containerd/containerd v2.1.9 Release Notes

Published at: 2026-06-18T23:20:04Z

Welcome to the v2.1.9 release of containerd!

The ninth patch release for containerd 2.1 contains various fixes and updates including security patches.

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

23 commits

Prepare release notes for v2.1.9 (#13629)
- b8b3a86e9 Prepare release notes for v2.1.9
- ee965da63 Merge commit from fork
- b5e0c4733 Merge commit from fork
- 02045fd46 cri: filter CDI annotations on checkpoint restore
- e9c26cf3c Merge commit from fork
- 2e4583a9f cri: do not re-tag restored checkpoints
- 6e4ec908a Merge commit from fork
- 570e69884 cri: make checkpoint restore robust to unexpected archive content
- 3788b4b9e Merge commit from fork
- 290420fa7 Bound user-database file reads in openBoundedUserFile
- bc5014f45 Merge commit from fork
- 429bcb924 Do not propagate reserved labels from image configs
update runc binary to v1.3.6 (#13616)
- 698f2fd66 update runc binary to v1.3.6
update go to 1.26.4/1.25.11 (#13578)
- b8b75a90e update go to 1.26.4/1.25.11
Configure udevd children-max for root-test (#13566)
- 22515b56f Configure udevd children-max for root-test
Clean up disk space in node e2e workflow (#13554)
- af88d4f60 Clean up disk space in node e2e workflow
[github-action] release - Empty allowedSignersFile (#13517)
- 06df49576 release - Empty allowedSignersFile

This release has no dependency changes

Previous release can be found at v2.1.8

containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.