2), BuildKit (0.25.1), stargz-snapshotter (0.18.0) (#4566, #4569, thanks to @ChengyuZhu6)
Full changes: https://github.com/containerd/nerdctl/milestone/57?closed=1
Thanks to @ChengyuZhu6 @coderbirju @escapefreeg @hsiangkao @smazmi @yankay
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.7, v2.0, v2.1, or v2.2.
Some features may not work with other releases of containerd.
About the binaries
- Minimal (
nerdctl-2.2.0-rc.0-linux-amd64.tar.gz): nerdctl only - Full (
nerdctl-full-2.2.0-rc.0-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like
/usr/local/bin or ~/bin .
tar Cxzvvf /usr/local/bin nerdctl-2.2.0-rc.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 29966520 2025-11-02 08:07 nerdctl
-rwxr-xr-x root/root 22657 2025-11-02 08:06 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 8708 2025-11-02 08:06 containerd-rootless.sh
Full
Extract the archive to a path like
See
/usr/local or ~/.local .
tar Cxzvvf /usr/local nerdctl-full-2.2.0-rc.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2025-11-02 08:15 bin/
-rwxr-xr-x 0/0 32910671 2025-10-07 16:52 bin/buildctl
-rwxr-xr-x 0/0 29909144 2025-05-12 13:10 bin/buildg
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-bandwidth -> ../libexec/cni/bandwidth
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-bridge -> ../libexec/cni/bridge
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-dhcp -> ../libexec/cni/dhcp
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-dummy -> ../libexec/cni/dummy
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-firewall -> ../libexec/cni/firewall
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-host-device -> ../libexec/cni/host-device
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-host-local -> ../libexec/cni/host-local
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-ipvlan -> ../libexec/cni/ipvlan
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-loopback -> ../libexec/cni/loopback
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-macvlan -> ../libexec/cni/macvlan
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-portmap -> ../libexec/cni/portmap
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-ptp -> ../libexec/cni/ptp
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-sbr -> ../libexec/cni/sbr
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-static -> ../libexec/cni/static
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-tap -> ../libexec/cni/tap
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-tuning -> ../libexec/cni/tuning
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-vlan -> ../libexec/cni/vlan
lrwxrwxrwx 0/0 0 2025-11-02 08:14 bin/buildkit-cni-vrf -> ../libexec/cni/vrf
-rwxr-xr-x 0/0 65278558 2025-10-07 16:52 bin/buildkitd
-rwxr-xr-x 0/0 16550016 2025-11-02 08:13 bin/bypass4netns
-rwxr-xr-x 0/0 6394040 2025-11-02 08:13 bin/bypass4netnsd
-rwxr-xr-x 0/0 43641984 2025-11-02 08:14 bin/containerd
-rwxr-xr-x 0/0 12021944 2025-05-20 18:06 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 22657 2025-11-02 08:15 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 8708 2025-11-02 08:15 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 8331448 2025-11-02 08:14 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 56996024 2025-10-17 08:16 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 23102810 2025-11-02 08:14 bin/ctd-decoder
-rwxr-xr-x 0/0 22098104 2025-11-02 08:13 bin/ctr
-rwxr-xr-x 0/0 30561742 2025-11-02 08:14 bin/ctr-enc
-rwxr-xr-x 0/0 23253176 2025-10-17 08:16 bin/ctr-remote
-rwxr-xr-x 0/0 1788872 2025-11-02 08:15 bin/fuse-overlayfs
-rwxr-xr-x 0/0 3985592 2025-11-02 08:13 bin/gomodjail
-rwxr-xr-x 0/0 29929656 2025-11-02 08:15 bin/nerdctl
-rwxr-xr-x 0/0 33922944 2025-11-02 08:15 bin/nerdctl.gomodjail
-rwxr-xr-x 0/0 12236796 2025-05-08 06:00 bin/rootlessctl
-rwxr-xr-x 0/0 14176992 2025-05-08 06:00 bin/rootlesskit
-rwxr-xr-x 0/0 17775304 2025-11-02 08:13 bin/runc
-rwxr-xr-x 0/0 2383224 2025-11-02 08:15 bin/slirp4netns
-rwxr-xr-x 0/0 55578808 2025-10-17 08:16 bin/stargz-fuse-manager
-rwxr-xr-x 0/0 10793144 2025-10-17 08:16 bin/stargz-store-helper
-rwxr-xr-x 0/0 870496 2025-11-02 08:15 bin/tini
drwxr-xr-x 0/0 0 2025-11-02 08:14 lib/
drwxr-xr-x 0/0 0 2025-11-02 08:14 lib/systemd/
drwxr-xr-x 0/0 0 2025-11-02 08:14 lib/systemd/system/
-rw-r--r-- 0/0 1309 2025-11-02 08:14 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1248 2025-11-02 08:12 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2025-11-02 08:14 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2025-11-02 08:14 libexec/
drwxr-xr-x 0/0 0 2025-09-01 15:29 libexec/cni/
-rw-r--r-- 0/0 11357 2025-09-01 15:29 libexec/cni/LICENSE
-rw-r--r-- 0/0 2343 2025-09-01 15:29 libexec/cni/README.md
-rwxr-xr-x 0/0 5042186 2025-09-01 15:29 libexec/cni/bandwidth
-rwxr-xr-x 0/0 5694189 2025-09-01 15:29 libexec/cni/bridge
-rwxr-xr-x 0/0 13719696 2025-09-01 15:29 libexec/cni/dhcp
