fix: allow containers to start using a large numbers of ports by haytok · Pull Request #4290 · containerd/nerdctl

haytok · 2025-05-25T15:08:27Z

Suppose we have a compose.yaml that allocates a large numbers of ports as follows.

> cat compose.yaml
services:
  svc0:
    image: alpine
    command: "sleep infinity"
    ports:
      - '32000-32060:32000-32060'

When we run nerdctl compose up -d using this compose.yaml, we will get the following error.

FATA[0000] create container failed validation: containers.Labels: label key and value length (4711 bytes) greater than maximum size (4096 bytes), key: nerdctl/ports: invalid argument
FATA[0000] error while creating container haytok-svc0-1: error while creating container haytok-svc0-1: exit status 1

This issue is reported in the following issue.

nerdctl compose file map multiple ports (label key and value length (30968 bytes) greater than maximum size (4096 bytes)) #4027

This issue is considered to be the same as the one with errors when trying to perform many port mappings, such as nerdctl run -p 80:80 -p 81:81 ~ -p 1000:1000 ...

The current implementation is processing to create a container with the information specified in -p to the label.
And as can be seen from the error message, as the number of ports to be port mapped increases, the creation of the container fails because it violates the limit of the maximum number of bytes on the containerd side that can be allocated for a label.

Therefore, this PR modifies the container creation process so that containers can be launched without having to assign the information specified in the -p option to the labels.

Specifically, port mapping information is stored in the following path, and when port mapping information is required, it is retrieved from this file.

<DATAROOT>/<ADDRHASH>/containers/<NAMESPACE>/<CID>/port-mappings.json

haytok · 2025-05-25T15:56:58Z

Because of my modifications, CI fails.
So, I'll check the root cause of CI failures.

apostasie · 2025-05-25T21:28:10Z

Why are we not storing the range itself in the label?

haytok · 2025-05-27T16:28:50Z

Hi, @apostasie Thanks for commnets!

Why are we not storing the range itself in the label?

I also think of a way to keep the range of ports in the label, but the following edge case would violate the upper limit of the number of labels.
Specifically, when host, port and protocol are random, it is difficult to combine ranges.

nerdctl run -p 127.0.0.1:32000:32000 -p 127.0.0.2:32001:32001 ~ -p 127.0.0.254:32253:32253 nginx

Considering these cases, I think that when the port mapping information is given to the Label, it would violate the upper limit, so I implemented the way of this PR so that the port mapping information is not retained in the Label.

When nerdctl compose up is executed, the ports specified in compose.yaml are expanded and executed by the following function:

https://github.com/compose-spec/compose-go/blob/main/cli/options.go#L448-L449

The ports are expanded and executed as nerdctl run -p 32000:32000 ~ -p 32060:32060 ....

apostasie · 2025-05-30T20:32:28Z

@AkihiroSuda so, this PR does move some of the network configuration information from labels (or annotations) to the filesystem.

Future work to support per-network IP assignment (and options) will require significant re-jiggle of other annotations (nerdctl/network, nerdctl/ip, etc).

That overall does beg the question: should we stop using labels/annotations to store network configuration altogether, and just use a filesystem store for that instead?
Was there a specific reason we wanted network config to be stored on the container in the first place?

Answer to this question should inform whether we should consider expanding the scope of this PR a little bit to come up with a generic net-config-store that would in the future accommodate for other changes and additions ^.

AkihiroSuda · 2025-05-31T05:27:33Z

That overall does beg the question: should we stop using labels/annotations to store network configuration altogether, and just use a filesystem store for that instead?

👍

We have to keep existing containers functional, though, if we are going to merge this in v2.1.x.

haytok · 2025-06-01T16:28:07Z

Thanks for comments !!!

