Releases: containerd/nerdctl
v0.21.0
This release adds new logging drivers and fix the regression of nerdctl compose up
(#1071).
Changes
-
nerdctl run
:- Add
--log-driver=journald
(#1062, thanks to @fahedouch) - Add
--log-driver=fluentd
(#1073, thanks to @Zheaoli) - Add
--oom-kill-disable
flag (#1111, thanks to @ningmingxiao - Add
--memory-swap
flag (#1110, thanks to @ningmingxiao) - Add
--memory-reservation
flag (#1122, thanks to @ningmingxiao) - Add
--memory-swappiness
flag (#1122, thanks to @ningmingxiao) - Add
--umask
flag (#1140, thanks to @ningmingxiao)
- Add
-
nerdctl compose up
:- Fix
failed to open "...-json.log"
error (#1071, #1132) - Enable entrypoint as stringArray (#1070, thanks to @fahedouch)
- Fix
-
nerdctl start
:- Add
--attach
flag (#1108, thanks to @mattfarina)
- Add
-
nerdctl load
:- Fail quickly when the stdin is empty (#1137, thanks to @manugupt1)
-
nerdctl-full:
-
Misc:
Full changes: https://github.com/containerd/nerdctl/milestone/18?closed=1
Thanks to @Zheaoli @akhramov @fahedouch @gaffneyd4 @ktock @junnplus @manugupt1 @mattfarina @ningmingxiao
About the binaries
- Minimal (
nerdctl-0.21.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.21.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.21.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 26992640 2022-06-18 16:01 nerdctl
-rwxr-xr-x root/root 21562 2022-06-18 16:00 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-06-18 16:00 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.21.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-06-18 16:18 bin/
-rwxr-xr-x 0/0 25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 23040000 2022-06-01 03:22 bin/buildg
-rwxr-xr-x 0/0 349 2022-06-01 03:22 bin/buildg.sh
-rwxr-xr-x 0/0 39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-06-18 16:12 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-06-18 16:12 bin/bypass4netnsd
-rwxr-xr-x 0/0 54205432 2022-06-18 16:15 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-06-18 16:13 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-06-18 16:13 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9650176 2022-06-18 16:15 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19701064 2022-06-18 16:18 bin/ctd-decoder
-rwxr-xr-x 0/0 27519928 2022-06-18 16:14 bin/ctr
-rwxr-xr-x 0/0 28366414 2022-06-18 16:18 bin/ctr-enc
-rwxr-xr-x 0/0 29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0 1778112 2022-06-18 16:18 bin/fuse-overlayfs
-rwxr-xr-x 0/0 77796328 2022-06-09 15:10 bin/ipfs
-rwxr-xr-x 0/0 26959872 2022-06-18 16:13 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13367344 2022-06-18 16:13 bin/runc
-rwxr-xr-x 0/0 2338128 2022-06-18 16:18 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-06-18 16:18 bin/tini
drwxr-xr-x 0/0 0 2022-06-18 16:17 lib/
drwxr-xr-x 0/0 0 2022-06-18 16:17 lib/systemd/
drwxr-xr-x 0/0 0 2022-06-18 16:17 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-06-18 16:17 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-06-18 16:11 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-06-18 16:17 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-06-18 16:17 libexec/
drwxrwxr-x 0/0 0 2022-06-18 16:17 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-06-18 16:13 share/
drwxr-xr-x 0/0 0 2022-06-18 16:13 share/doc/
drwxr-xr-x 0/0 0 2022-06-18 16:13 share/doc/nerdctl/
-rw-r--r-- 0/0 71127 2022-06-18 16:00 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-06-18 16:13 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-06-18 16:00 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2570 2022-06-18 16:00 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-06-18 16:00 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1846 2022-06-18 16:00 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-06-18 16:00 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-06-18 16:00 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-06-18 16:00 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-06-18 16:00 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-06-18 16:00 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1197 2022-06-18 16:00 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-06-18 16:00 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13215 2022-06-18 16:00 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-06-18 16:00 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3277 2022-06-18 16:00 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 15626 2022-06-18 16:00 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-06-18 16:00 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-06-18 16:00 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-06-18 16:18 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1146 2022-06-18 16:18 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5694 2022-06-18 16:18 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.21.0
- containerd: v1.6.6
- runc: v1.1.3
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.9
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.13.0
- Tini: v0.19.0
- buildg: v0.2.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.9/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.13.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2520980983
The sha256sum of the SHA256SUMS file itself is 719f1ccd19d0f4905d86c5d43070d9659a17378f16ef547f457514cb4e45b66a
.
v0.20.0
This release adds the nerdctl builder debug
command for interactive debugging of Dockerfile (#1049, thanks to @ktock).
See https://github.com/containerd/nerdctl/blob/v0.20.0/docs/builder-debug.md
Changes
nerdctl builder debug
:nerdctl run
:- Add restart types
on-failure
,unless-stopped
(#999, thanks to @fahedouch) - Add
--log-opt
flag (#959, thanks to @fahedouch) - Add
--ipc
flag (#1057, thanks to @89luca98) - Add
bind-nonrecursive
mount option (#1044, thanks to @junnplus) -t
no longer needs-i
to be specified together, and vice versa (#1014)
- Add restart types
nerdctl rename
:nerdctl info
:- Add
--mode=native
flag to show full plugin info (#1011)
- Add
- nerdctl-full:
- Others:
- Initial support for RISC-V (#1037). Needs runc 1.2 (opencontainers/runc#3446), containerd 1.7 (containerd/containerd#6882).
