[Arman16-1998]

Fixes #5207

Removing stopped CRI-created containers could fail when their OCI spec did not contain the nerdctl/networks annotation.

NetworkOptionsFromSpec errors are now treated as non-fatal during removal, preserving the previous behavior while keeping port mapping cleanup for containers with valid nerdctl network metadata.

A regression test was added to verify that a container can still be removed after the network annotation is absent.

[AkihiroSuda]

You can use an actual Kubernetes cluster for testing

nerdctl/cmd/nerdctl/container/container_commit_linux_test.go

Lines 31 to 55 in b24110c

	func TestKubeCommitSave(t *testing.T) {
	testCase := nerdtest.Setup()
	testCase.Require = nerdtest.OnlyKubernetes
	testCase.Setup = func(data test.Data, helpers test.Helpers) {
	identifier := data.Identifier()
	containerID := ""
	// NOTE: kubectl namespaces are not the same as containerd namespaces.
	// We still want kube test objects segregated in their own Kube API namespace.
	nerdtest.KubeCtlCommand(helpers, "create", "namespace", "nerdctl-test-k8s").Run(&test.Expected{})
	nerdtest.KubeCtlCommand(helpers, "run", "--image", testutil.CommonImage, identifier, "--", "sleep", nerdtest.Infinity).Run(&test.Expected{})
	nerdtest.KubeCtlCommand(helpers, "wait", "pod", identifier, "--for=condition=ready", "--timeout=1m").Run(&test.Expected{})
	nerdtest.KubeCtlCommand(helpers, "exec", identifier, "--", "mkdir", "-p", "/tmp/whatever").Run(&test.Expected{})
	nerdtest.KubeCtlCommand(helpers, "get", "pods", identifier, "-o", "jsonpath={ .status.containerStatuses[0].containerID }").Run(&test.Expected{
	Output: func(stdout string, t tig.T) {
	containerID = strings.TrimPrefix(stdout, "containerd://")
	},
	})
	data.Labels().Set("containerID", containerID)
	}
	testCase.Cleanup = func(data test.Data, helpers test.Helpers) {
	nerdtest.KubeCtlCommand(helpers, "delete", "pod", "--all").Run(nil)
	}

[AkihiroSuda]

The test needs comment lines to explain the context

[AkihiroSuda]

Please squash the commits

[Arman16-1998]

@AkihiroSuda Updated the regression test to use a Kubernetes-created CRI container, added context comments, isolated the test namespace, and squashed the commits. CI has been rerun.

[AkihiroSuda]

Thanks