I understand that it is acceptable to implement a policy of storing port mapping information in a local file.
Therefore, I'll proceed with the implementation in this PR and make corrections so that file writing can be performed atomically.

haytok · 2025-06-06T10:56:44Z

Hi @AkihiroSuda @apostasie

Could you review when you have time ? 🙏

AkihiroSuda · 2025-06-06T16:41:23Z

 	Networks = Prefix + "networks"

-	// Ports is a JSON-marshalled string of []cni.PortMapping .
-	Ports = Prefix + "ports"


This change seems to break ports of containers created with an existing version of nerdctl ?

Then probably we should postpone this to v2.2.0

Thanks for comments!!!

This change is not backward compatible, so these backward incompatible changes should be postponed until the update from 2.1 to 2.2.
If so, is it okay to leave this PR open for now until the release of 2.2 approaches?
I'll rebase as necessary and ask you to review this PR when the release of 2.2 approaches.

Yes, please.

There should be also a human-friendly warning message when an incompatible container exists.

I'll add handling for cases where there are containers that are not backward compatible (e.g., when containers created using the -p option are already exist).

apostasie · 2025-06-06T18:36:25Z

@haytok

What if we make this change backward compatible?

eg:

func LoadPortMappings(dataStore, namespace, id string) ([]cni.PortMapping, error) {
      // if there is no port information from NetworkStore, look into the labels

apostasie · 2025-06-06T18:37:43Z

@haytok a few comments above - also I think we should make this backward compatible (at least for reading the ports from the labels if they are there).

haytok · 2025-06-07T00:42:10Z

Hi @apostasie

Thanks for commens!!!

I hadn't considered backward compatibility at all, so I'll update based on your advices to make backward compatible.

haytok · 2025-06-17T15:59:09Z

I've added the logic to maintain backward compatibility.

However, maybe all failures are flaky ...

canary / go canary failures are related to #4318.

[flaky, see #3988] / EL / almalinux-9 rootful (pull_request) Failing after 16m

Details

2025-06-17T14:53:34.7593504Z     container_logs_test.go:313: 
2025-06-17T14:53:34.7593560Z         
2025-06-17T14:53:34.7593715Z         +------------------------------------------------------------------------------------------------------------+
2025-06-17T14:53:34.7594063Z         | ➡️      | ⚙️ /usr/local/bin/nerdctl logs -f testlogswithoutnewlineoreof-f625832d                           |
2025-06-17T14:53:34.7594222Z         +------------------------------------------------------------------------------------------------------------+
2025-06-17T14:53:34.7594417Z         | 🌱      | HOME=/root                                                                                       |
2025-06-17T14:53:34.7594667Z         |         | PATH=/usr/local/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin |
2025-06-17T14:53:34.7594770Z         |         | :/bin                                                                                            |
2025-06-17T14:53:34.7595027Z         |         | DOCKER_CONFIG=/tmp/TestLogsWithoutNewlineOrEOF3385429920/003                                     |
2025-06-17T14:53:34.7595290Z         |         | NERDCTL_TOML=/tmp/TestLogsWithoutNewlineOrEOF3385429920/003/nerdctl.toml                         |
2025-06-17T14:53:34.7595526Z         +------------------------------------------------------------------------------------------------------------+
2025-06-17T14:53:34.7595727Z         | ⏰      | <1s (limit: 3m0s)                                                                                |
2025-06-17T14:53:34.7595888Z         +------------------------------------------------------------------------------------------------------------+
2025-06-17T14:53:34.7596214Z         | 📁      | /tmp/TestLogsWithoutNewlineOrEOF3385429920/002                                                   |
2025-06-17T14:53:34.7596372Z         +------------------------------------------------------------------------------------------------------------+
2025-06-17T14:53:34.7596434Z         
2025-06-17T14:53:34.7596977Z     container_logs_test.go:313: 	🔗 �]8;;file:///go/src/github.com/containerd/nerdctl/cmd/nerdctl/container/container_logs_test.go#313:1�testCase.Run(t)�]8;;��[0m
2025-06-17T14:53:34.7597042Z         
2025-06-17T14:53:34.7597110Z         <<<<<<<<<<<<<<<<<<<<
2025-06-17T14:53:34.7597242Z         	🖊️ Inspecting output (equals)
2025-06-17T14:53:34.7597339Z         	👀 testing:		``
2025-06-17T14:53:34.7597450Z         	❌ FAILED!		= `'Hello World!
2025-06-17T14:53:34.7597532Z         There is no newline'`
2025-06-17T14:53:34.7597595Z         >>>>>>>>>>>>>>>>>>>>