All changes: https://github.com/containerd/nerdctl/milestone/17?closed=1
Thanks to @89luca89 @Rajpratik71 @fahedouch @junnplus @ktock
About the binaries
- Minimal (
nerdctl-0.20.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.20.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.20.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 26677248 2022-05-17 08:13 nerdctl
-rwxr-xr-x root/root 21562 2022-05-17 08:12 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-05-17 08:12 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.20.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-05-17 08:28 bin/
-rwxr-xr-x 0/0 25376283 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 22855680 2022-05-12 09:42 bin/buildg
-rwxr-xr-x 0/0 349 2022-05-12 09:42 bin/buildg.sh
-rwxr-xr-x 0/0 39666041 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-05-17 08:22 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-05-17 08:23 bin/bypass4netnsd
-rwxr-xr-x 0/0 54197208 2022-05-17 08:25 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-05-17 08:23 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-05-17 08:23 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9650176 2022-05-17 08:25 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19500834 2022-05-17 08:28 bin/ctd-decoder
-rwxr-xr-x 0/0 27515800 2022-05-17 08:24 bin/ctr
-rwxr-xr-x 0/0 28264703 2022-05-17 08:28 bin/ctr-enc
-rwxr-xr-x 0/0 29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-05-17 08:28 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67865136 2022-04-08 20:57 bin/ipfs
-rwxr-xr-x 0/0 26644480 2022-05-17 08:23 bin/nerdctl
-rwxr-xr-x 0/0 9443526 2022-05-02 08:24 bin/rootlessctl
-rwxr-xr-x 0/0 10879193 2022-05-02 08:24 bin/rootlesskit
-rwxr-xr-x 0/0 13365448 2022-05-17 08:23 bin/runc
-rwxr-xr-x 0/0 2338128 2022-05-17 08:28 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-05-17 08:28 bin/tini
drwxr-xr-x 0/0 0 2022-05-17 08:27 lib/
drwxr-xr-x 0/0 0 2022-05-17 08:27 lib/systemd/
drwxr-xr-x 0/0 0 2022-05-17 08:27 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-05-17 08:27 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-05-17 08:22 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-05-17 08:27 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-05-17 08:27 libexec/
drwxrwxr-x 0/0 0 2022-05-17 08:27 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-05-17 08:23 share/
drwxr-xr-x 0/0 0 2022-05-17 08:23 share/doc/
drwxr-xr-x 0/0 0 2022-05-17 08:23 share/doc/nerdctl/
-rw-r--r-- 0/0 68844 2022-05-17 08:12 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-05-17 08:23 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-05-17 08:12 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 2673 2022-05-17 08:12 share/doc/nerdctl/docs/builder-debug.md
-rw-r--r-- 0/0 3996 2022-05-17 08:12 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1927 2022-05-17 08:12 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-05-17 08:12 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-05-17 08:12 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2435 2022-05-17 08:12 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 598 2022-05-17 08:12 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-05-17 08:12 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1306 2022-05-17 08:12 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2439 2022-05-17 08:12 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13215 2022-05-17 08:12 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-05-17 08:12 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3277 2022-05-17 08:12 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-05-17 08:12 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-05-17 08:12 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-05-17 08:12 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-05-17 08:28 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1150 2022-05-17 08:28 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5694 2022-05-17 08:28 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.20.0
- containerd: v1.6.4
- runc: v1.1.2
- CNI plugins: v1.1.1
- BuildKit: v0.10.3
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.1
- slirp4netns: v1.2.0
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.2
- Tini: v0.19.0
- buildg: v0.0.3
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.2.0/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.2/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2337225755
The sha256sum of the SHA256SUMS file itself is 706fab96ae0fd7d859045bbb991a96fcc3658c6a20af596f237a88a70866d7f5
.
v0.19.0
This release finally implements the long-wanted nerdctl cp
.
Changes
-
nerdctl cp
:- Add
nerdctl cp
command (#643, #995, thanks to @fahedouch)
- Add
-
nerdctl run
: -
nerdctl build
: -
nerdctl push
: -
nerdctl inspect
: -
nerdctl container inspect
: -
nerdctl image inspect
: -
nerdctl volume rm
:- Refuse removing volumes in use (#974, thanks to @click2cloud-lamda)
-
nerdctl-full:
-
GHCR:
- Push a demo image to
ghcr.io/containerd/nerdctl
(#978, thanks to @Rajpratik71)
- Push a demo image to
Full changes: https://github.com/containerd/nerdctl/milestone/16?closed=1
Thanks to @89luca89 @Rajpratik71 @Zheaoli @aledbf @click2cloud-lamda @fahedouch @knqyf263 @ktock @liubin
About the binaries
- Minimal (
nerdctl-0.19.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.19.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.19.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27578368 2022-04-22 04:03 nerdctl
-rwxr-xr-x root/root 21562 2022-04-22 04:02 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 7032 2022-04-22 04:02 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.19.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-04-22 04:16 bin/
-rwxr-xr-x 0/0 25371420 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 39651613 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-04-22 04:11 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-04-22 04:11 bin/bypass4netnsd
-rwxr-xr-x 0/0 54127384 2022-04-22 04:13 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21562 2022-04-22 04:11 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 7032 2022-04-22 04:11 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9646080 2022-04-22 04:14 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58101040 2022-04-13 23:45 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19512431 2022-04-22 04:16 bin/ctd-decoder
-rwxr-xr-x 0/0 27503416 2022-04-22 04:13 bin/ctr
-rwxr-xr-x 0/0 28249236 2022-04-22 04:16 bin/ctr-enc
-rwxr-xr-x 0/0 29757648 2022-04-13 23:45 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-04-22 04:16 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67865136 2022-04-08 20:57 bin/ipfs
-rwxr-xr-x 0/0 27545600 2022-04-22 04:11 bin/nerdctl
-rwxr-xr-x 0/0 9491380 2022-03-25 10:40 bin/rootlessctl
-rwxr-xr-x 0/0 10907799 2022-03-25 10:40 bin/rootlesskit
-rwxr-xr-x 0/0 13365128 2022-04-22 04:12 bin/runc
-rwxr-xr-x 0/0 3669824 2022-04-22 04:16 bin/slirp4netns
-rwxr-xr-x 0/0 870496 2022-04-22 04:16 bin/tini
drwxr-xr-x 0/0 0 2022-04-22 04:15 lib/
drwxr-xr-x 0/0 0 2022-04-22 04:15 lib/systemd/
drwxr-xr-x 0/0 0 2022-04-22 04:16 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-04-22 04:16 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-04-22 04:11 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-04-22 04:16 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-04-22 04:15 libexec/
drwxrwxr-x 0/0 0 2022-04-22 04:16 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-04-22 04:11 share/
drwxr-xr-x 0/0 0 2022-04-22 04:11 share/doc/
drwxr-xr-x 0/0 0 2022-04-22 04:11 share/doc/nerdctl/
-rw-r--r-- 0/0 66853 2022-04-22 04:02 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-04-22 04:11 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-04-22 04:02 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 3996 2022-04-22 04:02 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1927 2022-04-22 04:02 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-04-22 04:02 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-04-22 04:02 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-04-22 04:02 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-04-22 04:02 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-04-22 04:02 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1306 2022-04-22 04:02 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2405 2022-04-22 04:02 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13215 2022-04-22 04:02 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-04-22 04:02 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3277 2022-04-22 04:02 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-04-22 04:02 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-04-22 04:02 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-04-22 04:02 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-04-22 04:16 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1135 2022-04-22 04:16 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5425 2022-04-22 04:16 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.19.0
- containerd: v1.6.2
- runc: v1.1.1
- CNI plugins: v1.1.1
- BuildKit: v0.10.1
- Stargz Snapshotter: v0.11.4
- imgcrypt: v1.1.4
- RootlessKit: v1.0.0
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.2
- Tini: v0.19.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.2/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- bin/tini: [MIT License](https://github.com/krallin/tini/blob/v0.19.0/LICENSE)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2205662252
The sha256sum of the SHA256SUMS file itself is 642cbab3f3d3c5f475ea9a687b6d70b4a53d5994f99d29d2629f9e7c6d0ddc6a
.
v0.18.0
nerdctl build
now supports local images in FROM ...
lines of a Dockerfile, when BuildKit (>= 0.10) is configured to use containerd worker.
Changes
-
nerdctl build
:- Support using containerd worker, for efficiency and for supporting local base images (#858 #928, thanks to @ktock)
-
nerdctl network create
:- Switch away from CNI
isolation
plugin tofirewall
plugin (>= 1.1.0), withingressPolicy
(#838). nerdctl still uses the deprecatedisolation
plugin when it is installed. It is highly recommended to uninstallisolation
plugin and installfirewall
plugin (>= 1.1.0) instead. Thefirewall
plugin is included in the official CNI plugins.
- Switch away from CNI
-
nerdctl run
: -
nerdctl namespace
:- Add
nerdctl namespace (create|inspect|remove|update)
commands (#874, thanks to @ningmingxiao)
- Add
-
nerdctl push
: -
Misc:
- Update containerd library to 1.6.2 (#927). Contains fix for
CVE-2022-24769: "Default inheritable capabilities for linux container should be empty"
(low severity) - Update the build pipeline to use Go 1.18 (#914, thanks to @junnplus)
- Update containerd library to 1.6.2 (#927). Contains fix for
-
nerdctl-full:
Full changes: https://github.com/containerd/nerdctl/milestone/15?closed=1
Thanks to @junnplus @Zheaoli @cpuguy83 @fahedouch @ktock @ningmingxiao
About the binaries
- Minimal (
nerdctl-0.18.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.18.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.18.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27471872 2022-03-25 13:09 nerdctl
-rwxr-xr-x root/root 21502 2022-03-25 13:09 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-03-25 13:09 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.18.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-03-25 13:21 bin/
-rwxr-xr-x 0/0 25356617 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 39639750 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-03-25 13:16 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-03-25 13:17 bin/bypass4netnsd
-rwxr-xr-x 0/0 52210360 2022-03-25 13:19 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21502 2022-03-25 13:17 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-03-25 13:17 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9646080 2022-03-25 13:19 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58658840 2022-03-16 02:19 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19495886 2022-03-25 13:21 bin/ctd-decoder
-rwxr-xr-x 0/0 26135224 2022-03-25 13:18 bin/ctr
-rwxr-xr-x 0/0 28255212 2022-03-25 13:21 bin/ctr-enc
-rwxr-xr-x 0/0 28884376 2022-03-16 02:19 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-03-25 13:21 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67859168 2022-03-17 21:18 bin/ipfs
-rwxr-xr-x 0/0 27439104 2022-03-25 13:17 bin/nerdctl
-rwxr-xr-x 0/0 9491380 2022-03-25 10:40 bin/rootlessctl
-rwxr-xr-x 0/0 10907799 2022-03-25 10:40 bin/rootlesskit
-rwxr-xr-x 0/0 13365008 2022-03-25 13:17 bin/runc
-rwxr-xr-x 0/0 3669824 2022-03-25 13:21 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-03-25 13:21 lib/
drwxr-xr-x 0/0 0 2022-03-25 13:21 lib/systemd/
drwxr-xr-x 0/0 0 2022-03-25 13:21 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-03-25 13:21 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-03-25 13:16 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-03-25 13:21 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-03-25 13:21 libexec/
drwxrwxr-x 0/0 0 2022-03-25 13:21 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-03-25 13:17 share/
drwxr-xr-x 0/0 0 2022-03-25 13:17 share/doc/
drwxr-xr-x 0/0 0 2022-03-25 13:17 share/doc/nerdctl/
-rw-r--r-- 0/0 65691 2022-03-25 13:09 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-03-25 13:17 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3953 2022-03-25 13:09 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 3996 2022-03-25 13:09 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1927 2022-03-25 13:09 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-03-25 13:09 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3192 2022-03-25 13:09 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-03-25 13:09 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-03-25 13:09 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-03-25 13:09 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1306 2022-03-25 13:09 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2405 2022-03-25 13:09 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13215 2022-03-25 13:09 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1748 2022-03-25 13:09 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3277 2022-03-25 13:09 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-03-25 13:09 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-03-25 13:09 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4918 2022-03-25 13:09 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-03-25 13:21 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1039 2022-03-25 13:21 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5348 2022-03-25 13:21 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.18.0
- containerd: v1.6.2
- runc: v1.1.0
- CNI plugins: v1.1.1
- BuildKit: v0.10.0
- Stargz Snapshotter: v0.11.3
- imgcrypt: v1.1.4
- RootlessKit: v1.0.0
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2040124371
The sha256sum of the SHA256SUMS file itself is 32ac32d88716610d582546a6b26e6443ac80746e0d635f987bfb5d5ab4fe5d6e
.
v0.18.0-beta.0
Changes
(To be documented)
About the binaries
- Minimal (
nerdctl-0.18.0-beta.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.18.0-beta.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.18.0-beta.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27467776 2022-03-24 10:04 nerdctl
-rwxr-xr-x root/root 21502 2022-03-24 10:02 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-03-24 10:02 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.18.0-beta.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-03-24 10:19 bin/
-rwxr-xr-x 0/0 25356617 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 39639750 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3339352 2022-03-24 10:13 bin/bypass4netns
-rwxr-xr-x 0/0 4984832 2022-03-24 10:13 bin/bypass4netnsd
-rwxr-xr-x 0/0 52210360 2022-03-24 10:16 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 21502 2022-03-24 10:14 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-03-24 10:14 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9646080 2022-03-24 10:16 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58658840 2022-03-16 02:19 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19317280 2022-03-24 10:19 bin/ctd-decoder
-rwxr-xr-x 0/0 26135224 2022-03-24 10:15 bin/ctr
-rwxr-xr-x 0/0 28023937 2022-03-24 10:19 bin/ctr-enc
-rwxr-xr-x 0/0 28884376 2022-03-16 02:19 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-03-24 10:19 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67859168 2022-03-17 21:18 bin/ipfs
-rwxr-xr-x 0/0 27439104 2022-03-24 10:14 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13365016 2022-03-24 10:14 bin/runc
-rwxr-xr-x 0/0 3669824 2022-03-24 10:19 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-03-24 10:18 lib/
drwxr-xr-x 0/0 0 2022-03-24 10:18 lib/systemd/
drwxr-xr-x 0/0 0 2022-03-24 10:19 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-03-24 10:18 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-03-24 10:12 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-03-24 10:18 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-03-24 10:18 libexec/
drwxrwxr-x 0/0 0 2022-03-24 10:18 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-03-09 17:08 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221977 2022-03-09 17:08 libexec/cni/bridge
-rwxr-xr-x 0/0 9742834 2022-03-09 17:08 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-03-09 17:08 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-03-09 17:08 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-03-09 17:08 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-03-09 17:08 libexec/cni/ipvlan
-rwxr-xr-x 0/0 3295519 2022-03-09 17:08 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-03-09 17:08 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-03-09 17:08 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-03-09 17:08 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-03-09 17:08 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-03-09 17:08 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-03-09 17:08 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-03-09 17:08 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-03-09 17:08 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-03-24 10:14 share/
drwxr-xr-x 0/0 0 2022-03-24 10:14 share/doc/
drwxr-xr-x 0/0 0 2022-03-24 10:14 share/doc/nerdctl/
-rw-r--r-- 0/0 65691 2022-03-24 10:02 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-03-24 10:14 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 3873 2022-03-24 10:02 share/doc/nerdctl/docs/build.md
-rw-r--r-- 0/0 3996 2022-03-24 10:02 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-03-24 10:02 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-03-24 10:02 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-03-24 10:02 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-03-24 10:02 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-03-24 10:02 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-03-24 10:02 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1306 2022-03-24 10:02 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-03-24 10:02 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 13134 2022-03-24 10:02 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-03-24 10:02 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-03-24 10:02 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-03-24 10:02 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-03-24 10:02 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-03-24 10:02 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-03-24 10:19 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1047 2022-03-24 10:19 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5348 2022-03-24 10:19 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.18.0-beta.0
- containerd: v1.6.2
- runc: v1.1.0
- CNI plugins: v1.1.1
- BuildKit: v0.10.0
- Stargz Snapshotter: v0.11.3
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.1
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.1/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/2033548329
The sha256sum of the SHA256SUMS file itself is 8a525c6192ef9f100fc90ae874a883bdcde1d1e8e2da06c66d1b4b65b9a8de4c
.
v0.17.1
Changes
-
nerdctl network create
: -
nerdctl-full:
- Update containerd (1.6.1), CNI plugins (1.1.0), IPFS (0.12.0), Stargz Snapshotter (0.11.1) (#856)
- This containerd release fixes a vulnerability of CRI plugin (CVE-2022-23648). nerdctl does NOT use CRI and is NOT affected by this vulnerability.
- Update containerd (1.6.1), CNI plugins (1.1.0), IPFS (0.12.0), Stargz Snapshotter (0.11.1) (#856)
Other changes: https://github.com/containerd/nerdctl/milestone/14?closed=1
Thanks to @junnplus @fahedouch
About the binaries
- Minimal (
nerdctl-0.17.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.17.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.17.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 27738112 2022-03-03 10:22 nerdctl
-rwxr-xr-x root/root 18692 2022-03-03 10:21 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-03-03 10:21 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.17.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-03-03 10:33 bin/
-rwxr-xr-x 0/0 25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3386840 2022-03-03 10:28 bin/bypass4netns
-rwxr-xr-x 0/0 4919296 2022-03-03 10:29 bin/bypass4netnsd
-rwxr-xr-x 0/0 60247488 2022-03-03 10:30 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 18692 2022-03-03 10:29 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-03-03 10:29 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9854976 2022-03-03 10:31 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58625880 2022-02-22 05:28 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19149554 2022-03-03 10:33 bin/ctd-decoder
-rwxr-xr-x 0/0 29629920 2022-03-03 10:30 bin/ctr
-rwxr-xr-x 0/0 28004865 2022-03-03 10:33 bin/ctr-enc
-rwxr-xr-x 0/0 28855704 2022-02-22 05:28 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-03-03 10:33 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67859120 2022-02-18 05:00 bin/ipfs
-rwxr-xr-x 0/0 27709440 2022-03-03 10:29 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13258472 2022-03-03 10:29 bin/runc
-rwxr-xr-x 0/0 3669824 2022-03-03 10:33 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-03-03 10:32 lib/
drwxr-xr-x 0/0 0 2022-03-03 10:32 lib/systemd/
drwxr-xr-x 0/0 0 2022-03-03 10:32 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-03-03 10:32 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-03-03 10:28 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-03-03 10:32 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-03-03 10:32 libexec/
drwxrwxr-x 0/0 0 2022-03-03 10:32 libexec/cni/
-rwxr-xr-x 0/0 3780654 2022-02-23 17:01 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4221823 2022-02-23 17:01 libexec/cni/bridge
-rwxr-xr-x 0/0 9738322 2022-02-23 17:01 libexec/cni/dhcp
-rwxr-xr-x 0/0 4345726 2022-02-23 17:01 libexec/cni/firewall
-rwxr-xr-x 0/0 3811793 2022-02-23 17:01 libexec/cni/host-device
-rwxr-xr-x 0/0 3241605 2022-02-23 17:01 libexec/cni/host-local
-rwxr-xr-x 0/0 3922560 2022-02-23 17:01 libexec/cni/ipvlan
-rwxr-xr-x 0/0 2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0 3295519 2022-02-23 17:01 libexec/cni/loopback
-rwxr-xr-x 0/0 3959868 2022-02-23 17:01 libexec/cni/macvlan
-rwxr-xr-x 0/0 3679140 2022-02-23 17:01 libexec/cni/portmap
-rwxr-xr-x 0/0 4092460 2022-02-23 17:01 libexec/cni/ptp
-rwxr-xr-x 0/0 3484284 2022-02-23 17:01 libexec/cni/sbr
-rwxr-xr-x 0/0 2818627 2022-02-23 17:01 libexec/cni/static
-rwxr-xr-x 0/0 3379564 2022-02-23 17:01 libexec/cni/tuning
-rwxr-xr-x 0/0 3920827 2022-02-23 17:01 libexec/cni/vlan
-rwxr-xr-x 0/0 3523475 2022-02-23 17:01 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-03-03 10:29 share/
drwxr-xr-x 0/0 0 2022-03-03 10:29 share/doc/
drwxr-xr-x 0/0 0 2022-03-03 10:29 share/doc/nerdctl/
-rw-r--r-- 0/0 62987 2022-03-03 10:21 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-03-03 10:29 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 2870 2022-03-03 10:21 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-03-03 10:21 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-03-03 10:21 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-03-03 10:21 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-03-03 10:21 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-03-03 10:21 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-03-03 10:21 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1196 2022-03-03 10:21 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-03-03 10:21 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 12966 2022-03-03 10:21 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-03-03 10:21 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-03-03 10:21 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-03-03 10:21 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-03-03 10:21 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-03-03 10:21 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-03-03 10:33 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1070 2022-03-03 10:33 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5338 2022-03-03 10:33 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.17.1
- containerd: v1.6.1
- runc: v1.1.0
- CNI plugins: v1.1.0
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.11.1
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.12.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.12.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1927425783
The sha256sum of the SHA256SUMS file itself is 82dfd8c71c0d34c54ae091afeff9e8ee344986c9390d4ad08c7da5b5711cdbd9
.
