# Install containerd with Homebrew, apk, apt, dnf, Nix, pacman, scoop, zypper Open and reliable container runtime. Version 2.3.2 via Homebrew; verified 2026-06-19. ## Install ```sh sudo av install brew:containerd ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install containerd ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add containerd ``` Evidence: Alpine Linux edge package indexes: containerd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install containerd ``` Evidence: Debian stable package indexes: containerd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install containerd ``` Evidence: Fedora Rawhide package metadata: containerd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#containerd ``` Evidence: nixpkgs package indexes: pkgs/by-name/co/containerd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S containerd ``` Evidence: Arch Linux sync databases: containerd from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install containerd ``` Evidence: openSUSE Tumbleweed package metadata: containerd from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/containerd ``` Evidence: Scoop official bucket manifest trees: bucket/containerd.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:containerd - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.3.2 - **Source summary:** Open and reliable container runtime - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-19T00:25:24Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - containerd (cli) - containerd-shim-runc-v2 (cli) - containerd-stress (cli) - ctr (cli) - containerd (alias) - containerd-shim-runc-v2 (alias) - containerd-stress (alias) - ctr (alias) ## Build dependencies - go - go-md2man ## Install behavior - Post-install hook: not defined - Service: declared - Caveats: The macOS version of containerd does not natively support running containers. You need to install an additional runtime plugin such as nerdbox (not packaged in Homebrew yet) to run containers on this build of containerd. To run the Linux native version of containerd in Linux Machine (Lima), execute the following commands: brew install lima limactl start - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.3.2 - Package-manager updated: 2026-06-19 - Local data: ok - Upstream repository: https://github.com/containerd/containerd - Upstream latest detected: v2.3.2 (current) ## Project history and usage containerd is a high-level container runtime daemon focused on simplicity, robustness, and portability. It manages image transfer and storage, container execution and supervision, and related storage and network attachments for Linux and Windows hosts. ### Project history containerd began at Docker as a lower-layer runtime manager beneath Docker Engine and around the OCI `runc` runtime. The CNCF graduation announcement says it was born at Docker in 2014, accepted into CNCF in March 2017, and graduated in February 2019 after showing adoption, governance, and community sustainability. ### Adoption history The official adopters file lists Docker/Moby Engine, Google Container-Optimized OS, GKE, AWS Fargate, EKS, Bottlerocket, k3s, LinuxKit, BuildKit, AKS, Firecracker, Kata Containers, Talos Linux, and other projects or services. The README also notes that containerd is designed to be embedded in larger systems rather than used directly by most end users. ### How it is used Operators usually run containerd as a daemon and interact with it indirectly through Kubernetes CRI, Docker/Moby, or higher-level clients. The getting-started guide distinguishes `ctr` as a bundled debugging client, `nerdctl` as a human-friendly containerd client, and `crictl` as a Kubernetes CRI debugging tool. ### Why package nerds care containerd is package-manager-important because it is the runtime substrate behind many container stacks. Distributions package the daemon, shims, `ctr`, systemd units, and configuration defaults, while upstream publishes release artifacts and maintains explicit release, LTS, Kubernetes compatibility, and platform-support policies. ### Timeline - 2015: 0.0 release line began, according to the official release-state table. - 2017: Accepted into CNCF in March and released v1.0.0 in December. - 2018: v1.1.0 shipped with the CRI plugin built into release binaries and enabled by default. - 2019: Graduated from CNCF incubation. - 2024: v2.0.0 release published. - 2026: v2.3 became an LTS release line with a time-based minor release cadence synchronized with Kubernetes. ### Related projects - containerd commonly works with OCI `runc`, CNI plugins, Kubernetes CRI, Docker/Moby, BuildKit, `nerdctl`, `crictl`, Firecracker, Kata Containers, and OS-specific components such as hcsshim on Windows. ### Sources - - - - - - - - - - ## Security Notes formula declares a Homebrew service. generalized runtime or code generation signal. - **Geiger risk:** orange / medium - formula declares a Homebrew service - generalized runtime or code generation signal - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Linux: /etc/containerd/config.toml ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** containerd - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - containerd - 1.7.24~ds1-6+deb13u1: normalized package name match | Debian stable package indexes: containerd from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | open and reliable container runtime | https://containerd.io/ - Debian apt - golang-github-containerd-containerd-dev - 1.7.24~ds1-6+deb13u1: normalized package name match | Debian stable package indexes: golang-github-containerd-containerd-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | open and reliable container runtime (development files) | https://containerd.io/ - Nix - containerd: normalized package name match | nixpkgs package indexes: pkgs/by-name/co/containerd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - containerd - 1.7.12-0ubuntu4: normalized package name match | Ubuntu 24.04 LTS package indexes: containerd from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | daemon to control runC | https://containerd.io - Ubuntu apt - golang-github-containerd-containerd-dev - 1.6.24~ds1-1ubuntu1: normalized package name match | Ubuntu 24.04 LTS package indexes: golang-github-containerd-containerd-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | open and reliable container runtime (development files) | https://containerd.io/ - apk - containerd - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | An open and reliable container runtime | https://containerd.io/ - apk - containerd-ctr - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd-ctr from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | unsupported debug/admin client for containerd | https://containerd.io/ - apk - containerd-doc - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | An open and reliable container runtime (documentation) | https://containerd.io/ - apk - containerd-openrc - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | An open and reliable container runtime (OpenRC init scripts) | https://containerd.io/ - apk - containerd-stress - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd-stress from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | containerd-stress utility | https://containerd.io/ - apk - containerd-systemd - 2.3.1-r0: normalized package name match | Alpine Linux edge package indexes: containerd-systemd from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | An open and reliable container runtime (systemd files) | https://containerd.io/ - dnf - containerd - 2.2.3-1.fc45: normalized package name match | Fedora Rawhide package metadata: containerd from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | An open and reliable container runtime | https://github.com/containerd/containerd - pacman - containerd - 2.3.1-1: normalized package name match | Arch Linux sync databases: containerd from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | An open and reliable container runtime | https://containerd.io/ - zypper - containerd - 1.7.29-1.4: normalized package name match | openSUSE Tumbleweed package metadata: containerd from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Standalone OCI Container Daemon | https://containerd.tools - zypper - containerd-ctr - 1.7.29-1.4: normalized package name match | openSUSE Tumbleweed package metadata: containerd-ctr from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Client for containerd | https://containerd.tools - zypper - containerd-devel - 1.7.29-1.4: normalized package name match | openSUSE Tumbleweed package metadata: containerd-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Source code for containerd | https://containerd.tools ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [go-md2man](https://www.automicvault.com/pkg/brew/go-md2man/) - Build dependency declared by Homebrew. - [docker-engine](https://www.automicvault.com/pkg/brew/docker-engine/) - Popular package that depends on this formula. - [colima](https://www.automicvault.com/pkg/brew/colima/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, kubernetes, runtime. - [container](https://www.automicvault.com/pkg/brew/container/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, oci, runtime. - [dcp](https://www.automicvault.com/pkg/brew/dcp/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, kubernetes, oci. - [container-canary](https://www.automicvault.com/pkg/brew/container-canary/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, kubernetes. - [kbld](https://www.automicvault.com/pkg/brew/kbld/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, kubernetes. - [ko](https://www.automicvault.com/pkg/brew/ko/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, kubernetes. - [oras](https://www.automicvault.com/pkg/brew/oras/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, oci. - [rockcraft](https://www.automicvault.com/pkg/brew/rockcraft/) - Shares av.db curated category or tags: cli, cloud-infrastructure, containers, oci. ## Combined YAML source View the package source record on GitHub. [combined/containerd.yml](https://github.com/automic-vault/db/blob/main/combined/containerd.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph