Merge pull request #12377 from yankay/bump-containerd

feature: support containerd static binary
2 months ago · fcaaee537e
13 changed files with 182 additions and 6 deletions
--- a/README.md
+++ b/README.md
@ -114,7 +114,7 @@ Note:
  - [kubernetes](https://github.com/kubernetes/kubernetes) 1.33.3
  - [etcd](https://github.com/etcd-io/etcd) 3.5.21
  - [docker](https://www.docker.com/) 28.0
-  - [containerd](https://containerd.io/) 2.0.5
+  - [containerd](https://containerd.io/) 2.1.3
  - [cri-o](http://cri-o.io/) 1.33.2 (experimental: see [CRI-O Note](docs/CRI/cri-o.md). Only on fedora, ubuntu and centos based OS)
 - Network Plugin
  - [cni-plugins](https://github.com/containernetworking/plugins) 1.4.1
--- a/docs/CRI/containerd.md
+++ b/docs/CRI/containerd.md
@ -149,3 +149,11 @@ following configuration:
 ```yaml
 nri_enabled: true
 ```
+
+### Optional : Static Binary
+
+To ensure compatibility with older distributions (such as Debian 11), you can use a static containerd binary. By default, this is static binary if the system's glibc version is less than 2.34; otherwise, it is the default binary.
+
+```yaml
+containerd_static_binary: true
+```
--- a/roles/container-engine/containerd/molecule/default/molecule.yml
+++ b/roles/container-engine/containerd/molecule/default/molecule.yml
@ -9,8 +9,8 @@ platforms:
      - kube_control_plane
      - kube_node
      - k8s_cluster
-  - cloud_image: debian-11
-    name: debian11
+  - cloud_image: debian-12
+    name: debian12
    vm_cpu_cores: 1
    vm_memory: 1024
    node_groups:
--- a/roles/kubespray_defaults/defaults/main/download.yml
+++ b/roles/kubespray_defaults/defaults/main/download.yml
@ -167,7 +167,7 @@ kata_containers_download_url: "{{ github_url }}/kata-containers/kata-containers/
 gvisor_runsc_download_url: "{{ storage_googleapis_url }}/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/runsc"
 gvisor_containerd_shim_runsc_download_url: "{{ storage_googleapis_url }}/gvisor/releases/release/{{ gvisor_version }}/{{ ansible_architecture }}/containerd-shim-runsc-v1"
 nerdctl_download_url: "{{ github_url }}/containerd/nerdctl/releases/download/v{{ nerdctl_version }}/nerdctl-{{ nerdctl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz"
-containerd_download_url: "{{ github_url }}/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
+containerd_download_url: "{{ github_url }}/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ 'static-' if containerd_static_binary }}{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
 cri_dockerd_download_url: "{{ github_url }}/Mirantis/cri-dockerd/releases/download/v{{ cri_dockerd_version }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tgz"
 skopeo_download_url: "{{ github_url }}/lework/skopeo-binary/releases/download/v{{ skopeo_version }}/skopeo-linux-{{ image_arch }}"
 yq_download_url: "{{ github_url }}/mikefarah/yq/releases/download/v{{ yq_version }}/yq_linux_{{ image_arch }}"
@ -195,6 +195,8 @@ gvisor_runsc_binary_checksum: "{{ gvisor_runsc_binary_checksums[image_arch][gvis
 gvisor_containerd_shim_binary_checksum: "{{ gvisor_containerd_shim_binary_checksums[image_arch][gvisor_version] }}"
 nerdctl_archive_checksum: "{{ nerdctl_archive_checksums[image_arch][nerdctl_version] }}"
 containerd_archive_checksum: "{{ containerd_archive_checksums[image_arch][containerd_version] }}"
+containerd_static_archive_checksum: "{{ containerd_static_archive_checksums[image_arch][containerd_version] }}"
+containerd_checksum: "{{ containerd_static_archive_checksum if containerd_static_binary else containerd_archive_checksum }}"
 skopeo_binary_checksum: "{{ skopeo_binary_checksums[image_arch][skopeo_version] }}"

 # Containers
@ -554,8 +556,8 @@ downloads:
  containerd:
    enabled: "{{ container_manager == 'containerd' }}"
    file: true
-    dest: "{{ local_release_dir }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
-    checksum: "{{ containerd_archive_checksum }}"
+    dest: "{{ local_release_dir }}/containerd-{{ 'static-' if containerd_static_binary }}{{ containerd_version }}-linux-{{ image_arch }}.tar.gz"
+    checksum: "{{ containerd_checksum }}"
    url: "{{ containerd_download_url }}"
    unarchive: false
    owner: "root"
--- a/roles/kubespray_defaults/defaults/main/main.yml
+++ b/roles/kubespray_defaults/defaults/main/main.yml
@ -409,6 +409,9 @@ docker_plugins: []
 # Containerd options - thse are relevant when container_manager == 'containerd'
 containerd_use_systemd_cgroup: true

+# Use static containerd binary for compatibility with older distributions (e.g., Debian 11).
