[immanuwell]

nerdctl ps --filter matches the filter key with strings.HasPrefix, so any key that starts with a supported one gets misrouted: --filter labels=env runs as label=env, --filter name2=foo as name=foo.
Docker rejects these, and nerdctl already rejects other unknown filters like driver=x

Fix: split on = once and match the key exactly.
Unknown keys hit the existing invalid filter error.
Valid filters (label=k=v included) are unchanged

Repro before this change:

nerdctl run -d --net none --name f1 --label env=prod alpine sleep 600
nerdctl ps --filter 'labels=env'

nerdctl: prints f1, exit 0
docker: invalid filter 'labels', exit 1

[AkihiroSuda]

Thanks