containers

systemd 262 lets the init system build as a single static binary for tiny containers and adds Linux 6.17 kernel coredump-socket support plus OpenSSL 4.

Docker's self-built container hypervisor replaces libkrun on Mac and Hyper-V/WSL2 on Windows, with general availability targeted for the end of October.

Podman 6.1 ships volume renaming, a machine restart command, Quadlet ImageVolume support, and IPv6 rootless port forwarding.

Kubernetes 1.37, due August 26, graduates the Metrics API, KYAML output, and Pod Certificates to stable, moves rootless kubelet to beta, and keeps phasing out kube-proxy's ipvs mode.

CNCF graduated Cloud Native Buildpacks on August 11, formalizing a build model that shifts base-image patching from Dockerfiles to a centralized builder.

Kubernetes v1.36, releasing April 22, brings accelerated SELinux volume labelling to GA, expands Dynamic Resource Allocation for AI hardware, and permanently removes the insecure gitRepo volume driver.

The CNCF incubating project's latest release adds a multi-hypervisor backend, Intel TDX attestation for confidential computing, and PCIe NUMA topology awareness for AI workloads, while scaling its test framework to 8,000 virtual machines.

Systemd 260 removes SysV init script support, introduces OverlayFS-based mstack container tooling, adds a Varlink metrics framework, and raises the minimum kernel to Linux 5.10.

The next Kubernetes release locked its feature set on March 18, delivering 80 enhancements that graduate User Namespaces and four Dynamic Resource Allocation features to GA while introducing gang scheduling and workload-aware placement for AI training clusters.