+containerd_static_binary: false
+
 # Containerd conf default dir
 containerd_storage_dir: "/var/lib/containerd"
 containerd_state_dir: "/run/containerd"
--- a/roles/kubespray_defaults/vars/main/checksums.yml
+++ b/roles/kubespray_defaults/vars/main/checksums.yml
@ -670,6 +670,7 @@ cri_dockerd_archive_checksums:
    0.3.5: sha256:30d47bd89998526d51a8518f9e8ef10baed408ab273879ee0e30350702092938
 runc_checksums:
  arm64:
+    1.3.0: sha256:85c5e4e4f72e442c8c17bac07527cd4f961ee48e4f2b71797f7533c94f4a52b9
    1.2.6: sha256:12c612e2ebe6ca198de676ce75ed557e79fe6109032209bb8e25166c967fe170
    1.2.5: sha256:bfc6575f4c601740539553b639ad6f635c23f76695ed484171bd864df6a23f76
    1.2.4: sha256:285f6c4c3de1d78d9f536a0299ae931219527b2ebd9ad89df5a1072896b7e82a
@ -686,6 +687,7 @@ runc_checksums:
    1.1.9: sha256:b43e9f561e85906f469eef5a7b7992fc586f750f44a0e011da4467e7008c33a0
    1.1.8: sha256:7c22cb618116d1d5216d79e076349f93a672253d564b19928a099c20e4acd658
  amd64:
+    1.3.0: sha256:028986516ab5646370edce981df2d8e8a8d12188deaf837142a02097000ae2f2
    1.2.6: sha256:0774f49d1b1eebb5849e644db5e4dc6f2b06cee05f13b3d17d5d6ba62d6f2ebc
    1.2.5: sha256:fbd851fce6a8e0d67a9d184ea544c2abf67c9fd29b80fcc1adf67dfe9eb036a1
    1.2.4: sha256:e83565aa78ec8f52a4d2b4eb6c4ca262b74c5f6770c1f43670c3029c20175502
@ -702,6 +704,7 @@ runc_checksums:
    1.1.9: sha256:b9bfdd4cb27cddbb6172a442df165a80bfc0538a676fbca1a6a6c8f4c6933b43
    1.1.8: sha256:1d05ed79854efc707841dfc7afbf3b86546fc1d0b3a204435ca921c14af8385b
  ppc64le:
+    1.3.0: sha256:156601012e6c473f2a5c7dbabbd08d8c56f151256433e6010bf4e5f6e569b5b6
    1.2.6: sha256:0d7fffba4f89920edd3246afd4f07b18a975d0d97193ffae418e8418c236c168
    1.2.5: sha256:3764385971ac719535425629e1ac4d451934392993779ee9e8e8ed7566715f5f
    1.2.4: sha256:141fa41c1f382483ccf374827f99c7843414fceb95e8ceb710aba8bac984d016
@ -982,6 +985,8 @@ gvisor_containerd_shim_binary_checksums:
    '20231218.0': sha256:a0578a357feb9320298730bf5ba683880ba35c476dc74dc82c79f0b5acc42656
 nerdctl_archive_checksums:
  arm:
+    2.1.2: sha256:8dab9e2cfe58b94e3e0de837c2ba4dec6864c014848f59bc764a2b8db44322b5
+    2.1.1: sha256:06ec5d079166a69ea0326af7f30dd7306c03a25dcf27b186bc125230f5d827c3
    2.0.5: sha256:128bb220999c69cad054cf6394cd70d0665891257db4a7dcbedc5ced409eccb6
    2.0.4: sha256:89e540cb1ac0ed37ec50afc578970a0c9b6a7f1c1b684368da9a726259a3d359
    2.0.3: sha256:d95f238738623ae1f4fb01b6a7f287436ba85493700a9de263b3efbff57424d4
@ -997,6 +1002,8 @@ nerdctl_archive_checksums:
    1.7.1: sha256:799d35de7a182da35d850308c7f1787cd7321404348ff2d5ba64ad43b06b395a
    1.7.0: sha256:8b9e7cccbcc0a472685d1bc285f591f41005f8699e7265ea5438a3e06aefdcfd
  arm64:
+    2.1.2: sha256:af6b8c9028fb1adc84b64c9a63da0f369bfa5cfc9176c8b7c58a573d30bd8a74