lint / go / linux (go canary) (pull_request) Failing after 1m

Details

Error: ../../../go/pkg/mod/golang.org/x/tools@v0.12.0/internal/tokeninternal/tokeninternal.go:78:9: invalid array length -delta * delta (constant -256 of type int64)
make: *** [Makefile:221: install-dev-tools] Error 1
Error: Process completed with exit code 2.

test / in-container / rootful (canary) (pull_request) Failing after 5m

Details

Dockerfile:321
--------------------
 319 |     ENV PATH=/usr/local/go/bin:$PATH
 320 |     ARG GOTESTSUM_VERSION
 321 | >>> RUN GOBIN=/usr/local/bin go install gotest.tools/gotestsum@${GOTESTSUM_VERSION}
 322 |     COPY . /go/src/github.com/containerd/nerdctl
 323 |     WORKDIR /go/src/github.com/containerd/nerdctl
--------------------
ERROR: failed to solve: process "/bin/sh -c GOBIN=/usr/local/bin go install gotest.tools/gotestsum@${GOTESTSUM_VERSION}" did not complete successfully: exit code: 1
Error: Process completed with exit code 1.

test / in-host / windows (canary) (pull_request) Failing after 3m

Details

Error: C:\Users\runneradmin\go\pkg\mod\golang.org\x\tools@v0.12.0\internal\tokeninternal\tokeninternal.go:78:9: invalid array length -delta * delta (constant -256 of type int64)
make: *** [Makefile:221: install-dev-tools] Error 1
Error: Process completed with exit code 2.

apostasie · 2025-06-17T18:43:25Z

Yes, all invalid array length -delta * delta (constant -256 of type int64) you can ignore.

TestLogsWithoutNewlineOrEOF is likely #4147

apostasie · 2025-06-17T18:46:11Z

-		return nil, fmt.Errorf("failed to parse label %q=%q: %s", labels.Ports, portsJSON, err.Error())
+		return ports, fmt.Errorf("failed to parse label %q=%q: %s", labels.Ports, portsJSON, err.Error())
 	}
+	log.L.Warnf("container %s is using legacy port mapping configuration. To ensure compatibility with the new port mapping logic, please recreate this container. For more details, see: https://github.com/containerd/nerdctl/pull/4290", id[:12])


Maybe we actually do not need this warning?
We are compatible with legacy port mapping, so, it is transparent for users - eg: there is no real reason to urge them to recreate containers until we break compatibility / remove the compat layer in 2.X.

Let see what others think about this though ^

Based on the advice I received below, this warning message is displayed.

fix: allow containers to start using a large numbers of ports #4290 (comment)

If at some stage (release) the logic for obtaining port mapping information from the label is to be deprecated, I think this warning message should be displayed.

However, I would like to hear the opinions of other maintainers as well.

I think the advice was because at that time your PR was not backward compatible.
Since you did make it backward compatible now, it is less useful.

Anyhow, I don't care, this is a nit, so, fine with it :-)

apostasie · 2025-06-17T19:04:30Z

Thanks @haytok - this is good progress on solving this.

