Diff of the two buildlogs:

--
--- b1/build.log	2025-03-16 07:27:20.820657478 +0000
+++ b2/build.log	2025-03-16 07:30:58.818784940 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Sat Mar 15 19:22:47 -12 2025
-I: pbuilder-time-stamp: 1742109767
+I: Current time: Sun Apr 19 03:50:24 +14 2026
+I: pbuilder-time-stamp: 1776520224
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/bookworm-reproducible-base.tgz]
 I: copying local configuration
@@ -16,7 +16,7 @@
 I: copying [./containerd_1.6.20~ds1.orig.tar.xz]
 I: copying [./containerd_1.6.20~ds1-1+deb12u1.debian.tar.xz]
 I: Extracting source
-gpgv: Signature made Mon Feb  3 04:45:41 2025 -12
+gpgv: Signature made Tue Feb  4 06:45:41 2025 +14
 gpgv:                using EDDSA key DD1738DF2C69FC511166B5E3035EE609804B5139
 gpgv:                issuer "jmw@debian.org"
 gpgv: Can't check signature: No public key
@@ -36,135 +36,167 @@
 dpkg-source: info: applying 0011-allow-test-run-in-userns.patch
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/2356780/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/D01_modify_environment starting
+debug: Running on codethink03-arm64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Apr 19 03:50 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='arm64'
-  DEBIAN_FRONTEND='noninteractive'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="15" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu")
+  BASH_VERSION='5.2.15(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=arm64
+  DEBIAN_FRONTEND=noninteractive
   DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 '
-  DISTRIBUTION='bookworm'
-  HOME='/root'
-  HOST_ARCH='arm64'
+  DIRSTACK=()
+  DISTRIBUTION=bookworm
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=aarch64
+  HOST_ARCH=arm64
   IFS=' 	
   '
-  INVOCATION_ID='6483c0610c3a43018b3f8c0ffc8bc9a7'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='2356780'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=3dd9a74248504d378a91410965f97536
+  LANG=C
+  LANGUAGE=nl_BE:nl
+  LC_ALL=C
+  MACHTYPE=aarch64-unknown-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=3246693
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.CTNjzFx8/pbuilderrc_qZ4z --distribution bookworm --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.CTNjzFx8/b1 --logfile b1/build.log containerd_1.6.20~ds1-1+deb12u1.dsc'
-  SUDO_GID='109'
-  SUDO_UID='104'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://192.168.101.4:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.CTNjzFx8/pbuilderrc_57tQ --distribution bookworm --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.CTNjzFx8/b2 --logfile b2/build.log containerd_1.6.20~ds1-1+deb12u1.dsc'
+  SUDO_GID=109
+  SUDO_UID=104
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://192.168.101.4:3128
 I: uname -a
-  Linux codethink04-arm64 6.1.0-32-cloud-arm64 #1 SMP Debian 6.1.129-1 (2025-03-06) aarch64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-32-cloud-arm64 #1 SMP Debian 6.1.129-1 (2025-03-06) aarch64 GNU/Linux
 I: ls -l /bin
   total 7104
-  -rwxr-xr-x 1 root root 1346480 Mar 29  2024 bash
-  -rwxr-xr-x 3 root root   67728 Sep 18  2022 bunzip2
-  -rwxr-xr-x 3 root root   67728 Sep 18  2022 bzcat
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzcmp -> bzdiff
-  -rwxr-xr-x 1 root root    2225 Sep 18  2022 bzdiff
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzegrep -> bzgrep
-  -rwxr-xr-x 1 root root    4893 Nov 27  2021 bzexe
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzfgrep -> bzgrep
-  -rwxr-xr-x 1 root root    3775 Sep 18  2022 bzgrep
-  -rwxr-xr-x 3 root root   67728 Sep 18  2022 bzip2
-  -rwxr-xr-x 1 root root   67664 Sep 18  2022 bzip2recover
-  lrwxrwxrwx 1 root root       6 Sep 18  2022 bzless -> bzmore
-  -rwxr-xr-x 1 root root    1297 Sep 18  2022 bzmore
-  -rwxr-xr-x 1 root root   68536 Sep 20  2022 cat
-  -rwxr-xr-x 1 root root   68616 Sep 20  2022 chgrp
-  -rwxr-xr-x 1 root root   68552 Sep 20  2022 chmod
-  -rwxr-xr-x 1 root root   68632 Sep 20  2022 chown
-  -rwxr-xr-x 1 root root  200264 Sep 20  2022 cp
-  -rwxr-xr-x 1 root root  133640 Jan  5  2023 dash
-  -rwxr-xr-x 1 root root  134144 Sep 20  2022 date
-  -rwxr-xr-x 1 root root  134248 Sep 20  2022 dd
-  -rwxr-xr-x 1 root root  134888 Sep 20  2022 df
-  -rwxr-xr-x 1 root root  200440 Sep 20  2022 dir
-  -rwxr-xr-x 1 root root  141720 Nov 21 08:01 dmesg
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 dnsdomainname -> hostname
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 domainname -> hostname
-  -rwxr-xr-x 1 root root   68408 Sep 20  2022 echo
-  -rwxr-xr-x 1 root root      41 Jan 24  2023 egrep
-  -rwxr-xr-x 1 root root   68384 Sep 20  2022 false
-  -rwxr-xr-x 1 root root      41 Jan 24  2023 fgrep
-  -rwxr-xr-x 1 root root  134584 Nov 21 08:01 findmnt
-  -rwsr-xr-x 1 root root   67744 Mar 22  2023 fusermount
-  -rwxr-xr-x 1 root root  198880 Jan 24  2023 grep
-  -rwxr-xr-x 2 root root    2346 Apr  9  2022 gunzip
-  -rwxr-xr-x 1 root root    6447 Apr  9  2022 gzexe
-  -rwxr-xr-x 1 root root   93752 Apr  9  2022 gzip
-  -rwxr-xr-x 1 root root   67592 Dec 19  2022 hostname
-  -rwxr-xr-x 1 root root   68664 Sep 20  2022 ln
-  -rwxr-xr-x 1 root root   69208 Mar 22  2023 login
-  -rwxr-xr-x 1 root root  200440 Sep 20  2022 ls
-  -rwxr-xr-x 1 root root  264360 Nov 21 08:01 lsblk
-  -rwxr-xr-x 1 root root  134384 Sep 20  2022 mkdir
-  -rwxr-xr-x 1 root root   68768 Sep 20  2022 mknod
-  -rwxr-xr-x 1 root root   68472 Sep 20  2022 mktemp
-  -rwxr-xr-x 1 root root   67752 Nov 21 08:01 more
-  -rwsr-xr-x 1 root root   67744 Nov 21 08:01 mount
-  -rwxr-xr-x 1 root root   67744 Nov 21 08:01 mountpoint
-  -rwxr-xr-x 1 root root  134728 Sep 20  2022 mv
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 nisdomainname -> hostname
-  lrwxrwxrwx 1 root root      14 Apr  2  2023 pidof -> /sbin/killall5
-  -rwxr-xr-x 1 root root   68496 Sep 20  2022 pwd
-  lrwxrwxrwx 1 root root       4 Mar 29  2024 rbash -> bash
-  -rwxr-xr-x 1 root root   68456 Sep 20  2022 readlink
-  -rwxr-xr-x 1 root root   68592 Sep 20  2022 rm
-  -rwxr-xr-x 1 root root   68480 Sep 20  2022 rmdir
-  -rwxr-xr-x 1 root root   68392 Jul 28  2023 run-parts
-  -rwxr-xr-x 1 root root  134536 Jan  5  2023 sed
-  lrwxrwxrwx 1 root root       4 Jan  5  2023 sh -> dash
-  -rwxr-xr-x 1 root root   68432 Sep 20  2022 sleep
-  -rwxr-xr-x 1 root root  134088 Sep 20  2022 stty
-  -rwsr-xr-x 1 root root  133312 Nov 21 08:01 su
-  -rwxr-xr-x 1 root root   68448 Sep 20  2022 sync
-  -rwxr-xr-x 1 root root  539896 Jan 19  2024 tar
-  -rwxr-xr-x 1 root root   67904 Jul 28  2023 tempfile
-  -rwxr-xr-x 1 root root  134160 Sep 20  2022 touch
-  -rwxr-xr-x 1 root root   68384 Sep 20  2022 true
-  -rwxr-xr-x 1 root root   67664 Mar 22  2023 ulockmgr_server
-  -rwsr-xr-x 1 root root   67744 Nov 21 08:01 umount
-  -rwxr-xr-x 1 root root   68416 Sep 20  2022 uname
-  -rwxr-xr-x 2 root root    2346 Apr  9  2022 uncompress
-  -rwxr-xr-x 1 root root  200440 Sep 20  2022 vdir
-  -rwxr-xr-x 1 root root  133312 Nov 21 08:01 wdctl
-  lrwxrwxrwx 1 root root       8 Dec 19  2022 ypdomainname -> hostname
-  -rwxr-xr-x 1 root root    1984 Apr  9  2022 zcat
-  -rwxr-xr-x 1 root root    1678 Apr  9  2022 zcmp
-  -rwxr-xr-x 1 root root    6460 Apr  9  2022 zdiff
-  -rwxr-xr-x 1 root root      29 Apr  9  2022 zegrep
-  -rwxr-xr-x 1 root root      29 Apr  9  2022 zfgrep
-  -rwxr-xr-x 1 root root    2081 Apr  9  2022 zforce
-  -rwxr-xr-x 1 root root    8103 Apr  9  2022 zgrep
-  -rwxr-xr-x 1 root root    2206 Apr  9  2022 zless
-  -rwxr-xr-x 1 root root    1842 Apr  9  2022 zmore
-  -rwxr-xr-x 1 root root    4577 Apr  9  2022 znew
-I: user script /srv/workspace/pbuilder/2356780/tmp/hooks/D02_print_environment finished
+  -rwxr-xr-x 1 root root 1346480 Mar 30  2024 bash
+  -rwxr-xr-x 3 root root   67728 Sep 19  2022 bunzip2
+  -rwxr-xr-x 3 root root   67728 Sep 19  2022 bzcat
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzcmp -> bzdiff
+  -rwxr-xr-x 1 root root    2225 Sep 19  2022 bzdiff
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzegrep -> bzgrep
+  -rwxr-xr-x 1 root root    4893 Nov 28  2021 bzexe
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzfgrep -> bzgrep
+  -rwxr-xr-x 1 root root    3775 Sep 19  2022 bzgrep
+  -rwxr-xr-x 3 root root   67728 Sep 19  2022 bzip2
+  -rwxr-xr-x 1 root root   67664 Sep 19  2022 bzip2recover
+  lrwxrwxrwx 1 root root       6 Sep 19  2022 bzless -> bzmore
+  -rwxr-xr-x 1 root root    1297 Sep 19  2022 bzmore
+  -rwxr-xr-x 1 root root   68536 Sep 21  2022 cat
+  -rwxr-xr-x 1 root root   68616 Sep 21  2022 chgrp
+  -rwxr-xr-x 1 root root   68552 Sep 21  2022 chmod
+  -rwxr-xr-x 1 root root   68632 Sep 21  2022 chown
+  -rwxr-xr-x 1 root root  200264 Sep 21  2022 cp
+  -rwxr-xr-x 1 root root  133640 Jan  6  2023 dash
+  -rwxr-xr-x 1 root root  134144 Sep 21  2022 date
+  -rwxr-xr-x 1 root root  134248 Sep 21  2022 dd
+  -rwxr-xr-x 1 root root  134888 Sep 21  2022 df
+  -rwxr-xr-x 1 root root  200440 Sep 21  2022 dir
+  -rwxr-xr-x 1 root root  141720 Nov 22  2024 dmesg
+  lrwxrwxrwx 1 root root       8 Dec 20  2022 dnsdomainname -> hostname
+  lrwxrwxrwx 1 root root       8 Dec 20  2022 domainname -> hostname
+  -rwxr-xr-x 1 root root   68408 Sep 21  2022 echo
+  -rwxr-xr-x 1 root root      41 Jan 25  2023 egrep
+  -rwxr-xr-x 1 root root   68384 Sep 21  2022 false
+  -rwxr-xr-x 1 root root      41 Jan 25  2023 fgrep
+  -rwxr-xr-x 1 root root  134584 Nov 22  2024 findmnt
+  -rwsr-xr-x 1 root root   67744 Mar 23  2023 fusermount
+  -rwxr-xr-x 1 root root  198880 Jan 25  2023 grep
+  -rwxr-xr-x 2 root root    2346 Apr 10  2022 gunzip
+  -rwxr-xr-x 1 root root    6447 Apr 10  2022 gzexe
+  -rwxr-xr-x 1 root root   93752 Apr 10  2022 gzip
+  -rwxr-xr-x 1 root root   67592 Dec 20  2022 hostname
+  -rwxr-xr-x 1 root root   68664 Sep 21  2022 ln
+  -rwxr-xr-x 1 root root   69208 Mar 24  2023 login
+  -rwxr-xr-x 1 root root  200440 Sep 21  2022 ls
+  -rwxr-xr-x 1 root root  264360 Nov 22  2024 lsblk
+  -rwxr-xr-x 1 root root  134384 Sep 21  2022 mkdir
+  -rwxr-xr-x 1 root root   68768 Sep 21  2022 mknod
+  -rwxr-xr-x 1 root root   68472 Sep 21  2022 mktemp
+  -rwxr-xr-x 1 root root   67752 Nov 22  2024 more
+  -rwsr-xr-x 1 root root   67744 Nov 22  2024 mount
+  -rwxr-xr-x 1 root root   67744 Nov 22  2024 mountpoint
+  -rwxr-xr-x 1 root root  134728 Sep 21  2022 mv
+  lrwxrwxrwx 1 root root       8 Dec 20  2022 nisdomainname -> hostname
+  lrwxrwxrwx 1 root root      14 Apr  3  2023 pidof -> /sbin/killall5
+  -rwxr-xr-x 1 root root   68496 Sep 21  2022 pwd
+  lrwxrwxrwx 1 root root       4 Mar 30  2024 rbash -> bash
+  -rwxr-xr-x 1 root root   68456 Sep 21  2022 readlink
+  -rwxr-xr-x 1 root root   68592 Sep 21  2022 rm
+  -rwxr-xr-x 1 root root   68480 Sep 21  2022 rmdir
+  -rwxr-xr-x 1 root root   68392 Jul 29  2023 run-parts
+  -rwxr-xr-x 1 root root  134536 Jan  6  2023 sed
+  lrwxrwxrwx 1 root root       9 Apr 19 03:50 sh -> /bin/bash
+  -rwxr-xr-x 1 root root   68432 Sep 21  2022 sleep
+  -rwxr-xr-x 1 root root  134088 Sep 21  2022 stty
+  -rwsr-xr-x 1 root root  133312 Nov 22  2024 su
+  -rwxr-xr-x 1 root root   68448 Sep 21  2022 sync
+  -rwxr-xr-x 1 root root  539896 Jan 20  2024 tar
+  -rwxr-xr-x 1 root root   67904 Jul 29  2023 tempfile
+  -rwxr-xr-x 1 root root  134160 Sep 21  2022 touch
+  -rwxr-xr-x 1 root root   68384 Sep 21  2022 true
+  -rwxr-xr-x 1 root root   67664 Mar 23  2023 ulockmgr_server
+  -rwsr-xr-x 1 root root   67744 Nov 22  2024 umount
+  -rwxr-xr-x 1 root root   68416 Sep 21  2022 uname
+  -rwxr-xr-x 2 root root    2346 Apr 10  2022 uncompress
+  -rwxr-xr-x 1 root root  200440 Sep 21  2022 vdir
+  -rwxr-xr-x 1 root root  133312 Nov 22  2024 wdctl
+  lrwxrwxrwx 1 root root       8 Dec 20  2022 ypdomainname -> hostname
+  -rwxr-xr-x 1 root root    1984 Apr 10  2022 zcat
+  -rwxr-xr-x 1 root root    1678 Apr 10  2022 zcmp
+  -rwxr-xr-x 1 root root    6460 Apr 10  2022 zdiff
+  -rwxr-xr-x 1 root root      29 Apr 10  2022 zegrep
+  -rwxr-xr-x 1 root root      29 Apr 10  2022 zfgrep
+  -rwxr-xr-x 1 root root    2081 Apr 10  2022 zforce
+  -rwxr-xr-x 1 root root    8103 Apr 10  2022 zgrep
+  -rwxr-xr-x 1 root root    2206 Apr 10  2022 zless
+  -rwxr-xr-x 1 root root    1842 Apr 10  2022 zmore
+  -rwxr-xr-x 1 root root    4577 Apr 10  2022 znew
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -488,7 +520,7 @@
 Get: 162 http://deb.debian.org/debian bookworm/main arm64 golang-k8s-klog-dev all 2.80.1-2 [66.9 kB]
 Get: 163 http://deb.debian.org/debian bookworm/main arm64 golang-k8s-sigs-structured-merge-diff-dev all 4.1.2+ds1-2 [122 kB]
 Get: 164 http://deb.debian.org/debian bookworm/main arm64 golang-opentelemetry-otel-dev all 1.1.0-2 [303 kB]
-Fetched 158 MB in 5s (32.9 MB/s)
+Fetched 158 MB in 1s (110 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package golang-golang-x-sys-dev.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19569 files and directories currently installed.)
