containerd is built with OCI support and with support for advanced features provided by runc.
We depend on a specific runc version when dealing with advanced features. You should have a specific runc build for development. The current supported runc commit is described in go.mod. Please refer to the line that starts with github.com/opencontainers/runc.
For more information on how to clone and build runc see the runc Building documentation.
Note: before building you may need to install additional support, which will vary by platform. For example, you may need to install libseccomp e.g. libseccomp-dev for Ubuntu.
From within your opencontainers/runc repository run:
make BUILDTAGS='seccomp apparmor' && sudo make installmake BUILDTAGS='seccomp selinux' && sudo make installAfter an official runc release we will start pinning containerd support to a specific version but various development and testing features may require a newer runc version than the latest release. If you encounter any runtime errors, please make sure your runc is in sync with the commit/tag provided in this document.