I have a couple of (minor) nits, but otherwise looks good
I am still annoyed at the fact we are unable to store internally port ranges
eg:

nerdctl ps
CONTAINER ID    IMAGE                              COMMAND             CREATED          STATUS    PORTS                                                                                                                                                                                                                                                                                           NAMES
93a2736dd462    docker.io/library/alpine:latest    "sleep infinity"    3 seconds ago    Up        0.0.0.0:22200->22200/tcp, 0.0.0.0:22201->22201/tcp, 0.0.0.0:22202->22202/tcp, 0.0.0.0:22203->22203/tcp, 0.0.0.0:22204->22204/tcp, 0.0.0.0:22205->22205/tcp, 0.0.0.0:22206->22206/tcp, 0.0.0.0:22207->22207/tcp, 0.0.0.0:22208->22208/tcp, 0.0.0.0:22209->22209/tcp, 0.0.0.0:22210->22210/tcp    alpine

This is really ugly ^ - docker does a much better job.

I appreciate this aspect would be more complicated and possibly involve additional changes in compose, but yeah, I would much prefer that:
nerddctl -p 22200-22210:22200-22210 to be stored as ranges and not expanded.

apostasie · 2025-06-17T19:44:05Z

Note, I am not suggesting that we try to reconstitute ranges from discrete ports specs, but that we do store the ranges when ranges are provided

haytok · 2025-06-20T09:22:53Z

Thanks for comments!!! @apostasie

I also think the PORTS display in nerdctl ps and nerdctl compose ps results is hard to read... :(

First, I believe this is caused by the current implementation where the logic for displaying PORTS cannot aggregate ranges.

nerdctl/pkg/formatter/formatter.go

Lines 115 to 128 in b60fbea

    
           func FormatPorts(labelMap map[string]string) string { 
        
           	ports, err := portutil.ParsePortsLabel(labelMap) 
        
           	if err != nil { 
        
           		log.L.Error(err.Error()) 
        
           	} 
        
           	if len(ports) == 0 { 
        
           		return "" 
        
           	} 
        
           	strs := make([]string, len(ports)) 
        
           	for i, p := range ports { 
        
           		strs[i] = fmt.Sprintf("%s:%d->%d/%s", p.HostIP, p.HostPort, p.ContainerPort, p.Protocol) 
        
           	} 
        
           	return strings.Join(strs, ", ") 
        
           }

I think this behavior occurs even in the latest version, but to fundamentally fix this readability issue, rather than saving ranges when port ranges are specified in -p, I think rewriting FormatPorts() would lead to a more fundamental solution to the problem.

For example, when we specify port ranges in compose.yaml as shown below, each port mapping gets expanded to -p and nerdctl run is executed.
Therefore, whether ranges are specified in -p or multiple -p options are specified, it would be better if PORTS could display them as ranges.

Details

> cat compose.yaml
services:
  nginx:
    image: nginx:latest
    container_name: nginx
    ports:
      - '80-81:80-81'
      - '80-81:80-81/udp'

> sudo nerdctl compose up
...
INFO[0000] Running [/usr/local/bin/nerdctl run --cidfile=/tmp/compose-2285964703/cid -l=com.docker.compose.project=ec2-user -l=com.docker.compose.service=nginx -d --name=nginx --pull=never --net=ec2-user_default --hostname=nginx -p=80:80/tcp -p=81:81/tcp -p=80:80/udp -p=81:81/udp --restart=no nginx:latest]
...

However, I think fixing this PORTS display is beyond the scope of this PR, so how about creating a separate issue and addressing it there?
I will continue to work on it.
If it would be better to add the logic for merging PORTS display to this PR's commit, I can handle it here!

apostasie · 2025-06-20T17:21:48Z

However, I think fixing this PORTS display is beyond the scope of this PR, so how about creating a separate issue and addressing it there? I will continue to work on it. If it would be better to add the logic for merging PORTS display to this PR's commit, I can handle it here!

Yeah, that works too.
Also, if we decide to store ranges in certain cases in the future, it should be backward compatible, so, we can look into this later.

Thanks @haytok

AkihiroSuda · 2025-06-20T22:19:55Z

Needs rebase

haytok · 2025-06-22T06:33:37Z

Rebased. Thanks!