+    2.1.1: sha256:648a053c9b5f4e0da1b474fdec40ea7f5b2eb2c1ce88c7881a7c6c2cd11c6478
    2.0.5: sha256:ecf57d202fe6fb1fadb68f25f3d1702a424490f8ca0817a902689f1e1fae9e4d
    2.0.4: sha256:1f394e3aabc2b202ad17a5ece0495ca554ae3ca346a5dd0aa8344a891734763d
    2.0.3: sha256:f2c3f12c99e112cd82ba19ca9b875045c44b2f5a19cecc295ed8d61d415e8851
@ -1012,6 +1019,8 @@ nerdctl_archive_checksums:
    1.7.1: sha256:46affa0564bb74f595a817e7d5060140099d9cfd9e00e1272b4dbe8b0b85c655
    1.7.0: sha256:1255eea5bc2dbac9339d0a9acfb0651dda117504d52cd52b38cf3c2251db4f39
  amd64:
+    2.1.2: sha256:1a08c35d16a0db0b4ac298adb8e4dab4293803d492cbba7aaf862a48a04c463d
+    2.1.1: sha256:4fe308bbadf7dd079c058a34cd0bacef3b35c46da88c37f5f125044d90941595
    2.0.5: sha256:a029af80fd4b3de096d1a18779e7ff8369fbd1285944ebc50bdd22ad41438b5d
    2.0.4: sha256:2f9d22179868db4f0a1daf2fd65f58a24f8a78efd2d9b17659f56bcdce85efd0
    2.0.3: sha256:95ff850688a73eace7453f19e74bf4cc8a1f3e458eeb97ef7a6b74de9825df16
@ -1027,6 +1036,8 @@ nerdctl_archive_checksums:
    1.7.1: sha256:5fc0a6e8c3a71cbba95fbdb6833fb8a7cd8e78f53de10988362d4029c14b905a
    1.7.0: sha256:844c47b175a3d6bc8eaad0c51f23624a5ef10c09e55607803ec2bc846fb04df9
  ppc64le:
+    2.1.2: sha256:2008c94b18900f3a58439ae9dcb7aa6659da82e2d0c9d67ffbecdaa152b9b0bd
+    2.1.1: sha256:f277823a3814c6309bf4d31e94e2b8fec24c99326e517ec81c325e081dd7c20a
    2.0.5: sha256:01bec466e0184945d8138ef0bc7e6689e61c4c8f56bf0968825c7f5a956c076d
    2.0.4: sha256:93c5bd5f32a3b821fd462a96c6943b06663ff03e8fb16327957fe99576855116
    2.0.3: sha256:8d6283b1fe871e319a2f5cf96fe97aba649eeaac0a2a22c81b9b4d3c613c210a
@ -1043,6 +1054,10 @@ nerdctl_archive_checksums:
    1.7.0: sha256:e421ae655ff68461bad04b4a1a0ffe40c6f0fcfb0847d5730d66cd95a7fd10cd
 containerd_archive_checksums:
  arm64:
+    2.1.3: sha256:7e423abc7bf52ff6cb724f44995cca335b40331efa727415a5efc99ca34ac8d5
+    2.1.2: sha256:57fa4005ed3bb648f4a2ff3ef2f9ce12b27ee1397225626e3165b9ef4af45530
+    2.1.1: sha256:4e3c8c0c2e61438bb393a9ea6bb94f8f56b559ec3243d7b1a2943117bca4dcb4
+    2.1.0: sha256:f6c3972347848177805eed8a9c282fca6aaec0e6fd28701579e63cb20bdbce07
    2.0.5: sha256:36eaf77dc65df4b60d6e06204631a4105b4e942dd2704d618758a2aa0eecc264
    2.0.4: sha256:0fde98b24bb55363a54150732e0ac99a43bccf2a9711371bd5470f32790316f2
    2.0.3: sha256:3701008e72e983259afaa594cca5d8126e78e38cf0a586a1f6971cb3f61c4b6b
@ -1102,6 +1117,10 @@ containerd_archive_checksums:
    1.6.15: sha256:d63e4d27c51e33cd10f8b5621c559f09ece8a65fec66d80551b36cac9e61a07d
    1.6.14: sha256:3ccb61218e60cbba0e1bbe1e5e2bf809ac1ead8eafbbff36c3195d3edd0e4809
  amd64:
+    2.1.3: sha256:436cc160c33b37ec25b89fb5c72fc879ab2b3416df5d7af240c3e9c2f4065d3c
+    2.1.2: sha256:87c18b2686f38ee6f738492d04fc849f80567b7849d0710ee9d19fac3454adc4