@@ -1159,7 +1191,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/containerd-1.6.20~ds1/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../containerd_1.6.20~ds1-1+deb12u1_source.changes
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for bookworm
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/containerd-1.6.20~ds1/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../containerd_1.6.20~ds1-1+deb12u1_source.changes
 dpkg-buildpackage: info: source package containerd
 dpkg-buildpackage: info: source version 1.6.20~ds1-1+deb12u1
 dpkg-buildpackage: info: source distribution bookworm
@@ -1180,29 +1216,29 @@
 make[1]: Entering directory '/build/reproducible-path/containerd-1.6.20~ds1'
 dh_auto_build -- -ldflags '-X github.com/containerd/containerd/version.Version=1.6.20~ds1 -X github.com/containerd/containerd/version.Revision=1.6.20~ds1-1+deb12u1'
 	cd _build && go install -trimpath -v -p 12 -ldflags "-X github.com/containerd/containerd/version.Version=1.6.20~ds1 -X github.com/containerd/containerd/version.Revision=1.6.20~ds1-1+deb12u1" github.com/containerd/containerd github.com/containerd/containerd/api github.com/containerd/containerd/api/events github.com/containerd/containerd/api/services/containers/v1 github.com/containerd/containerd/api/services/content/v1 github.com/containerd/containerd/api/services/diff/v1 github.com/containerd/containerd/api/services/events/v1 github.com/containerd/containerd/api/services/images/v1 github.com/containerd/containerd/api/services/introspection/v1 github.com/containerd/containerd/api/services/leases/v1 github.com/containerd/containerd/api/services/namespaces/v1 github.com/containerd/containerd/api/services/snapshots/v1 github.com/containerd/containerd/api/services/tasks/v1 github.com/containerd/containerd/api/services/ttrpc/events/v1 github.com/containerd/containerd/api/services/version/v1 github.com/containerd/containerd/api/types github.com/containerd/containerd/api/types/task github.com/containerd/containerd/archive github.com/containerd/containerd/archive/compression github.com/containerd/containerd/archive/tarheader github.com/containerd/containerd/archive/tartest github.com/containerd/containerd/cio github.com/containerd/containerd/cmd/containerd github.com/containerd/containerd/cmd/containerd/command github.com/containerd/containerd/cmd/containerd-shim github.com/containerd/containerd/cmd/containerd-shim-runc-v1 github.com/containerd/containerd/cmd/containerd-shim-runc-v2 github.com/containerd/containerd/cmd/ctr github.com/containerd/containerd/cmd/ctr/app github.com/containerd/containerd/cmd/ctr/commands github.com/containerd/containerd/cmd/ctr/commands/containers github.com/containerd/containerd/cmd/ctr/commands/content github.com/containerd/containerd/cmd/ctr/commands/events github.com/containerd/containerd/cmd/ctr/commands/images github.com/containerd/containerd/cmd/ctr/commands/install github.com/containerd/containerd/cmd/ctr/commands/leases github.com/containerd/containerd/cmd/ctr/commands/namespaces github.com/containerd/containerd/cmd/ctr/commands/oci github.com/containerd/containerd/cmd/ctr/commands/plugins github.com/containerd/containerd/cmd/ctr/commands/pprof github.com/containerd/containerd/cmd/ctr/commands/run github.com/containerd/containerd/cmd/ctr/commands/shim github.com/containerd/containerd/cmd/ctr/commands/snapshots github.com/containerd/containerd/cmd/ctr/commands/tasks github.com/containerd/containerd/cmd/ctr/commands/version github.com/containerd/containerd/cmd/gen-manpages github.com/containerd/containerd/containers github.com/containerd/containerd/content github.com/containerd/containerd/content/local github.com/containerd/containerd/content/proxy github.com/containerd/containerd/content/testsuite github.com/containerd/containerd/contrib/apparmor github.com/containerd/containerd/contrib/nvidia github.com/containerd/containerd/contrib/seccomp github.com/containerd/containerd/contrib/seccomp/kernelversion github.com/containerd/containerd/contrib/snapshotservice github.com/containerd/containerd/defaults github.com/containerd/containerd/diff github.com/containerd/containerd/diff/apply github.com/containerd/containerd/diff/walking github.com/containerd/containerd/diff/walking/plugin github.com/containerd/containerd/errdefs github.com/containerd/containerd/events github.com/containerd/containerd/events/exchange github.com/containerd/containerd/events/plugin github.com/containerd/containerd/filters github.com/containerd/containerd/gc github.com/containerd/containerd/gc/scheduler github.com/containerd/containerd/identifiers github.com/containerd/containerd/images github.com/containerd/containerd/images/archive github.com/containerd/containerd/images/converter github.com/containerd/containerd/images/converter/uncompress github.com/containerd/containerd/labels github.com/containerd/containerd/leases github.com/containerd/containerd/leases/proxy github.com/containerd/containerd/log github.com/containerd/containerd/log/logtest github.com/containerd/containerd/metadata github.com/containerd/containerd/metadata/boltutil github.com/containerd/containerd/metrics github.com/containerd/containerd/metrics/cgroups github.com/containerd/containerd/metrics/cgroups/common github.com/containerd/containerd/metrics/cgroups/v1 github.com/containerd/containerd/metrics/cgroups/v2 github.com/containerd/containerd/metrics/types/v1 github.com/containerd/containerd/metrics/types/v2 github.com/containerd/containerd/mount github.com/containerd/containerd/namespaces github.com/containerd/containerd/oci github.com/containerd/containerd/pkg/apparmor github.com/containerd/containerd/pkg/atomic github.com/containerd/containerd/pkg/cap github.com/containerd/containerd/pkg/cri github.com/containerd/containerd/pkg/cri/annotations github.com/containerd/containerd/pkg/cri/config github.com/containerd/containerd/pkg/cri/constants github.com/containerd/containerd/pkg/cri/io github.com/containerd/containerd/pkg/cri/opts github.com/containerd/containerd/pkg/cri/server github.com/containerd/containerd/pkg/cri/server/bandwidth github.com/containerd/containerd/pkg/cri/server/testing github.com/containerd/containerd/pkg/cri/store github.com/containerd/containerd/pkg/cri/store/container github.com/containerd/containerd/pkg/cri/store/image github.com/containerd/containerd/pkg/cri/store/label github.com/containerd/containerd/pkg/cri/store/sandbox github.com/containerd/containerd/pkg/cri/store/snapshot github.com/containerd/containerd/pkg/cri/store/stats github.com/containerd/containerd/pkg/cri/store/truncindex github.com/containerd/containerd/pkg/cri/streaming github.com/containerd/containerd/pkg/cri/streaming/portforward github.com/containerd/containerd/pkg/cri/streaming/remotecommand github.com/containerd/containerd/pkg/cri/util github.com/containerd/containerd/pkg/dialer github.com/containerd/containerd/pkg/failpoint github.com/containerd/containerd/pkg/ioutil github.com/containerd/containerd/pkg/kmutex github.com/containerd/containerd/pkg/netns github.com/containerd/containerd/pkg/oom github.com/containerd/containerd/pkg/oom/v1 github.com/containerd/containerd/pkg/oom/v2 github.com/containerd/containerd/pkg/os github.com/containerd/containerd/pkg/os/testing github.com/containerd/containerd/pkg/process github.com/containerd/containerd/pkg/progress github.com/containerd/containerd/pkg/registrar github.com/containerd/containerd/pkg/runtimeoptions/v1 github.com/containerd/containerd/pkg/schedcore github.com/containerd/containerd/pkg/seccomp github.com/containerd/containerd/pkg/seed github.com/containerd/containerd/pkg/seutil github.com/containerd/containerd/pkg/shutdown github.com/containerd/containerd/pkg/snapshotters github.com/containerd/containerd/pkg/stdio github.com/containerd/containerd/pkg/testutil github.com/containerd/containerd/pkg/timeout github.com/containerd/containerd/pkg/ttrpcutil github.com/containerd/containerd/pkg/userns github.com/containerd/containerd/platforms github.com/containerd/containerd/plugin github.com/containerd/containerd/protobuf/plugin github.com/containerd/containerd/protobuf/plugin/fieldpath github.com/containerd/containerd/reference github.com/containerd/containerd/reference/docker github.com/containerd/containerd/remotes github.com/containerd/containerd/remotes/docker github.com/containerd/containerd/remotes/docker/auth github.com/containerd/containerd/remotes/docker/config github.com/containerd/containerd/remotes/docker/schema1 github.com/containerd/containerd/remotes/errors github.com/containerd/containerd/rootfs github.com/containerd/containerd/runtime github.com/containerd/containerd/runtime/linux/runctypes github.com/containerd/containerd/runtime/opts github.com/containerd/containerd/runtime/restart github.com/containerd/containerd/runtime/restart/monitor github.com/containerd/containerd/runtime/v1 github.com/containerd/containerd/runtime/v1/linux github.com/containerd/containerd/runtime/v1/shim github.com/containerd/containerd/runtime/v1/shim/client github.com/containerd/containerd/runtime/v1/shim/v1 github.com/containerd/containerd/runtime/v2 github.com/containerd/containerd/runtime/v2/example github.com/containerd/containerd/runtime/v2/logging github.com/containerd/containerd/runtime/v2/runc github.com/containerd/containerd/runtime/v2/runc/manager github.com/containerd/containerd/runtime/v2/runc/options github.com/containerd/containerd/runtime/v2/runc/task github.com/containerd/containerd/runtime/v2/runc/task/plugin github.com/containerd/containerd/runtime/v2/runc/v1 github.com/containerd/containerd/runtime/v2/runc/v2 github.com/containerd/containerd/runtime/v2/shim github.com/containerd/containerd/runtime/v2/task github.com/containerd/containerd/services github.com/containerd/containerd/services/containers github.com/containerd/containerd/services/content github.com/containerd/containerd/services/content/contentserver github.com/containerd/containerd/services/diff github.com/containerd/containerd/services/events github.com/containerd/containerd/services/healthcheck github.com/containerd/containerd/services/images github.com/containerd/containerd/services/introspection github.com/containerd/containerd/services/leases github.com/containerd/containerd/services/namespaces github.com/containerd/containerd/services/opt github.com/containerd/containerd/services/server github.com/containerd/containerd/services/server/config github.com/containerd/containerd/services/snapshots github.com/containerd/containerd/services/tasks github.com/containerd/containerd/services/version github.com/containerd/containerd/snapshots github.com/containerd/containerd/snapshots/benchsuite github.com/containerd/containerd/snapshots/btrfs github.com/containerd/containerd/snapshots/btrfs/plugin github.com/containerd/containerd/snapshots/devmapper github.com/containerd/containerd/snapshots/devmapper/blkdiscard github.com/containerd/containerd/snapshots/devmapper/dmsetup github.com/containerd/containerd/snapshots/devmapper/plugin github.com/containerd/containerd/snapshots/native github.com/containerd/containerd/snapshots/native/plugin github.com/containerd/containerd/snapshots/overlay github.com/containerd/containerd/snapshots/overlay/overlayutils github.com/containerd/containerd/snapshots/overlay/plugin github.com/containerd/containerd/snapshots/proxy github.com/containerd/containerd/snapshots/storage github.com/containerd/containerd/snapshots/testsuite github.com/containerd/containerd/sys github.com/containerd/containerd/sys/reaper github.com/containerd/containerd/tracing github.com/containerd/containerd/version
+internal/goarch
 internal/unsafeheader
 internal/goexperiment
 internal/goos
 internal/race
-internal/itoa
 unicode
 unicode/utf8
-internal/goarch
-math/bits
+internal/itoa
 internal/cpu
-runtime/internal/syscall
-sync/atomic
+internal/abi
+runtime/internal/math
 encoding
+math/bits
+runtime/internal/syscall
 unicode/utf16
+sync/atomic
+runtime/internal/sys
 internal/nettrace
 container/list
 crypto/internal/subtle
-internal/abi
-runtime/internal/math
-runtime/internal/sys
-math
 crypto/subtle
 crypto/internal/boring/sig
+math
 vendor/golang.org/x/crypto/cryptobyte/asn1
 vendor/golang.org/x/crypto/internal/subtle
 google.golang.org/grpc/serviceconfig
@@ -1213,9 +1249,9 @@
 google.golang.org/protobuf/internal/set
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/selection
 github.com/google/go-cmp/cmp/internal/flags
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/types
 internal/bytealg
 runtime/internal/atomic
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/types
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/authentication/user
 github.com/containerd/containerd/vendor/k8s.io/utils/integer
 github.com/containerd/containerd/vendor/k8s.io/client-go/util/exec
@@ -1241,39 +1277,39 @@
 math/rand
 google.golang.org/grpc/internal/buffer
 google.golang.org/grpc/internal/grpcsync
-internal/sysinfo
 google.golang.org/protobuf/internal/pragma
+internal/sysinfo
 runtime/cgo
-sort
 errors
-github.com/gogo/protobuf/sortkeys
-github.com/beorn7/perks/quantile
-container/heap
+sort
 io
 strconv
 internal/oserror
 internal/safefilepath
 path
 vendor/golang.org/x/net/dns/dnsmessage
-github.com/moby/locker
 crypto/internal/nistec/fiat
+github.com/moby/locker
 golang.org/x/crypto/cast5
 syscall
+github.com/gogo/protobuf/sortkeys
+github.com/beorn7/perks/quantile
+container/heap
 bytes
 strings
 hash
+hash/crc32
 crypto/internal/randutil
 text/tabwriter
-github.com/containerd/containerd/pkg/ioutil
-hash/crc32
 hash/fnv
 hash/adler32
-vendor/golang.org/x/text/transform
-golang.org/x/text/transform
+github.com/containerd/containerd/pkg/ioutil
 reflect
 crypto
 crypto/rc4
 golang.org/x/crypto/openpgp/errors
+vendor/golang.org/x/text/transform
+golang.org/x/text/transform
 bufio
 html
 net/http/internal/ascii
@@ -1293,14 +1329,14 @@
 image/jpeg
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/version
 internal/poll
+io/fs
 context
 google.golang.org/grpc/backoff
-io/fs
-google.golang.org/grpc/keepalive
 google.golang.org/grpc/internal/grpcrand
+google.golang.org/grpc/keepalive
 github.com/google/go-cmp/cmp/internal/diff
-k8s.io/klog/internal/clock
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/clock
+k8s.io/klog/internal/clock
 github.com/containerd/containerd/vendor/k8s.io/utils/clock
 github.com/containerd/containerd/pkg/cri/store/stats
 google.golang.org/grpc/internal/backoff
@@ -1310,16 +1346,16 @@
 github.com/containerd/containerd/pkg/timeout
 github.com/containerd/containerd/gc
 go.opentelemetry.io/otel/internal/baggage
-github.com/go-logr/logr
-golang.org/x/net/context
-github.com/containerd/containerd/pkg/oom
-os
 internal/fmtsort
 encoding/binary
 github.com/hashicorp/errwrap
 github.com/google/go-cmp/cmp/internal/function
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/sets
+github.com/go-logr/logr
 github.com/modern-go/reflect2
+golang.org/x/net/context
+github.com/containerd/containerd/pkg/oom
+os
 encoding/base64
 crypto/cipher
 crypto/internal/nistec
@@ -1330,413 +1366,412 @@
 golang.org/x/sys/unix
 github.com/cespare/xxhash
 github.com/klauspost/compress/internal/snapref
-encoding/pem
 github.com/google/gofuzz/bytesource
+encoding/pem
 golang.org/x/crypto/openpgp/armor
+crypto/internal/edwards25519
+crypto/internal/boring
+crypto/des
+vendor/golang.org/x/crypto/chacha20
 fmt
 internal/godebug
 path/filepath
 io/ioutil
-internal/intern
-crypto/internal/edwards25519
 google.golang.org/grpc/internal/envconfig
-os/signal
-google.golang.org/protobuf/internal/detrand
-github.com/prometheus/procfs/internal/util
-k8s.io/klog/internal/buffer
-crypto/internal/boring
-net/netip
-crypto/des
-vendor/golang.org/x/crypto/chacha20
 crypto/aes
+internal/intern
 crypto/sha512
 crypto/hmac
 crypto/sha1
 crypto/sha256
-os/exec
+os/signal
+net/netip
 vendor/golang.org/x/crypto/hkdf
+os/exec
+google.golang.org/protobuf/internal/detrand
+vendor/golang.org/x/crypto/chacha20poly1305
+github.com/prometheus/procfs/internal/util
+k8s.io/klog/internal/buffer
 internal/lazyregexp
 github.com/containerd/containerd/pkg/apparmor
 github.com/moby/sys/symlink
-vendor/golang.org/x/crypto/chacha20poly1305
 github.com/containerd/continuity/pathdriver
 golang.org/x/crypto/pbkdf2
-log
-net/url
 os/user
+encoding/json
+log
 compress/flate
-math/big
+net/url
 text/template/parse
-encoding/json
+math/big
 encoding/hex
 vendor/golang.org/x/crypto/curve25519
 net
 vendor/golang.org/x/text/unicode/norm
+vendor/golang.org/x/net/http2/hpack
 golang.org/x/net/internal/timeseries
 vendor/golang.org/x/text/unicode/bidi
-vendor/golang.org/x/net/http2/hpack
 mime
 mime/quotedprintable
 net/http/internal
 google.golang.org/grpc/internal/grpclog
 compress/gzip
-google.golang.org/grpc/grpclog
 google.golang.org/grpc/attributes
 google.golang.org/grpc/metadata
-vendor/golang.org/x/text/secure/bidirule
+google.golang.org/grpc/grpclog
 google.golang.org/grpc/codes
 golang.org/x/text/unicode/bidi
 golang.org/x/text/unicode/norm
+vendor/golang.org/x/text/secure/bidirule
 golang.org/x/net/http2/hpack
-github.com/opencontainers/go-digest
-google.golang.org/grpc/internal/balancerload
-github.com/pkg/errors
-google.golang.org/grpc/connectivity
 github.com/gogo/protobuf/proto
+text/template
 github.com/golang/protobuf/proto
+google.golang.org/grpc/internal/balancerload
+google.golang.org/grpc/connectivity
+github.com/opencontainers/go-digest
 google.golang.org/grpc/internal
+github.com/pkg/errors
 github.com/sirupsen/logrus
 github.com/containerd/containerd/pkg/userns
-text/template
 github.com/containerd/continuity/sysx
-golang.org/x/sync/errgroup
-github.com/klauspost/compress/fse
 golang.org/x/text/secure/bidirule
 vendor/golang.org/x/net/idna
+golang.org/x/sync/errgroup
+github.com/klauspost/compress/fse
 runtime/debug
 golang.org/x/sys/execabs
-github.com/containerd/fifo
-github.com/opencontainers/image-spec/specs-go
-github.com/opencontainers/image-spec/specs-go/v1
-github.com/klauspost/compress/huff0
 crypto/rand
 crypto/elliptic
 crypto/internal/boring/bbig
 encoding/asn1
 crypto/ed25519
+html/template
 crypto/rsa
 crypto/dsa
-golang.org/x/net/idna
-html/template
 github.com/containerd/containerd/log
+golang.org/x/net/idna
 github.com/containerd/continuity/fs
-github.com/containerd/containerd/cio
+github.com/klauspost/compress/huff0
+github.com/containerd/fifo
+github.com/opencontainers/image-spec/specs-go
 github.com/moby/sys/mountinfo
+github.com/opencontainers/image-spec/specs-go/v1
+github.com/containerd/containerd/reference
 vendor/golang.org/x/crypto/cryptobyte
 crypto/x509/pkix
-github.com/klauspost/compress/zstd
-github.com/containerd/containerd/reference
+github.com/containerd/containerd/cio
 github.com/containerd/containerd/mount
 github.com/containerd/containerd/reference/docker
 github.com/containerd/containerd/leases
+github.com/klauspost/compress/zstd
 github.com/containerd/containerd/pkg/cap
-archive/tar
 github.com/opencontainers/runc/libcontainer/user
+crypto/ecdsa
 github.com/opencontainers/runtime-spec/specs-go
 github.com/containerd/containerd/pkg/kmutex
+archive/tar
 github.com/docker/go-events
-crypto/ecdsa
-github.com/containerd/containerd/snapshots
 github.com/opencontainers/image-spec/identity
 database/sql/driver
 github.com/moby/sys/signal
 github.com/opencontainers/selinux/pkg/pwalkdir
 go.etcd.io/bbolt
+github.com/containerd/containerd/snapshots
+github.com/opencontainers/selinux/go-selinux
 github.com/prometheus/common/model
 google.golang.org/protobuf/internal/errors
-github.com/opencontainers/selinux/go-selinux
-go/token
 google.golang.org/protobuf/encoding/protowire
+go/token
 google.golang.org/protobuf/internal/version
 github.com/prometheus/procfs/internal/fs
+github.com/docker/go-units
+compress/zlib
+google.golang.org/protobuf/reflect/protoreflect
+debug/dwarf
+github.com/cilium/ebpf/internal/unix
 google.golang.org/grpc/encoding/proto
 github.com/golang/protobuf/ptypes/any
 github.com/golang/protobuf/ptypes/duration
 github.com/golang/protobuf/ptypes/timestamp
+github.com/opencontainers/selinux/go-selinux/label
 github.com/matttproud/golang_protobuf_extensions/pbutil
-google.golang.org/protobuf/reflect/protoreflect
 google.golang.org/genproto/googleapis/rpc/status
-github.com/prometheus/client_model/go
-github.com/docker/go-units
+github.com/cilium/ebpf/internal/sys
 github.com/golang/protobuf/ptypes
 google.golang.org/grpc/binarylog/grpc_binarylog_v1
+github.com/prometheus/client_model/go
 github.com/containerd/containerd/archive/tarheader
-github.com/opencontainers/selinux/go-selinux/label
 github.com/containerd/containerd/archive/tartest
