• executable lookup. Now create fails immediately if the specified executable doesn't exist
• subreaper enabled only when crun is attached
• fix notify socket when used from create and prevent it hanging indefinitely when the container exits
• correctly write cpu controller resources when using cgroups v2
• support for the freezer controller when using cgroups v2
• honor unspecified minor/major number for devices when using cgroups v2
• reintroduce --no-pivot
• do not add a cgroup path again if it was already specified in the OCI configuration