+    2.1.1: sha256:918e88fd393c28c89424e6535df0546ca36c1dfa7d8a5d685dee70b449380a9b
+    2.1.0: sha256:0e5359e957b66b679be807563a543c7416e305e3aafcf56bad90ef87a917014d
    2.0.5: sha256:88ab31f3e78e4d2fa12dcb933032122d11d441c83b79a89c6c8076f871e50df8
    2.0.4: sha256:e1c64c5fd60ecd555e750744eaef150b6f78d7f750da5c08c52825aa6b791737
    2.0.3: sha256:ac70856f1d8bd3aa9ca5d62db5516b86dfa0f934c1fd1d1c5fa4422dd12ba45e
@ -1161,6 +1180,10 @@ containerd_archive_checksums:
    1.6.15: sha256:191bb4f6e4afc237efc5c85b5866b6fdfed731bde12cceaa6017a9c7f8aeda02
    1.6.14: sha256:7da626d46c4edcae1eefe6d48dc6521db3e594a402715afcddc6ac9e67e1bfcd
  ppc64le:
+    2.1.3: sha256:e517a6d936ffb6d2292e9c6560aa363382b1457eba34cad8289f6f3f76201588
+    2.1.2: sha256:9d8a02413050ae234eeef4152fb703b3d093b5809411f0e905f098554fc066d6
+    2.1.1: sha256:36c90c9993e9f2142aa014cbd352bd7d3db6b8daa2990b4a9f59e706db78deaf
+    2.1.0: sha256:3e380629da9d21366c916ec3873022a2a5700584d409297a1bc183b11fcb0809
    2.0.5: sha256:09773a42829c0ac9b8dd449753c755b3ba65cb7e8d06485950f99d32fd6c1e0d
    2.0.4: sha256:ca970d9a53ae504bc36197d6daa931338c387c83b6948b9f9bfdd1a75e25dcf6
    2.0.3: sha256:2f0faa0086ae81d00680367ee9d75aafd3c4ca4535362db83fea62dd19c47079
@ -1219,6 +1242,124 @@ containerd_archive_checksums:
    1.6.16: sha256:9cfd5dade6a1c2671f5c76496395afe0aa0ce902c13672b306d8d09fdbb99492
    1.6.15: sha256:502f3e4c8ea2018aaa285fe4f704bfd560fdf93193bb829dd9302d013bc38370
    1.6.14: sha256:73025da0666079fc3bbd48cf185da320955d323c7dc42d8a4ade0e7926d62bb0
+containerd_static_archive_checksums:
+  arm64:
+    2.1.3: sha256:74703e628223c6f19ab2df8497a061d08dc1b81c03c720cbc3d66fedaddf9ca5
+    2.1.2: sha256:3f1dcd2bc02cbf9e8fde308c144551153f19e15105a26cebf213c8e232a27f5e
+    2.1.1: sha256:f4525d8adc4445f8d623c6fd91e7dd750189b96539c29ede2636583ac5e4cf7b
+    2.1.0: sha256:1239f60717f4ec2e06e51d2ed86c43d8a0ee10880c73131e58e1e0689e9ad049
+    2.0.5: sha256:302a57f36c80c547c57e439e5f4d5d4e6ce73a9c7266a6787c739a3b9d4dd813
+    2.0.4: sha256:3529558b49e87a220205b632fea1c4b2cdc60f1d93eab3d4c307f66b91df189d
+    2.0.3: sha256:f4946c0a73f966d47ea56dd806a4e466447f194d9d472fe3f59477c6b1510dee
+    2.0.2: sha256:da5631d38702257674da542969c285adfdbdccffc12c5ea39de4db6113de51bc
+    2.0.1: sha256:6022bd160b6d83f13fccd87b1c3854b0294a940335fdf014c10c80d71b279115
+    2.0.0: sha256:428cd0b08eab57003db8a98742d8404b4b69dcd335c5f0f66ceec5fe3b9b31b6
+    1.7.27: sha256:ce2b308e81dc1e633362a45b64fbefc58a7c521e7e060cf95a7709bc1704b402
+    1.7.26: sha256:f35d8eb8467b7875ab768b4b869c9905616d998549e1e0ed993a52eec319dc51
+    1.7.25: sha256:34bd6c26f07011af71a4b31d6637b28d693b0c3a0e847e9df10cac1ccfd17db1
+    1.7.24: sha256:16d13febaa1da15c3ca9fa662f6ae08ca7dc4274f1d6f15f478a61238470c2c0