AkihiroSuda · 2025-06-24T02:50:49Z

Sorry, needs rebase again

AkihiroSuda · 2025-06-24T02:52:15Z

 				return &test.Expected{
-					ExitCode: 1,
-					Errors:   []error{errdefs.ErrInvalidArgument},
+					ExitCode: 0,


"Run a container with invalid ports, and then clean up." is no longer true?
Same applies to the test name too.

Thanks, fixed!

AkihiroSuda · 2025-06-24T02:53:01Z

-		return nil, fmt.Errorf("failed to parse label %q=%q: %s", labels.Ports, portsJSON, err.Error())
+		return ports, fmt.Errorf("failed to parse label %q=%q: %s", labels.Ports, portsJSON, err.Error())
 	}
+	log.L.Warnf("container %s is using legacy port mapping configuration. To ensure compatibility with the new port mapping logic, please recreate this container. For more details, see: https://github.com/containerd/nerdctl/pull/4290", id[:12])


The name should be printed in addition to the hex ID?

Thanks, fixed!

Suppose we have a compose.yaml that allocates a large numbers of ports as follows. ``` > cat compose.yaml services: svc0: image: alpine command: "sleep infinity" ports: - '32000-32060:32000-32060' ``` When we run `nerdctl compose up -d` using this compose.yaml, we will get the following error. ``` FATA[0000] create container failed validation: containers.Labels: label key and value length (4711 bytes) greater than maximum size (4096 bytes), key: nerdctl/ports: invalid argument FATA[0000] error while creating container haytok-svc0-1: error while creating container haytok-svc0-1: exit status 1 ``` This issue is reported in the following issue. - containerd#4027 This issue is considered to be the same as the one with errors when trying to perform many port mappings, such as `nerdctl run -p 80:80 -p 81:81 ~ -p 1000:1000 ...` The current implementation is processing to create a container with the information specified in -p to the label. And as can be seen from the error message, as the number of ports to be port mapped increases, the creation of the container fails because it violates the limit of the maximum number of bytes on the containerd side that can be allocated for a label. Therefore, this PR modifies the container creation process so that containers can be launched without having to assign the information specified in the -p option to the labels. Specifically, port mapping information is stored in the following path, and when port mapping information is required, it is retrieved from this file. ``` <DATAROOT>/<ADDRHASH>/containers/<NAMESPACE>/<CID>/network-config.json ``` Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>

haytok · 2025-06-25T12:14:37Z

I've resolved conflict, but some tests have failed ...
I'll check whether similar failures are or not.

test / in-container / rootful (arm) (pull_request)[test / in-container / rootful (arm) (pull_request) Failing after 45m

Details

2025-06-25T10:03:00.8563767Z === RUN   TestComposeUpWithExternalNetwork
2025-06-25T10:03:00.8564720Z     compose_up_linux_test.go:425: assertion failed: 
2025-06-25T10:03:00.8565831Z         Command:  /usr/local/bin/nerdctl --namespace=nerdctl-test exec nerdctl-testcomposeupwithexternalnetwork-1 wget -qO- http://nerdctl-testcomposeupwithexternalnetwork-2
2025-06-25T10:03:00.8566488Z         ExitCode: 1
2025-06-25T10:03:00.8566688Z         Error:    exit status 1
2025-06-25T10:03:00.8566874Z         Stdout:   
2025-06-25T10:03:00.8567116Z         Stderr:   wget: can't connect to remote host (10.4.1.4): Connection refused
2025-06-25T10:03:00.8567504Z         time="2025-06-25T10:02:59Z" level=fatal msg="exec failed with exit code 1"
2025-06-25T10:03:00.8568061Z         
2025-06-25T10:03:00.8568192Z         
2025-06-25T10:03:00.8568329Z         Failures:
2025-06-25T10:03:00.8568489Z         ExitCode was 1 expected 0
2025-06-25T10:03:00.8568757Z         Expected stdout to contain "<title>Welcome to nginx!</title>"
2025-06-25T10:03:00.8569050Z         Expected no error
2025-06-25T10:03:00.8569270Z --- FAIL: TestComposeUpWithExternalNetwork (2.91s)

...

