[v0.16] cherry-picks for v0.16.0 #4774

Job	Run time
prepare	6s
govulncheck	1m 2s
binaries (darwin/amd64)	1m 0s
binaries (darwin/arm64)	1m 1s
binaries (linux/amd64)	1m 58s
binaries (linux/arm/v7)	1m 53s
binaries (linux/arm64)	1m 58s
binaries (linux/s390x)	1m 58s
binaries (linux/ppc64le)	1m 57s
binaries (linux/riscv64)	2m 0s
binaries (windows/amd64)	1m 42s
binaries (windows/arm64)	1m 42s
test / prepare	1m 56s
test / run (containerd, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	7m 32s
test / run (containerd-rootless, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integr...	9m 17s
test / run (containerd-1.6, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	8m 23s
test / run (containerd-snapshotter-stargz, ./client ./cmd/buildctl ./worker/containerd ./solver ./fronte...	8m 34s
test / run (oci, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	5m 29s
test / run (oci-rootless, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	6m 43s
test / run (oci-rootless-slirp4netns-detachnetns, ./client ./cmd/buildctl ./worker/containerd ./solver ....	5m 25s
test / run (oci-snapshotter-stargz, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, int...	5m 42s
test / run (./..., 1, integration gateway)	4m 9s
test / run (./client, containerd, nydus, integration)	7m 26s
test / run (./client, oci, nydus, integration)	4m 59s
test / run (./..., nydus, 1, integration)	4m 12s
image	8m 56s
image (rootless)	9m 30s
release	7s
scout	0s
	1h 56m 37s

Provide feedback