+    1.7.23: sha256:e7b21b7a487f6102693e115d9150976a3d4812084ec5ec950ff0840fb97631c5
+    1.7.22: sha256:a4cc5c572b587799550d4fdb27b3f3f86bc0fc9d93a7b9b468e704df9d052c5c
+    1.7.21: sha256:5f36f5381fa5db7e35eec8e2bf342dd26ff9825f24caf7b41f72778a97e9c757
+    1.7.20: sha256:9082a99262f8b007bc19856ebef2c48b7b78d50c17b80f8835fffcbdd9f490ea
+    1.7.19: sha256:efd641f5443614b4c17b33c185b62b3e5f67dccc9d140c48d67783c685f62532
+    1.7.18: sha256:1eba98be0632d30911ae4bf6ceb27cda32007f5c0d7701a94623f59848dc7cdf
+    1.7.17: sha256:53fb903fa47b4816308297ae9a0a2ead8cbe3028fbba573d0d5054f722c70663
+    1.7.16: sha256:6d64cdda15b0c0a5de0a644e7f0b0704582eed2e388a75a88f8b6dce8f3f7ebc
+    1.7.15: sha256:5b8affc00938d2e74331ad54e15b89a209b4e0adf0c81256b07b4363ce0a657b
+    1.7.14: sha256:5f2add641528921a42451409db305f64c397421a4571466c800bef22f055a0f8
+    1.7.13: sha256:551bcbace1865c645285e2e8458cbb22ca5674de776e409ce75c81a2c2124f70
+    1.7.12: sha256:d1617a272be304d0b4ed423c0bfa905ea68d979fdac777ec4136eacafabdde5e
+    1.7.11: sha256:bcc0ce5b485ce4b82ed3e585ed7093f4dfda9c9828d1b4caf53efb414bc0ed18
+    1.7.10: sha256:4601af2e1cbb08125c1d72ae7c5dbd5dc1f6e47a2ff7b9d42409b494e8d2f75b
+    1.7.9: sha256:5b76cf84a4f7707ad9ea411c16d5d74b07b06faab38e089b145697ef615bdf3f
+    1.7.8: sha256:661fc140d9054c2a2717491ce268596619b16958a7344a144ba5401a8e7d536e
+    1.7.7: sha256:b9bb0aeaf86a5f70015033651e471d067266747a8a39d6fbfd96b8f9c654b891
+    1.7.6: sha256:6f0fa35e7b3ca528986ea6962fac883a250b06d2f86ac8a4e9f41384929d7648
+    1.7.5: sha256:851da2b4a43acfeaa6eb17296b20b5b7ddc4bf48e255209351ee8217cc7e99c7
+    1.7.4: sha256:4557030cf4d3fe7ce52c8b299fa365340302f027311e0968103b3df3d88dacb8
+    1.7.3: sha256:188ee47a27966608db91b147187a76c367357a3138add5c6ef35fa9bb1a4bb96
+    1.7.2: sha256:0dee8e1862f92af95ac4b29eb23738cc7eaec2e61cb05a93be27137014e4af97
+    1.7.1: sha256:f0435e7cda3c3abc40d3f27d403a8e24bd0b927a8a893a7e4dfaec5996fa9731
+    1.7.0: sha256:6e648cd832f026e23eb6998191e618da7c1ec0c0373263d503ff464e0ae3977a
+  amd64:
+    2.1.3: sha256:1bb0c910e8fdf623fac2305ec66e72c4afbf612de282577dfdbebf08360937d5
+    2.1.2: sha256:5b2b8e82c5d3e6019428db55296b5169e748b94601c0c944c1d780904aa35543
+    2.1.1: sha256:9ab7df748ae3e9c2a513586668b46175c27290eda6028609223d9065eb777964
+    2.1.0: sha256:e8e5da8ca6586bf2023940ec5bc5d4e949924ac8dca2a9f0dc469bb9a297146f
+    2.0.5: sha256:3506b47f8f0806c86ab315ee50e09580fb6f21e1ed3a30051105c98c5592c57b
+    2.0.4: sha256:b8785bc2ca5417fe62fcd5efc687e630cce11ca57e50edd6b9baca10d41b4c1c
+    2.0.3: sha256:866c05ef1c7f22512e1abed271a1b4b6a8ab9c02e8e802da536f7043767a0e8a
+    2.0.2: sha256:7cd4de9c8ad37f3248a45b9d6347b7628e4d77d1c8e35c1f80343450fa47dc00
+    2.0.1: sha256:22b2a7df86fe3e53e219af22a2b5e81d1b67e67d55ec3a18f89990b161fb2157
