containerd

containerd is an industry-standard core container runtime, designed to be embedded into larger systems or used as a standalone daemon. Originally created by Docker Inc. in 2015 as a simplified container runtime extracted from the Docker Engine, containerd was donated to the CNCF in 2017 and graduated in 2019. With over 18,000 stars as of 2026, containerd is now the default container runtime for Kubernetes (replacing Docker as the CRI implementation since Kubernetes 1.24), powering clusters at Google, AWS, Azure, Alibaba Cloud, and every major cloud provider. containerd provides the foundational container lifecycle management layer, handling image pull and push, container creation and execution, snapshot management, and runtime namespaces, while leaving orchestration, networking, and higher-level management to platforms like Kubernetes, Docker Engine, and PaaS systems. Key features include: OCI image specification support (pulling, pushing, and managing Open Container Initiative images from any registry), OCI runtime specification (running containers via runc or other OCI-compliant runtimes), CRI plugin (Container Runtime Interface for Kubernetes integration, handling pod lifecycle, image management, and streaming), content store (managing image layers and manifests with garbage collection), snapshotter (managing filesystem snapshots for container rootfs using overlayfs, btrfs, zfs, or native snapshot drivers), namespace isolation (isolating containers and images across different tenants or applications), image garbage collection (cleaning up unused images and layers), distribution (pulling images from and pushing to any OCI-compatible registry with multi-arch manifest support), runtime namespace support, and rich gRPC API for programmatic control.