Samuel Karp

Have we also migrated away from all the prow plugins including labels and cherry-pick robot? If not we should reopen this issue to track that as well.

@mikebrow I noticed you added "status/needs-major-release" to this. Do we need a major release (3.x) or would a minor (2.x) be sufficient?

containerd 2.1 release is done, https://github.com/containerd/containerd/pull/11823 is open to bump Go and cri-api versions.

If I'm reading @mikebrow's comment correctly, the critical issue is the one described in https://github.com/kubernetes/kubernetes/issues/130799: the minimum Go version. Importing libraries from the Kubernetes project which do not enforce a...

Can you describe how this fixes the issue? From the [`statx(2)` man page](https://man7.org/linux/man-pages/man2/statx.2.html), `AT_STATX_DONT_SYNC` seems to prefer a cached value, but does not guarantee (a) that a cached value is...

Looks like `TestImageLoad` is failing pretty consistently in CI.

> Pause also has additional pid-reaping behavior when shareProcessNamespace is enabled on a pod. Yep, that's the pod-level PID namespace bit. If we didn't need PID-reaping, a PID namespace can...

> the thing is you'd need one shim per pod, and my understanding is it's currently one per container (I may be wrong about that). @haircommander containerd has used one-shim-per-pod...

> Sorry if it's wrong place to submit such issue, it would be great if you show me the better place. Docker packaging is not maintained by the containerd project....

The default shims we include in containerd moved away from abstract sockets in response to https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4, and we do not recommend using abstract sockets today. Is there a particular reason...