v0.17.0
Changes
Rootless containers can be now executed without slirp4netns overhead. Can be 100x faster, depending on the workload and the environment: nerdctl run --label nerdctl/bypass4netns=true
-
nerdctl run
:- Support bypass4netns to bypass slirp4netns overhead:
nerdctl run --label nerdctl/bypass4netns=true
(#808, #810, thanks to @naoki9911) - Add
nerdctl run --mount
(#801, thanks to @liubin)
- Support bypass4netns to bypass slirp4netns overhead:
-
nerdctl images
:- Show blob sizes (#789, thanks to @fahedouch)
-
nerdctl history
:- Add
nerdctl history
command (#727, thanks to @ningmingxiao)
- Add
-
Compose:
-
Kata:
- Support CNI networking for Kata (#817, kata-containers/kata-containers#3670 , thanks to @sameo)
-
nerdctl-full:
- Update containerd (1.6.0), fuse-overlayfs (1.8.2) (#820)
-
MAINTAINERS:
Other changes: https://github.com/containerd/nerdctl/milestone/13?closed=1
Thanks to @junnplus @Zheaoli @fahedouch @jsoref @liubin @naoki9911 @ningmingxiao @sameo
About the binaries
- Minimal (
nerdctl-0.17.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.17.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.17.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27729920 2022-02-16 07:58 nerdctl
-rwxr-xr-x root/root 18692 2022-02-16 07:57 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-02-16 07:57 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.17.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-02-16 08:09 bin/
-rwxr-xr-x 0/0 25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3386840 2022-02-16 08:04 bin/bypass4netns
-rwxr-xr-x 0/0 4919296 2022-02-16 08:05 bin/bypass4netnsd
-rwxr-xr-x 0/0 60247488 2022-02-16 08:06 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 18692 2022-02-16 08:04 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-02-16 08:04 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 9854976 2022-02-16 08:07 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58613688 2022-01-27 04:30 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19149554 2022-02-16 08:09 bin/ctd-decoder
-rwxr-xr-x 0/0 29629920 2022-02-16 08:06 bin/ctr
-rwxr-xr-x 0/0 28004865 2022-02-16 08:09 bin/ctr-enc
-rwxr-xr-x 0/0 28843544 2022-01-27 04:30 bin/ctr-remote
-rwxr-xr-x 0/0 2461616 2022-02-16 08:09 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67841120 2021-12-09 18:37 bin/ipfs
-rwxr-xr-x 0/0 27701248 2022-02-16 08:04 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13258472 2022-02-16 08:05 bin/runc
-rwxr-xr-x 0/0 3669824 2022-02-16 08:09 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-02-16 08:08 lib/
drwxr-xr-x 0/0 0 2022-02-16 08:08 lib/systemd/
drwxr-xr-x 0/0 0 2022-02-16 08:08 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-02-16 08:08 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-02-16 08:04 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-02-16 08:08 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-02-16 08:08 libexec/
drwxrwxr-x 0/0 0 2022-02-16 08:08 libexec/cni/
-rwxr-xr-x 0/0 3990800 2021-09-07 19:48 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4409304 2021-09-07 19:48 libexec/cni/bridge
-rwxr-xr-x 0/0 9784253 2021-09-07 19:49 libexec/cni/dhcp
-rwxr-xr-x 0/0 4553440 2021-09-07 19:48 libexec/cni/firewall
-rwxr-xr-x 0/0 4009601 2021-09-07 19:48 libexec/cni/host-device
-rwxr-xr-x 0/0 3402808 2021-09-07 19:49 libexec/cni/host-local
-rwxr-xr-x 0/0 4144654 2021-09-07 19:48 libexec/cni/ipvlan
-rwxr-xr-x 0/0 2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0 3472123 2021-09-07 19:48 libexec/cni/loopback
-rwxr-xr-x 0/0 4216875 2021-09-07 19:48 libexec/cni/macvlan
-rwxr-xr-x 0/0 3924908 2021-09-07 19:48 libexec/cni/portmap
-rwxr-xr-x 0/0 4337802 2021-09-07 19:48 libexec/cni/ptp
-rwxr-xr-x 0/0 3682127 2021-09-07 19:48 libexec/cni/sbr
-rwxr-xr-x 0/0 2967017 2021-09-07 19:49 libexec/cni/static
-rwxr-xr-x 0/0 3622640 2021-09-07 19:48 libexec/cni/tuning
-rwxr-xr-x 0/0 4140657 2021-09-07 19:48 libexec/cni/vlan
-rwxr-xr-x 0/0 3715972 2021-09-07 19:48 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-02-16 08:05 share/
drwxr-xr-x 0/0 0 2022-02-16 08:05 share/doc/
drwxr-xr-x 0/0 0 2022-02-16 08:05 share/doc/nerdctl/
-rw-r--r-- 0/0 62137 2022-02-16 07:57 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-02-16 08:05 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 2870 2022-02-16 07:57 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-02-16 07:57 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-02-16 07:57 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-02-16 07:57 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-02-16 07:57 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-02-16 07:57 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13802 2022-02-16 07:57 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1196 2022-02-16 07:57 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-02-16 07:57 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 12966 2022-02-16 07:57 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-02-16 07:57 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-02-16 07:57 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-02-16 07:57 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-02-16 07:57 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-02-16 07:57 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-02-16 08:09 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1070 2022-02-16 08:09 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5338 2022-02-16 08:09 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.17.0
- containerd: v1.6.0
- runc: v1.1.0
- CNI plugins: v1.0.1
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.11.0
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.2
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.11.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.2/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.11.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1851495375
The sha256sum of the SHA256SUMS file itself is 118a016464dc20165f608a3a2d5d6c09f80cceaa932a2f520cdcea1aa6344495
.
v0.17.0-beta.0
Changes
(To be documented)
About the binaries
- Minimal (
nerdctl-0.17.0-beta.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.17.0-beta.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.17.0-beta.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27721728 2022-02-15 02:43 nerdctl
-rwxr-xr-x root/root 18692 2022-02-15 02:42 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-02-15 02:42 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.17.0-beta.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-02-15 02:55 bin/
-rwxr-xr-x 0/0 25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 3386840 2022-02-15 02:51 bin/bypass4netns
-rwxr-xr-x 0/0 4919296 2022-02-15 02:51 bin/bypass4netnsd
-rwxr-xr-x 0/0 49854496 2022-02-15 02:53 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 18692 2022-02-15 02:51 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-02-15 02:51 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 8376320 2022-02-15 02:53 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58613688 2022-01-27 04:30 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19149554 2022-02-15 02:55 bin/ctd-decoder
-rwxr-xr-x 0/0 27080960 2022-02-15 02:52 bin/ctr
-rwxr-xr-x 0/0 28004865 2022-02-15 02:55 bin/ctr-enc
-rwxr-xr-x 0/0 28843544 2022-01-27 04:30 bin/ctr-remote
-rwxr-xr-x 0/0 2461392 2022-02-15 02:55 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67841120 2021-12-09 18:37 bin/ipfs
-rwxr-xr-x 0/0 27693056 2022-02-15 02:51 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13258472 2022-02-15 02:51 bin/runc
-rwxr-xr-x 0/0 3669824 2022-02-15 02:55 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-02-15 02:54 lib/
drwxr-xr-x 0/0 0 2022-02-15 02:54 lib/systemd/
drwxr-xr-x 0/0 0 2022-02-15 02:55 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-02-15 02:54 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-02-15 02:50 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-02-15 02:54 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-02-15 02:54 libexec/
drwxrwxr-x 0/0 0 2022-02-15 02:54 libexec/cni/
-rwxr-xr-x 0/0 3990800 2021-09-07 19:48 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4409304 2021-09-07 19:48 libexec/cni/bridge
-rwxr-xr-x 0/0 9784253 2021-09-07 19:49 libexec/cni/dhcp
-rwxr-xr-x 0/0 4553440 2021-09-07 19:48 libexec/cni/firewall
-rwxr-xr-x 0/0 4009601 2021-09-07 19:48 libexec/cni/host-device
-rwxr-xr-x 0/0 3402808 2021-09-07 19:49 libexec/cni/host-local
-rwxr-xr-x 0/0 4144654 2021-09-07 19:48 libexec/cni/ipvlan
-rwxr-xr-x 0/0 2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0 3472123 2021-09-07 19:48 libexec/cni/loopback
-rwxr-xr-x 0/0 4216875 2021-09-07 19:48 libexec/cni/macvlan
-rwxr-xr-x 0/0 3924908 2021-09-07 19:48 libexec/cni/portmap
-rwxr-xr-x 0/0 4337802 2021-09-07 19:48 libexec/cni/ptp
-rwxr-xr-x 0/0 3682127 2021-09-07 19:48 libexec/cni/sbr
-rwxr-xr-x 0/0 2967017 2021-09-07 19:49 libexec/cni/static
