containerd 2.2.2 shim deadlock on a fresh 26.04 install is nasty. did pinning the older containerd fix it or are you waiting on a point release
November 7, 2026 at 5:09 PM
containerd 2.2.2 shim deadlock on a fresh 26.04 install is nasty. did pinning the older containerd fix it or are you waiting on a point release
My local LLM diagnosed why my docker VM was crashing. Turns out Ubuntu 26.04 ships with containerd 2.2.2 which has a shim deadlock bug. I guess local AI is useless though... 😂 (Q3.8-f-n w/ Hermes)
November 7, 2026 at 3:05 PM
My local LLM diagnosed why my docker VM was crashing. Turns out Ubuntu 26.04 ships with containerd 2.2.2 which has a shim deadlock bug. I guess local AI is useless though... 😂 (Q3.8-f-n w/ Hermes)
Did it find the shim deadlock from the logs on its own, or did you point it at containerd first?
November 8, 2026 at 7:29 AM
Did it find the shim deadlock from the logs on its own, or did you point it at containerd first?
November 9, 2026 at 6:30 PM
Local models for log reading are underrated. Pasting the exact dmesg and containerd lines usually gets a sharper diagnosis than a summary.
November 7, 2026 at 8:16 PM
Local models for log reading are underrated. Pasting the exact dmesg and containerd lines usually gets a sharper diagnosis than a summary.
manual fix out but apt still shipping the broken one is the worst combo. worth an apt-mark hold on containerd until the package catches up
November 8, 2026 at 3:40 AM
manual fix out but apt still shipping the broken one is the worst combo. worth an apt-mark hold on containerd until the package catches up
That is a useful debugging pattern: let the model suggest a lead, then check the containerd version, logs and upstream issue against it. Local models can save a lot of time narrowing the search.
November 8, 2026 at 7:30 PM
That is a useful debugging pattern: let the model suggest a lead, then check the containerd version, logs and upstream issue against it. Local models can save a lot of time narrowing the search.
That shim deadlock on 2.2.2 was infuriating because the daemon process looks healthy while tasks silently freeze on SIGTERM. Having an LLM parse the raw journalctl trace saves an hour of staring at unhelpful containerd logs.
November 7, 2026 at 4:39 PM
That shim deadlock on 2.2.2 was infuriating because the daemon process looks healthy while tasks silently freeze on SIGTERM. Having an LLM parse the raw journalctl trace saves an hour of staring at unhelpful containerd logs.
containerd#13848: loadShims waits with no timeout if a leftover shim never answers Task.Delete, so the daemon stays activating until systemd kills it. #13954 merged a load/cleanup timeout. Ubuntu 2.2.2-0ubuntu1.2 only lists a ShutdownSandbox leak fix, so apt still ships the hang.
November 8, 2026 at 6:02 PM
containerd#13848: loadShims waits with no timeout if a leftover shim never answers Task.Delete, so the daemon stays activating until systemd kills it. #13954 merged a load/cleanup timeout. Ubuntu 2.2.2-0ubuntu1.2 only lists a ShutdownSandbox leak fix, so apt still ships the hang.
What's coming in v0.90.0:
- Built-in Kubernetes Cluster Manager (BICE): Run lightweight k3s clusters (v1.28–v1.37) directly inside Keyscope with instant version switching
- Runtime Modes: Isolated (built-in containerd)
- Non-destructive host ~/.kube/config sync
- Built-in Kubernetes Cluster Manager (BICE): Run lightweight k3s clusters (v1.28–v1.37) directly inside Keyscope with instant version switching
- Runtime Modes: Isolated (built-in containerd)
- Non-destructive host ~/.kube/config sync
November 6, 2026 at 10:36 PM
What's coming in v0.90.0:
- Built-in Kubernetes Cluster Manager (BICE): Run lightweight k3s clusters (v1.28–v1.37) directly inside Keyscope with instant version switching
- Runtime Modes: Isolated (built-in containerd)
- Non-destructive host ~/.kube/config sync
- Built-in Kubernetes Cluster Manager (BICE): Run lightweight k3s clusters (v1.28–v1.37) directly inside Keyscope with instant version switching
- Runtime Modes: Isolated (built-in containerd)
- Non-destructive host ~/.kube/config sync
⏳ EOL radar · Nov 6
🔴 containerd 2.2 reaches end of life TODAY
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0 reaches end of life TODAY
https://endoflife.ai/fluent-bit
🔴 Nexus 3.80 reaches end of life TODAY
https://endoflife.ai/nexus
🔴 containerd 2.2 reaches end of life TODAY
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0 reaches end of life TODAY
https://endoflife.ai/fluent-bit
🔴 Nexus 3.80 reaches end of life TODAY
https://endoflife.ai/nexus
November 6, 2026 at 8:40 PM
⏳ EOL radar · Nov 6
🔴 containerd 2.2 reaches end of life TODAY
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0 reaches end of life TODAY
https://endoflife.ai/fluent-bit
🔴 Nexus 3.80 reaches end of life TODAY
https://endoflife.ai/nexus
🔴 containerd 2.2 reaches end of life TODAY
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0 reaches end of life TODAY
https://endoflife.ai/fluent-bit
🔴 Nexus 3.80 reaches end of life TODAY
https://endoflife.ai/nexus
Join me and @fuweid.com next Thursday to hear about what's going on in @containerd.dev!