 google.golang.org/grpc/internal/status
-compress/zlib
-debug/dwarf
+go/scanner
+google.golang.org/protobuf/internal/descfmt
 github.com/containerd/containerd/archive
+google.golang.org/protobuf/internal/descopts
 google.golang.org/grpc/status
-github.com/cilium/ebpf/internal/unix
-go/scanner
+google.golang.org/protobuf/internal/strs
 github.com/prometheus/client_golang/prometheus/internal
+google.golang.org/protobuf/internal/encoding/messageset
 github.com/containerd/containerd/errdefs
-go/doc/comment
+google.golang.org/protobuf/internal/encoding/text
+google.golang.org/protobuf/internal/order
+google.golang.org/protobuf/runtime/protoiface
+google.golang.org/protobuf/internal/genid
 github.com/containerd/containerd/filters
 github.com/containerd/containerd/labels
 github.com/containerd/containerd/platforms
 github.com/containerd/containerd/identifiers
-google.golang.org/protobuf/internal/descfmt
-google.golang.org/protobuf/internal/descopts
-google.golang.org/protobuf/internal/strs
-google.golang.org/protobuf/internal/encoding/messageset
-google.golang.org/protobuf/internal/genid
-github.com/containerd/containerd/content
-google.golang.org/protobuf/internal/order
-google.golang.org/protobuf/runtime/protoiface
-github.com/cilium/ebpf/internal/sys
-google.golang.org/protobuf/internal/encoding/text
+google.golang.org/protobuf/reflect/protoregistry
+github.com/cilium/ebpf/asm
 go/ast
+go/doc/comment
+github.com/gogo/protobuf/types
+github.com/containerd/containerd/runtime/linux/runctypes
+github.com/containerd/containerd/content
+github.com/containerd/containerd/runtime/v2/runc/options
+github.com/gogo/protobuf/protoc-gen-gogo/descriptor
+google.golang.org/protobuf/internal/encoding/defval
+google.golang.org/protobuf/proto
+github.com/containerd/containerd/archive/compression
+debug/elf
+github.com/containerd/containerd/content/local
 github.com/imdario/mergo
-google.golang.org/protobuf/reflect/protoregistry
 github.com/pelletier/go-toml
 github.com/grpc-ecosystem/go-grpc-prometheus/packages/grpcstatus
-github.com/containerd/containerd/archive/compression
-github.com/containerd/containerd/content/local
 internal/profile
-github.com/cilium/ebpf/asm
-debug/elf
 github.com/containerd/containerd/images
-google.golang.org/protobuf/internal/encoding/defval
 runtime/pprof
-runtime/trace
-google.golang.org/protobuf/proto
-go.opentelemetry.io/otel/attribute
-github.com/containerd/containerd/images/archive
-github.com/containerd/containerd/remotes
-go/internal/typeparams
-go/parser
-go/printer
-github.com/containerd/containerd/remotes/docker/schema1
-github.com/gogo/protobuf/types
-github.com/containerd/containerd/runtime/linux/runctypes
-github.com/containerd/containerd/runtime/v2/runc/options
-github.com/gogo/protobuf/protoc-gen-gogo/descriptor
-go.opentelemetry.io/otel/codes
-go.opentelemetry.io/otel/baggage
-flag
-go.opentelemetry.io/otel/trace
-google.golang.org/protobuf/internal/filedesc
 crypto/x509
 net/textproto
 vendor/golang.org/x/net/http/httpproxy
 google.golang.org/grpc/internal/syscall
 google.golang.org/grpc/stats
+github.com/containerd/containerd/images/archive
 github.com/containerd/ttrpc
 github.com/containerd/containerd/pkg/dialer
-google.golang.org/protobuf/encoding/prototext
-github.com/google/uuid
-github.com/prometheus/procfs
 vendor/golang.org/x/net/http/httpguts
 mime/multipart
 golang.org/x/net/http/httpguts
+github.com/containerd/containerd/remotes
+github.com/google/uuid
+google.golang.org/protobuf/internal/filedesc
+google.golang.org/protobuf/encoding/prototext
+github.com/prometheus/procfs
+github.com/containerd/containerd/remotes/docker/schema1
+github.com/gogo/protobuf/gogoproto
 github.com/godbus/dbus
+go/internal/typeparams
+go/printer
+go/parser
+github.com/containerd/containerd/namespaces
+github.com/containerd/cgroups/stats/v1
+github.com/containerd/cgroups/v2/stats
 github.com/containerd/containerd/sys
-go/format
+runtime/trace
+go.opentelemetry.io/otel/attribute
+crypto/tls
+go.opentelemetry.io/otel/codes
+go.opentelemetry.io/otel/baggage
 github.com/coreos/go-systemd/daemon
+go.opentelemetry.io/otel/trace
+flag
 github.com/russross/blackfriday/v2
-github.com/gogo/protobuf/gogoproto
-github.com/containerd/containerd/namespaces
 github.com/containerd/console
-github.com/cilium/ebpf/internal
-github.com/hashicorp/go-multierror
-github.com/containerd/containerd/runtime/v1
-gopkg.in/inf.v0
-github.com/google/gofuzz
 google.golang.org/protobuf/internal/encoding/tag
-github.com/containerd/cgroups/stats/v1
-github.com/containerd/cgroups/v2/stats
-github.com/containerd/containerd/pkg/stdio
-github.com/containerd/go-runc
-google.golang.org/protobuf/internal/impl
-crypto/tls
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/api/resource
-github.com/cilium/ebpf/btf
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/third_party/forked/golang/reflect
-github.com/containerd/containerd/sys/reaper
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/conversion
-github.com/containerd/containerd/metrics/types/v2
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/fields
-github.com/google/go-cmp/cmp/internal/value
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/errors
-k8s.io/klog/internal/serialize
-github.com/cpuguy83/go-md2man/v2/md2man
-k8s.io/klog
-github.com/google/go-cmp/cmp
-go/doc
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/validation/field
-github.com/urfave/cli
-github.com/containerd/containerd/metrics/types/v1
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/validation
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/conversion/queryparams
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/schema
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/json
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/naming
-github.com/modern-go/concurrent
+github.com/hashicorp/go-multierror
+go/format
 github.com/containerd/containerd/api/types
-gopkg.in/yaml.v2
 github.com/containerd/typeurl
 github.com/gogo/googleapis/google/rpc
 github.com/containerd/containerd/api/types/task
 github.com/containerd/containerd/containers
 github.com/containerd/containerd/diff
+github.com/containerd/containerd/metadata/boltutil
 github.com/containerd/containerd/events
 github.com/containerd/containerd/oci
-github.com/containerd/containerd/events/exchange
 github.com/containerd/containerd/api/services/ttrpc/events/v1
-github.com/containerd/containerd/metadata/boltutil
+github.com/containerd/containerd/events/exchange
+github.com/containerd/containerd/snapshots/storage
 github.com/containerd/containerd/rootfs
+google.golang.org/protobuf/internal/impl
 github.com/containerd/containerd/api/events
 github.com/containerd/containerd/plugin
-github.com/containerd/containerd/snapshots/storage
-github.com/coreos/go-systemd/dbus
-github.com/cilium/ebpf
+github.com/cilium/ebpf/internal
+github.com/containerd/containerd/vendor/github.com/containerd/aufs
 github.com/containerd/containerd/metadata
 github.com/containerd/containerd/services/server/config
 github.com/containerd/containerd/diff/apply
-github.com/containerd/containerd/vendor/github.com/containerd/aufs
+github.com/cpuguy83/go-md2man/v2/md2man
 github.com/containerd/containerd/diff/walking
-net/http/httptrace
-google.golang.org/grpc/internal/credentials
 github.com/containerd/containerd/events/plugin
+github.com/cilium/ebpf/btf
+github.com/coreos/go-systemd/dbus
 github.com/containerd/containerd/gc/scheduler
+github.com/urfave/cli
 github.com/containerd/containerd/metrics/cgroups/common
-google.golang.org/grpc/credentials
+github.com/containerd/containerd/vendor/github.com/containerd/aufs/plugin
+github.com/containerd/containerd/metrics/types/v1
 github.com/containerd/containerd/runtime
+github.com/containerd/containerd/pkg/stdio
+github.com/containerd/go-runc
+github.com/containerd/containerd/runtime/v1
+github.com/containerd/containerd/runtime/v1/shim/v1
+github.com/containerd/containerd/metrics/types/v2
+gopkg.in/inf.v0
+github.com/google/gofuzz
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/third_party/forked/golang/reflect
+github.com/containerd/cgroups
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/api/resource
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/fields
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/conversion
 github.com/containerd/containerd/pkg/process
+github.com/containerd/containerd/diff/walking/plugin
+net/http/httptrace
+google.golang.org/grpc/internal/credentials
+github.com/containerd/containerd/sys/reaper
+github.com/google/go-cmp/cmp/internal/value
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/errors
+k8s.io/klog/internal/serialize
 net/http
-github.com/containerd/cgroups
-github.com/containerd/containerd/runtime/v1/shim/v1
-github.com/containerd/containerd/vendor/github.com/containerd/aufs/plugin
+google.golang.org/grpc/credentials
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/validation/field
+k8s.io/klog
+github.com/cilium/ebpf
+go/doc
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/conversion/queryparams
+github.com/google/go-cmp/cmp
 google.golang.org/grpc/resolver
-google.golang.org/grpc/internal/channelz
 google.golang.org/grpc/peer
+google.golang.org/grpc/internal/channelz
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/validation
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/schema
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/json
 google.golang.org/grpc/balancer
 google.golang.org/grpc/internal/grpcutil
 google.golang.org/grpc/balancer/grpclb/state
-google.golang.org/grpc/internal/binarylog
 google.golang.org/grpc/balancer/base
-google.golang.org/grpc/internal/resolver/dns
-google.golang.org/grpc/balancer/roundrobin
 google.golang.org/grpc/internal/resolver/passthrough
+google.golang.org/grpc/internal/resolver/dns
 google.golang.org/grpc/internal/serviceconfig
-github.com/cilium/ebpf/link
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/labels
-github.com/containerd/containerd/diff/walking/plugin
+google.golang.org/grpc/internal/binarylog
+github.com/containerd/containerd/runtime/v1/shim
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/naming
+github.com/modern-go/concurrent
+google.golang.org/grpc/balancer/roundrobin
+gopkg.in/yaml.v2
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/intstr
-github.com/json-iterator/go
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/framer
-sigs.k8s.io/yaml
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/third_party/forked/golang/netutil
 encoding/xml
+github.com/json-iterator/go
 github.com/emicklei/go-restful/log
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/api/validation/path
 github.com/blang/semver
-google.golang.org/protobuf/internal/filetype
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/yaml
 encoding/csv
 github.com/containerd/containerd/vendor/k8s.io/component-base/version
 github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/version
-github.com/spf13/pflag
+github.com/containerd/containerd/runtime/v1/shim/client
 github.com/davecgh/go-spew/spew
-github.com/containerd/cgroups/v2
 golang.org/x/term
+github.com/spf13/pflag
 github.com/containerd/containerd/vendor/k8s.io/client-go/tools/metrics
 github.com/containerd/containerd/vendor/k8s.io/client-go/util/connrotation
-github.com/containerd/containerd/runtime/v1/shim
 golang.org/x/time/rate
-google.golang.org/protobuf/runtime/protoimpl
 github.com/containerd/containerd/vendor/k8s.io/client-go/util/keyutil
 github.com/containerd/containerd/vendor/k8s.io/utils/exec
-google.golang.org/protobuf/types/known/timestamppb
+github.com/containerd/containerd/runtime/v1/linux
+github.com/cilium/ebpf/link
 github.com/containerd/containerd/vendor/k8s.io/client-go/util/flowcontrol
 github.com/containerd/containerd/vendor/k8s.io/client-go/util/cert
+google.golang.org/protobuf/internal/filetype
 github.com/containerd/containerd/contrib/apparmor
 github.com/containerd/containerd/contrib/seccomp/kernelversion
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/labels
 github.com/containerd/containerd/pkg/cri/util
+google.golang.org/protobuf/runtime/protoimpl
 github.com/containerd/containerd/pkg/os
 github.com/containerd/containerd/pkg/cri/server/bandwidth
 github.com/containerd/containerd/contrib/seccomp
 github.com/containerd/containerd/pkg/cri/store
 github.com/containerd/containerd/pkg/cri/store/label
+google.golang.org/protobuf/types/known/timestamppb
 github.com/tchap/go-patricia/patricia
 github.com/containerd/continuity/devices
 github.com/containerd/continuity/proto
-github.com/containerd/containerd/runtime/v1/shim/client
 github.com/opencontainers/go-digest/digestset
 github.com/containernetworking/plugins/pkg/ns
 github.com/containernetworking/cni/pkg/types
-github.com/containerd/continuity/driver
+sigs.k8s.io/yaml
+github.com/containerd/cgroups/v2
 testing
-github.com/containerd/containerd/pkg/cri/store/truncindex
 github.com/containerd/containerd/pkg/cri/store/snapshot
 github.com/containerd/containerd/pkg/registrar
+github.com/containernetworking/cni/pkg/types/internal
+github.com/containerd/continuity/driver
+github.com/containerd/containerd/pkg/cri/store/truncindex
+github.com/containernetworking/cni/pkg/utils
+github.com/containerd/containerd/pkg/netns
 github.com/containerd/containerd/pkg/runtimeoptions/v1
-github.com/containerd/containerd/pkg/seccomp
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/yaml
+github.com/containernetworking/cni/pkg/types/create
+github.com/containernetworking/cni/pkg/types/020
 github.com/containerd/containerd/pkg/seutil
-github.com/containerd/containerd/pkg/netns
+github.com/containerd/containerd/pkg/seccomp
 github.com/containerd/containerd/pkg/snapshotters
-github.com/containernetworking/cni/pkg/types/internal
-github.com/containernetworking/cni/pkg/utils
 github.com/intel/goresctrl/pkg/log
 github.com/intel/goresctrl/pkg/utils
-github.com/containernetworking/cni/pkg/types/create
-github.com/containernetworking/cni/pkg/types/020
+github.com/containernetworking/cni/pkg/types/040
 github.com/containers/ocicrypt/config
 github.com/containerd/continuity
 github.com/containerd/containerd/images/converter
 golang.org/x/crypto/openpgp/elgamal
-github.com/containerd/containerd/vendor/github.com/containerd/imgcrypt
 golang.org/x/crypto/ed25519
 gopkg.in/square/go-jose.v2/cipher
+github.com/containerd/containerd/vendor/github.com/containerd/imgcrypt
 gopkg.in/square/go-jose.v2/json
-github.com/containerd/containerd/runtime/v1/linux
-golang.org/x/crypto/openpgp/packet
-github.com/containernetworking/cni/pkg/types/040
 github.com/containers/ocicrypt/keywrap
+github.com/containernetworking/cni/pkg/types/100
+golang.org/x/crypto/openpgp/packet
 net/mail
+github.com/containerd/containerd/vendor/k8s.io/component-base/featuregate
 golang.org/x/crypto/ssh/terminal
 github.com/containerd/containerd/vendor/github.com/containerd/nri/types/v1
-github.com/containerd/containerd/vendor/k8s.io/component-base/featuregate
 github.com/fsnotify/fsnotify
+sigs.k8s.io/structured-merge-diff/value
 github.com/vishvananda/netns
-github.com/containernetworking/cni/pkg/types/100
-github.com/containerd/containerd/pkg/seed
-github.com/vishvananda/netlink/nl
-github.com/containerd/containerd/pkg/shutdown
 github.com/containernetworking/cni/pkg/version
+github.com/containerd/containerd/pkg/seed
+github.com/fullsailor/pkcs7
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/util/feature
+github.com/containerd/containerd/pkg/shutdown
 github.com/containerd/containerd/pkg/ttrpcutil
 github.com/containerd/containerd/runtime/v2/task
+github.com/containernetworking/cni/pkg/invoke
 github.com/containerd/containerd/services/opt
-github.com/fullsailor/pkcs7
 github.com/containerd/btrfs
 github.com/containerd/containerd/snapshots/devmapper/blkdiscard
-github.com/containernetworking/cni/pkg/invoke
 github.com/containerd/containerd/snapshots/native
-github.com/containerd/containerd/snapshots/devmapper/dmsetup
-sigs.k8s.io/structured-merge-diff/value
+github.com/vishvananda/netlink/nl
 github.com/containerd/containerd/snapshots/overlay/overlayutils
+github.com/containerd/containerd/snapshots/devmapper/dmsetup
 github.com/containernetworking/cni/libcni
-github.com/containerd/containerd/snapshots/native/plugin
-github.com/containerd/containerd/snapshots/devmapper
 github.com/mistifyio/go-zfs
 github.com/containerd/containerd/snapshots/overlay
 gopkg.in/square/go-jose.v2
-github.com/vishvananda/netlink
-golang.org/x/crypto/openpgp
+github.com/containerd/containerd/snapshots/native/plugin
+github.com/containerd/containerd/snapshots/devmapper
 github.com/containerd/containerd/cmd/containerd-shim
+golang.org/x/crypto/openpgp
 github.com/containerd/go-cni
-github.com/containerd/containerd/snapshots/overlay/plugin
 github.com/containerd/containerd/vendor/github.com/containerd/zfs
+github.com/containerd/containerd/snapshots/overlay/plugin
 github.com/containerd/containerd/pkg/schedcore
-github.com/containers/ocicrypt/keywrap/pgp
 github.com/containerd/containerd/contrib/nvidia
-github.com/containerd/containerd/vendor/github.com/containerd/zfs/plugin
 github.com/containerd/containerd/pkg/progress
+github.com/containerd/containerd/vendor/github.com/containerd/zfs/plugin
 github.com/containerd/containerd/images/converter/uncompress
-github.com/containerd/containerd/snapshots/devmapper/plugin
+github.com/vishvananda/netlink
+github.com/containers/ocicrypt/keywrap/pgp
 github.com/containerd/containerd/runtime/opts
 github.com/containerd/containerd/log/logtest
 gotest.tools/internal/format
@@ -1746,87 +1781,88 @@
 github.com/containerd/containerd/pkg/os/testing
 github.com/containerd/containerd/protobuf/plugin
 github.com/gogo/protobuf/protoc-gen-gogo/generator/internal/remap
+github.com/containerd/containerd/snapshots/devmapper/plugin
+gotest.tools/assert/cmp
 github.com/gogo/protobuf/protoc-gen-gogo/plugin
 internal/buildcfg
 internal/goroot
 github.com/containerd/containerd/runtime/v2/logging
-github.com/containerd/containerd/runtime/v2/runc
-github.com/containerd/containerd/runtime/v2/shim
-gotest.tools/assert/cmp
 github.com/containerd/continuity/fs/fstest
-go/build
+github.com/containerd/containerd/runtime/v2/shim
+github.com/containerd/containerd/runtime/v2/runc
 github.com/containers/ocicrypt/utils
+go/build
 gotest.tools/internal/assert
-gotest.tools/assert
-github.com/containers/ocicrypt/blockcipher
-github.com/containers/ocicrypt/keywrap/jwe
-github.com/containers/ocicrypt/keywrap/pkcs7
-github.com/containerd/containerd/pkg/testutil
 golang.org/x/net/trace
-net/http/httputil
 golang.org/x/net/http2
+net/http/httputil
 github.com/containerd/containerd/remotes/errors
 golang.org/x/net/context/ctxhttp
 expvar
 github.com/prometheus/common/expfmt
 net/http/pprof
-go.opentelemetry.io/otel/propagation
 github.com/containerd/containerd/remotes/docker/auth
+go.opentelemetry.io/otel/propagation
+github.com/containerd/containerd/remotes/docker
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/runtime
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/httpstream
 go.opentelemetry.io/otel/internal/global
 github.com/moby/spdystream/spdy
 github.com/emicklei/go-restful
-github.com/containerd/containerd/remotes/docker
-github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/authorization/authorizer
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime
+github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/authorization/authorizer
+github.com/prometheus/client_golang/prometheus
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/features
 go.opentelemetry.io/otel
 golang.org/x/net/websocket
 github.com/moby/spdystream
 golang.org/x/oauth2/internal
-github.com/prometheus/client_golang/prometheus
 github.com/containerd/containerd/tracing
 golang.org/x/oauth2
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/wait
-github.com/containerd/containerd/vendor/k8s.io/client-go/util/workqueue
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/util/wsstream
-github.com/containers/ocicrypt
+github.com/containerd/containerd/vendor/k8s.io/client-go/util/workqueue
+github.com/containerd/containerd/remotes/docker/config
+github.com/containers/ocicrypt/blockcipher
+github.com/containers/ocicrypt/keywrap/jwe
+github.com/containers/ocicrypt/keywrap/pkcs7
 github.com/containerd/containerd/runtime/v2
 github.com/containerd/containerd/pkg/oom/v1
 github.com/containerd/containerd/runtime/v2/runc/manager
+github.com/containers/ocicrypt
 github.com/containerd/containerd/pkg/oom/v2
-github.com/containerd/containerd/remotes/docker/config
-github.com/containerd/containerd/cmd/ctr/commands/pprof