2025-06-25T10:17:40.2864006Z     ipfs_compose_linux_test.go:287: 	🔗 �]8;;file:///go/src/github.com/containerd/nerdctl/cmd/nerdctl/ipfs/ipfs_compose_linux_test.go#146:1�composeUP(data, helpers, fmt.Sprintf(`�]8;;��[0m
2025-06-25T10:17:40.2864620Z         
2025-06-25T10:17:40.2864768Z         <<<<<<<<<<<<<<<<<<<<
2025-06-25T10:17:40.2864996Z         	🖊️ Command should succeed
2025-06-25T10:17:40.2865532Z         	👀 testing:		`command returned a non-zero exit code`
2025-06-25T10:17:40.2865908Z         	❌ FAILED!		is `<nil>`
2025-06-25T10:17:40.2866093Z         >>>>>>>>>>>>>>>>>>>>

test / in-container / rootless-port-slirp4netns (pull_request) Failing after 13m

Details

2025-06-25T09:51:34.1214885Z     image_push_linux_test.go:282: 	
2025-06-25T09:51:34.1215101Z         
2025-06-25T09:51:34.1215368Z         <<<<<<<<<<<<<<<<<<<<
2025-06-25T09:51:34.1215618Z         	🖊️ Command should succeed
2025-06-25T09:51:34.1216106Z         	👀 testing:		`command returned a non-zero exit code`
2025-06-25T09:51:34.1216414Z         	❌ FAILED!		is `<nil>`
2025-06-25T09:51:34.1216606Z         >>>>>>>>>>>>>>>>>>>>

AkihiroSuda

Thanks

apostasie · 2025-06-25T21:19:58Z

🎉

haytok · 2025-06-26T01:57:29Z

Thanks for your reviews and CI retries!!!

… plugins 1.9.1 Preemptive upgrade chasing the rare transient "nerdctl start failed" flake (never reproduced in ~440 stress runs; kept under observation). Fixes for regressions found after the upgrade: - scanner: nerdctl 2.2+ removed the nerdctl/ports label (containerd/nerdctl#4290), so port mappings no longer show up in container labels. Fall back to the nerdctl networkstore: readNetworkStorePorts() globs /var/lib/nerdctl/*/containers/<ns>/<id>/network-config.json and returns it in the legacy label JSON format. Verified: port forwarding works, survives snapshot resume. - initramfs: add the busybox `find` applet; the guest had no `find` at all, so the boot-time name-store cleanup in myinit was a silent no-op. Comment documents both name-store layouts (depth 4). - images: `docker save <name>` without a tag returned 404. findImageNamespace now matches a tagless ref against docker.io/library/<name>:latest (short-repo comparison), and a `:` in registry host:port is no longer mistaken for a tag separator (strip the tag only when `:` comes after the last `/`, applied in repo() as well). Docs: IMPROVEMENTS.md — follow-up on the stack upgrade and its two regressions, tagless-save fix note, stress results; ARCHITECTURE.md §4.5 — nerdctl 2.3.x supports --health-cmd, note kept for why the custom healthcheck runner stays. Verified live: run/ps/ports, compose build/up/down, docker build --load, buildx remote driver, save/rmi/load round-trip, resume with a running container (port 200 after service-restart), 100/100 stress runs clean.

haytok force-pushed the issue_4027 branch 2 times, most recently from 02db289 to c6e55d1 Compare May 28, 2025 01:01

AkihiroSuda added this to the v2.1.3 milestone May 30, 2025

apostasie reviewed May 30, 2025

View reviewed changes

Comment thread pkg/portutil/portutil.go Resolved

haytok force-pushed the issue_4027 branch 3 times, most recently from 16ddd16 to 68534ed Compare June 2, 2025 14:37

