Skip to content

containerd2: upgrade to 2.3.4 and runc to 1.4.3 - #18777

Open
Nan Liu (liunan-ms) wants to merge 2 commits into
3.0-devfrom
liunan/containerd_runc_upgrade
Open

containerd2: upgrade to 2.3.4 and runc to 1.4.3#18777
Nan Liu (liunan-ms) wants to merge 2 commits into
3.0-devfrom
liunan/containerd_runc_upgrade

Conversation

@liunan-ms

@liunan-ms Nan Liu (liunan-ms) commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade containerd2 to 2.3.4.
  • Upgrade runc to 1.4.3.
  • Build runc with Go < 1.25 to retain the established pre-systemcrypto toolchain.
  • Rebase the multi-snapshotter and CVE-2026-56852 patches.
  • Remove containerd CVE patches fixed upstream.

Validation

  • Buddy build - 1197196 - Passed
  • aks-image-build- 1197209 - Passed
  • aks-pre-release-tests - 1197279 - Passed
  • aks-core-conformance-tests - 1197293 - Passed
  • aks-e2e-tests - 1197813 - Passed
  • Kata
    • aks-kata-conformance-tests - 1197295 - Passed
    • aks-kata-performance-tests - 1198858 - Running
  • HPC
    • dev-HPC-Image-Build - 1198698 - Passed
    • dev-azureLinux-pre-release-gpu-testing - 1198825 - Passed

@microsoft-github-policy-service microsoft-github-policy-service Bot added Packaging 3.0-dev PRs Destined for AzureLinux 3.0 labels Sep 9, 2026
@liunan-ms
Nan Liu (liunan-ms) force-pushed the liunan/containerd_runc_upgrade branch from 722999a to 8e724bd Compare September 9, 2026 17:59
Update runc to 1.4.3 and build it with Go < 1.25 to retain the established pre-systemcrypto toolchain without an explicit systemcrypto policy opt-out.
Rebase the multi-snapshotter and CVE-2026-56852 patches for containerd 2.3.4, and remove CVE patches that are fixed upstream.
@liunan-ms
Nan Liu (liunan-ms) force-pushed the liunan/containerd_runc_upgrade branch from 8e724bd to d7640f8 Compare September 9, 2026 18:42
@liunan-ms
Nan Liu (liunan-ms) marked this pull request as ready for review September 9, 2026 18:48
@liunan-ms
Nan Liu (liunan-ms) requested a review from a team as a code owner September 9, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant