containerd/containerd v2.1.1 Release Notes

Published at: 2025-05-20T18:01:15Z

Welcome to the v2.1.1 release of containerd!

The first patch release for containerd 2.1 fixes a critical vulnernability (CVE-2025-47290) which was first introduced in 2.1.0. See the Github Advisory for more details. This release also contains a few smaller updates and bux fixes.

Highlights

Image Storage

Fix erofs media type handling (#11855)

Runtime

Reduce shim cleanup log level and add more context (#11831)

Deprecations

Update removal version for deprecated registry config fields (#11835)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Samuel Karp
Derek McGowan
Gao Xiang
Akhil Mohan
Chris Henzie
Phil Estes
Sebastiaan van Stijn
ningmingxiao

Changes

17 commits

cb1076646 Merge commit from fork
216667ba0 Prepare release notes for 2.1.1
ac00b8e61 Revert “perf(applyNaive): avoid walking the tree for each file in the same directory”
build(deps): bump github.com/Microsoft/hcsshim (#11847)
- 444ca17cd update runhcs version to v0.13.0
- 0684f1c44 build(deps): bump github.com/Microsoft/hcsshim
Fix erofs media type handling (#11855)
- e1817a401 docs/snapshotters/erofs.md: a tip for improved performance
- 2168cb92c erofs-differ: fix EROFS native image support
Reduce shim cleanup log level and add more context (#11831)
- 7fcbc3c46 core/runtime/v2: cleanup shim-cleanup logs
Update removal version for deprecated registry config fields (#11835)
- 37d6c4236 Update removal version for deprecated registry config fields
ctr:make sure containerd socket exist before create client (#11827)
- e7be076d4 ctr:make sure containerd socket exist before create client
.github: mark 2.1 releases as latest (#11821)
- c90524d5f .github: mark 2.1 releases as latest

Dependency Changes

github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.13.0

Previous release can be found at v2.1.0

Which file should I download?

containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc and CNI plugins from their official sites too.

See also the Getting Started documentation.

Containerd V2.1.0 Release Note Containerd V2.1.2 Release Note