+    2.0.0: sha256:e72cc69db9984a8d46a34495c302d2b50188ee2dd5c7000a7b471d0350e14ad1
+    1.7.27: sha256:e3ea27eb0e7b8dd92ba7a5ecdd363372ad3c30f9cdecbec75e60ae4a43ca93b9
+    1.7.26: sha256:e19d790ee965e39d0eaa03d471ac4d3a8dfffab0a7ebba9f5deab77b6eb66f0a
+    1.7.25: sha256:53f30807bceaefc3d294cc223893e3897062c99c4fc0ff6b0fd60a81e7ec0bee
+    1.7.24: sha256:c42230baff057c606cd4eb9b71007fb8e2e55e951ad901f0ae0d96bc55ccf85e
+    1.7.23: sha256:625c317ca556b39852bd1260196a2b9d18ab44c8980cea31f4fc58cf9bdc9b47
+    1.7.22: sha256:d42192685f9fc8b6761c648ed5f0a4ea10b21c4288444d575c5608b42b20eb17
+    1.7.21: sha256:24527d4b0696ef16717d19d983d70a031c77c979e235acb90653480c71b9ec6f
+    1.7.20: sha256:61929db32711d62d1c95400a44606daca2992c18a090135c2a42e41f75777b48
+    1.7.19: sha256:7a79ea6953d02dba76e08213fb5f9ecd6397440d832aadc621d255b25a62414e
+    1.7.18: sha256:ef5b06fbc09b2e83ee739e49e2ec71bd18bb9e334eb79c5c073cd23d800260e7
+    1.7.17: sha256:b4ccad6a3c14a30c9a14571527c2eab0ea2231e27d187750d9ac6d5f477938e5
+    1.7.16: sha256:ef763349371986fd9723eea2b7ce98610328283efc1fdd65754302cce4539db9
+    1.7.15: sha256:089901b4356d59f5e9ab8f06ee28e3f4a5896cd97b4aa76fdc35a891f4aff48e
+    1.7.14: sha256:091b374cdac4b0539b7362ce7167b79de0708a42d06baf558f67bd81a385af9a
+    1.7.13: sha256:b0a9bb64ee5c0347978f02b97dbb31665cee9254e674da54ffbc3bb4b5fda34a
+    1.7.12: sha256:1c1df44243bb6923ade7c22c8d9776470e538a683be6f68347bb4f0d82149152
+    1.7.11: sha256:f1d6a1b1bc1a6b7d4daadb3c474110cd2172071c9b34f90856ea305d1a2d9e18
+    1.7.10: sha256:2d4318cd0229b1dc757a3eaa37cd1f6df58bb876371ce59ecc3571e0f2fca446
+    1.7.9: sha256:1d550bd05e4f997e61ab6f3e9f4e19cdc660521e37f3373bd9c7d1804d37043a
+    1.7.8: sha256:3e13f8ee1657b874bf4741975d094d7a9df9051c400b3f822e310c91997c1441
+    1.7.7: sha256:e3c68cf9e01fb150d81764355718a5c31367d3129d76d108bb3b63b368ad2d1e
+    1.7.6: sha256:ee3d1e2a10e7b8b4deface422fc3b4c3700bcac8ae9497c0ade22d5b76649c71
+    1.7.5: sha256:c32df30af783dd67f7640458881b0dbb06f076b9ffe384d710d2d1a24cdad2b2
+    1.7.4: sha256:04f4b3034b2b39e40d621ef24abae8daadfe2d06f1bd480f633869944c379c9c
+    1.7.3: sha256:66eeb863c375dc832589e852798f9ec47bf5da8b53c7ab513f63a30adb13618f
+    1.7.2: sha256:56d2b16560592c42eee2eb758c51815a37f1de3aa3bf5c57073b4d6ded761358
+    1.7.1: sha256:8b4e8ed8a650ea435aa71e115fa1a70701ab98bc1836b3ed33341af35bf85a3a
+    1.7.0: sha256:64ad6428cc4aca486db3a6148682052955d1e3134b69f079edf686c21d123fcd
+  ppc64le:
+    2.1.3: sha256:0084e26bcf5a2653278766662d5adc27cb00a17a21413cc3fbe1e99d9dacf174
+    2.1.2: sha256:4e61d5f9b5789e27c28b94fe0901552fb0070aa0c36aeaabc6e2786f3d5828ff
+    2.1.1: sha256:32c307e4b5cf014b594a9e7c22c610238143da8797f2bf4058dfb94225606ad4
