containerd is built with OCI support and with support for advanced features provided by runc.
We depend on a specific runc
version when dealing with advanced features. You should have a specific runc build for development. The current supported runc commit is:
RUNC_COMMIT = a618ab5a0186905949ee463dbb762c3d23e12a80
For more information on how to clone and build runc see the runc Building documentation.
Note: before building you may need to install additional support, which will vary by platform. For example, you may need to install libseccomp
e.g. libseccomp-dev
for Ubuntu.
From within your opencontainers/runc
repository run:
make BUILDTAGS='seccomp apparmor' && sudo make install
make BUILDTAGS='seccomp selinux' && sudo make install
After an official runc release we will start pinning containerd support to a specific version but various development and testing features may require a newer runc version than the latest release. If you encounter any runtime errors, please make sure your runc is in sync with the commit/tag provided in this document.