AkihiroSuda reviewed Jun 6, 2025

View reviewed changes

AkihiroSuda modified the milestones: v2.1.3, v2.2.0 (?) Jun 6, 2025

apostasie reviewed Jun 6, 2025

View reviewed changes

Comment thread cmd/nerdctl/container/container_run_network_linux_test.go Resolved

apostasie reviewed Jun 6, 2025

View reviewed changes

Comment thread pkg/containerutil/container_network_manager.go Resolved

apostasie reviewed Jun 6, 2025

View reviewed changes

Comment thread pkg/netutil/networkstore/networkstore.go Resolved

apostasie reviewed Jun 17, 2025

View reviewed changes

Comment thread pkg/netutil/networkstore/networkstore.go Resolved

apostasie reviewed Jun 17, 2025

View reviewed changes

Comment thread pkg/netutil/networkstore/networkstore.go Resolved

haytok force-pushed the issue_4027 branch from 385f12e to fb81e1b Compare June 18, 2025 17:15

apostasie approved these changes Jun 20, 2025

View reviewed changes

apostasie mentioned this pull request Jun 20, 2025

v2.1.3 planning #4331

Closed

AkihiroSuda modified the milestones: v2.2.0 (?), v2.1.3 Jun 20, 2025

haytok force-pushed the issue_4027 branch from fb81e1b to 6effd83 Compare June 21, 2025 10:26

haytok mentioned this pull request Jun 21, 2025

make PORTS in nerdctl ps or nerdctl compose ps easier to view. #4338

Closed

AkihiroSuda reviewed Jun 24, 2025

View reviewed changes

haytok force-pushed the issue_4027 branch from 6effd83 to 112e12c Compare June 25, 2025 09:01

haytok added 2 commits June 25, 2025 09:33

docs: add network-config.json description to dir.md

c13417d

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>

haytok force-pushed the issue_4027 branch from 112e12c to c13417d Compare June 25, 2025 09:34

AkihiroSuda approved these changes Jun 25, 2025

View reviewed changes

AkihiroSuda merged commit eb6b492 into containerd:main Jun 25, 2025

AkihiroSuda mentioned this pull request Jun 26, 2025

rename network-config.json to ports.json to match reality #4376

Closed

Shubhranshu153 mentioned this pull request Jul 11, 2025

chore: update dependencies runfinch/finch-daemon#281

Merged

1 task

jandubois mentioned this pull request Sep 11, 2025

Subscribe to container engine API for published ports lima-vm/lima#4021

Closed

yifeng-cerebras mentioned this pull request Sep 14, 2026

Regression since v2.1.3: removing CRI containers fails on missing network annotations #5207

Closed

Conversation

haytok commented May 25, 2025

Uh oh!

haytok commented May 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

apostasie commented May 25, 2025

Uh oh!

haytok commented May 27, 2025

Uh oh!

Uh oh!

apostasie commented May 30, 2025

Uh oh!

AkihiroSuda commented May 31, 2025

Uh oh!

haytok commented Jun 1, 2025

Uh oh!

haytok commented Jun 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

haytok Jun 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

apostasie commented Jun 6, 2025

Uh oh!

apostasie commented Jun 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

haytok commented Jun 7, 2025

Uh oh!

haytok commented Jun 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

apostasie commented Jun 17, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

apostasie commented Jun 17, 2025

Uh oh!

apostasie commented Jun 17, 2025

Uh oh!

haytok commented Jun 20, 2025

Uh oh!

apostasie commented Jun 20, 2025

Uh oh!

AkihiroSuda commented Jun 20, 2025

Uh oh!

haytok commented Jun 22, 2025

Uh oh!

AkihiroSuda commented Jun 24, 2025

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

haytok commented Jun 25, 2025

Uh oh!

AkihiroSuda left a comment

Choose a reason for hiding this comment

Uh oh!

haytok commented May 25, 2025 •

edited

Loading

haytok commented Jun 6, 2025 •

edited

Loading

haytok Jun 7, 2025 •

edited

Loading

apostasie commented Jun 6, 2025 •

edited

Loading

haytok commented Jun 17, 2025 •

edited

Loading