+    2.1.0: sha256:df73c5ce713196be46f4b20d3ff081d67dabb5c730f61da7a3a65a9029b4f762
+    2.0.5: sha256:7e16bdcc5ceab50a880f6a9c7885b15f98ab60f0b963b3092928f89a7b26c8be
+    2.0.4: sha256:740018f44d2dccbd48d24c2362aae5098c459eda4602f5bc5f85738dccc2ead7
+    2.0.3: sha256:328c4647cee948a9062b8c17b5d1e75125cab1c025a2087dcc7bb1eef2d666de
+    2.0.2: sha256:4085c490ad5afb40b34782d427130396513a7eb35a49da8a6b7ade946dd309ce
+    2.0.1: sha256:6e8608e1993099f4ad44d77765be76fd67147108a6247f6886af33be08287a84
+    2.0.0: sha256:c389b68c9ca7774efdbc9e479d9a3be14b71d60a2a8c23f1d8764ec9598f3d55
+    1.7.27: sha256:6a140413dd38954078dddb1b1405e403a92173fe15d094fe0bcbac93a1ff7039
+    1.7.26: sha256:79fb1499e436265a71a31d1ecb69d8b5630df168555786fde8797c91320ad21f
+    1.7.25: sha256:6df5a58d88dba8e3b932fb6b5be1ff780848cdcdf32bddfaf5358ef3d45b62ab
+    1.7.24: sha256:c91562864a6f7e037b10689838fc1dd4c3051e82dc5c1ba0a409019d72816315
+    1.7.23: sha256:4757c76855adc70860a2bcfc583379ac97220c563f356c5eef06d663762b6931
+    1.7.22: sha256:b8fa787859cfb8e9c245036d21c9096ef835247349b0126eb15d6ae94a693924
+    1.7.21: sha256:544a2e9c265d643ad2c96aea2a8d33cb0709681f19186abc4a3bc0779dbe9360
+    1.7.20: sha256:b8dc431a83d46a29cdbda9ad1842e3409b9d8ec5fdf629d02a7e77f1f4e47dfb
+    1.7.19: sha256:e6d5ffcc15f80d506293eea7ca0e123fd63151f49f52b6b56c08d2b07eea97b7
+    1.7.18: sha256:978c938b0b02de4041be758207462a0337d798caa5bb04dd10ff7d2c4ce0c9e4
+    1.7.17: sha256:8154423f54a786bfd1cb6b5e41a47181e80ce7a52a9b28c205b6e81e4d6ec0c7
+    1.7.16: sha256:d02dce8cc44715bc437e546f669615f8c632788542845be224bc0604ad4de857
+    1.7.15: sha256:7b7a1c7d1d1483ff4b9849a6064aa709ee5bc4b8835dfe75714665550fdac89d
+    1.7.14: sha256:2dd693054275fe476a7d7efeae9b103557c51574aa702c38890b737f1a2be7f7
+    1.7.13: sha256:b97a754c5207562f70d30fa6a700cc90e65bb1bdfe876b5e42ba098e6f261b3b
+    1.7.12: sha256:e9ca2e6abb8993d04e41555fc5bdce6f44a4cebe3dc54ca9f113445716c1a71d
+    1.7.11: sha256:451578368acba17569ceb186511929afa7ad1c4a3af3d02983c0c1b5f5f7f21e
+    1.7.10: sha256:6c874d49da4a004158000611fc06d36432a8a888a7fefd19e524d4165bd86141
+    1.7.9: sha256:9b3afba45aa5facc3b0695db48d4da0acf94673a373b72e34ea45f8eeb946e5e
+    1.7.8: sha256:fe38a1d4c868b0756220ce6ea32862fcf9d980a98407740d8a4a1702807792ac
+    1.7.7: sha256:3a2e43b7324aedbf2ca49a533a956c83a448f99a2bb07b3320d407cf8e28ad55
+    1.7.6: sha256:5377b4fa4a8759c18d211afd7767d87b17b8f042bdc9901f9b2544261d28c5f3
+    1.7.5: sha256:258aa8a6dec6a80ec9fc152786e15cf4e2a165147c2eac9a78aeec869292f558
+    1.7.4: sha256:493cdd9e5ae57722ddb718b59a790ec07c5aa328254602f6df25b83f40e6a1cd
+    1.7.3: sha256:56ed334b3b8c1c191694c49efc123c4b8ee8244674ff7dbb2bd309da9eac4b57
+    1.7.2: sha256:d5c32307d7982a5314946e3724534739c433222ead3c36c7afeff2165653d2df
