Repo brief: containerd/nerdctl

Generated by RepoPilot · document generated 2026-09-13 · concise human review Evidence snapshot · analyzed 2026-09-13T16:42:39.968Z · commit bf35f5d7f4e6

Verdict

Healthy — Strong maintenance signals

• Last commit 1d ago
• 17 active contributors
• Apache-2.0 licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

nerdctl is a Docker-compatible command-line interface for containerd that provides the same UX as Docker while adding optional support for advanced features like rootless mode, lazy-pulling (Stargz/Nydus), encrypted images (ocicrypt), and P2P distribution (IPFS). It's the primary user-facing tool for interacting with containerd, including container lifecycle management, image building via BuildKit, and Docker Compose orchestration. Monorepo with clear separation: pkg/api/types defines domain models for containers, images, networks, volumes, and CRI metadata; pkg/cmd organizes commands by feature (apparmor, builder, checkpoint); pkg/cioutil and pkg/clientutil provide I/O and containerd…

Start here

• pkg/api/types/container_types.go: Defines container domain models central to all container lifecycle commands…
• pkg/cmd/builder/build.go: Core build command implementation using BuildKit; entry point for image building feature
• pkg/clientutil/client.go: Abstraction layer wrapping containerd client; all CLI commands use this to communicate with…
• pkg/cioutil/container_io.go: Handles container I/O (stdin/stdout/stderr) with platform-specific overrides in…
• pkg/buildkitutil/buildkitutil.go: BuildKit integration logic; coordinates with external builder for nerdctl build…

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Repo has no Package.json or requirements.txt in the file list; it's a Go project. Conventional Go setup: git clone https://github.com/containerd/nerdctl && cd nerdctl && go mod download && make build (inferred from Ma…

Daily commands:

For Go project: go run ./cmd/nerdctl or make build then ./nerdctl run -it --rm alpine (per README examples). Makefile present; check it for targets like build, test, install. No JavaScript dev server or data…

…shortened for this brief.

Key cautions & unknowns

• Concentrated ownership — top contributor handles 52% of recent commits
• No go.mod, go.sum, or Dockerfile hints in file list; verify these exist before assuming standard Go build. CRI namespace support (k8s.io) is non-trivial: must point nerdctl at a containerd instance managing Kubernetes…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.