compare
containerd vs Podman
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | containerd | Podman |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 21k | 33k |
| Latest | v2.4.1 | v6.1.3 |
| Last push | 2026-10-05 | 2026-10-06 |
| Release cadence | about 1 day between releases | about 7 days between releases |
| Active contributors | 44 commit authors on the default branch in the last 90 days | 90+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Docker Engine (Moby). Alternatives to Docker Engine (Moby) →
PartialcontainerdThe runtime Docker itself runs on, without image builds or the Docker CLI; driven by Kubernetes or nerdctl.
Drop-inPodmanDocker-compatible CLI, daemonless and rootless by default.
containerd
Podman
- v5.8.82026-09-29This release addresses CVE-2026-94603, where a podman run on a checkpoint image (any image with the io.podman.annotatio…
- v6.1.32026-09-29This release addresses CVE-2026-94603, where a podman run on a checkpoint image (any image with the io.podman.annotatio…
- v5.8.72026-09-16This release addresses (CVE-2025-11395), where importing images containing crafted layer tarballs with the podman load…
- v6.1.22026-09-16This release addresses (CVE-2025-11395), where importing images containing crafted layer tarballs with the podman load…
- v6.1.12026-09-02This release addresses CVE-2026-17106, where a crafted tar archive could write outside the extraction directory through…
containerd
✓ signed The latest release, v2.4.1, carries a signature GitHub verified.
Loading the security report
Podman
✓ signed The latest release, v6.1.3, carries a signature GitHub verified.
Loading the security report