- Home
- Container Engines
- containerd
containerd
What it is
containerd is a free container runtime for managing a host’s container lifecycle, including moving and storing images, running containers, and supervising them. It supports the OCI Image Specification and image push and pull, as well as the OCI Runtime Specification. The default runtime is runc, and other OCI-compliant runtimes can be added. Its built-in CRI plugin lets it act as the runtime for a Kubernetes cluster, and it supports registries that follow the OCI Distribution Specification. Available as a daemon for Linux and Windows, containerd is intended to be embedded in a larger system rather than used directly by developers or end users. Network-interface management and image building are outside its first-class scope and are left to higher-level systems and tools. The included ctr command-line tool is for development and debugging; its interface is not guaranteed to remain stable or be human-friendly. Users typically also need to install runc and CNI plugins. containerd is a graduated CNCF project, and nightly builds are unsupported and not recommended for production.
For and against
For
- Free, open-source runtime under Apache 2.0.
- Built-in CRI plugin supports Kubernetes runtime use.
- Supports OCI images and compliant registries.
- Available as a daemon for Linux and Windows.
Against
- Does not provide first-class image building.
- Network-interface management is outside its scope.
- ctr has no interface stability guarantee.
- Nightly builds may contain critical bugs and lack support.
The verdict
containerd provides core container lifecycle functions and Kubernetes CRI support for systems that integrate a runtime. Plan to supply higher-level networking and image-building tools, and typically runc and CNI plugins as well.
Who it suits
It suits teams embedding a container runtime in a larger system or using a Kubernetes cluster. Direct users should know that networking and image building are left to higher-level tools.
Plans and prices
containerd
Open-source container runtime · Apache 2.0 licensed
Read 29 Sep 2026 · containerd.io
On the record
- Build scope
- Building images is out of scope as a first class containerd API feature and can be implemented by higher level tooling.containerd.io · read 29 Sep 2026
- CLI limitation
- The included ctr CLI is intended for development and debugging, is not mandated to be human friendly, and has no interface stability guarantee over time.containerd.io · read 29 Sep 2026
- Designed for
- containerd is designed to be embedded into a larger system rather than used directly by developers or end users.containerd.io · read 29 Sep 2026
- Image support
- It supports the OCI Image Specification and image push and pull operations.containerd.io · read 29 Sep 2026
- Kubernetes
- Its built in CRI plugin lets containerd serve as the container runtime for a Kubernetes cluster.containerd.io · read 29 Sep 2026
- Maker and governance
- containerd is a graduated project within the Cloud Native Computing Foundation (CNCF).containerd.io · read 29 Sep 2026
- Networking scope
- Creating and managing network interfaces is out of scope and is handled by higher level systems.containerd.io · read 29 Sep 2026
- Operating systems
- containerd is available as a daemon for Linux and Windows.containerd.io · read 29 Sep 2026
- Purpose
- containerd is an industry-standard container runtime for managing a host’s container lifecycle, including image transfer and storage, execution, and supervision.containerd.io · read 29 Sep 2026
- Registries
- Any registry compliant with the OCI Distribution Specification is supported.containerd.io · read 29 Sep 2026
- Release dependencies
- The project says users typically also need to install runc and CNI plugins.github.com · read 29 Sep 2026
- Runtime support
- It supports the OCI Runtime Specification and uses runc as its default runtime, while allowing other OCI compliant runtimes to be added.containerd.io · read 29 Sep 2026
- Security audits
- The project lists a CNCF funded Ada Logics fuzzing audit from March 2023 and a CNCF funded Cure53 security audit from November 2018.containerd.io · read 29 Sep 2026
- Security process
- The project describes a documented security process using GitHub security features and its CVE numbering authority to disclose verified vulnerabilities.containerd.io · read 29 Sep 2026
- Support
- Nightly builds are available for Linux and Windows, but may contain critical bugs, are not recommended for production, and receive no support.containerd.io · read 29 Sep 2026