-github.com/containerd/containerd/content/testsuite
 github.com/containerd/containerd/runtime/v2/runc/v1
+github.com/containerd/containerd/cmd/ctr/commands/pprof
 github.com/containerd/containerd/runtime/v2/runc/task
+gotest.tools/assert
+github.com/prometheus/client_golang/prometheus/promhttp
+github.com/intel/goresctrl/pkg/rdt
 github.com/gogo/protobuf/protoc-gen-gogo/generator
-github.com/containerd/containerd/runtime/v2/example
+github.com/containerd/containerd/pkg/testutil
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/recognizer
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/streaming
-github.com/containerd/containerd/vendor/k8s.io/client-go/tools/clientcmd/api
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/json
+github.com/containerd/containerd/vendor/k8s.io/client-go/tools/clientcmd/api
 github.com/containerd/containerd/runtime/v2/runc/task/plugin
-github.com/prometheus/client_golang/prometheus/promhttp
-github.com/intel/goresctrl/pkg/rdt
-github.com/containerd/containerd/runtime/v2/runc/v2
-github.com/containerd/containerd/snapshots/testsuite
+github.com/containerd/containerd/content/testsuite
 github.com/containerd/containerd/cmd/containerd-shim-runc-v1
-github.com/containerd/containerd/cmd/containerd-shim-runc-v2
-github.com/containerd/containerd/snapshots/btrfs
 google.golang.org/grpc/internal/transport
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/net
+github.com/containerd/containerd/cmd/containerd-shim-runc-v2
+github.com/containerd/containerd/runtime/v2/example
+github.com/containerd/containerd/runtime/v2/runc/v2
+github.com/containerd/containerd/snapshots/testsuite
+github.com/containerd/containerd/snapshots/btrfs
 github.com/containerd/containerd/snapshots/btrfs/plugin
+github.com/docker/go-metrics
+github.com/containerd/containerd/vendor/k8s.io/component-base/metrics
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/watch
 github.com/containerd/containerd/vendor/k8s.io/client-go/transport
-github.com/containerd/containerd/protobuf/plugin/fieldpath
-github.com/containerd/containerd/vendor/k8s.io/component-base/metrics
-github.com/docker/go-metrics
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/v1
 github.com/containerd/containerd/metrics
-github.com/containerd/containerd/metrics/cgroups/v2
 github.com/containerd/containerd/metrics/cgroups/v1
+github.com/containerd/containerd/metrics/cgroups/v2
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/v1
+github.com/containerd/containerd/protobuf/plugin/fieldpath
 github.com/containerd/containerd/metrics/cgroups
 google.golang.org/grpc
 github.com/containerd/containerd/vendor/k8s.io/component-base/metrics/legacyregistry
@@ -1841,16 +1877,16 @@
 github.com/containerd/containerd/api/services/snapshots/v1
 github.com/containerd/containerd/api/services/tasks/v1
 github.com/containerd/containerd/api/services/version/v1
+github.com/containerd/containerd/services/introspection
 google.golang.org/grpc/health/grpc_health_v1
 github.com/grpc-ecosystem/go-grpc-prometheus
-github.com/containerd/containerd/services/introspection
 github.com/containerd/containerd/vendor/k8s.io/api/core/v1
-github.com/containerd/containerd/leases/proxy
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/api/errors
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/protobuf
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/unstructured
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/v1/validation
 github.com/containerd/containerd/vendor/k8s.io/api/authentication/v1
+github.com/containerd/containerd/leases/proxy
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/api/meta
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/v1beta1
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/remotecommand
@@ -1858,36 +1894,36 @@
 github.com/containerd/containerd/vendor/k8s.io/client-go/rest/watch
 github.com/containerd/containerd/vendor/k8s.io/cri-api/pkg/apis/runtime/v1
 github.com/containerd/containerd/vendor/k8s.io/cri-api/pkg/apis/runtime/v1alpha2
+github.com/containerd/containerd/content/proxy
 github.com/containerd/containerd/snapshots/proxy
+github.com/containerd/containerd/services/containers
 github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/v1
+github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/versioning
 github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/v1alpha1
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/internalversion
-github.com/containerd/containerd/content/proxy
-github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/v1beta1
-github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer/versioning
-github.com/containerd/containerd/services/containers
-github.com/containerd/containerd/services/content/contentserver
 github.com/containerd/containerd/services/server
-github.com/containerd/containerd/services/diff
-github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/apis/audit
+github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/v1beta1
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/runtime/serializer
+github.com/containerd/containerd/services/content/contentserver
 github.com/containerd/containerd
-github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/install
+github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/apis/audit
 github.com/containerd/containerd/services/tasks
-github.com/containerd/containerd/services/events
-google.golang.org/grpc/health
-github.com/containerd/containerd/services/images
+github.com/containerd/containerd/vendor/k8s.io/client-go/pkg/apis/clientauthentication/install
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/util/httpstream/spdy
 github.com/containerd/containerd/vendor/k8s.io/apimachinery/pkg/apis/meta/internalversion/scheme
+github.com/containerd/containerd/services/diff
 github.com/containerd/containerd/vendor/k8s.io/client-go/plugin/pkg/client/auth/exec
+github.com/containerd/containerd/services/content
+github.com/containerd/containerd/services/events
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/apis/audit/v1
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/apis/audit/v1alpha1
+github.com/containerd/containerd/cmd/containerd/command
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/apis/audit/v1beta1
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/endpoints/request
-github.com/containerd/containerd/cmd/containerd/command
-github.com/containerd/containerd/services/content
-github.com/containerd/containerd/services/healthcheck
+google.golang.org/grpc/health
+github.com/containerd/containerd/services/images
 github.com/containerd/containerd/vendor/k8s.io/client-go/rest
+github.com/containerd/containerd/services/healthcheck
 github.com/containerd/containerd/services/leases
 github.com/containerd/containerd/services/namespaces
 github.com/containerd/containerd/services/snapshots
@@ -1896,12 +1932,12 @@
 github.com/containerd/containerd/vendor/k8s.io/client-go/transport/spdy
 github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/audit
 github.com/containerd/containerd/pkg/cri/store/image
-github.com/containerd/containerd/vendor/github.com/containerd/nri
 github.com/containerd/containerd/vendor/github.com/containerd/imgcrypt/images/encryption
+github.com/containerd/containerd/vendor/github.com/containerd/nri
 github.com/containerd/containerd/runtime/restart
 github.com/containerd/containerd/cmd/ctr/commands
-github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/endpoints/metrics
 github.com/containerd/containerd/runtime/restart/monitor
+github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/endpoints/metrics
 github.com/containerd/containerd/cmd/ctr/commands/tasks
 github.com/containerd/containerd/cmd/ctr/commands/content
 github.com/containerd/containerd/cmd/ctr/commands/events
@@ -1909,8 +1945,8 @@
 github.com/containerd/containerd/cmd/ctr/commands/leases
 github.com/containerd/containerd/cmd/ctr/commands/namespaces
 github.com/containerd/containerd/cmd/ctr/commands/oci
-github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/server/httplog
 github.com/containerd/containerd/cmd/ctr/commands/plugins
+github.com/containerd/containerd/vendor/k8s.io/apiserver/pkg/server/httplog
 github.com/containerd/containerd/cmd/ctr/commands/shim
 github.com/containerd/containerd/cmd/ctr/commands/snapshots
 github.com/containerd/containerd/cmd/ctr/commands/version
@@ -1921,8 +1957,8 @@
 github.com/containerd/containerd/cmd/ctr
 github.com/containerd/containerd/cmd/gen-manpages
 github.com/containerd/containerd/pkg/cri/io
-github.com/containerd/containerd/pkg/cri/store/sandbox
 github.com/containerd/containerd/pkg/cri/opts
+github.com/containerd/containerd/pkg/cri/store/sandbox
 github.com/containerd/containerd/pkg/cri/store/container
 github.com/containerd/containerd/pkg/cri/streaming/portforward
 github.com/containerd/containerd/vendor/k8s.io/client-go/tools/remotecommand
@@ -2004,11 +2040,11 @@
 === RUN   TestUnpack
 --- PASS: TestUnpack (0.01s)
 === RUN   TestBaseDiff
---- PASS: TestBaseDiff (0.03s)
+--- PASS: TestBaseDiff (0.04s)
 === RUN   TestRelativeSymlinks
---- PASS: TestRelativeSymlinks (0.02s)
+--- PASS: TestRelativeSymlinks (0.05s)
 === RUN   TestSymlinks
---- PASS: TestSymlinks (0.03s)
+--- PASS: TestSymlinks (0.00s)
 === RUN   TestTarWithXattr
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestTarWithXattr (0.00s)
@@ -2064,7 +2100,7 @@
     --- PASS: TestBreakouts/HardlinkSymlinkAbsolute (0.00s)
     --- PASS: TestBreakouts/SymlinkParentDirectory (0.00s)
     --- PASS: TestBreakouts/SymlinkEmptyFilename (0.00s)
-    --- PASS: TestBreakouts/SymlinkParentRelative (0.01s)
+    --- PASS: TestBreakouts/SymlinkParentRelative (0.00s)
     --- PASS: TestBreakouts/SymlinkSlashEnded (0.00s)
     --- PASS: TestBreakouts/SymlinkOverrideDirectory (0.00s)
     --- PASS: TestBreakouts/SymlinkOverrideDirectoryRelative (0.00s)
@@ -2078,7 +2114,7 @@
     --- PASS: TestBreakouts/WhiteoutSymlinkPath (0.00s)
     --- PASS: TestBreakouts/WhiteoutDirectoryName (0.00s)
     --- PASS: TestBreakouts/WhiteoutDeadSymlinkParent (0.00s)
-    --- PASS: TestBreakouts/WhiteoutRelativePath (0.00s)
+    --- PASS: TestBreakouts/WhiteoutRelativePath (0.01s)
     --- PASS: TestBreakouts/HardlinkSymlinkChmod (0.00s)
 === RUN   TestDiffApply
 === RUN   TestDiffApply/Basic
@@ -2089,19 +2125,19 @@
 === RUN   TestDiffApply/HardlinkUnmodified
 === RUN   TestDiffApply/HardlinkBeforeUnmodified
 === RUN   TestDiffApply/HardlinkBeforeModified
---- PASS: TestDiffApply (0.08s)
-    --- PASS: TestDiffApply/Basic (0.02s)
+--- PASS: TestDiffApply (0.07s)
+    --- PASS: TestDiffApply/Basic (0.03s)
     --- PASS: TestDiffApply/Deletion (0.00s)
     --- PASS: TestDiffApply/Update (0.01s)
     --- PASS: TestDiffApply/DirectoryPermission (0.00s)
-    --- PASS: TestDiffApply/ParentDirectoryPermission (0.01s)
+    --- PASS: TestDiffApply/ParentDirectoryPermission (0.00s)
     --- PASS: TestDiffApply/HardlinkUnmodified (0.02s)
     --- PASS: TestDiffApply/HardlinkBeforeUnmodified (0.00s)
-    --- PASS: TestDiffApply/HardlinkBeforeModified (0.00s)
+    --- PASS: TestDiffApply/HardlinkBeforeModified (0.01s)
 === RUN   TestApplyTar
 === RUN   TestApplyTar/DirectoryCreation
---- PASS: TestApplyTar (0.01s)
-    --- PASS: TestApplyTar/DirectoryCreation (0.01s)
+--- PASS: TestApplyTar (0.00s)
+    --- PASS: TestApplyTar/DirectoryCreation (0.00s)
 === RUN   TestDiffTar
 === RUN   TestDiffTar/EmptyDiff
 === RUN   TestDiffTar/ParentInclusion
@@ -2116,37 +2152,37 @@
     --- PASS: TestDiffTar/ParentInclusion (0.00s)
     --- PASS: TestDiffTar/HardlinkParentInclusion (0.00s)
     --- PASS: TestDiffTar/UpdateDirectoryPermission (0.00s)
-    --- PASS: TestDiffTar/HardlinkUpdatedParent (0.00s)
-    --- PASS: TestDiffTar/WhiteoutIncludesParents (0.01s)
+    --- PASS: TestDiffTar/HardlinkUpdatedParent (0.01s)
+    --- PASS: TestDiffTar/WhiteoutIncludesParents (0.00s)
     --- PASS: TestDiffTar/WhiteoutParentRemoval (0.00s)
     --- PASS: TestDiffTar/IgnoreSockets (0.00s)
 PASS
-ok  	github.com/containerd/containerd/archive	0.255s
+ok  	github.com/containerd/containerd/archive	0.303s
 === RUN   TestCompressDecompressGzip
     compression_test.go:71: compressed 1048576 bytes to 700369 bytes (66.79%)
---- PASS: TestCompressDecompressGzip (0.20s)
+--- PASS: TestCompressDecompressGzip (0.08s)
 === RUN   TestCompressDecompressPigz
     compression_test.go:108: pigz not installed
 --- SKIP: TestCompressDecompressPigz (0.00s)
 === RUN   TestCompressDecompressUncompressed
     compression_test.go:71: compressed 1048576 bytes to 1048576 bytes (100.00%)
---- PASS: TestCompressDecompressUncompressed (0.07s)
+--- PASS: TestCompressDecompressUncompressed (0.01s)
 === RUN   TestDetectPigz
 --- PASS: TestDetectPigz (0.00s)
 === RUN   TestCmdStream
---- PASS: TestCmdStream (0.01s)
+--- PASS: TestCmdStream (0.03s)
 === RUN   TestCmdStreamBad
---- PASS: TestCmdStreamBad (0.02s)
+--- PASS: TestCmdStreamBad (0.04s)
 === RUN   TestDetectCompressionZstd
 --- PASS: TestDetectCompressionZstd (0.00s)
 PASS
-ok  	github.com/containerd/containerd/archive/compression	0.343s
+ok  	github.com/containerd/containerd/archive/compression	0.195s
 ?   	github.com/containerd/containerd/archive/tarheader	[no test files]
 ?   	github.com/containerd/containerd/archive/tartest	[no test files]
 === RUN   TestNewFIFOSetInDir
 --- PASS: TestNewFIFOSetInDir (0.00s)
 === RUN   TestNewAttach
---- PASS: TestNewAttach (0.02s)
+--- PASS: TestNewAttach (0.00s)
 === RUN   TestBinaryIOArgs
 --- PASS: TestBinaryIOArgs (0.00s)
 === RUN   TestBinaryIOAbsolutePath
@@ -2164,7 +2200,7 @@
 === RUN   TestOpenFifosWithTerminal
 --- PASS: TestOpenFifosWithTerminal (0.00s)
 PASS
-ok  	github.com/containerd/containerd/cio	0.074s
+ok  	github.com/containerd/containerd/cio	0.048s
 ?   	github.com/containerd/containerd/cmd/containerd	[no test files]
 ?   	github.com/containerd/containerd/cmd/containerd/command	[no test files]
 ?   	github.com/containerd/containerd/cmd/containerd-shim	[no test files]
@@ -2209,7 +2245,7 @@
 === RUN   TestCopy/commit_already_exists
 === RUN   TestCopy/commit_fails_first_time_with_ErrReset
 === RUN   TestCopy/write_fails_more_than_maxReset_times_due_to_reset
-time="2025-03-15T19:25:28-12:00" level=error msg="failed to copy after 5 retries" digest="sha256:4fede9da282a298265b6ead5bf7eb6d4acac097b9271d9fa09d659968ce6ddb6"
+time="2026-04-19T03:52:56+14:00" level=error msg="failed to copy after 5 retries" digest="sha256:4fede9da282a298265b6ead5bf7eb6d4acac097b9271d9fa09d659968ce6ddb6"
 --- PASS: TestCopy (0.00s)
     --- PASS: TestCopy/copy_no_offset (0.00s)
     --- PASS: TestCopy/copy_with_offset_from_seeker (0.00s)
@@ -2218,21 +2254,21 @@
     --- PASS: TestCopy/commit_fails_first_time_with_ErrReset (0.00s)
     --- PASS: TestCopy/write_fails_more_than_maxReset_times_due_to_reset (0.00s)
 PASS
-ok  	github.com/containerd/containerd/content	0.062s
+ok  	github.com/containerd/containerd/content	0.054s
 === RUN   TestTryLock
 --- PASS: TestTryLock (0.00s)
 === RUN   TestContent
 === RUN   TestContent/Writer
 === RUN   TestContent/UpdateStatus
-    testsuite.go:531: compare update 2025-03-15 19:25:17.851687021 -1200 -12 m=+0.003811625 against (2025-03-15 19:25:17.851663501 -1200 -12 m=+0.003788145, 2025-03-15 19:25:17.851744582 -1200 -12 m=+0.003869186)
-    testsuite.go:541: compare update 2025-03-15 19:25:17.851768662 -1200 -12 m=+0.003893306 against (2025-03-15 19:25:17.851766662 -1200 -12 m=+0.003891306, 2025-03-15 19:25:17.851768742 -1200 -12 m=+0.003893386)
-    testsuite.go:551: compare update 2025-03-15 19:25:17.851783142 -1200 -12 m=+0.003907786 against (2025-03-15 19:25:17.851779662 -1200 -12 m=+0.003904306, 2025-03-15 19:25:17.851783222 -1200 -12 m=+0.003907866)
-    testsuite.go:560: compare update 2025-03-15 19:25:17.851794142 -1200 -12 m=+0.003918786 against (2025-03-15 19:25:17.851793382 -1200 -12 m=+0.003918026, 2025-03-15 19:25:17.851794222 -1200 -12 m=+0.003918866)
+    testsuite.go:531: compare update 2026-04-19 03:52:52.101889534 +1400 +14 m=+0.004314001 against (2026-04-19 03:52:52.101854014 +1400 +14 m=+0.004278481, 2026-04-19 03:52:52.101951894 +1400 +14 m=+0.004376361)
+    testsuite.go:541: compare update 2026-04-19 03:52:52.101979854 +1400 +14 m=+0.004404281 against (2026-04-19 03:52:52.101977734 +1400 +14 m=+0.004402201, 2026-04-19 03:52:52.101979934 +1400 +14 m=+0.004404361)
+    testsuite.go:551: compare update 2026-04-19 03:52:52.101994134 +1400 +14 m=+0.004418601 against (2026-04-19 03:52:52.101990934 +1400 +14 m=+0.004415401, 2026-04-19 03:52:52.101994214 +1400 +14 m=+0.004418681)
+    testsuite.go:560: compare update 2026-04-19 03:52:52.102005214 +1400 +14 m=+0.004429681 against (2026-04-19 03:52:52.102004454 +1400 +14 m=+0.004428921, 2026-04-19 03:52:52.102005294 +1400 +14 m=+0.004429761)
 === RUN   TestContent/CommitExists
 === RUN   TestContent/Resume
-    testsuite.go:268: compare update 2025-03-15 19:25:17.852458146 -1200 -12 m=+0.004582790 against (2025-03-15 19:25:17.852454226 -1200 -12 m=+0.004578870, 2025-03-15 19:25:17.852458266 -1200 -12 m=+0.004582870)
-    testsuite.go:277: compare update 2025-03-15 19:25:17.852458146 -1200 -12 against (2025-03-15 19:25:17.852454226 -1200 -12 m=+0.004578870, 2025-03-15 19:25:17.852458266 -1200 -12 m=+0.004582870)
-    testsuite.go:285: compare update 2025-03-15 19:25:17.852609307 -1200 -12 m=+0.004733951 against (2025-03-15 19:25:17.852607547 -1200 -12 m=+0.004732191, 2025-03-15 19:25:17.852609387 -1200 -12 m=+0.004734031)
+    testsuite.go:268: compare update 2026-04-19 03:52:52.102676254 +1400 +14 m=+0.005100721 against (2026-04-19 03:52:52.102671654 +1400 +14 m=+0.005096121, 2026-04-19 03:52:52.102676334 +1400 +14 m=+0.005100801)
+    testsuite.go:277: compare update 2026-04-19 03:52:52.102676254 +1400 +14 against (2026-04-19 03:52:52.102671654 +1400 +14 m=+0.005096121, 2026-04-19 03:52:52.102676334 +1400 +14 m=+0.005100801)
+    testsuite.go:285: compare update 2026-04-19 03:52:52.102927334 +1400 +14 m=+0.005351801 against (2026-04-19 03:52:52.102925414 +1400 +14 m=+0.005349841, 2026-04-19 03:52:52.102927414 +1400 +14 m=+0.005351881)
 === RUN   TestContent/ResumeTruncate
 === RUN   TestContent/ResumeDiscard
 === RUN   TestContent/ResumeCopy
@@ -2241,29 +2277,29 @@
 === RUN   TestContent/SmallBlob
 === RUN   TestContent/Labels
 === RUN   TestContent/CommitErrorState
---- PASS: TestContent (4.59s)
+--- PASS: TestContent (4.63s)
     --- PASS: TestContent/Writer (0.00s)
     --- PASS: TestContent/UpdateStatus (0.00s)
     --- PASS: TestContent/CommitExists (0.00s)
     --- PASS: TestContent/Resume (0.00s)
     --- PASS: TestContent/ResumeTruncate (0.01s)
-    --- PASS: TestContent/ResumeDiscard (0.01s)
-    --- PASS: TestContent/ResumeCopy (0.01s)
-    --- PASS: TestContent/ResumeCopySeeker (0.01s)
-    --- PASS: TestContent/ResumeCopyReaderAt (0.01s)
+    --- PASS: TestContent/ResumeDiscard (0.03s)
+    --- PASS: TestContent/ResumeCopy (0.02s)
+    --- PASS: TestContent/ResumeCopySeeker (0.02s)
+    --- PASS: TestContent/ResumeCopyReaderAt (0.02s)
     --- PASS: TestContent/SmallBlob (0.00s)
     --- PASS: TestContent/Labels (0.00s)
-    --- PASS: TestContent/CommitErrorState (4.51s)
+    --- PASS: TestContent/CommitErrorState (4.53s)
 === RUN   TestContentWriter
---- PASS: TestContentWriter (0.43s)
+--- PASS: TestContentWriter (0.41s)
 === RUN   TestWalkBlobs
---- PASS: TestWalkBlobs (0.02s)
+--- PASS: TestWalkBlobs (0.04s)
 === RUN   TestWriterTruncateRecoversFromIncompleteWrite
---- PASS: TestWriterTruncateRecoversFromIncompleteWrite (0.01s)
+--- PASS: TestWriterTruncateRecoversFromIncompleteWrite (0.00s)
 === RUN   TestWriteReadEmptyFileTimestamp
 --- PASS: TestWriteReadEmptyFileTimestamp (0.00s)
 PASS
-ok  	github.com/containerd/containerd/content/local	5.121s
+ok  	github.com/containerd/containerd/content/local	5.152s
 ?   	github.com/containerd/containerd/content/proxy	[no test files]
 ?   	github.com/containerd/containerd/content/testsuite	[no test files]
 === RUN   TestParseVersion
@@ -2274,7 +2310,7 @@
 === RUN   TestCleanProfileName
 --- PASS: TestCleanProfileName (0.00s)
 PASS
-ok  	github.com/containerd/containerd/contrib/apparmor	0.061s
+ok  	github.com/containerd/containerd/contrib/apparmor	0.083s
 ?   	github.com/containerd/containerd/contrib/nvidia	[no test files]
 ?   	github.com/containerd/containerd/contrib/seccomp	[no test files]
 === RUN   TestGetKernelVersion
@@ -2336,7 +2372,7 @@
     --- PASS: TestGreaterEqualThan/kernel_plus_one:_7.1 (0.00s)
     --- PASS: TestGreaterEqualThan/major_plus_one:_6.2 (0.00s)
 PASS
