0.10.0

apple/container0.10.0Feb 26, 2026by github-actions[bot]

AI Summary

A significant update that reworks the ClientContainer API, moves container bundle creation to the SandboxService, and fixes kernel panics under load. It introduces support for multiple network plugins and allows exporting containers to images.

Key Highlights

  • Rework ClientContainer as a generic client (Breaking API Change)
  • Fix kernel panic (selinux_inode_free_security) in container under load
  • Support selecting VM init image on container create/run
  • Container bundle creation moved to SandboxService (Breaking API Change)
  • Support using multiple different network plugins

Breaking Changes

  • Rework ClientContainer as a generic client
  • Container bundle creation moved to SandboxService

New Features

  • Container export to image functionality
  • Support for `--pull` option in build command
  • Container registry list feature
  • Runtime flag for container create and run commands

Full Release Notes

## Highlights 

āŒØļø denotes breaking CLI changes.

šŸ‘©ā€šŸ’» denotes breaking API changes.

- Core 
    - šŸ‘©ā€šŸ’»[Rework ClientContainer as client as a generic client](https://github.com/apple/container/pull/1139) 
    - šŸ‘©ā€šŸ’»[Update API calls to use correct form of the term "clean up"](https://github.com/apple/container/pull/1161)
    - [Fix kernel panic (selinux_inode_free_security) in container under load](https://github.com/apple/container/pull/1166)
    - [Support selecting VM init image on container create/run](https://github.com/apple/container/pull/937)
    - šŸ‘©ā€šŸ’»[Container bundle creation moved to SandboxService](https://github.com/apple/container/pull/1076)
    - [Add a script for updating `container` to release package](https://github.com/apple/container/pull/1173)
    - [Support exporting current container to image](https://github.com/apple/container/pull/1172)
- Networking 
    - šŸ‘©ā€šŸ’»[Support using multiple different network plugins](https://github.com/apple/container/pull/1151)

## What's Changed
* [Docs] Fix typo in BUILDING.md: launchd -> launchctl by @manojmahapatra in https://github.com/apple/container/pull/1146
* CI: Add signed commit check by @dcantah in https://github.com/apple/container/pull/1152
* CLI: Rework ClientContainer by @dcantah in https://github.com/apple/container/pull/1139
* Add debugging to the PR labeler CI flow by @katiewasnothere in https://github.com/apple/container/pull/1155
* Fix file path for the PR number in the PR labeler workflow by @katiewasnothere in https://github.com/apple/container/pull/1158
* [deps]: bump containerization to 0.25.0 by @saehejkang in https://github.com/apple/container/pull/1161
* [build-command]: Add --pull option for fetching latest image by @saehejkang in https://github.com/apple/container/pull/844
* chore: Replace force-unwrapped String(data:encoding:) with String(decoding:as:) by @manojmahapatra in https://github.com/apple/container/pull/1164
* CLI: Forego logging errors on multi-container operations by @dcantah in https://github.com/apple/container/pull/1163
* Send tar hash in the first BuildTransfer packet by @JaewonHur in https://github.com/apple/container/pull/1149
* Add builder tests by @JaewonHur in https://github.com/apple/container/pull/1154
* Don't enable selinux LSM on boot. by @jglogan in https://github.com/apple/container/pull/1166
* Warn user when a named volume is auto-created by @poetryofcode in https://github.com/apple/container/pull/1108
* Fix relative path mount tests by @dkovba in https://github.com/apple/container/pull/1168
* feat: Add runtime flag to container create and run commands (#1049) by @iko1 in https://github.com/apple/container/pull/1109
* feat: add --init-image flag for specifying custom init filesystem images per VM by @manuschillerdev in https://github.com/apple/container/pull/937
* Feat: add container registry list by @tico88612 in https://github.com/apple/container/pull/1119
* APIServer: Add support for filtering to list rpc by @dcantah in https://github.com/apple/container/pull/1175
* Fix persistent CI failures. by @jglogan in https://github.com/apple/container/pull/1205
* feat: Moving bundle creation from ContainerService to SandboxService by @ajemory in https://github.com/apple/container/pull/1076
* Support using multiple different network plugins by @katiewasnothere in https://github.com/apple/container/pull/1151
* ContainerService: Add minimum memory amount validation by @dcantah in https://github.com/apple/container/pull/1208
* Add init methods for all the members of the Flags type by @adityaramani in https://github.com/apple/container/pull/1203
* Support exporting current container to image by @JaewonHur in https://github.com/apple/container/pull/1172
* Fix CI integration test coldstart issues. by @jglogan in https://github.com/apple/container/pull/1230
* Add test for container export by @JaewonHur in https://github.com/apple/container/pull/1229
* bump to containerization 0.26.2 by @yibozhuang in https://github.com/apple/container/pull/1235
* CI observability enhancements. by @jglogan in https://github.com/apple/container/pull/1193
* added the other labels by @Ronitsabhaya75 in https://github.com/apple/container/pull/1125
* Downgrade the mapping of warnings to the default log level by @dkovba in https://github.com/apple/container/pull/1238
* Add `--format` option for `system status`. by @jglogan in https://github.com/apple/container/pull/1237
* Fix: Environment variables can be duplicated on run  by @simone-panico in https://github.com/apple/container/pull/1218
* Minimal runtime variant plumbing. by @jglogan in https://github.com/apple/container/pull/1239
* Revert "Minimal runtime variant plumbing. (#1239)" by @jglogan in https://github.com/apple/container/pull/1255
* cli: Add --init to run/create by @dcantah in https://github.com/apple/container/pull/1244
* [scripts]: add update-container script for upgrade/downgrades by @saehejkang in https://github.com/apple/container/pull/1173
* Fix directory watcher by @JaewonHur in https://github.com/apple/container/pull/1234
* Try to trigger the network privacy alert on port publish. by @jglogan in https://github.com/apple/container/pull/1248

## New Contributors
* @manojmahapatra made their first contribution in https://github.com/apple/container/pull/1146
* @poetryofcode made their first contribution in https://github.com/apple/container/pull/1108
* @ajemory made their first contribution in https://github.com/apple/container/pull/1076
* @simone-panico made their first contribution in https://github.com/apple/container/pull/1218

**Full Changelog**: https://github.com/apple/container/compare/0.9.0...0.10.0