containerd
containerd.io
What it is
containerd is a free container runtime for managing a host’s container lifecycle. It handles image transfer and storage, execution, and supervision, and is designed to be embedded in a larger system rather than used directly by developers or end users. It supports OCI images and image push and pull operations, and uses runc by default while allowing other OCI-compliant runtimes. Its built-in CRI plugin can make it the container runtime for a Kubernetes cluster, and it supports registries compliant with the OCI Distribution Specification. The daemon is available for Linux and Windows. Network-interface management and image building are outside containerd’s first-class scope, so higher-level systems or tools handle those jobs. Its ctr command-line tool is intended for development and debugging, without a guarantee of a stable interface or a human-friendly experience. Users typically also need runc and CNI plugins. The plan is free; free plan available, with no free trial.
Spec sheet
- Purpose
- containerd is an industry-standard container runtime for managing a host’s container lifecycle, including image transfer and storage, execution, and supervision.Read 29 Sep 2026 · containerd.io
- Support
- Nightly builds are available for Linux and Windows, but may contain critical bugs, are not recommended for production, and receive no support.Read 29 Sep 2026 · containerd.io
- Build scope
- Building images is out of scope as a first class containerd API feature and can be implemented by higher level tooling.Read 29 Sep 2026 · containerd.io
- CLI limitation
- The included ctr CLI is intended for development and debugging, is not mandated to be human friendly, and has no interface stability guarantee over time.Read 29 Sep 2026 · containerd.io
- Designed for
- containerd is designed to be embedded into a larger system rather than used directly by developers or end users.Read 29 Sep 2026 · containerd.io
- Image support
- It supports the OCI Image Specification and image push and pull operations.Read 29 Sep 2026 · containerd.io
- Kubernetes
- Its built in CRI plugin lets containerd serve as the container runtime for a Kubernetes cluster.Read 29 Sep 2026 · containerd.io
- Maker and governance
- containerd is a graduated project within the Cloud Native Computing Foundation (CNCF).Read 29 Sep 2026 · containerd.io
- Networking scope
- Creating and managing network interfaces is out of scope and is handled by higher level systems.Read 29 Sep 2026 · containerd.io
- Operating systems
- containerd is available as a daemon for Linux and Windows.Read 29 Sep 2026 · containerd.io
- Registries
- Any registry compliant with the OCI Distribution Specification is supported.Read 29 Sep 2026 · containerd.io
- Release dependencies
- The project says users typically also need to install runc and CNI plugins.Read 29 Sep 2026 · github.com
- Runtime support
- It supports the OCI Runtime Specification and uses runc as its default runtime, while allowing other OCI compliant runtimes to be added.Read 29 Sep 2026 · containerd.io
- Security audits
- The project lists a CNCF funded Ada Logics fuzzing audit from March 2023 and a CNCF funded Cure53 security audit from November 2018.Read 29 Sep 2026 · containerd.io
- Security process
- The project describes a documented security process using GitHub security features and its CVE numbering authority to disclose verified vulnerabilities.Read 29 Sep 2026 · containerd.io
Plans and prices
containerd Free Open-source container runtime · Apache 2.0 licensed Read 29 Sep 2026 · containerd.io
Strong points and limits
Strong points
- Supports OCI image formats and push/pull operations
- Built-in CRI plugin supports Kubernetes
- Allows OCI-compliant runtimes beyond runc
- Available as a Linux and Windows daemon
Limits
- Network-interface management is out of scope
- Image building is not a first-class feature
- ctr has no interface stability guarantee
- Typically requires runc and CNI plugins
Who it suits
It suits teams embedding a container runtime in a larger system or using Kubernetes. It is less suited to people seeking a direct, stable, human-friendly CLI or built-in network management and image building.
Verdict
containerd covers core container lifecycle management and offers Kubernetes support through its CRI plugin. Plan for higher-level tooling for networking and image building, plus the typically required runc and CNI plugins.
Where Specifiction places it
- Container Engines#9 of 318.0
- Container Runtime Software#11 of 288.1