-rwxr-xr-x 0/0 5251247 2025-09-01 15:29 libexec/cni/dummy
-rwxr-xr-x 0/0 5701763 2025-09-01 15:29 libexec/cni/firewall
-rwxr-xr-x 0/0 5159307 2025-09-01 15:29 libexec/cni/host-device
-rwxr-xr-x 0/0 4350430 2025-09-01 15:29 libexec/cni/host-local
-rwxr-xr-x 0/0 5273398 2025-09-01 15:29 libexec/cni/ipvlan
-rwxr-xr-x 0/0 4301450 2025-09-01 15:29 libexec/cni/loopback
-rwxr-xr-x 0/0 5306499 2025-09-01 15:29 libexec/cni/macvlan
-rwxr-xr-x 0/0 5107586 2025-09-01 15:29 libexec/cni/portmap
-rwxr-xr-x 0/0 5474778 2025-09-01 15:29 libexec/cni/ptp
-rwxr-xr-x 0/0 4521078 2025-09-01 15:29 libexec/cni/sbr
-rwxr-xr-x 0/0 3772408 2025-09-01 15:29 libexec/cni/static
-rwxr-xr-x 0/0 5330851 2025-09-01 15:29 libexec/cni/tap
-rwxr-xr-x 0/0 4384728 2025-09-01 15:29 libexec/cni/tuning
-rwxr-xr-x 0/0 5266939 2025-09-01 15:29 libexec/cni/vlan
-rwxr-xr-x 0/0 4684912 2025-09-01 15:29 libexec/cni/vrf
drwxr-xr-x 0/0 0 2025-11-02 08:12 share/
drwxr-xr-x 0/0 0 2025-11-02 08:15 share/doc/
drwxr-xr-x 0/0 0 2025-11-02 08:15 share/doc/nerdctl/
-rw-r--r-- 0/0 12101 2025-11-02 08:06 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2025-11-02 08:06 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2025-11-02 08:06 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2025-11-02 08:06 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 4779 2025-11-02 08:06 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 89194 2025-11-02 08:06 share/doc/nerdctl/docs/command-reference.md
-rw-r--r-- 0/0 1814 2025-11-02 08:06 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 7317 2025-11-02 08:06 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 9128 2025-11-02 08:06 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 5660 2025-11-02 08:06 share/doc/nerdctl/docs/cvmfs.md
drwxr-xr-x 0/0 0 2025-11-02 08:06 share/doc/nerdctl/docs/dev/
-rw-r--r-- 0/0 12701 2025-11-02 08:06 share/doc/nerdctl/docs/dev/auditing_dockerfile.md
-rw-r--r-- 0/0 8586 2025-11-02 08:06 share/doc/nerdctl/docs/dev/store.md
-rw-r--r-- 0/0 2879 2025-11-02 08:06 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 906 2025-11-02 08:06 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 14687 2025-11-02 08:06 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 884 2025-11-02 08:06 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 3273 2025-11-02 08:06 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 3419 2025-11-02 08:06 share/doc/nerdctl/docs/healthchecks.md
drwxr-xr-x 0/0 0 2025-11-02 08:06 share/doc/nerdctl/docs/images/
-rw-r--r-- 0/0 1540 2025-11-02 08:06 share/doc/nerdctl/docs/images/nerdctl-white.svg
-rw-r--r-- 0/0 1462 2025-11-02 08:06 share/doc/nerdctl/docs/images/nerdctl.svg
-rw-r--r-- 0/0 684421 2025-11-02 08:06 share/doc/nerdctl/docs/images/rootlessKit-network-design.png
-rw-r--r-- 0/0 14462 2025-11-02 08:06 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 2426 2025-11-02 08:06 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 2960 2025-11-02 08:06 share/doc/nerdctl/docs/notation.md
-rw-r--r-- 0/0 2610 2025-11-02 08:06 share/doc/nerdctl/docs/nydus.md
-rw-r--r-- 0/0 3277 2025-11-02 08:06 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1876 2025-11-02 08:06 share/doc/nerdctl/docs/overlaybd.md
-rw-r--r-- 0/0 15657 2025-11-02 08:06 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 9147 2025-11-02 08:06 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 3933 2025-11-02 08:06 share/doc/nerdctl/docs/soci.md
-rw-r--r-- 0/0 11715 2025-11-02 08:06 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2025-11-02 08:06 share/doc/nerdctl/docs/testing/
-rw-r--r-- 0/0 4897 2025-11-02 08:06 share/doc/nerdctl/docs/testing/README.md
-rw-r--r-- 0/0 15430 2025-11-02 08:06 share/doc/nerdctl/docs/testing/tools.md
drwxr-xr-x 0/0 0 2025-11-02 08:15 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1070 2025-11-02 08:15 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 9415 2025-11-02 08:15 share/doc/nerdctl-full/SHA256SUMS
Included components
share/doc/nerdctl-full/README.md:
# nerdctl (full distribution)
- nerdctl: v2.2.0-rc.0
- containerd: v2.2.0-rc.0
- runc: v1.3.2
- CNI plugins: v1.8.0
- BuildKit: v0.25.1
- Stargz Snapshotter: v0.18.0
- imgcrypt: v2.0.1
- slirp4netns: v1.3.3
- bypass4netns: v0.4.2
- fuse-overlayfs: v1.15
- containerd-fuse-overlayfs: v2.1.6
- Tini: v0.19.0
- buildg: v0.5.3
- RootlessKit: v2.3.5
- gomodjail: v0.1.3@cea529ddd971b677c67d8af7e936fbc62b35b98c
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.3.3/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/containers/fuse-overlayfs/blob/v1.15/COPYING)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpineRootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpineEnabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/19009439354
The sha256sum of the SHA256SUMS file itself is 11baff99cf3728875d583912359edbca1385aa0e0384752968570d0d7bcce51f .
Release manager: @AkihiroSuda