-rwxr-xr-x 0/0 3622640 2021-09-07 19:48 libexec/cni/tuning
-rwxr-xr-x 0/0 4140657 2021-09-07 19:48 libexec/cni/vlan
-rwxr-xr-x 0/0 3715972 2021-09-07 19:48 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-02-15 02:51 share/
drwxr-xr-x 0/0 0 2022-02-15 02:51 share/doc/
drwxr-xr-x 0/0 0 2022-02-15 02:51 share/doc/nerdctl/
-rw-r--r-- 0/0 59823 2022-02-15 02:42 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-02-15 02:51 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 2870 2022-02-15 02:42 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-02-15 02:42 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-02-15 02:42 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-02-15 02:42 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-02-15 02:42 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 537 2022-02-15 02:42 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13256 2022-02-15 02:42 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1196 2022-02-15 02:42 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-02-15 02:42 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 12966 2022-02-15 02:42 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-02-15 02:42 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-02-15 02:42 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-02-15 02:42 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 5368 2022-02-15 02:42 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-02-15 02:42 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-02-15 02:55 share/doc/nerdctl-full/
-rw-r--r-- 0/0 1077 2022-02-15 02:55 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5338 2022-02-15 02:55 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.17.0-beta.0
- containerd: v1.5.9
- runc: v1.1.0
- CNI plugins: v1.0.1
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.11.0
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- bypass4netns: v0.2.2
- fuse-overlayfs: v1.8.1
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.11.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.1/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.11.0/LICENSE)
- bin/{runc,bypass4netns,bypass4netnsd}: Apache License 2.0, statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE), source code available at https://github.com/seccomp/libseccomp/)
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1844687071
The sha256sum of the SHA256SUMS file itself is 31d09d54e0d9c18752d47cfbe584d07771ddda524a9d31845b7bbee6e844f2a9
.
v0.16.1
This version fixes several nerdctl login
regressions.
Verified with the following registries: https://github.com/containerd/nerdctl/blob/v0.16.1/docs/registry.md
- Amazon Elastic Container Registry (ECR)
- Azure Container Registry (ACR)
- Docker Hub
- GitHub Container Registry (GHCR)
- Google Artifact Registry (pkg.dev)
- Google Container Registry (GCR)
- JFrog Artifactory
- Quay.io
Changes
-
nerdctl login
:- Fix HTTP error 400 with Alibaba Cloud Container Registry (#718, thanks to @junnplus)
- Fix HTTP error 400 with Azure Container Registry (#753, thanks to @junnplus)
- Fix HTTP error 404 with GitHub Container Registry (#724, #735, thanks @dylanrhysscott and @junnplus)
- Fix
invalid URL escape "%2F"
error with JFrog Artifactory (#721, thanks to @fahedouch) - Fix a bug that required pressing the Enter key twice (#752, thanks to @fahedouch)
- Add documents for several managed services (#749, #768, thanks to @fahedouch)
-
nerdctl run
: -
nerdctl update
:- Add
nerdctl update
command (#696, thanks to @ningmingxiao)
- Add
-
nerdctl network create
: -
nerdctl ipfs registry
:- Add an example manifest for Kubernetes (#678, thanks to @ktock)
-
nerdctl-full:
Other changes: https://github.com/containerd/nerdctl/milestone/12
Thanks to @junnplus @dylanrhysscott @fahedouch @fhke @jsoref @ktock @ningmingxiao @tanweernoor
About the binaries
- Minimal (
nerdctl-0.16.1-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.16.1-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.16.1-linux-amd64.tar.gz
-rwxr-xr-x root/root 27648000 2022-02-01 01:48 nerdctl
-rwxr-xr-x root/root 17307 2022-02-01 01:47 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-02-01 01:47 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.16.1-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-02-01 01:58 bin/
-rwxr-xr-x 0/0 25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 49850400 2022-02-01 01:56 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 17307 2022-02-01 01:55 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-02-01 01:55 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 8376320 2022-02-01 01:56 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 58613688 2022-01-27 04:30 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19155554 2022-02-01 01:58 bin/ctd-decoder
-rwxr-xr-x 0/0 27080960 2022-02-01 01:56 bin/ctr
-rwxr-xr-x 0/0 28005345 2022-02-01 01:58 bin/ctr-enc
-rwxr-xr-x 0/0 28843544 2022-01-27 04:30 bin/ctr-remote
-rwxr-xr-x 0/0 2461392 2022-02-01 01:58 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67841120 2021-12-09 18:37 bin/ipfs
-rwxr-xr-x 0/0 27615232 2022-02-01 01:55 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13258472 2022-02-01 01:55 bin/runc
-rwxr-xr-x 0/0 3669824 2022-02-01 01:58 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-02-01 01:58 lib/
drwxr-xr-x 0/0 0 2022-02-01 01:58 lib/systemd/
drwxr-xr-x 0/0 0 2022-02-01 01:58 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-02-01 01:58 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-02-01 01:54 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-02-01 01:58 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-02-01 01:58 libexec/
drwxrwxr-x 0/0 0 2022-02-01 01:58 libexec/cni/
-rwxr-xr-x 0/0 3990800 2021-09-07 19:48 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4409304 2021-09-07 19:48 libexec/cni/bridge
-rwxr-xr-x 0/0 9784253 2021-09-07 19:49 libexec/cni/dhcp
-rwxr-xr-x 0/0 4553440 2021-09-07 19:48 libexec/cni/firewall
-rwxr-xr-x 0/0 4009601 2021-09-07 19:48 libexec/cni/host-device
-rwxr-xr-x 0/0 3402808 2021-09-07 19:49 libexec/cni/host-local
-rwxr-xr-x 0/0 4144654 2021-09-07 19:48 libexec/cni/ipvlan
-rwxr-xr-x 0/0 2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0 3472123 2021-09-07 19:48 libexec/cni/loopback
-rwxr-xr-x 0/0 4216875 2021-09-07 19:48 libexec/cni/macvlan
-rwxr-xr-x 0/0 3924908 2021-09-07 19:48 libexec/cni/portmap
-rwxr-xr-x 0/0 4337802 2021-09-07 19:48 libexec/cni/ptp
-rwxr-xr-x 0/0 3682127 2021-09-07 19:48 libexec/cni/sbr
-rwxr-xr-x 0/0 2967017 2021-09-07 19:49 libexec/cni/static
-rwxr-xr-x 0/0 3622640 2021-09-07 19:48 libexec/cni/tuning
-rwxr-xr-x 0/0 4140657 2021-09-07 19:48 libexec/cni/vlan
-rwxr-xr-x 0/0 3715972 2021-09-07 19:48 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-02-01 01:55 share/
drwxr-xr-x 0/0 0 2022-02-01 01:55 share/doc/
drwxr-xr-x 0/0 0 2022-02-01 01:55 share/doc/nerdctl/
-rw-r--r-- 0/0 59400 2022-02-01 01:47 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-02-01 01:55 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 2870 2022-02-01 01:47 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-02-01 01:47 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-02-01 01:47 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-02-01 01:47 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2359 2022-02-01 01:47 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 445 2022-02-01 01:47 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13256 2022-02-01 01:47 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1196 2022-02-01 01:47 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-02-01 01:47 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 12966 2022-02-01 01:47 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-02-01 01:47 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-02-01 01:47 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 14159 2022-02-01 01:47 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 3626 2022-02-01 01:47 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-02-01 01:47 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-02-01 01:58 share/doc/nerdctl-full/
-rw-r--r-- 0/0 956 2022-02-01 01:58 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5167 2022-02-01 01:58 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.16.1
- containerd: v1.5.9
- runc: v1.1.0
- CNI plugins: v1.0.1
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.11.0
- imgcrypt: v1.1.3
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- fuse-overlayfs: v1.8.1
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.11.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8.1/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.11.0/LICENSE)
- bin/runc (Apache License 2.0) is statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE))
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1775940321
The sha256sum of the SHA256SUMS file itself is c8ed2ac2a7e467c9e93a908f3752142c619d97b50d3a4de3dfd0967448de7207
.