+    1.7.1: sha256:53c4fa2d544a74ee813e1881c06fa23cb7cf58d9fbd2dd7d5a20f38fc308ac44
+    1.7.0: sha256:316aca35c3e046d99adc2fb9771e6c3c42ebfc35332e42cfc467708d8bc0d60e
 skopeo_binary_checksums:
  arm64:
    1.16.1: sha256:3272f15f469af843d325134ff8a77a069d647c5f247766715c098b8f0622b627
--- a/scripts/component_hash_update/src/component_hash_update/components.py
+++ b/scripts/component_hash_update/src/component_hash_update/components.py
@ -24,6 +24,10 @@ infos = {
        "url": "https://github.com/containerd/containerd/releases/download/v{version}/containerd-{version}-{os}-{arch}.tar.gz.sha256sum",
        "graphql_id": "R_kgDOAr9FWA",
    },
+    "containerd_static_archive": {
+        "url": "https://github.com/containerd/containerd/releases/download/v{version}/containerd-static-{version}-{os}-{arch}.tar.gz.sha256sum",
+        "graphql_id": "R_kgDOAr9FWA",
+    },
    "cri_dockerd_archive": {
        "binary": True,
        "url": "https://github.com/Mirantis/cri-dockerd/releases/download/v{version}/cri-dockerd-{version}.{arch}.tgz",
--- a/tests/files/debian11-calico-collection.yml
+++ b/tests/files/debian11-calico-collection.yml
@ -1,3 +1,6 @@
 ---
 # Instance settings
 cloud_image: debian-11
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true
--- a/tests/files/debian11-calico-upgrade-once.yml
+++ b/tests/files/debian11-calico-upgrade-once.yml
@ -13,3 +13,6 @@ calico_network_backend: bird

 # Needed to bypass deprecation check
 ignore_assert_errors: true
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true
--- a/tests/files/debian11-calico-upgrade.yml
+++ b/tests/files/debian11-calico-upgrade.yml
@ -13,3 +13,6 @@ ignore_assert_errors: true

 # Remove anonymous access to cluster
 remove_anonymous_access: true
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true
--- a/tests/files/debian11-custom-cni.yml
+++ b/tests/files/debian11-custom-cni.yml
@ -7,3 +7,6 @@ kube_owner: root
 kube_network_plugin: custom_cni
 custom_cni_manifests:
  - "{{ playbook_dir }}/../tests/files/custom_cni/cilium.yaml"
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true
--- a/tests/files/debian11-kubelet-csr-approver.yml
+++ b/tests/files/debian11-kubelet-csr-approver.yml
@ -8,3 +8,6 @@ kubelet_csr_approver_enabled: true
 kubelet_csr_approver_values:
  # Do not check DNS resolution in testing (not recommended in production)
  bypassDnsResolution: true
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true
--- a/tests/files/debian11-macvlan.yml
+++ b/tests/files/debian11-macvlan.yml
@ -8,3 +8,6 @@ enable_nodelocaldns: false
 kube_proxy_masquerade_all: true
 macvlan_interface: "eth0"
 auto_renew_certificates: true
+
+# Use static containerd binary for older distributions like Debian 11.
+containerd_static_binary: true