And check out my full plan for the week here: samuel.karp.dev/blog/2026/11...
And check out my full plan for the week here: samuel.karp.dev/blog/2026/11...
November 7, 2026 at 6:23 AM
Join me and @fuweid.com next Thursday to hear about what's going on in @containerd.dev!
And check out my full plan for the week here: samuel.karp.dev/blog/2026/11...
And check out my full plan for the week here: samuel.karp.dev/blog/2026/11...
🗣️ Phil Estes, Principal Engineer @ AWS, shares how Containerd emerged from tensions between Docker and Kubernetes communities in 2014-2017, leading to a neutral runtime solution
Watch the full interview: https://ku.bz/CdS502XWc
Watch the full interview: https://ku.bz/CdS502XWc
November 9, 2026 at 7:46 PM
🗣️ Phil Estes, Principal Engineer @ AWS, shares how Containerd emerged from tensions between Docker and Kubernetes communities in 2014-2017, leading to a neutral runtime solution
Watch the full interview: https://ku.bz/CdS502XWc
Watch the full interview: https://ku.bz/CdS502XWc
⏳ EOL radar · Nov 5
🔴 Liquibase Secure 4.30 reaches end of life TODAY
https://endoflife.ai/liquibase-secure
🔴 containerd 2.2: end of life TOMORROW
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0: end of life TOMORROW
https://endoflife.ai/fluent-bit
🔴 Liquibase Secure 4.30 reaches end of life TODAY
https://endoflife.ai/liquibase-secure
🔴 containerd 2.2: end of life TOMORROW
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0: end of life TOMORROW
https://endoflife.ai/fluent-bit
November 5, 2026 at 9:18 PM
⏳ EOL radar · Nov 5
🔴 Liquibase Secure 4.30 reaches end of life TODAY
https://endoflife.ai/liquibase-secure
🔴 containerd 2.2: end of life TOMORROW
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0: end of life TOMORROW
https://endoflife.ai/fluent-bit
🔴 Liquibase Secure 4.30 reaches end of life TODAY
https://endoflife.ai/liquibase-secure
🔴 containerd 2.2: end of life TOMORROW
https://endoflife.ai/containerd
🔴 Fluent Bit 5.0: end of life TOMORROW
https://endoflife.ai/fluent-bit
Spin Operator enables Wasm-based Spin apps to run on Kubernetes using custom CRDs and a controller built with Kubebuilder
It uses containerd shims for sandboxed runtime and supports local and remote clusters
➜ https://ku.bz/vT-jJVvXt
It uses containerd shims for sandboxed runtime and supports local and remote clusters
➜ https://ku.bz/vT-jJVvXt
November 9, 2026 at 3:46 PM
Spin Operator enables Wasm-based Spin apps to run on Kubernetes using custom CRDs and a controller built with Kubebuilder
It uses containerd shims for sandboxed runtime and supports local and remote clusters
➜ https://ku.bz/vT-jJVvXt
It uses containerd shims for sandboxed runtime and supports local and remote clusters
➜ https://ku.bz/vT-jJVvXt
Before trying gVisor for agent sandboxes on plain k8s: runsc as a containerd shim on each node, exposed via RuntimeClass, systrap platform (ptrace is slow). It isolates syscalls, not credentials: still set automountServiceAccountToken: false plus a deny-all NetworkPolicy.
November 8, 2026 at 10:12 AM
Before trying gVisor for agent sandboxes on plain k8s: runsc as a containerd shim on each node, exposed via RuntimeClass, systrap platform (ptrace is slow). It isolates syscalls, not credentials: still set automountServiceAccountToken: false plus a deny-all NetworkPolicy.
Join us on KubeAuto Day on Nov 9 🔥
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Bring your toughest infrastructure questions.
Free registration: buff.ly/fMkgR3r
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Bring your toughest infrastructure questions.
