build(deps): Bump github.com/containerd/nerdctl/v2 from 2.0.0-rc.2 to 2.0.0-rc.3

[dependabot[bot]]

Bumps github.com/containerd/nerdctl/v2 from 2.0.0-rc.2 to 2.0.0-rc.3.

Release notes

Sourced from github.com/containerd/nerdctl/v2's releases.

v2.0.0-rc.3

Changes

nerdctl v2 enables "detach-netns" for Rootless mode by default (#2723).

This will bring:

• Faster and more stable nerdctl pull, nerdctl push, nerdctl build, etc
• Proper support for nerdctl pull 127.0.0.1:.../...
• Proper support for nerdctl run --net=host

Depends on RootlessKit >= v2.0 and BuildKit >= v0.13 (included in nerdctl-full-*.tar.gz).

[!NOTE] After upgrading nerdctl (rootless mode) from v1.x to v2.x, it is highly recommended to re-install the systemd units and the configurations:

containerd-rootless-setuptool.sh uninstall
rm -rf ~/.config/{nerdctl,buildkit}
containerd-rootless-setuptool.sh install
CONTAINERD_NAMESPACE=default containerd-rootless-setuptool.sh install-buildkit-containerd

Other major changes:

• nerdctl run:
  • Added --systemd flag for running systemd in containers flag (#2785, thanks to @​sazzy4o)
  • Added --ipc=(shareable|container:<container>) flag (#2757, thanks to @​minuk-dev)
  • Added --annotation flag (#2906)
    • Now nerdctl run --label is only set as a containerd label and not propagated as an OCI annotation. A label with the nerdctl/ prefix can no longer be set manually, with an exception for nerdctl/bypass4netns. The nerdctl/bypass4netns label is still allowed and is propagated to an OCI annotation, for sake of compatibility.
  • Added --sig-proxy flag (#3043, thanks to @​CodeChanning)
  • Propagate image labels to container labels (not to container annotations) (#3023, thanks to @​yankay)
  • Added --attach flag (#3157, thanks to @​CodeChanning)
  • The restriction for --name is relaxed to support longer names (#3279, thanks to @​Shubhranshu153)
  • Added --security-opt systempaths=unconfined flag (#3533, thanks to @​austinvazquez)
  • Added --network ns:<PATH> flag (#3538, thanks to @​dancavallaro)
  • Added the support for oci-layout image references (#3537, thanks to @​austinvazquez)
• nerdctl build:
  • Added --attest, --sbom, and --provenance flags (#2786, thanks to @​yankay)
  • Added --pull flag (#3074, thanks to @​sondavidb)
  • Added the support for Windows (#2587, thanks to @​TBBle)
  • Added the support for oci-layout build contexts (#3327, thanks to @​austinvazquez)
• nerdctl ps:
  • JSON type of --format=json is changed for better Docker compatibility (#2987, #3058, thanks to @​apostasie and @​yankay)
• nerdctl inspect:
  • Added --size flag (#3021, thanks to @​apostasie)
• nerdctl network:
  • The networks are now aware of containerd namespaces. i.e., nerdctl --namespace=foo network list no longer shows networks created with nerdctl --namespace=bar network create (#3096, thanks to @​apostasie)
  • Enhanced support for DHCP (#3001, thanks to @​apostasie)
• nerdctl compose up:
  • Added --abort-on-container-exit flag (#2873, thanks to @​alegrey91)
• nerdctl builder prune:
  • Added --all flag (#3316, thanks to @​austinvazquez)

... (truncated)

Commits

• 6d00222 Merge pull request #3600 from AkihiroSuda/dev
• e2a51a0 Merge pull request #3599 from yankay/ignore-logo-in-dark-mode
• af25fd4 add white image
• 5094605 update Kubo (0.31.0)
• 90fbd09 update Nydus (2.3.0)
• 98442f5 update CNI plugins (1.6.0)
• 5551d6d update containerd (2.0.0-rc.6)
• c94d0cc Merge pull request #3598 from containerd/dependabot/go_modules/github.com/con...
• 247fcca build(deps): bump github.com/containerd/containerd/v2
• 5f71cec Merge pull request #3594 from containerd/dependabot/github_actions/actions/ch...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)