-ok  	github.com/containerd/containerd/contrib/seccomp/kernelversion	0.019s
+ok  	github.com/containerd/containerd/contrib/seccomp/kernelversion	0.034s
 ?   	github.com/containerd/containerd/contrib/snapshotservice	[no test files]
 ?   	github.com/containerd/containerd/defaults	[no test files]
 ?   	github.com/containerd/containerd/diff	[no test files]
@@ -2345,7 +2381,7 @@
 === RUN   TestGetAufsPath
 --- PASS: TestGetAufsPath (0.00s)
 PASS
-ok  	github.com/containerd/containerd/diff/apply	0.059s
+ok  	github.com/containerd/containerd/diff/apply	0.055s
 ?   	github.com/containerd/containerd/diff/walking	[no test files]
 ?   	github.com/containerd/containerd/diff/walking/plugin	[no test files]
 === RUN   TestGRPCRoundTrip
@@ -2396,7 +2432,7 @@
     --- PASS: TestGRPCRoundTrip/context_deadline_exceeded (0.00s)
     --- PASS: TestGRPCRoundTrip/this_is_a_test_deadline_exceeded:_context_deadline_exceeded (0.00s)
 PASS
-ok  	github.com/containerd/containerd/errdefs	0.032s
+ok  	github.com/containerd/containerd/errdefs	0.061s
 ?   	github.com/containerd/containerd/events	[no test files]
 === RUN   TestExchangeBasic
     exchange_test.go:42: subscribe
@@ -2427,7 +2463,7 @@
     --- PASS: TestExchangeValidateTopic//test/test (0.00s)
     --- PASS: TestExchangeValidateTopic/test (0.00s)
 PASS
-ok  	github.com/containerd/containerd/events/exchange	0.071s
+ok  	github.com/containerd/containerd/events/exchange	0.072s
 ?   	github.com/containerd/containerd/events/plugin	[no test files]
 === RUN   TestFilters
 === RUN   TestFilters/Empty
@@ -2532,13 +2568,13 @@
     --- PASS: TestScanner/IllegalEscapeSequence (0.00s)
     --- PASS: TestScanner/IllegalNumericEscapeSequence (0.00s)
 PASS
-ok  	github.com/containerd/containerd/filters	0.043s
+ok  	github.com/containerd/containerd/filters	0.036s
 === RUN   TestTricolorBasic
 --- PASS: TestTricolorBasic (0.00s)
 === RUN   TestConcurrentBasic
 --- PASS: TestConcurrentBasic (0.00s)
 PASS
-ok  	github.com/containerd/containerd/gc	0.030s
+ok  	github.com/containerd/containerd/gc	0.034s
 === RUN   TestPauseThreshold
 --- PASS: TestPauseThreshold (0.02s)
 === RUN   TestDeletionThreshold
@@ -2548,7 +2584,7 @@
 === RUN   TestStartupDelay
 --- PASS: TestStartupDelay (0.03s)
 PASS
-ok  	github.com/containerd/containerd/gc/scheduler	0.126s
+ok  	github.com/containerd/containerd/gc/scheduler	0.130s
 === RUN   TestValidIdentifiers
 === RUN   TestValidIdentifiers/default
 === RUN   TestValidIdentifiers/Default
@@ -2602,7 +2638,7 @@
     --- PASS: TestInvalidIdentifiers/default--default (0.00s)
     --- PASS: TestInvalidIdentifiers/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (0.00s)
 PASS
-ok  	github.com/containerd/containerd/identifiers	0.042s
+ok  	github.com/containerd/containerd/identifiers	0.029s
 === RUN   TestValidateMediaType
 === RUN   TestValidateMediaType/manifest-application/vnd.docker.distribution.manifest.v2+json
 === RUN   TestValidateMediaType/index-application/vnd.docker.distribution.manifest.v2+json
@@ -2656,7 +2692,7 @@
     --- PASS: TestValidateMediaType/invalid-application/vnd.oci.image.index.v1+json-application/vnd.oci.image.manifest.v1+json (0.00s)
     --- PASS: TestValidateMediaType/schema1 (0.00s)
 PASS
-ok  	github.com/containerd/containerd/images	0.048s
+ok  	github.com/containerd/containerd/images	0.051s
 ?   	github.com/containerd/containerd/images/archive	[no test files]
 ?   	github.com/containerd/containerd/images/converter	[no test files]
 ?   	github.com/containerd/containerd/images/converter/uncompress	[no test files]
@@ -2665,7 +2701,7 @@
 === RUN   TestInvalidLabels
 --- PASS: TestInvalidLabels (0.00s)
 PASS
-ok  	github.com/containerd/containerd/labels	0.067s
+ok  	github.com/containerd/containerd/labels	0.032s
 === RUN   TestWithLabels
 === RUN   TestWithLabels/AddLabelsToEmptyMap
 === RUN   TestWithLabels/AddLabelsToNonEmptyMap
@@ -2673,12 +2709,12 @@
     --- PASS: TestWithLabels/AddLabelsToEmptyMap (0.00s)
     --- PASS: TestWithLabels/AddLabelsToNonEmptyMap (0.00s)
 PASS
-ok  	github.com/containerd/containerd/leases	0.048s
+ok  	github.com/containerd/containerd/leases	0.065s
 ?   	github.com/containerd/containerd/leases/proxy	[no test files]
 === RUN   TestLoggerContext
 --- PASS: TestLoggerContext (0.00s)
 PASS
-ok  	github.com/containerd/containerd/log	0.057s
+ok  	github.com/containerd/containerd/log	0.028s
 ?   	github.com/containerd/containerd/log/logtest	[no test files]
 === RUN   TestContainersList
 === RUN   TestContainersList/FullSet
@@ -2688,7 +2724,7 @@
 === RUN   TestContainersList/ByID
 === RUN   TestContainersList/ByIDLabelEven
 === RUN   TestContainersList/ByRuntime
---- PASS: TestContainersList (0.00s)
+--- PASS: TestContainersList (0.01s)
     --- PASS: TestContainersList/FullSet (0.00s)
     --- PASS: TestContainersList/FullSetFiltered (0.00s)
     --- PASS: TestContainersList/Even (0.00s)
@@ -2712,7 +2748,7 @@
 === RUN   TestContainersCreateUpdateDelete/UpdateExtensionsNotInFieldpath
 === RUN   TestContainersCreateUpdateDelete/UpdateExtensionsFieldPath
 === RUN   TestContainersCreateUpdateDelete/UpdateExtensionsFieldPathIsolated
---- PASS: TestContainersCreateUpdateDelete (0.03s)
+--- PASS: TestContainersCreateUpdateDelete (0.00s)
     --- PASS: TestContainersCreateUpdateDelete/UpdateIDFail (0.00s)
     --- PASS: TestContainersCreateUpdateDelete/UpdateRuntimeFail (0.00s)
     --- PASS: TestContainersCreateUpdateDelete/UpdateRuntimeClearFail (0.00s)
@@ -2731,15 +2767,15 @@
 === RUN   TestContent
 === RUN   TestContent/Writer
 === RUN   TestContent/UpdateStatus
-    testsuite.go:531: compare update 2025-03-15 19:25:32.988630337 -1200 -12 m=+0.062804122 against (2025-03-15 19:25:32.988598216 -1200 -12 m=+0.062772041, 2025-03-15 19:25:32.988755697 -1200 -12 m=+0.062929522)
-    testsuite.go:541: compare update 2025-03-15 19:25:32.988883498 -1200 -12 m=+0.063057323 against (2025-03-15 19:25:32.988880698 -1200 -12 m=+0.063054483, 2025-03-15 19:25:32.988883618 -1200 -12 m=+0.063057403)
-    testsuite.go:551: compare update 2025-03-15 19:25:32.988896458 -1200 -12 m=+0.063070283 against (2025-03-15 19:25:32.988894898 -1200 -12 m=+0.063068723, 2025-03-15 19:25:32.988896538 -1200 -12 m=+0.063070363)
-    testsuite.go:560: compare update 2025-03-15 19:25:32.988907418 -1200 -12 m=+0.063081203 against (2025-03-15 19:25:32.988906658 -1200 -12 m=+0.063080483, 2025-03-15 19:25:32.988907498 -1200 -12 m=+0.063081283)
+    testsuite.go:531: compare update 2026-04-19 03:53:01.683228774 +1400 +14 m=+0.048838561 against (2026-04-19 03:53:01.683195574 +1400 +14 m=+0.048805361, 2026-04-19 03:53:01.683388894 +1400 +14 m=+0.048998681)
+    testsuite.go:541: compare update 2026-04-19 03:53:01.683513774 +1400 +14 m=+0.049123561 against (2026-04-19 03:53:01.683510894 +1400 +14 m=+0.049120721, 2026-04-19 03:53:01.683513854 +1400 +14 m=+0.049123641)
+    testsuite.go:551: compare update 2026-04-19 03:53:01.683526734 +1400 +14 m=+0.049136521 against (2026-04-19 03:53:01.683525254 +1400 +14 m=+0.049135001, 2026-04-19 03:53:01.683526814 +1400 +14 m=+0.049136561)
+    testsuite.go:560: compare update 2026-04-19 03:53:01.683537814 +1400 +14 m=+0.049147601 against (2026-04-19 03:53:01.683537054 +1400 +14 m=+0.049146841, 2026-04-19 03:53:01.683537894 +1400 +14 m=+0.049147681)
 === RUN   TestContent/CommitExists
 === RUN   TestContent/Resume
-    testsuite.go:268: compare update 2025-03-15 19:25:33.017662242 -1200 -12 m=+0.091836067 against (2025-03-15 19:25:33.017655162 -1200 -12 m=+0.091828987, 2025-03-15 19:25:33.017662322 -1200 -12 m=+0.091836147)
-    testsuite.go:277: compare update 2025-03-15 19:25:33.017662242 -1200 -12 against (2025-03-15 19:25:33.017655162 -1200 -12 m=+0.091828987, 2025-03-15 19:25:33.017662322 -1200 -12 m=+0.091836147)
-    testsuite.go:285: compare update 2025-03-15 19:25:33.018011324 -1200 -12 m=+0.092185109 against (2025-03-15 19:25:33.018009084 -1200 -12 m=+0.092182909, 2025-03-15 19:25:33.018011404 -1200 -12 m=+0.092185229)
+    testsuite.go:268: compare update 2026-04-19 03:53:01.684960414 +1400 +14 m=+0.050570201 against (2026-04-19 03:53:01.684953934 +1400 +14 m=+0.050563721, 2026-04-19 03:53:01.684960534 +1400 +14 m=+0.050570321)
+    testsuite.go:277: compare update 2026-04-19 03:53:01.684960414 +1400 +14 against (2026-04-19 03:53:01.684953934 +1400 +14 m=+0.050563721, 2026-04-19 03:53:01.684960534 +1400 +14 m=+0.050570321)
+    testsuite.go:285: compare update 2026-04-19 03:53:01.697523534 +1400 +14 m=+0.063133321 against (2026-04-19 03:53:01.697518894 +1400 +14 m=+0.063128681, 2026-04-19 03:53:01.697523654 +1400 +14 m=+0.063133441)
 === RUN   TestContent/ResumeTruncate
 === RUN   TestContent/ResumeDiscard
 === RUN   TestContent/ResumeCopy
@@ -2749,26 +2785,26 @@
 === RUN   TestContent/Labels
 === RUN   TestContent/CommitErrorState
 === RUN   TestContent/CrossNamespaceAppend
-    testsuite.go:899: compare update 2025-03-15 19:25:37.812864884 -1200 -12 m=+4.887038669 against (2025-03-15 19:25:37.812460921 -1200 -12 m=+4.886634746, 2025-03-15 19:25:37.812865404 -1200 -12 m=+4.887039229)
+    testsuite.go:899: compare update 2026-04-19 03:53:06.322836694 +1400 +14 m=+4.688446481 against (2026-04-19 03:53:06.322214974 +1400 +14 m=+4.687824801, 2026-04-19 03:53:06.322837574 +1400 +14 m=+4.688447361)
 === RUN   TestContent/CrossNamespaceShare
-    testsuite.go:840: compare update 2025-03-15 19:25:37.817963757 -1200 -12 m=+4.892137542 against (2025-03-15 19:25:37.817432593 -1200 -12 m=+4.891606418, 2025-03-15 19:25:37.817964757 -1200 -12 m=+4.892138582)
+    testsuite.go:840: compare update 2026-04-19 03:53:06.324658454 +1400 +14 m=+4.690268241 against (2026-04-19 03:53:06.324105574 +1400 +14 m=+4.689715401, 2026-04-19 03:53:06.324659214 +1400 +14 m=+4.690269001)
 === RUN   TestContent/CrossNamespaceIsolate
---- PASS: TestContent (4.83s)
+--- PASS: TestContent (4.66s)
     --- PASS: TestContent/Writer (0.00s)
-    --- PASS: TestContent/UpdateStatus (0.02s)
-    --- PASS: TestContent/CommitExists (0.01s)
-    --- PASS: TestContent/Resume (0.00s)
-    --- PASS: TestContent/ResumeTruncate (0.10s)
-    --- PASS: TestContent/ResumeDiscard (0.03s)
-    --- PASS: TestContent/ResumeCopy (0.04s)
-    --- PASS: TestContent/ResumeCopySeeker (0.05s)
-    --- PASS: TestContent/ResumeCopyReaderAt (0.04s)
+    --- PASS: TestContent/UpdateStatus (0.00s)
+    --- PASS: TestContent/CommitExists (0.00s)
+    --- PASS: TestContent/Resume (0.04s)
+    --- PASS: TestContent/ResumeTruncate (0.02s)
+    --- PASS: TestContent/ResumeDiscard (0.02s)
+    --- PASS: TestContent/ResumeCopy (0.02s)
+    --- PASS: TestContent/ResumeCopySeeker (0.02s)
+    --- PASS: TestContent/ResumeCopyReaderAt (0.02s)
     --- PASS: TestContent/SmallBlob (0.00s)
     --- PASS: TestContent/Labels (0.00s)
-    --- PASS: TestContent/CommitErrorState (4.52s)
+    --- PASS: TestContent/CommitErrorState (4.49s)
     --- PASS: TestContent/CrossNamespaceAppend (0.00s)
     --- PASS: TestContent/CrossNamespaceShare (0.00s)
-    --- PASS: TestContent/CrossNamespaceIsolate (0.00s)
+    --- PASS: TestContent/CrossNamespaceIsolate (0.01s)
 === RUN   TestContentLeased
 --- PASS: TestContentLeased (0.00s)
 === RUN   TestIngestLeased
@@ -2779,25 +2815,25 @@
 === RUN   TestMigrations/ChildrenKey
 === RUN   TestMigrations/IngestUpdate
 === RUN   TestMigrations/NoOp
---- PASS: TestMigrations (0.00s)
-    --- PASS: TestMigrations/ChildrenKey (0.00s)
+--- PASS: TestMigrations (0.01s)
+    --- PASS: TestMigrations/ChildrenKey (0.01s)
     --- PASS: TestMigrations/IngestUpdate (0.00s)
     --- PASS: TestMigrations/NoOp (0.00s)
 === RUN   TestMetadataCollector
-    log_hook.go:40: time="2025-03-15T19:25:37.846174456-12:00" level=debug msg="remove snapshot" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:446" key=5 snapshotter=native
-    log_hook.go:40: time="2025-03-15T19:25:37.846449658-12:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:27d8f867029a8a5cff1c7710e2ec68606cbff886b0b3b7d815b084c997e434aa"
-    log_hook.go:40: time="2025-03-15T19:25:37.846486258-12:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:2e98052dd231a0217464daf09e4a203611b3490845864bf7ea93254c93ca7372"
-    log_hook.go:40: time="2025-03-15T19:25:37.846520619-12:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:352adfeb0dc6e28699635c5911cf33e2e0a86aedf85a5a99bba97749000ae1c7"
-    log_hook.go:40: time="2025-03-15T19:25:37.846559499-12:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:daec4241907ca188cedc84c1efc664ef5a0989820fe22de189c6e219603932d5"
-    log_hook.go:40: time="2025-03-15T19:25:37.846707940-12:00" level=debug msg="schedule snapshotter cleanup" func="metadata.(*DB).GarbageCollect" file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/db.go:331" snapshotter=native
-    log_hook.go:40: time="2025-03-15T19:25:37.846739700-12:00" level=debug msg="schedule content cleanup" func="metadata.(*DB).GarbageCollect" file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/db.go:348"
---- PASS: TestMetadataCollector (0.03s)
+    log_hook.go:40: time="2026-04-19T03:53:06.351899414+14:00" level=debug msg="remove snapshot" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:446" key=5 snapshotter=native
+    log_hook.go:40: time="2026-04-19T03:53:06.352230374+14:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:27d8f867029a8a5cff1c7710e2ec68606cbff886b0b3b7d815b084c997e434aa"
+    log_hook.go:40: time="2026-04-19T03:53:06.352288494+14:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:2e98052dd231a0217464daf09e4a203611b3490845864bf7ea93254c93ca7372"
+    log_hook.go:40: time="2026-04-19T03:53:06.352325734+14:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:352adfeb0dc6e28699635c5911cf33e2e0a86aedf85a5a99bba97749000ae1c7"
+    log_hook.go:40: time="2026-04-19T03:53:06.352363854+14:00" level=debug msg="remove content" func=metadata.remove file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/gc.go:434" key="sha256:daec4241907ca188cedc84c1efc664ef5a0989820fe22de189c6e219603932d5"
+    log_hook.go:40: time="2026-04-19T03:53:06.352541454+14:00" level=debug msg="schedule snapshotter cleanup" func="metadata.(*DB).GarbageCollect" file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/db.go:331" snapshotter=native
+    log_hook.go:40: time="2026-04-19T03:53:06.352582694+14:00" level=debug msg="schedule content cleanup" func="metadata.(*DB).GarbageCollect" file="/build/reproducible-path/containerd-1.6.20~ds1/_build/src/github.com/containerd/containerd/metadata/db.go:348"
+--- PASS: TestMetadataCollector (0.01s)
 === RUN   TestResourceMax
 --- PASS: TestResourceMax (0.00s)
 === RUN   TestGCRoots
 --- PASS: TestGCRoots (0.00s)
 === RUN   TestGCRemove
---- PASS: TestGCRemove (0.02s)
+--- PASS: TestGCRemove (0.00s)
 === RUN   TestGCRefs
 --- PASS: TestGCRefs (0.00s)
 === RUN   TestImagesList
@@ -2830,12 +2866,12 @@
 === RUN   TestImagesCreateUpdateDelete/EmptyMediaType
 === RUN   TestImagesCreateUpdateDelete/EmptySizeOnCreate#01
 === RUN   TestImagesCreateUpdateDelete/TryUpdateNameFail
---- PASS: TestImagesCreateUpdateDelete (0.01s)
+--- PASS: TestImagesCreateUpdateDelete (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/Touch (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/NoTarget (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/ReplaceLabels (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/ReplaceLabelsFieldPath (0.00s)
-    --- PASS: TestImagesCreateUpdateDelete/ReplaceLabelsAnnotationsFieldPath (0.01s)
+    --- PASS: TestImagesCreateUpdateDelete/ReplaceLabelsAnnotationsFieldPath (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/ReplaceLabel (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/ReplaceAnnotation (0.00s)
     --- PASS: TestImagesCreateUpdateDelete/ReplaceTarget (0.00s)
@@ -2880,13 +2916,13 @@
 === RUN   TestFilterInheritedLabels
 --- PASS: TestFilterInheritedLabels (0.00s)
 PASS
-ok  	github.com/containerd/containerd/metadata	5.023s
+ok  	github.com/containerd/containerd/metadata	4.779s
 ?   	github.com/containerd/containerd/metadata/boltutil	[no test files]
 ?   	github.com/containerd/containerd/metrics	[no test files]
 === RUN   TestRegressionIssue6772
---- PASS: TestRegressionIssue6772 (0.05s)
+--- PASS: TestRegressionIssue6772 (0.03s)
 PASS
-ok  	github.com/containerd/containerd/metrics/cgroups	0.148s
+ok  	github.com/containerd/containerd/metrics/cgroups	0.115s
 ?   	github.com/containerd/containerd/metrics/cgroups/common	[no test files]
 ?   	github.com/containerd/containerd/metrics/cgroups/v1	[no test files]
 ?   	github.com/containerd/containerd/metrics/cgroups/v2	[no test files]
@@ -2902,8 +2938,8 @@
     helpers_unix.go:41: skipping test that requires root
 --- SKIP: TestLookupWithXFS (0.00s)
 === RUN   TestLookupWithOverlay
-    lookup_linux_test.go:102: could not mount overlay: exit status 32 (out: "mount: /tmp/TestLookupWithOverlay192633874/004: must be superuser to use mount.\n       dmesg(1) may have more information after failed mount system call.\n")
---- SKIP: TestLookupWithOverlay (0.01s)
+    lookup_linux_test.go:102: could not mount overlay: exit status 32 (out: "mount: /tmp/TestLookupWithOverlay2287992686/004: must be superuser to use mount.\n       dmesg(1) may have more information after failed mount system call.\n")
+--- SKIP: TestLookupWithOverlay (0.02s)
 === RUN   TestNonExistingLoop
     helpers_unix.go:41: skipping test that requires root
 --- SKIP: TestNonExistingLoop (0.00s)
@@ -2926,7 +2962,7 @@
 === RUN   TestReadonlyMounts
 --- PASS: TestReadonlyMounts (0.00s)
 PASS
-ok  	github.com/containerd/containerd/mount	0.044s
+ok  	github.com/containerd/containerd/mount	0.075s
 === RUN   TestContext
 --- PASS: TestContext (0.00s)
 === RUN   TestNamespaceFromEnv
@@ -2936,7 +2972,7 @@
 === RUN   TestTTRPCNamespaceHeader
 --- PASS: TestTTRPCNamespaceHeader (0.00s)
 PASS
-ok  	github.com/containerd/containerd/namespaces	0.033s
+ok  	github.com/containerd/containerd/namespaces	0.058s
 === RUN   TestWithUserID
 === PAUSE TestWithUserID
 === RUN   TestWithUsername
@@ -3039,65 +3075,36 @@
 === CONT  TestGenerateSpec
 --- PASS: TestGenerateSpec (0.00s)
 === CONT  TestWithImageConfigNoEnv
-=== CONT  TestWithProcessCwd
---- PASS: TestWithProcessCwd (0.00s)
+--- PASS: TestWithImageConfigNoEnv (0.00s)
 === CONT  TestWithoutMounts
 --- PASS: TestWithoutMounts (0.00s)
 === CONT  TestDevShmSize
 --- PASS: TestDevShmSize (0.00s)
 === CONT  TestWithImageConfigArgs
+--- PASS: TestWithImageConfigArgs (0.00s)
 === CONT  TestWithUserNamespace
 --- PASS: TestWithUserNamespace (0.00s)
 === CONT  TestWithTTYSize
 --- PASS: TestWithTTYSize (0.00s)
 === CONT  TestWithSpecFromFile
+--- PASS: TestWithSpecFromFile (0.00s)
 === CONT  TestWithDefaultSpec
 --- PASS: TestWithDefaultSpec (0.00s)
 === CONT  TestWithMounts
 --- PASS: TestWithMounts (0.00s)
 === CONT  TestWithEnv
 --- PASS: TestWithEnv (0.00s)
-=== CONT  TestAddCaps
---- PASS: TestAddCaps (0.00s)
+=== CONT  TestWithProcessCwd
+--- PASS: TestWithProcessCwd (0.00s)
 === CONT  TestWithDefaultPathEnv
 --- PASS: TestWithDefaultPathEnv (0.00s)
 === CONT  TestWithDefaultSpecForPlatform
---- PASS: TestWithImageConfigNoEnv (0.00s)
 --- PASS: TestWithDefaultSpecForPlatform (0.00s)
 === CONT  TestReplaceOrAppendEnvValues
 --- PASS: TestReplaceOrAppendEnvValues (0.00s)
 === CONT  TestWithAppendAdditionalGroups
---- PASS: TestWithImageConfigArgs (0.00s)
-=== CONT  TestWithAdditionalGIDs
 === RUN   TestWithAppendAdditionalGroups/no_additional_gids
 === PAUSE TestWithAppendAdditionalGroups/no_additional_gids
-=== CONT  TestWithUsername
-=== RUN   TestWithUsername/root
-=== PAUSE TestWithUsername/root
-=== RUN   TestWithUsername/guest
-=== PAUSE TestWithUsername/guest
-=== RUN   TestWithUsername/1000
-=== PAUSE TestWithUsername/1000
-=== RUN   TestWithUsername/unknown
-=== PAUSE TestWithUsername/unknown
-=== CONT  TestWithUsername/root
-=== CONT  TestWithUserID/user_1000
-=== CONT  TestWithUserID/user_405
---- PASS: TestWithUserID (0.00s)
-    --- PASS: TestWithUserID/user_0 (0.00s)
-    --- PASS: TestWithUserID/user_1000 (0.00s)
-    --- PASS: TestWithUserID/user_405 (0.00s)
---- PASS: TestWithSpecFromFile (0.00s)
-=== CONT  TestWithUsername/unknown
-=== CONT  TestWithUsername/1000
-=== CONT  TestWithUsername/guest
---- PASS: TestWithUsername (0.00s)
-    --- PASS: TestWithUsername/root (0.00s)
-    --- PASS: TestWithUsername/unknown (0.00s)
-    --- PASS: TestWithUsername/1000 (0.00s)
-    --- PASS: TestWithUsername/guest (0.00s)
-=== CONT  TestDropCaps
---- PASS: TestDropCaps (0.00s)
 === RUN   TestWithAppendAdditionalGroups/no_additional_gids,_append_root_gid
 === PAUSE TestWithAppendAdditionalGroups/no_additional_gids,_append_root_gid
 === RUN   TestWithAppendAdditionalGroups/no_additional_gids,_append_bin_and_daemon_gids
@@ -3109,46 +3116,75 @@
 === RUN   TestWithAppendAdditionalGroups/unknown_group
 === PAUSE TestWithAppendAdditionalGroups/unknown_group
 === CONT  TestWithAppendAdditionalGroups/no_additional_gids
-=== RUN   TestWithAdditionalGIDs/root
-=== PAUSE TestWithAdditionalGIDs/root
-=== RUN   TestWithAdditionalGIDs/1000
-=== PAUSE TestWithAdditionalGIDs/1000
-=== RUN   TestWithAdditionalGIDs/bin
-=== PAUSE TestWithAdditionalGIDs/bin
-=== RUN   TestWithAdditionalGIDs/bin:root
-=== PAUSE TestWithAdditionalGIDs/bin:root
-=== RUN   TestWithAdditionalGIDs/daemon
-=== PAUSE TestWithAdditionalGIDs/daemon
-=== CONT  TestWithAdditionalGIDs/root
+=== CONT  TestDropCaps
+--- PASS: TestDropCaps (0.00s)
 === CONT  TestWithAppendAdditionalGroups/unknown_group
 === CONT  TestWithAppendAdditionalGroups/append_group_id
 === CONT  TestWithAppendAdditionalGroups/has_root_additional_gids,_append_bin_and_daemon_gids
 === CONT  TestWithAppendAdditionalGroups/no_additional_gids,_append_bin_and_daemon_gids
 === CONT  TestWithAppendAdditionalGroups/no_additional_gids,_append_root_gid
---- PASS: TestWithAppendAdditionalGroups (0.01s)
+=== CONT  TestWithUserID/user_405
+--- PASS: TestWithAppendAdditionalGroups (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/no_additional_gids (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/unknown_group (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/append_group_id (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/has_root_additional_gids,_append_bin_and_daemon_gids (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/no_additional_gids,_append_bin_and_daemon_gids (0.00s)
     --- PASS: TestWithAppendAdditionalGroups/no_additional_gids,_append_root_gid (0.00s)
+=== CONT  TestWithAdditionalGIDs
+=== CONT  TestWithUsername
+=== CONT  TestAddCaps
+--- PASS: TestAddCaps (0.00s)
+=== CONT  TestWithUserID/user_1000
+--- PASS: TestWithUserID (0.00s)
+    --- PASS: TestWithUserID/user_0 (0.00s)
+    --- PASS: TestWithUserID/user_405 (0.00s)
+    --- PASS: TestWithUserID/user_1000 (0.00s)
+=== RUN   TestWithUsername/root
+=== PAUSE TestWithUsername/root
+=== RUN   TestWithUsername/guest
+=== PAUSE TestWithUsername/guest
+=== RUN   TestWithUsername/1000
+=== PAUSE TestWithUsername/1000
+=== RUN   TestWithUsername/unknown
+=== PAUSE TestWithUsername/unknown
+=== CONT  TestWithUsername/root
+=== RUN   TestWithAdditionalGIDs/root
+=== PAUSE TestWithAdditionalGIDs/root
+=== RUN   TestWithAdditionalGIDs/1000
+=== PAUSE TestWithAdditionalGIDs/1000
+=== RUN   TestWithAdditionalGIDs/bin
+=== PAUSE TestWithAdditionalGIDs/bin
+=== RUN   TestWithAdditionalGIDs/bin:root
+=== PAUSE TestWithAdditionalGIDs/bin:root
+=== RUN   TestWithAdditionalGIDs/daemon
+=== PAUSE TestWithAdditionalGIDs/daemon
+=== CONT  TestWithAdditionalGIDs/root
+=== CONT  TestWithUsername/unknown
+=== CONT  TestWithUsername/1000
+=== CONT  TestWithUsername/guest
+--- PASS: TestWithUsername (0.00s)
+    --- PASS: TestWithUsername/root (0.00s)
+    --- PASS: TestWithUsername/unknown (0.00s)
+    --- PASS: TestWithUsername/1000 (0.00s)
+    --- PASS: TestWithUsername/guest (0.00s)
 === CONT  TestWithAdditionalGIDs/daemon
 === CONT  TestWithAdditionalGIDs/bin:root
 === CONT  TestWithAdditionalGIDs/bin
 === CONT  TestWithAdditionalGIDs/1000
---- PASS: TestWithAdditionalGIDs (0.01s)
+--- PASS: TestWithAdditionalGIDs (0.00s)
     --- PASS: TestWithAdditionalGIDs/root (0.00s)
     --- PASS: TestWithAdditionalGIDs/daemon (0.00s)
     --- PASS: TestWithAdditionalGIDs/bin:root (0.00s)
     --- PASS: TestWithAdditionalGIDs/bin (0.00s)
     --- PASS: TestWithAdditionalGIDs/1000 (0.00s)
 PASS
-ok  	github.com/containerd/containerd/oci	0.066s
+ok  	github.com/containerd/containerd/oci	0.094s
 ?   	github.com/containerd/containerd/pkg/apparmor	[no test files]
 === RUN   TestBoolean
 --- PASS: TestBoolean (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/atomic	0.037s
+ok  	github.com/containerd/containerd/pkg/atomic	0.045s
 === RUN   TestCapsList
 --- PASS: TestCapsList (0.00s)
 === RUN   TestFromNumber
@@ -3169,72 +3205,72 @@
 === RUN   TestKnown
 --- PASS: TestKnown (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cap	0.057s
+ok  	github.com/containerd/containerd/pkg/cap	0.054s
 ?   	github.com/containerd/containerd/pkg/cri	[no test files]
 ?   	github.com/containerd/containerd/pkg/cri/annotations	[no test files]
 === RUN   TestValidateConfig
-=== RUN   TestValidateConfig/both_untrusted_workload_runtime_and_runtime[untrusted]
-time="2025-03-15T19:25:47-12:00" level=warning msg="`untrusted_workload_runtime` is deprecated, please use `untrusted` runtime in `runtimes` instead"
-=== RUN   TestValidateConfig/deprecated_runtime_engine_for_v1_runtime
-time="2025-03-15T19:25:47-12:00" level=warning msg="`runtime_engine` is deprecated, please use runtime `options` instead"
-=== RUN   TestValidateConfig/invalid_stream_idle_timeout
 === RUN   TestValidateConfig/conflicting_mirror_registry_config
-=== RUN   TestValidateConfig/deprecated_untrusted_workload_runtime
-time="2025-03-15T19:25:47-12:00" level=warning msg="`untrusted_workload_runtime` is deprecated, please use `untrusted` runtime in `runtimes` instead"
-=== RUN   TestValidateConfig/deprecated_default_runtime
-time="2025-03-15T19:25:47-12:00" level=warning msg="`default_runtime` is deprecated, please use `default_runtime_name` to reference the default configuration you have defined in `runtimes`"
-=== RUN   TestValidateConfig/deprecated_systemd_cgroup_for_v1_runtime
-time="2025-03-15T19:25:47-12:00" level=warning msg="`systemd_cgroup` is deprecated, please use runtime `options` instead"
+=== RUN   TestValidateConfig/no_default_runtime_name
 === RUN   TestValidateConfig/no_pivot_for_v1_runtime
-=== RUN   TestValidateConfig/deprecated_runtime_root_for_v1_runtime
-time="2025-03-15T19:25:47-12:00" level=warning msg="`runtime_root` is deprecated, please use runtime `options` instead"
+=== RUN   TestValidateConfig/no_pivot_for_v2_runtime
+=== RUN   TestValidateConfig/invalid_stream_idle_timeout
+=== RUN   TestValidateConfig/deprecated_default_runtime
+time="2026-04-19T03:53:08+14:00" level=warning msg="`default_runtime` is deprecated, please use `default_runtime_name` to reference the default configuration you have defined in `runtimes`"
 === RUN   TestValidateConfig/deprecated_systemd_cgroup_for_v2_runtime
-=== RUN   TestValidateConfig/deprecated_runtime_engine_for_v2_runtime
-=== RUN   TestValidateConfig/deprecated_runtime_root_for_v2_runtime
+=== RUN   TestValidateConfig/deprecated_runtime_root_for_v1_runtime
+time="2026-04-19T03:53:08+14:00" level=warning msg="`runtime_root` is deprecated, please use runtime `options` instead"
 === RUN   TestValidateConfig/deprecated_auths
-time="2025-03-15T19:25:47-12:00" level=warning msg="`auths` is deprecated, please use `configs` instead"
+time="2026-04-19T03:53:08+14:00" level=warning msg="`auths` is deprecated, please use `configs` instead"
 === RUN   TestValidateConfig/conflicting_tls_registry_config
-=== RUN   TestValidateConfig/no_default_runtime_name
+=== RUN   TestValidateConfig/both_untrusted_workload_runtime_and_runtime[untrusted]
+time="2026-04-19T03:53:08+14:00" level=warning msg="`untrusted_workload_runtime` is deprecated, please use `untrusted` runtime in `runtimes` instead"
+=== RUN   TestValidateConfig/deprecated_systemd_cgroup_for_v1_runtime
+time="2026-04-19T03:53:08+14:00" level=warning msg="`systemd_cgroup` is deprecated, please use runtime `options` instead"
+=== RUN   TestValidateConfig/deprecated_runtime_engine_for_v1_runtime
+time="2026-04-19T03:53:08+14:00" level=warning msg="`runtime_engine` is deprecated, please use runtime `options` instead"
+=== RUN   TestValidateConfig/deprecated_runtime_engine_for_v2_runtime
+=== RUN   TestValidateConfig/deprecated_untrusted_workload_runtime
+time="2026-04-19T03:53:08+14:00" level=warning msg="`untrusted_workload_runtime` is deprecated, please use `untrusted` runtime in `runtimes` instead"
 === RUN   TestValidateConfig/no_runtime[default_runtime_name]
-=== RUN   TestValidateConfig/no_pivot_for_v2_runtime
+=== RUN   TestValidateConfig/deprecated_runtime_root_for_v2_runtime
 --- PASS: TestValidateConfig (0.00s)
-    --- PASS: TestValidateConfig/both_untrusted_workload_runtime_and_runtime[untrusted] (0.00s)
-    --- PASS: TestValidateConfig/deprecated_runtime_engine_for_v1_runtime (0.00s)
-    --- PASS: TestValidateConfig/invalid_stream_idle_timeout (0.00s)
     --- PASS: TestValidateConfig/conflicting_mirror_registry_config (0.00s)
-    --- PASS: TestValidateConfig/deprecated_untrusted_workload_runtime (0.00s)
-    --- PASS: TestValidateConfig/deprecated_default_runtime (0.00s)
-    --- PASS: TestValidateConfig/deprecated_systemd_cgroup_for_v1_runtime (0.00s)
+    --- PASS: TestValidateConfig/no_default_runtime_name (0.00s)
     --- PASS: TestValidateConfig/no_pivot_for_v1_runtime (0.00s)
-    --- PASS: TestValidateConfig/deprecated_runtime_root_for_v1_runtime (0.00s)
+    --- PASS: TestValidateConfig/no_pivot_for_v2_runtime (0.00s)
+    --- PASS: TestValidateConfig/invalid_stream_idle_timeout (0.00s)
+    --- PASS: TestValidateConfig/deprecated_default_runtime (0.00s)
     --- PASS: TestValidateConfig/deprecated_systemd_cgroup_for_v2_runtime (0.00s)
-    --- PASS: TestValidateConfig/deprecated_runtime_engine_for_v2_runtime (0.00s)
-    --- PASS: TestValidateConfig/deprecated_runtime_root_for_v2_runtime (0.00s)
+    --- PASS: TestValidateConfig/deprecated_runtime_root_for_v1_runtime (0.00s)
     --- PASS: TestValidateConfig/deprecated_auths (0.00s)
     --- PASS: TestValidateConfig/conflicting_tls_registry_config (0.00s)
-    --- PASS: TestValidateConfig/no_default_runtime_name (0.00s)
+    --- PASS: TestValidateConfig/both_untrusted_workload_runtime_and_runtime[untrusted] (0.00s)
+    --- PASS: TestValidateConfig/deprecated_systemd_cgroup_for_v1_runtime (0.00s)
+    --- PASS: TestValidateConfig/deprecated_runtime_engine_for_v1_runtime (0.00s)
+    --- PASS: TestValidateConfig/deprecated_runtime_engine_for_v2_runtime (0.00s)
+    --- PASS: TestValidateConfig/deprecated_untrusted_workload_runtime (0.00s)
     --- PASS: TestValidateConfig/no_runtime[default_runtime_name] (0.00s)
-    --- PASS: TestValidateConfig/no_pivot_for_v2_runtime (0.00s)
+    --- PASS: TestValidateConfig/deprecated_runtime_root_for_v2_runtime (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/config	0.107s
+ok  	github.com/containerd/containerd/pkg/cri/config	0.049s
 ?   	github.com/containerd/containerd/pkg/cri/constants	[no test files]
 === RUN   TestRedirectLogs
-    logger_test.go:239: TestCase "log ends without newline"
-    logger_test.go:239: TestCase "log length equal to buffer size"
+    logger_test.go:239: TestCase "log length equal to max length"
+    logger_test.go:239: TestCase "log length longer than max length"
     logger_test.go:239: TestCase "log length longer than max length, and (maxLen % defaultBufSize != 0)"
-    logger_test.go:239: TestCase "no limit if max length is 0"
     logger_test.go:239: TestCase "no limit if max length is negative"
-    logger_test.go:239: TestCase "stdout log"
+    logger_test.go:239: TestCase "log length longer than buffer size"
     logger_test.go:239: TestCase "stderr log"
+    logger_test.go:239: TestCase "log ends without newline"
+    logger_test.go:239: TestCase "log length equal to buffer size"
     logger_test.go:239: TestCase "log length exceed max length by 1"
-    logger_test.go:239: TestCase "log length longer than max length"
     logger_test.go:239: TestCase "max length shorter than buffer size"
+    logger_test.go:239: TestCase "no limit if max length is 0"
     logger_test.go:239: TestCase "log length longer than buffer size with tailing \\r\\n"
-    logger_test.go:239: TestCase "log length longer than buffer size"
-    logger_test.go:239: TestCase "log length equal to max length"
---- PASS: TestRedirectLogs (0.02s)
+    logger_test.go:239: TestCase "stdout log"
+--- PASS: TestRedirectLogs (0.01s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/io	0.118s
+ok  	github.com/containerd/containerd/pkg/cri/io	0.074s
 === RUN   TestMergeGids
 --- PASS: TestMergeGids (0.00s)
 === RUN   TestRestrictOOMScoreAdj
@@ -3242,10 +3278,10 @@
 === RUN   TestOrderedMounts
 --- PASS: TestOrderedMounts (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/opts	0.090s
+ok  	github.com/containerd/containerd/pkg/cri/opts	0.076s
 === RUN   TestContainerCapabilities
-    container_create_linux_test.go:242: TestCase "should be able to add capabilities with drop all"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:242: TestCase "should be able to add/drop capabilities"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3254,8 +3290,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:242: TestCase "should be able to add/drop capabilities"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:242: TestCase "should be able to add all capabilities"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3264,8 +3300,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:242: TestCase "should be able to add all capabilities"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:242: TestCase "should be able to drop all capabilities"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3274,8 +3310,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:242: TestCase "should be able to drop all capabilities"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:242: TestCase "should be able to drop capabilities with add all"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3284,8 +3320,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:242: TestCase "should be able to drop capabilities with add all"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:242: TestCase "should be able to add capabilities with drop all"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3296,7 +3332,7 @@
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestContainerCapabilities (0.00s)
 === RUN   TestContainerSpecTty
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3305,7 +3341,7 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3316,7 +3352,7 @@
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestContainerSpecTty (0.00s)
 === RUN   TestContainerSpecDefaultPath
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3325,7 +3361,7 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3336,7 +3372,7 @@
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestContainerSpecDefaultPath (0.00s)
 === RUN   TestContainerSpecReadonlyRootfs
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3345,7 +3381,7 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3356,7 +3392,7 @@
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestContainerSpecReadonlyRootfs (0.00s)
 === RUN   TestContainerSpecWithExtraMounts
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3370,110 +3406,112 @@
     container_create_linux_test.go:389: Dev mount should override all default dev mounts
 --- PASS: TestContainerSpecWithExtraMounts (0.00s)
 === RUN   TestContainerAndSandboxPrivileged
-    container_create_linux_test.go:429: TestCase "privileged container in non-privileged sandbox should fail"
-    container_create_linux_test.go:429: TestCase "privileged container in privileged sandbox should be fine"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:429: TestCase "non-privileged container in privileged sandbox should be fine"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:429: TestCase "non-privileged container in non-privileged sandbox should be fine"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:429: TestCase "privileged container in non-privileged sandbox should fail"
+    container_create_linux_test.go:429: TestCase "privileged container in privileged sandbox should be fine"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestContainerAndSandboxPrivileged (0.00s)
 === RUN   TestContainerMounts
 --- PASS: TestContainerMounts (0.00s)
 === RUN   TestPrivilegedBindMount
     container_create_linux_test.go:631: TestCase "sysfs and cgroupfs should mount as 'ro' by default"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:631: TestCase "sysfs and cgroupfs should not mount as 'ro' if privileged"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestPrivilegedBindMount (0.00s)
 === RUN   TestMountPropagation
     container_create_linux_test.go:740: TestCase "HostPath should mount as 'rprivate' if propagation is MountPropagation_PROPAGATION_PRIVATE"
     container_create_linux_test.go:740: TestCase "HostPath should mount as 'rslave' if propagation is MountPropagation_PROPAGATION_HOST_TO_CONTAINER"
     container_create_linux_test.go:740: TestCase "HostPath should mount as 'rshared' if propagation is MountPropagation_PROPAGATION_BIDIRECTIONAL"
     container_create_linux_test.go:740: TestCase "HostPath should mount as 'rprivate' if propagation is illegal"
-time="2025-03-15T19:25:54-12:00" level=warning msg="Unknown propagation mode for hostPath \"host-path\""
+time="2026-04-19T03:53:11+14:00" level=warning msg="Unknown propagation mode for hostPath \"host-path\""
     container_create_linux_test.go:740: TestCase "Expect an error if HostPath isn't shared and mount propagation is MountPropagation_PROPAGATION_BIDIRECTIONAL"
     container_create_linux_test.go:740: TestCase "Expect an error if HostPath isn't slave or shared and mount propagation is MountPropagation_PROPAGATION_HOST_TO_CONTAINER"
 --- PASS: TestMountPropagation (0.00s)
 === RUN   TestPidNamespace
+    container_create_linux_test.go:791: TestCase "pod namespace mode"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:791: TestCase "container namespace mode"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:791: TestCase "node namespace mode"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
-    container_create_linux_test.go:791: TestCase "pod namespace mode"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestPidNamespace (0.00s)
 === RUN   TestNoDefaultRunMount
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestNoDefaultRunMount (0.00s)
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_runtime/default"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_privileged_is_true"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_default_seccomp_when_seccomp_is_runtime/default"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_not_specified_when_seccomp_is_not_supported"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_unconfined"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_docker/default"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_specified_profile_when_local_profile_is_specified"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified_even_without_prefix"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_specified_profile_is_invalid"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_not_specified"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_not_specified"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_unconfined"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_specified_profile_is_invalid"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_not_specified_when_seccomp_is_not_supported"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_privileged_is_true"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_docker/default"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_specified_profile_when_local_profile_is_specified"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_use_default_profile_when_seccomp_is_empty"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_default_seccomp_when_seccomp_is_runtime/default"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_not_specified"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified_even_without_prefix"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_unconfined"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_fallback_to_docker/default_when_seccomp_is_empty_and_default_is_runtime/default"
 === RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported"
-=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_not_specified"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_privileged_is_true"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported"
+=== RUN   TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_runtime/default"
 --- PASS: TestGenerateSeccompSecurityProfileSpecOpts (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_runtime/default" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_privileged_is_true" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_default_seccomp_when_seccomp_is_runtime/default" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_not_specified_when_seccomp_is_not_supported" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_unconfined" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_docker/default" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_specified_profile_when_local_profile_is_specified" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified_even_without_prefix" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_specified_profile_is_invalid" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_not_specified" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_not_specified" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_unconfined" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_return_error_if_specified_profile_is_invalid" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_not_specified_when_seccomp_is_not_supported" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_privileged_is_true" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_docker/default" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_specified_profile_when_local_profile_is_specified" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_use_default_profile_when_seccomp_is_empty" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_default_seccomp_when_seccomp_is_runtime/default" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_not_specified" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_set_specified_profile_when_local_profile_is_specified_even_without_prefix" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_set_seccomp_when_seccomp_is_unconfined" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_fallback_to_docker/default_when_seccomp_is_empty_and_default_is_runtime/default" (0.00s)
     --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_return_error_if_seccomp_is_specified_when_seccomp_is_not_supported" (0.00s)
-    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_seccomp_is_not_specified" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"sp_should_not_set_seccomp_when_privileged_is_true" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_not_return_error_if_seccomp_is_unconfined_when_seccomp_is_not_supported" (0.00s)
+    --- PASS: TestGenerateSeccompSecurityProfileSpecOpts/TestCase_"should_set_default_seccomp_when_seccomp_is_runtime/default" (0.00s)
 === RUN   TestGenerateApparmorSpecOpts
-    container_create_linux_test.go:1077: TestCase "sp should not return error if apparmor is unconfined when apparmor is not supported"
+    container_create_linux_test.go:1077: TestCase "should return error when undefined local profile is specified and privileged is true"
     container_create_linux_test.go:1077: TestCase "sp should not apparmor when apparmor is unconfined"
+    container_create_linux_test.go:1077: TestCase "sp should set default apparmor when apparmor is runtime/default"
+    container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is default and privileged is true"
     container_create_linux_test.go:1077: TestCase "should return error when undefined local profile is specified"
     container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is not specified and privileged is true"
-    container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is default and privileged is true"
     container_create_linux_test.go:1077: TestCase "should set default apparmor when apparmor is not specified"
-    container_create_linux_test.go:1077: TestCase "sp should return error if apparmor is specified when apparmor is not supported"
-    container_create_linux_test.go:1077: TestCase "sp should not apparmor when apparmor is unconfined and privileged is true"
-    container_create_linux_test.go:1077: TestCase "should not return error if apparmor is not specified when apparmor is not supported"
-    container_create_linux_test.go:1077: TestCase "should not return error if apparmor is unconfined when apparmor is not supported"
-    container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is unconfined"
-    container_create_linux_test.go:1077: TestCase "sp should return error when undefined local profile is specified"
-    container_create_linux_test.go:1077: TestCase "sp should return error when undefined local profile is specified and privileged is true"
+    container_create_linux_test.go:1077: TestCase "sp should not return error if apparmor is unconfined when apparmor is not supported"
+    container_create_linux_test.go:1077: TestCase "sp should not apparmor when apparmor is default and privileged is true"
     container_create_linux_test.go:1077: TestCase "should return error if apparmor is specified when apparmor is not supported"
-    container_create_linux_test.go:1077: TestCase "should return error when undefined local profile is specified and privileged is true"
-    container_create_linux_test.go:1077: TestCase "should return error if specified profile is invalid"
+    container_create_linux_test.go:1077: TestCase "should not return error if apparmor is not specified when apparmor is not supported"
     container_create_linux_test.go:1077: TestCase "should set default apparmor when apparmor is runtime/default"
-    container_create_linux_test.go:1077: TestCase "sp should set default apparmor when apparmor is runtime/default"
-    container_create_linux_test.go:1077: TestCase "sp should not apparmor when apparmor is default and privileged is true"
+    container_create_linux_test.go:1077: TestCase "sp should return error if apparmor is specified when apparmor is not supported"
+    container_create_linux_test.go:1077: TestCase "sp should not apparmor when apparmor is unconfined and privileged is true"
     container_create_linux_test.go:1077: TestCase "sp should return error when undefined local profile is specified even without prefix"
+    container_create_linux_test.go:1077: TestCase "sp should return error when undefined local profile is specified and privileged is true"
     container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is unconfined and privileged is true"
+    container_create_linux_test.go:1077: TestCase "should return error if specified profile is invalid"
+    container_create_linux_test.go:1077: TestCase "sp should return error when undefined local profile is specified"
+    container_create_linux_test.go:1077: TestCase "should not return error if apparmor is unconfined when apparmor is not supported"
+    container_create_linux_test.go:1077: TestCase "should not apparmor when apparmor is unconfined"
 --- PASS: TestGenerateApparmorSpecOpts (0.00s)
 === RUN   TestMaskedAndReadonlyPaths
-    container_create_linux_test.go:1173: TestCase "should apply CRI specified paths"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "default should be nil for privileged"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "should apply default if not specified when disable_proc_mount = true"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3482,14 +3520,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:1173: TestCase "should be able to specify empty paths, esp. if privileged"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
-    container_create_linux_test.go:1173: TestCase "should not apply CRI specified paths if privileged"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
-    container_create_linux_test.go:1173: TestCase "default should be nil for privileged"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
-    container_create_linux_test.go:1173: TestCase "should apply default if not specified when disable_proc_mount = true"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "should apply default if not specified when disable_proc_mount = false"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3498,8 +3530,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:1173: TestCase "should apply default if not specified when disable_proc_mount = false"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "should be able to specify empty paths"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3508,8 +3540,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_linux_test.go:1173: TestCase "should be able to specify empty paths"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "should apply CRI specified paths"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3518,10 +3550,14 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
+    container_create_linux_test.go:1173: TestCase "should be able to specify empty paths, esp. if privileged"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1173: TestCase "should not apply CRI specified paths if privileged"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestMaskedAndReadonlyPaths (0.00s)
 === RUN   TestHostname
     container_create_linux_test.go:1223: TestCase "should add HOSTNAME=sandbox.Hostname for pod network namespace"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3531,7 +3567,7 @@
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
     container_create_linux_test.go:1223: TestCase "should add HOSTNAME=sandbox.Hostname for host network namespace"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3541,7 +3577,7 @@
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
     container_create_linux_test.go:1223: TestCase "should add HOSTNAME=os.Hostname for host network namespace if sandbox.Hostname is not set"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3574,27 +3610,27 @@
     --- PASS: TestGenerateUserString/UID,_GID (0.00s)
     --- PASS: TestGenerateUserString/GID_only (0.00s)
 === RUN   TestNonRootUserAndDevices
+    container_create_linux_test.go:1367: TestCase "expect non-root container's Devices Uid/Gid to be the same as the device Uid/Gid on the host when deviceOwnershipFromSecurityContext is disabled"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1367: TestCase "expect root container's Devices Uid/Gid to be the same as the device Uid/Gid on the host when deviceOwnershipFromSecurityContext is disabled"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1367: TestCase "expect non-root container's Devices Uid/Gid to be the same as RunAsUser/RunAsGroup when deviceOwnershipFromSecurityContext is enabled"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1367: TestCase "expect root container's Devices Uid/Gid to be the same as the device Uid/Gid on the host when deviceOwnershipFromSecurityContext is enabled"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
-    container_create_linux_test.go:1367: TestCase "expect non-root container's Devices Uid/Gid to be the same as the device Uid/Gid on the host when deviceOwnershipFromSecurityContext is disabled"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestNonRootUserAndDevices (0.00s)
 === RUN   TestPrivilegedDevices
-    container_create_linux_test.go:1421: TestCase "expect no host devices when privileged is false"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1421: TestCase "expect no host devices when privileged is false and privilegedWithoutHostDevices is true"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1421: TestCase "expect host devices when privileged is true"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:1421: TestCase "expect no host devices when privileged is true and privilegedWithoutHostDevices is true"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
---- PASS: TestPrivilegedDevices (0.01s)
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_linux_test.go:1421: TestCase "expect no host devices when privileged is false"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+--- PASS: TestPrivilegedDevices (0.00s)
 === RUN   TestBaseOCISpec
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3605,7 +3641,7 @@
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestBaseOCISpec (0.00s)
 === RUN   TestGeneralContainerSpec
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3614,10 +3650,10 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
---- PASS: TestGeneralContainerSpec (0.01s)
+--- PASS: TestGeneralContainerSpec (0.00s)
 === RUN   TestPodAnnotationPassthroughContainerSpec
-=== RUN   TestPodAnnotationPassthroughContainerSpec/a_non-passthrough_annotation_should_not_be_passed_as_an_OCI_annotation
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+=== RUN   TestPodAnnotationPassthroughContainerSpec/passthrough_annotations_should_support_wildcard_match
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3626,8 +3662,9 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-=== RUN   TestPodAnnotationPassthroughContainerSpec/passthrough_annotations_should_support_wildcard_match
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_create_test.go:113: map[io.kubernetes.cri.container-name:container-name io.kubernetes.cri.container-type:container io.kubernetes.cri.image-name:container-image-name io.kubernetes.cri.sandbox-id:sandbox-id io.kubernetes.cri.sandbox-name:test-sandbox-name io.kubernetes.cri.sandbox-namespace:test-sandbox-ns io.kubernetes.cri.sandbox-uid:test-sandbox-uid t.f:j y.ca:b z.g:o]
+=== RUN   TestPodAnnotationPassthroughContainerSpec/a_passthrough_annotation_should_be_passed_as_an_OCI_annotation
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3636,9 +3673,8 @@
     container_create_linux_test.go:151: Check cgroup path
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
-    container_create_test.go:113: map[io.kubernetes.cri.container-name:container-name io.kubernetes.cri.container-type:container io.kubernetes.cri.image-name:container-image-name io.kubernetes.cri.sandbox-id:sandbox-id io.kubernetes.cri.sandbox-name:test-sandbox-name io.kubernetes.cri.sandbox-namespace:test-sandbox-ns io.kubernetes.cri.sandbox-uid:test-sandbox-uid t.f:j y.ca:b z.g:o]
-=== RUN   TestPodAnnotationPassthroughContainerSpec/a_passthrough_annotation_should_be_passed_as_an_OCI_annotation
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+=== RUN   TestPodAnnotationPassthroughContainerSpec/a_non-passthrough_annotation_should_not_be_passed_as_an_OCI_annotation
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3648,19 +3684,19 @@
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
 --- PASS: TestPodAnnotationPassthroughContainerSpec (0.00s)
-    --- PASS: TestPodAnnotationPassthroughContainerSpec/a_non-passthrough_annotation_should_not_be_passed_as_an_OCI_annotation (0.00s)
     --- PASS: TestPodAnnotationPassthroughContainerSpec/passthrough_annotations_should_support_wildcard_match (0.00s)
     --- PASS: TestPodAnnotationPassthroughContainerSpec/a_passthrough_annotation_should_be_passed_as_an_OCI_annotation (0.00s)
+    --- PASS: TestPodAnnotationPassthroughContainerSpec/a_non-passthrough_annotation_should_not_be_passed_as_an_OCI_annotation (0.00s)
 === RUN   TestContainerSpecCommand
 --- PASS: TestContainerSpecCommand (0.00s)
 === RUN   TestVolumeMounts
+    container_create_test.go:256: TestCase "should compare and return cleanpath"
     container_create_test.go:256: TestCase "should setup rw mount for image volumes"
     container_create_test.go:256: TestCase "should skip image volumes if already mounted by CRI"
-    container_create_test.go:256: TestCase "should compare and return cleanpath"
---- PASS: TestVolumeMounts (0.01s)
+--- PASS: TestVolumeMounts (0.00s)
 === RUN   TestContainerAnnotationPassthroughContainerSpec
 === RUN   TestContainerAnnotationPassthroughContainerSpec/passthrough_annotations_from_pod_and_container_should_be_passed_as_an_OCI_annotation
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3670,7 +3706,7 @@
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
 === RUN   TestContainerAnnotationPassthroughContainerSpec/passthrough_annotations_from_pod_and_container_should_support_wildcard
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3680,7 +3716,7 @@
     container_create_linux_test.go:154: Check namespaces
     container_create_linux_test.go:172: Check PodSandbox annotations
 === RUN   TestContainerAnnotationPassthroughContainerSpec/annotations_should_not_pass_through_if_no_passthrough_annotations_are_configured
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_create_linux_test.go:127: Check cgroups bind mount
     container_create_linux_test.go:130: Check bind mount
     container_create_linux_test.go:134: Check resource limits
@@ -3704,44 +3740,44 @@
 === RUN   TestFilterContainers
 --- PASS: TestFilterContainers (0.00s)
 === RUN   TestListContainers
+    container_list_test.go:335: TestCase: test without filter
+    container_list_test.go:335: TestCase: test filter by sandboxid
     container_list_test.go:335: TestCase: test filter by truncated sandboxid
     container_list_test.go:335: TestCase: test filter by containerid
     container_list_test.go:335: TestCase: test filter by truncated containerid
     container_list_test.go:335: TestCase: test filter by containerid and sandboxid
     container_list_test.go:335: TestCase: test filter by truncated containerid and truncated sandboxid
-    container_list_test.go:335: TestCase: test without filter
-    container_list_test.go:335: TestCase: test filter by sandboxid
 --- PASS: TestListContainers (0.00s)
 === RUN   TestSetContainerRemoving
-    container_remove_test.go:68: TestCase "should return error when container is in running state"
     container_remove_test.go:68: TestCase "should return error when container is in starting state"
     container_remove_test.go:68: TestCase "should return error when container is in removing state"
     container_remove_test.go:68: TestCase "should not return error when container is not running and removing"
+    container_remove_test.go:68: TestCase "should return error when container is in running state"
 --- PASS: TestSetContainerRemoving (0.00s)
 === RUN   TestSetContainerStarting
+    container_start_test.go:81: TestCase "should return error when container is in removing state"
     container_start_test.go:81: TestCase "should return error when container is in unknown state"
     container_start_test.go:81: TestCase "should not return error when container is in created state"
     container_start_test.go:81: TestCase "should return error when container is in running state"
     container_start_test.go:81: TestCase "should return error when container is in exited state"
     container_start_test.go:81: TestCase "should return error when container is in starting state"
-    container_start_test.go:81: TestCase "should return error when container is in removing state"
 --- PASS: TestSetContainerStarting (0.00s)
 === RUN   TestGetWorkingSet
-=== RUN   TestGetWorkingSet/memory_usage_lower_than_inactive_total_file
 === RUN   TestGetWorkingSet/nil_memory_usage
 === RUN   TestGetWorkingSet/memory_usage_higher_than_inactive_total_file
+=== RUN   TestGetWorkingSet/memory_usage_lower_than_inactive_total_file
 --- PASS: TestGetWorkingSet (0.00s)
-    --- PASS: TestGetWorkingSet/memory_usage_lower_than_inactive_total_file (0.00s)
     --- PASS: TestGetWorkingSet/nil_memory_usage (0.00s)
     --- PASS: TestGetWorkingSet/memory_usage_higher_than_inactive_total_file (0.00s)
+    --- PASS: TestGetWorkingSet/memory_usage_lower_than_inactive_total_file (0.00s)
 === RUN   TestGetWorkingSetV2
+=== RUN   TestGetWorkingSetV2/memory_usage_higher_than_inactive_total_file
 === RUN   TestGetWorkingSetV2/memory_usage_lower_than_inactive_total_file
 === RUN   TestGetWorkingSetV2/nil_memory_usage
-=== RUN   TestGetWorkingSetV2/memory_usage_higher_than_inactive_total_file
 --- PASS: TestGetWorkingSetV2 (0.00s)
+    --- PASS: TestGetWorkingSetV2/memory_usage_higher_than_inactive_total_file (0.00s)
     --- PASS: TestGetWorkingSetV2/memory_usage_lower_than_inactive_total_file (0.00s)
     --- PASS: TestGetWorkingSetV2/nil_memory_usage (0.00s)
-    --- PASS: TestGetWorkingSetV2/memory_usage_higher_than_inactive_total_file (0.00s)
 === RUN   TestGetAvailableBytes
 === RUN   TestGetAvailableBytes/no_limit
 === RUN   TestGetAvailableBytes/with_limit
@@ -3782,14 +3818,14 @@
 === RUN   TestWaitContainerStop
 --- PASS: TestWaitContainerStop (0.20s)
 === RUN   TestUpdateOCILinuxResource
-    container_update_resources_linux_test.go:234: TestCase "should be able to update each resource"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_update_resources_linux_test.go:234: TestCase "should skip empty fields"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_update_resources_linux_test.go:234: TestCase "should be able to fill empty fields"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