v0.16.0
Key features: support nerdctl.toml
for global configuration, supporthosts.toml
for configuring certs, improved integration of cosign
Changes:
Global:
- Support
nerdctl.toml
for global configuration (#635)
nerdctl pull
, nerdctl push
, nerdctl login
:
- Support
/etc/containerd/certs.d/<HOST:PORT>/hosts.toml
(~/.config/containerd/certs.d/<HOST:PORT>/hosts.toml
) for configuring certs (#642)
nerdctl run
:
- Add
--verify=cosign
and--cosign-key=KEY
flags for cosign integration (#628, thanks to @junnplus) - Automatically generate a container name from the image name, e.g.,
nerdctl run nginx
creates a container named "nginx-62edd" (#693) - Add
--cpuset-mems
,--cpu-quota
, and--cpu-period
options (#689, thanks to @ningmingxiao) - Add
--rdt-class
option for Intel RDT classes (#418, thanks to @marquiz)
nerdctl commit
:
- Add
--pause=false
option (#673, thanks to @fhke) - Support overriding
ENTRYPOINT
with--change
option (#667, thanks to @tomfeigin)
nerdctl ipfs registry
:
nerdctl build
:
- Add
--label
option (#653, thanks to @junnplus) - Add a dummy
--rm
option (#649, thanks to @JuozasVainauskas)
nerdctl create
: - Add
nerdctl create
command (#647, thanks to @junnplus)
nerdctl network rm
:
nerdctl compose
:
- Support specifying service name for
nerdctl compose pull/push
(#621, thanks to @junnplus) - Support labels in
nerdctl compose up --build
(#664, thanks to @junnplus) - Support specifying subnets (#652, thanks to @junnplus)
- Add
--services
,--volumes
, and--hash
options fornerdctl compose config
(#632, thanks to @junnplus) - Add
nerdctl compose kill
command (#617, thanks to @junnplus)
nerdctl-full:
- Update containerd (1.5.9), fuse-overlayfs (1.8), go-ipfs (0.11) (#670)
Other changes: https://github.com/containerd/nerdctl/milestone/11?closed=1
Thanks to @junnplus @JuozasVainauskas @fahedouch @fhke @ktock @liubin @marquiz @mrueg @ningmingxiao @stefanberger @tomfeigin
About the binaries
- Minimal (
nerdctl-0.16.0-linux-amd64.tar.gz
): nerdctl only - Full (
nerdctl-full-0.16.0-linux-amd64.tar.gz
): Includes dependencies such as containerd, runc, and CNI
Minimal
Extract the archive to a path like /usr/local/bin
or ~/bin
.
tar Cxzvvf /usr/local/bin nerdctl-0.16.0-linux-amd64.tar.gz
-rwxr-xr-x root/root 27803648 2022-01-13 04:31 nerdctl
-rwxr-xr-x root/root 17308 2022-01-13 04:30 containerd-rootless-setuptool.sh
-rwxr-xr-x root/root 6972 2022-01-13 04:30 containerd-rootless.sh
Full
Extract the archive to a path like /usr/local
or ~/.local
.
tar Cxzvvf /usr/local nerdctl-full-0.16.0-linux-amd64.tar.gz
drwxr-xr-x 0/0 0 2022-01-13 04:42 bin/
-rwxr-xr-x 0/0 25845982 2015-10-21 00:00 bin/buildctl
-rwxr-xr-x 0/0 38767973 2015-10-21 00:00 bin/buildkitd
-rwxr-xr-x 0/0 49850400 2022-01-13 04:40 bin/containerd
-rwxr-xr-x 0/0 9752576 2021-11-19 07:44 bin/containerd-fuse-overlayfs-grpc
-rwxr-xr-x 0/0 17308 2022-01-13 04:38 bin/containerd-rootless-setuptool.sh
-rwxr-xr-x 0/0 6972 2022-01-13 04:38 bin/containerd-rootless.sh
-rwxr-xr-x 0/0 8376320 2022-01-13 04:40 bin/containerd-shim-runc-v2
-rwxr-xr-x 0/0 56691128 2021-11-18 10:54 bin/containerd-stargz-grpc
-rwxr-xr-x 0/0 19155554 2022-01-13 04:42 bin/ctd-decoder
-rwxr-xr-x 0/0 27080960 2022-01-13 04:39 bin/ctr
-rwxr-xr-x 0/0 28005345 2022-01-13 04:42 bin/ctr-enc
-rwxr-xr-x 0/0 29106648 2021-11-18 10:54 bin/ctr-remote
-rwxr-xr-x 0/0 2462352 2022-01-13 04:42 bin/fuse-overlayfs
-rwxr-xr-x 0/0 67841120 2021-12-09 18:37 bin/ipfs
-rwxr-xr-x 0/0 27774976 2022-01-13 04:38 bin/nerdctl
-rwxr-xr-x 0/0 9130136 2021-11-08 06:46 bin/rootlessctl
-rwxr-xr-x 0/0 10555302 2021-11-08 06:46 bin/rootlesskit
-rwxr-xr-x 0/0 13415232 2022-01-13 04:39 bin/runc
-rwxr-xr-x 0/0 3669824 2022-01-13 04:42 bin/slirp4netns
drwxr-xr-x 0/0 0 2022-01-13 04:42 lib/
drwxr-xr-x 0/0 0 2022-01-13 04:42 lib/systemd/
drwxr-xr-x 0/0 0 2022-01-13 04:42 lib/systemd/system/
-rw-r--r-- 0/0 1331 2022-01-13 04:42 lib/systemd/system/buildkit.service
-rw-r--r-- 0/0 1270 2022-01-13 04:38 lib/systemd/system/containerd.service
-rw-r--r-- 0/0 312 2022-01-13 04:42 lib/systemd/system/stargz-snapshotter.service
drwxr-xr-x 0/0 0 2022-01-13 04:42 libexec/
drwxrwxr-x 0/0 0 2022-01-13 04:42 libexec/cni/
-rwxr-xr-x 0/0 3990800 2021-09-07 19:48 libexec/cni/bandwidth
-rwxr-xr-x 0/0 4409304 2021-09-07 19:48 libexec/cni/bridge
-rwxr-xr-x 0/0 9784253 2021-09-07 19:49 libexec/cni/dhcp
-rwxr-xr-x 0/0 4553440 2021-09-07 19:48 libexec/cni/firewall
-rwxr-xr-x 0/0 4009601 2021-09-07 19:48 libexec/cni/host-device
-rwxr-xr-x 0/0 3402808 2021-09-07 19:49 libexec/cni/host-local
-rwxr-xr-x 0/0 4144654 2021-09-07 19:48 libexec/cni/ipvlan
-rwxr-xr-x 0/0 2166784 2021-09-27 06:35 libexec/cni/isolation
-rwxr-xr-x 0/0 3472123 2021-09-07 19:48 libexec/cni/loopback
-rwxr-xr-x 0/0 4216875 2021-09-07 19:48 libexec/cni/macvlan
-rwxr-xr-x 0/0 3924908 2021-09-07 19:48 libexec/cni/portmap
-rwxr-xr-x 0/0 4337802 2021-09-07 19:48 libexec/cni/ptp
-rwxr-xr-x 0/0 3682127 2021-09-07 19:48 libexec/cni/sbr
-rwxr-xr-x 0/0 2967017 2021-09-07 19:49 libexec/cni/static
-rwxr-xr-x 0/0 3622640 2021-09-07 19:48 libexec/cni/tuning
-rwxr-xr-x 0/0 4140657 2021-09-07 19:48 libexec/cni/vlan
-rwxr-xr-x 0/0 3715972 2021-09-07 19:48 libexec/cni/vrf
drwxr-xr-x 0/0 0 2022-01-13 04:39 share/
drwxr-xr-x 0/0 0 2022-01-13 04:39 share/doc/
drwxr-xr-x 0/0 0 2022-01-13 04:39 share/doc/nerdctl/
-rw-r--r-- 0/0 58004 2022-01-13 04:30 share/doc/nerdctl/README.md
drwxr-xr-x 0/0 0 2022-01-13 04:39 share/doc/nerdctl/docs/
-rw-r--r-- 0/0 2870 2022-01-13 04:30 share/doc/nerdctl/docs/cni.md
-rw-r--r-- 0/0 1848 2022-01-13 04:30 share/doc/nerdctl/docs/compose.md
-rw-r--r-- 0/0 3062 2022-01-13 04:30 share/doc/nerdctl/docs/config.md
-rw-r--r-- 0/0 3111 2022-01-13 04:30 share/doc/nerdctl/docs/cosign.md
-rw-r--r-- 0/0 2358 2022-01-13 04:30 share/doc/nerdctl/docs/dir.md
-rw-r--r-- 0/0 445 2022-01-13 04:30 share/doc/nerdctl/docs/experimental.md
-rw-r--r-- 0/0 13257 2022-01-13 04:30 share/doc/nerdctl/docs/faq.md
-rw-r--r-- 0/0 1196 2022-01-13 04:30 share/doc/nerdctl/docs/freebsd.md
-rw-r--r-- 0/0 2326 2022-01-13 04:30 share/doc/nerdctl/docs/gpu.md
-rw-r--r-- 0/0 12965 2022-01-13 04:30 share/doc/nerdctl/docs/ipfs.md
-rw-r--r-- 0/0 1667 2022-01-13 04:30 share/doc/nerdctl/docs/multi-platform.md
-rw-r--r-- 0/0 3198 2022-01-13 04:30 share/doc/nerdctl/docs/ocicrypt.md
-rw-r--r-- 0/0 1448 2022-01-13 04:30 share/doc/nerdctl/docs/registry.md
-rw-r--r-- 0/0 3626 2022-01-13 04:30 share/doc/nerdctl/docs/rootless.md
-rw-r--r-- 0/0 4835 2022-01-13 04:30 share/doc/nerdctl/docs/stargz.md
drwxr-xr-x 0/0 0 2022-01-13 04:42 share/doc/nerdctl-full/
-rw-r--r-- 0/0 952 2022-01-13 04:42 share/doc/nerdctl-full/README.md
-rw-r--r-- 0/0 5167 2022-01-13 04:42 share/doc/nerdctl-full/SHA256SUMS
Included components
See share/doc/nerdctl-full/README.md
:
# nerdctl (full distribution)
- nerdctl: v0.16.0
- containerd: v1.5.9
- runc: v1.0.3
- CNI plugins: v1.0.1
- CNI isolation plugin: v0.0.4
- BuildKit: v0.9.3
- Stargz Snapshotter: v0.10.1
- imgcrypt: v1.1.2
- RootlessKit: v0.14.6
- slirp4netns: v1.1.12
- fuse-overlayfs: v1.8
- containerd-fuse-overlayfs: v1.0.4
- IPFS: v0.11.0
## License
- bin/slirp4netns: [GNU GENERAL PUBLIC LICENSE, Version 2](https://github.com/rootless-containers/slirp4netns/blob/v1.1.12/COPYING)
- bin/fuse-overlayfs: [GNU GENERAL PUBLIC LICENSE, Version 3](https://github.com/containers/fuse-overlayfs/blob/v1.8/COPYING)
- bin/ipfs: [Combination of MIT-only license and dual MIT/Apache-2.0 license](https://github.com/ipfs/go-ipfs/blob/v0.11.0/LICENSE)
- bin/runc (Apache License 2.0) is statically linked with libseccomp ([LGPL 2.1](https://github.com/seccomp/libseccomp/blob/main/LICENSE))
- Other files: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0)
Quick start
Rootful
$ sudo systemctl enable --now containerd
$ sudo nerdctl run -d --name nginx -p 80:80 nginx:alpine
Rootless
$ containerd-rootless-setuptool.sh install
$ nerdctl run -d --name nginx -p 8080:80 nginx:alpine
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/1691067303
The sha256sum of the SHA256SUMS file itself is `ecc315881abee3d647c0eed2692e78ce26197262ddd04ae765e2911389ba79...