Skip to content

Dockerfile: update to containerd v2.3.3, runhcs v0.15.0-rc.3 - #53050

Merged
thaJeztah merged 1 commit into
moby:masterfrom
thaJeztah:bump_containerd_bin
Jul 13, 2026
Merged

Dockerfile: update to containerd v2.3.3, runhcs v0.15.0-rc.3#53050
thaJeztah merged 1 commit into
moby:masterfrom
thaJeztah:bump_containerd_bin

Conversation

@thaJeztah

Copy link
Copy Markdown
Member

This also updates the runhcs binary to v0.15.0-rc.3

Highlights

  • Set SystemTemp environment variable on Windows so temp directory overrides work for SYSTEM services

Container Runtime Interface (CRI)

  • Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit
  • Reject CreateContainer calls when the target sandbox is not running
  • Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks

Image Distribution

  • Surface OCI error bodies in registry 403 responses by falling back to GET requests

Snapshotters

  • Align default 4K mkfs block size for EROFS across all platforms

release notes: https://github.com/containerd/containerd/releases/tag/v2.3.3
full diff: containerd/containerd@v2.3.2...v2.3.3

Summary

Release notes (optional)

Update containerd (static binaries) to [v2.3.3](https://github.com/containerd/containerd/releases/tag/v2.3.3)

A picture of a cute animal (not mandatory but encouraged)

This also updates the runhcs binary to v0.15.0-rc.3

Highlights

- Set SystemTemp environment variable on Windows so temp directory overrides work for SYSTEM services

Container Runtime Interface (CRI)

- Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit
- Reject CreateContainer calls when the target sandbox is not running
- Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks

Image Distribution

- Surface OCI error bodies in registry 403 responses by falling back to GET requests

Snapshotters

- Align default 4K mkfs block size for EROFS across all platforms

release notes: https://github.com/containerd/containerd/releases/tag/v2.3.3
full diff: containerd/containerd@v2.3.2...v2.3.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@thaJeztah

Copy link
Copy Markdown
Member Author

#53051 is for the 29.x branch, but updating to containerd v2.2.6 instead

Of course that is, unless we decide to bump to v2.3 as default, in that case we could backport this one.

@thaJeztah
thaJeztah merged commit f4c7eea into moby:master Jul 13, 2026
222 of 228 checks passed
@thaJeztah
thaJeztah deleted the bump_containerd_bin branch July 13, 2026 11:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants