RATATOSKRATATOSK
Sign in

containerd

v2.3.4Kubernetes Core
Aug 12, 2026

CHECK 3PLAN 1OTHER 11

containerd v2.3.4 changes several CRI defaults and deprecates checkpoint restore through `CreateContainer`. It also adds CRI capabilities and configuration while fixing runtime and snapshotter defects.

Check if affected (3)

  • breakingCheckpoint restore in CreateContainer, disabled by default

    Applies if you use checkpoint restore through CreateContainer.

    Checkpoint restore in CreateContainer is disabled by default in containerd v2.3.4. The enable_experimental_restore_via_create configuration option enables it.

  • breakingruntimeFeatures.UserNamespacesHostNetwork default in CRI

    Applies if you use the CRI runtimeFeatures.UserNamespacesHostNetwork setting.

    The default value of runtimeFeatures.UserNamespacesHostNetwork is set to true in CRI in containerd v2.3.4.

  • breakingWindows log scrubbing, enabled by default

    Applies if you run containerd on Windows.

    Log scrubbing is enabled by default on Windows in containerd v2.3.4.

Plan ahead (1)

  • deprecatedCheckpoint restore in CreateContainer, deprecated

    Applies if you use checkpoint restore through CreateContainer.

    Checkpoint restore in CreateContainer is deprecated in containerd v2.3.4.

All 11 other recorded changesadditions 4 · fixes 3 · constraints 2 · removals 1 · value changes 1

additions (4)

  • Enable OCI runtime feature introspection for non-runc runtimes in CRI
  • Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option
  • Emit deprecation warnings for plugins using deprecated NRI interfaces
  • ctr: add --scrub-logs flag for Windows

fixes (3)

  • Fix memory leak in OOM watcher map when stopping container monitoring
  • Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming
  • Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata

constraints (2)

  • Support non-UTF-8 binary environment variable values in CRI
  • Normalize sandbox image references in CRI to resolve images without domain prefixes

removals (1)

  • core/runtime/v2: Drop checkpointctl module dependency

value changes (1)

  • Avoid orphaning shims on transient errors when loading process IDs
Add containerd to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All containerd releases →