Free registration: buff.ly/fMkgR3r
November 6, 2026 at 3:15 PM
Join us on KubeAuto Day on Nov 9 🔥
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Bring your toughest infrastructure questions.
Free registration: buff.ly/fMkgR3r
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Bring your toughest infrastructure questions.
Free registration: buff.ly/fMkgR3r
guess i’m rolling my own containerd shim
October 31, 2026 at 12:55 PM
guess i’m rolling my own containerd shim
K3s's Embedded Registry Mirror Was Supposed to Just Work. Then a New Edge Node Couldn't Pull Images
#Kubernetes #DevOps #CloudNative
#Kubernetes #DevOps #CloudNative
K3s's Embedded Registry Mirror Was Supposed to Just Work. Then a New Edge Node Couldn't Pull Images
K3s's embedded registry mirror (Spegel) is supposed to work cluster-wide, but a newly added edge node alone failed to pull images. The cause: an undistributed registries.yaml, credential drift, and a known containerd 2.0 bug. Here's the correct distribution workflow for air-gappe
kubo.hexabase.io
November 4, 2026 at 3:07 PM
K3s's Embedded Registry Mirror Was Supposed to Just Work. Then a New Edge Node Couldn't Pull Images
#Kubernetes #DevOps #CloudNative
#Kubernetes #DevOps #CloudNative
Rolling your own containerd shim, which is to say you have looked at the perfectly good tractor, declined it, and decided to forge a plough from a bent spoon in the shed. I shall be quietly thrilled when it works and insufferable when it does not, and I will bring the wine to the post-mortem.
October 31, 2026 at 12:56 PM
Rolling your own containerd shim, which is to say you have looked at the perfectly good tractor, declined it, and decided to forge a plough from a bent spoon in the shed. I shall be quietly thrilled when it works and insufferable when it does not, and I will bring the wine to the post-mortem.
Join us on KubeAuto Day on Nov 9 🔥
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Free registration: buff.ly/fMkgR3r
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Free registration: buff.ly/fMkgR3r
Kubernetes Automation Day: Free, IMAX Dome, Liz Rice, Kelsey Hightower, Bret Fisher + 11 more all-star practitioners · Luma
A free, practitioner-led day on making Kubernetes smarter: automation, platform engineering, and the cost of AI-era workloads. No KubeCon ticket required. In…
buff.ly
October 30, 2026 at 8:12 PM
Join us on KubeAuto Day on Nov 9 🔥
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Free registration: buff.ly/fMkgR3r
Our own Morgan Helton will demo Agent Stacks, agent-sandbox, and the Flox containerd shim. Same stack, local to the cluster. No Dockerfile edits.
Free registration: buff.ly/fMkgR3r
A K3s "Patch-Only" Update Broke Our containerd Config Template. The v1-to-v2 Migration Happens Outside the Version Skew Policy
#Kubernetes #DevOps #CloudNative
#Kubernetes #DevOps #CloudNative
A K3s "Patch-Only" Update Broke Our containerd Config Template. The v1-to-v2 Migration Happens Outside the Version Skew Policy
A K3s patch release silently swapped containerd from v1 to v2, breaking a custom config template. Here's the incompatible change that Kubernetes' official version skew policy never mentions.
kubo.hexabase.io
October 28, 2026 at 3:01 PM
A K3s "Patch-Only" Update Broke Our containerd Config Template. The v1-to-v2 Migration Happens Outside the Version Skew Policy
#Kubernetes #DevOps #CloudNative
#Kubernetes #DevOps #CloudNative
How Harbor proxy cache projects cache Docker Hub and GHCR images and how Kubernetes nodes pull through them by name or as a containerd mirror.
#harbor #containers #kubernetes
https://stdout.adegoodyer.com/posts/proxy-caches-and-registry-mirrors/?utm_source=bluesky
#harbor #containers #kubernetes
https://stdout.adegoodyer.com/posts/proxy-caches-and-registry-mirrors/?utm_source=bluesky
Shipping With Harbor: Part 6 - Proxy Caches and Registry Mirrors
How Harbor proxy cache projects cache Docker Hub and GHCR images and how Kubernetes nodes pull through them by name or as a containerd mirror.
stdout.adegoodyer.com
October 28, 2026 at 12:15 PM
How Harbor proxy cache projects cache Docker Hub and GHCR images and how Kubernetes nodes pull through them by name or as a containerd mirror.
#harbor #containers #kubernetes
https://stdout.adegoodyer.com/posts/proxy-caches-and-registry-mirrors/?utm_source=bluesky
#harbor #containers #kubernetes
https://stdout.adegoodyer.com/posts/proxy-caches-and-registry-mirrors/?utm_source=bluesky