     container_update_resources_linux_test.go:234: TestCase "should be able to patch the unified map"
-time="2025-03-15T19:25:54-12:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
+    container_update_resources_linux_test.go:234: TestCase "should be able to update each resource"
+time="2026-04-19T03:53:11+14:00" level=warning msg="hugetlb cgroup controller is absent. skipping huge pages limits"
 --- PASS: TestUpdateOCILinuxResource (0.00s)
 === RUN   TestBackOff
     events_test.go:68: Should be able to backOff a event
@@ -3815,42 +3851,42 @@
     helpers_selinux_linux_test.go:29: selinux is not enabled
 --- SKIP: TestInitSelinuxOpts (0.00s)
 === RUN   TestCheckSelinuxLevel
-=== RUN   TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8,c10
+=== RUN   TestCheckSelinuxLevel/s0-s0:c0.c3.c6
+=== RUN   TestCheckSelinuxLevel/s0-s0
+=== RUN   TestCheckSelinuxLevel/s0:c0
+=== RUN   TestCheckSelinuxLevel/s0-s0:c0,c3
 === RUN   TestCheckSelinuxLevel/s0:c0.c3.c6
 === RUN   TestCheckSelinuxLevel/s0
-=== RUN   TestCheckSelinuxLevel/s0:c0,c3
-=== RUN   TestCheckSelinuxLevel/s0-s0:c0,c3
 === RUN   TestCheckSelinuxLevel/s0:c0.c3
+=== RUN   TestCheckSelinuxLevel/s0:c0,c3
 === RUN   TestCheckSelinuxLevel/s0-s0:c0,c3.c6
-=== RUN   TestCheckSelinuxLevel/s0-s0:c0.c3.c6
-=== RUN   TestCheckSelinuxLevel/s0:c0
+=== RUN   TestCheckSelinuxLevel/s0,c0,c3
 === RUN   TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8.c10
+=== RUN   TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8,c10
 === RUN   TestCheckSelinuxLevel/s0-s0,c0,c3
-=== RUN   TestCheckSelinuxLevel/s0-s0
-=== RUN   TestCheckSelinuxLevel/s0,c0,c3
 === RUN   TestCheckSelinuxLevel/s0-s0:c0,c3.c6.c8
 --- PASS: TestCheckSelinuxLevel (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8,c10 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0-s0:c0.c3.c6 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0-s0 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0:c0 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0:c0.c3.c6 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0:c0,c3 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0:c0.c3 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0:c0,c3 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3.c6 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0-s0:c0.c3.c6 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0:c0 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0,c0,c3 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8.c10 (0.00s)
+    --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3.c6,c8,c10 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0-s0,c0,c3 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0-s0 (0.00s)
-    --- PASS: TestCheckSelinuxLevel/s0,c0,c3 (0.00s)
     --- PASS: TestCheckSelinuxLevel/s0-s0:c0,c3.c6.c8 (0.00s)
 === RUN   TestGetUserFromImage
-    helpers_test.go:75: TestCase - "empty user"
-    helpers_test.go:75: TestCase - "root username"
-    helpers_test.go:75: TestCase - "username"
     helpers_test.go:75: TestCase - "no gid"
     helpers_test.go:75: TestCase - "uid/gid"
     helpers_test.go:75: TestCase - "multiple separators"
+    helpers_test.go:75: TestCase - "empty user"
+    helpers_test.go:75: TestCase - "root username"
+    helpers_test.go:75: TestCase - "username"
 --- PASS: TestGetUserFromImage (0.00s)
 === RUN   TestGetRepoDigestAndTag
     helpers_test.go:112: TestCase "repo digest should be empty if original ref is schema1 and has no digest"
@@ -3859,42 +3895,42 @@
     helpers_test.go:112: TestCase "repo tag should not be empty if original ref has tag"
 --- PASS: TestGetRepoDigestAndTag (0.00s)
 === RUN   TestBuildLabels
-time="2025-03-15T19:25:54-12:00" level=warning msg="unable to add image label with key long-label to the container" error="label key and value greater than maximum size (4096 bytes), key: long-label: invalid argument"
+time="2026-04-19T03:53:11+14:00" level=warning msg="unable to add image label with key long-label to the container" error="label key and value greater than maximum size (4096 bytes), key: long-label: invalid argument"
 --- PASS: TestBuildLabels (0.00s)
 === RUN   TestParseImageReferences
 --- PASS: TestParseImageReferences (0.00s)
 === RUN   TestLocalResolve
 --- PASS: TestLocalResolve (0.00s)
 === RUN   TestGenerateRuntimeOptions
+=== RUN   TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v1
+=== RUN   TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v2
 === RUN   TestGenerateRuntimeOptions/when_options_is_nil,_should_use_legacy_fields_for_legacy_runtime
 === RUN   TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_io.containerd.runc.v1
 === RUN   TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_io.containerd.runc.v2
 === RUN   TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_legacy_runtime
-=== RUN   TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v1
-=== RUN   TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v2
 --- PASS: TestGenerateRuntimeOptions (0.00s)
+    --- PASS: TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v1 (0.00s)
+    --- PASS: TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v2 (0.00s)
     --- PASS: TestGenerateRuntimeOptions/when_options_is_nil,_should_use_legacy_fields_for_legacy_runtime (0.00s)
     --- PASS: TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_io.containerd.runc.v1 (0.00s)
     --- PASS: TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_io.containerd.runc.v2 (0.00s)
     --- PASS: TestGenerateRuntimeOptions/when_options_is_not_nil,_should_be_able_to_decode_for_legacy_runtime (0.00s)
-    --- PASS: TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v1 (0.00s)
-    --- PASS: TestGenerateRuntimeOptions/when_options_is_nil,_should_return_nil_option_for_io.containerd.runc.v2 (0.00s)
 === RUN   TestEnvDeduplication
-    helpers_test.go:364: TestCase "single env"
     helpers_test.go:364: TestCase "multiple envs"
     helpers_test.go:364: TestCase "env override"
     helpers_test.go:364: TestCase "existing env"
+    helpers_test.go:364: TestCase "single env"
 --- PASS: TestEnvDeduplication (0.00s)
 === RUN   TestPassThroughAnnotationsFilter
-=== RUN   TestPassThroughAnnotationsFilter/should_support_direct_match
 === RUN   TestPassThroughAnnotationsFilter/should_support_wildcard_match
 === RUN   TestPassThroughAnnotationsFilter/should_support_wildcard_match_all
 === RUN   TestPassThroughAnnotationsFilter/should_support_match_including_path_separator
+=== RUN   TestPassThroughAnnotationsFilter/should_support_direct_match
 --- PASS: TestPassThroughAnnotationsFilter (0.00s)
-    --- PASS: TestPassThroughAnnotationsFilter/should_support_direct_match (0.00s)
     --- PASS: TestPassThroughAnnotationsFilter/should_support_wildcard_match (0.00s)
     --- PASS: TestPassThroughAnnotationsFilter/should_support_wildcard_match_all (0.00s)
     --- PASS: TestPassThroughAnnotationsFilter/should_support_match_including_path_separator (0.00s)
+    --- PASS: TestPassThroughAnnotationsFilter/should_support_direct_match (0.00s)
 === RUN   TestEnsureRemoveAllNotExist
 --- PASS: TestEnsureRemoveAllNotExist (0.00s)
 === RUN   TestEnsureRemoveAllWithDir
@@ -3902,18 +3938,19 @@
 === RUN   TestEnsureRemoveAllWithFile
 --- PASS: TestEnsureRemoveAllWithFile (0.00s)
 === RUN   TestValidateTargetContainer
-=== RUN   TestValidateTargetContainer/target_stopped_container_in_pod
-=== RUN   TestValidateTargetContainer/target_container_in_other_pod
 === RUN   TestValidateTargetContainer/target_container_does_not_exist
 === RUN   TestValidateTargetContainer/target_container_in_pod
+=== RUN   TestValidateTargetContainer/target_stopped_container_in_pod
+=== RUN   TestValidateTargetContainer/target_container_in_other_pod
 --- PASS: TestValidateTargetContainer (0.00s)
-    --- PASS: TestValidateTargetContainer/target_stopped_container_in_pod (0.00s)
-    --- PASS: TestValidateTargetContainer/target_container_in_other_pod (0.00s)
     --- PASS: TestValidateTargetContainer/target_container_does_not_exist (0.00s)
     --- PASS: TestValidateTargetContainer/target_container_in_pod (0.00s)
+    --- PASS: TestValidateTargetContainer/target_stopped_container_in_pod (0.00s)
+    --- PASS: TestValidateTargetContainer/target_container_in_other_pod (0.00s)
 === RUN   TestListImages
 --- PASS: TestListImages (0.00s)
 === RUN   TestParseAuth
+    image_pull_test.go:100: TestCase "should support auth"
     image_pull_test.go:100: TestCase "should return error for invalid auth"
     image_pull_test.go:100: TestCase "should return empty auth if server address doesn't match"
     image_pull_test.go:100: TestCase "should return auth if server address matches"
@@ -3922,29 +3959,28 @@
     image_pull_test.go:100: TestCase "should not return error if empty auth is provided for access to anonymous registry"
     image_pull_test.go:100: TestCase "should support identity token"
     image_pull_test.go:100: TestCase "should support username and password"
-    image_pull_test.go:100: TestCase "should support auth"
 --- PASS: TestParseAuth (0.00s)
 === RUN   TestRegistryEndpoints
-    image_pull_test.go:248: TestCase "mirror configured"
-    image_pull_test.go:248: TestCase "wildcard mirror configured"
-    image_pull_test.go:248: TestCase "host should take precedence if both host and wildcard mirrors are configured"
-    image_pull_test.go:248: TestCase "default endpoint in list with http"
     image_pull_test.go:248: TestCase "default endpoint in list with https"
     image_pull_test.go:248: TestCase "default endpoint in list with path"
     image_pull_test.go:248: TestCase "miss scheme endpoint in list with path"
     image_pull_test.go:248: TestCase "no mirror configured"
+    image_pull_test.go:248: TestCase "mirror configured"
+    image_pull_test.go:248: TestCase "wildcard mirror configured"
+    image_pull_test.go:248: TestCase "host should take precedence if both host and wildcard mirrors are configured"
+    image_pull_test.go:248: TestCase "default endpoint in list with http"
 --- PASS: TestRegistryEndpoints (0.00s)
 === RUN   TestDefaultScheme
-    image_pull_test.go:303: TestCase "should use http by default for localhost"
-    image_pull_test.go:303: TestCase "should use http by default for 127.0.0.1"
-    image_pull_test.go:303: TestCase "should use https by default for remote host"
-    image_pull_test.go:303: TestCase "should use https by default for remote host with port"
-    image_pull_test.go:303: TestCase "should use http by default for localhost with port"
     image_pull_test.go:303: TestCase "should use http by default for 127.0.0.1 with port"
     image_pull_test.go:303: TestCase "should use http by default for ::1"
     image_pull_test.go:303: TestCase "should use http by default for ::1 with port"
+    image_pull_test.go:303: TestCase "should use https by default for remote host"
+    image_pull_test.go:303: TestCase "should use http by default for localhost"
+    image_pull_test.go:303: TestCase "should use http by default for localhost with port"
     image_pull_test.go:303: TestCase "should use https by default for remote ip"
     image_pull_test.go:303: TestCase "should use https by default for remote ip with port"
+    image_pull_test.go:303: TestCase "should use http by default for 127.0.0.1"
+    image_pull_test.go:303: TestCase "should use https by default for remote host with port"
 --- PASS: TestDefaultScheme (0.00s)
 === RUN   TestEncryptedImagePullOpts
     image_pull_test.go:323: TestCase "node key model should return one unpack opt"
@@ -3959,13 +3995,13 @@
 === RUN   TestToCRISandbox
 --- PASS: TestToCRISandbox (0.00s)
 === RUN   TestFilterSandboxes
+    sandbox_list_test.go:204: TestCase: mixed filter not matched
+    sandbox_list_test.go:204: TestCase: mixed filter matched
+    sandbox_list_test.go:204: TestCase: no filter
     sandbox_list_test.go:204: TestCase: id filter
     sandbox_list_test.go:204: TestCase: truncid filter
     sandbox_list_test.go:204: TestCase: state filter
     sandbox_list_test.go:204: TestCase: label filter
-    sandbox_list_test.go:204: TestCase: mixed filter not matched
-    sandbox_list_test.go:204: TestCase: mixed filter matched
-    sandbox_list_test.go:204: TestCase: no filter
 --- PASS: TestFilterSandboxes (0.00s)
 === RUN   TestLinuxSandboxContainerSpec
     sandbox_run_linux_test.go:244: TestCase "spec should reflect original config"
@@ -3984,10 +4020,10 @@
     sandbox_run_linux_test.go:72: Check PodSandbox annotations
 --- PASS: TestLinuxSandboxContainerSpec (0.00s)
 === RUN   TestSetupSandboxFiles
-    sandbox_run_linux_test.go:435: TestCase "should check host /dev/shm existence when ipc mode is NODE"
     sandbox_run_linux_test.go:435: TestCase "should create new /etc/resolv.conf if DNSOptions is set"
     sandbox_run_linux_test.go:435: TestCase "should create sandbox shm when ipc namespace mode is not NODE"
     sandbox_run_linux_test.go:435: TestCase "should create /etc/hostname when hostname is set"
+    sandbox_run_linux_test.go:435: TestCase "should check host /dev/shm existence when ipc mode is NODE"
 --- PASS: TestSetupSandboxFiles (0.00s)
 === RUN   TestParseDNSOption
     sandbox_run_linux_test.go:502: TestCase "empty dns options should return empty content"
@@ -4008,22 +4044,22 @@
     sandbox_run_linux_test.go:72: Check PodSandbox annotations
 --- PASS: TestSandboxContainerSpec (0.00s)
 === RUN   TestTypeurlMarshalUnmarshalSandboxMeta
-    sandbox_run_test.go:142: TestCase "should marshal Linux"
     sandbox_run_test.go:142: TestCase "should marshal original config"
+    sandbox_run_test.go:142: TestCase "should marshal Linux"
 --- PASS: TestTypeurlMarshalUnmarshalSandboxMeta (0.00s)
 === RUN   TestToCNIPortMappings
-    sandbox_run_test.go:254: TestCase "CRI port mapping without host port should be skipped"
-    sandbox_run_test.go:254: TestCase "CRI port mapping with unsupported protocol should be skipped"
     sandbox_run_test.go:254: TestCase "empty CRI port mapping should map to empty CNI port mapping"
     sandbox_run_test.go:254: TestCase "CRI port mapping should be converted to CNI port mapping properly"
+    sandbox_run_test.go:254: TestCase "CRI port mapping without host port should be skipped"
+    sandbox_run_test.go:254: TestCase "CRI port mapping with unsupported protocol should be skipped"
 --- PASS: TestToCNIPortMappings (0.00s)
 === RUN   TestSelectPodIP
+    sandbox_run_test.go:300: TestCase "ipv4 should be picked even if ipv6 comes first"
+    sandbox_run_test.go:300: TestCase "ipv6 should be picked even if ipv4 comes first"
     sandbox_run_test.go:300: TestCase "order should reflect ip selection"
     sandbox_run_test.go:300: TestCase "ipv4 should be picked when there is only ipv4"
     sandbox_run_test.go:300: TestCase "ipv6 should be picked when there is no ipv4"
     sandbox_run_test.go:300: TestCase "the first ipv4 should be picked when there are multiple ipv4"
-    sandbox_run_test.go:300: TestCase "ipv4 should be picked even if ipv6 comes first"
-    sandbox_run_test.go:300: TestCase "ipv6 should be picked even if ipv4 comes first"
 --- PASS: TestSelectPodIP (0.00s)
 === RUN   TestHostAccessingSandbox
 === RUN   TestHostAccessingSandbox/Security_Context_is_nil
@@ -4036,27 +4072,27 @@
     --- PASS: TestHostAccessingSandbox/Security_Context_is_not_privileged (0.00s)
     --- PASS: TestHostAccessingSandbox/Security_Context_namespace_host_access (0.00s)
 === RUN   TestGetSandboxRuntime
-=== RUN   TestGetSandboxRuntime/should_return_error_if_untrusted_workload_requires_host_access
-=== RUN   TestGetSandboxRuntime/should_use_default_runtime_for_regular_workload
-=== RUN   TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload
-=== RUN   TestGetSandboxRuntime/should_use_untrusted_workload_runtime_for_untrusted_workload
-=== RUN   TestGetSandboxRuntime/should_use_default_runtime_for_trusted_workload
 === RUN   TestGetSandboxRuntime/should_return_error_if_untrusted_workload_runtime_is_required_but_not_configured
-=== RUN   TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload_&_handler
 === RUN   TestGetSandboxRuntime/should_return_an_error_if_untrusted_annotation_with_conflicting_handler
 === RUN   TestGetSandboxRuntime/should_use_correct_runtime_for_a_runtime_handler
 === RUN   TestGetSandboxRuntime/should_return_error_if_runtime_handler_is_required_but_not_configured
---- PASS: TestGetSandboxRuntime (0.01s)
-    --- PASS: TestGetSandboxRuntime/should_return_error_if_untrusted_workload_requires_host_access (0.00s)
-    --- PASS: TestGetSandboxRuntime/should_use_default_runtime_for_regular_workload (0.00s)
-    --- PASS: TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload (0.00s)
-    --- PASS: TestGetSandboxRuntime/should_use_untrusted_workload_runtime_for_untrusted_workload (0.00s)
-    --- PASS: TestGetSandboxRuntime/should_use_default_runtime_for_trusted_workload (0.00s)
+=== RUN   TestGetSandboxRuntime/should_return_error_if_untrusted_workload_requires_host_access
+=== RUN   TestGetSandboxRuntime/should_use_untrusted_workload_runtime_for_untrusted_workload
+=== RUN   TestGetSandboxRuntime/should_use_default_runtime_for_regular_workload
+=== RUN   TestGetSandboxRuntime/should_use_default_runtime_for_trusted_workload
+=== RUN   TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload
+=== RUN   TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload_&_handler
+--- PASS: TestGetSandboxRuntime (0.00s)
     --- PASS: TestGetSandboxRuntime/should_return_error_if_untrusted_workload_runtime_is_required_but_not_configured (0.00s)
-    --- PASS: TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload_&_handler (0.00s)
     --- PASS: TestGetSandboxRuntime/should_return_an_error_if_untrusted_annotation_with_conflicting_handler (0.00s)
     --- PASS: TestGetSandboxRuntime/should_use_correct_runtime_for_a_runtime_handler (0.00s)
     --- PASS: TestGetSandboxRuntime/should_return_error_if_runtime_handler_is_required_but_not_configured (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_return_error_if_untrusted_workload_requires_host_access (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_use_untrusted_workload_runtime_for_untrusted_workload (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_use_default_runtime_for_regular_workload (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_use_default_runtime_for_trusted_workload (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload (0.00s)
+    --- PASS: TestGetSandboxRuntime/should_use_'untrusted'_runtime_for_untrusted_workload_&_handler (0.00s)
 === RUN   TestPodSandboxStatus
     sandbox_status_test.go:107: TestCase: sandbox state ready
     sandbox_status_test.go:107: TestCase: sandbox state not ready
@@ -4067,38 +4103,38 @@
 === RUN   TestLoadBaseOCISpec
 --- PASS: TestLoadBaseOCISpec (0.00s)
 === RUN   TestValidateStreamServer
-=== RUN   TestValidateStreamServer/should_pass_with_default_withoutTLS
-=== RUN   TestValidateStreamServer/should_pass_with_x509KeyPairTLS
-=== RUN   TestValidateStreamServer/should_pass_with_selfSign
 === RUN   TestValidateStreamServer/should_return_error_with_X509_keypair_but_not_EnableTLSStreaming
 === RUN   TestValidateStreamServer/should_return_error_with_X509_TLSCertFile_empty
 === RUN   TestValidateStreamServer/should_return_error_with_X509_TLSKeyFile_empty
 === RUN   TestValidateStreamServer/should_return_error_without_EnableTLSStreaming_and_only_TLSCertFile_set
 === RUN   TestValidateStreamServer/should_return_error_without_EnableTLSStreaming_and_only_TLSKeyFile_set
+=== RUN   TestValidateStreamServer/should_pass_with_default_withoutTLS
+=== RUN   TestValidateStreamServer/should_pass_with_x509KeyPairTLS
+=== RUN   TestValidateStreamServer/should_pass_with_selfSign
 --- PASS: TestValidateStreamServer (0.00s)
-    --- PASS: TestValidateStreamServer/should_pass_with_default_withoutTLS (0.00s)
-    --- PASS: TestValidateStreamServer/should_pass_with_x509KeyPairTLS (0.00s)
-    --- PASS: TestValidateStreamServer/should_pass_with_selfSign (0.00s)
     --- PASS: TestValidateStreamServer/should_return_error_with_X509_keypair_but_not_EnableTLSStreaming (0.00s)
     --- PASS: TestValidateStreamServer/should_return_error_with_X509_TLSCertFile_empty (0.00s)
     --- PASS: TestValidateStreamServer/should_return_error_with_X509_TLSKeyFile_empty (0.00s)
     --- PASS: TestValidateStreamServer/should_return_error_without_EnableTLSStreaming_and_only_TLSCertFile_set (0.00s)
     --- PASS: TestValidateStreamServer/should_return_error_without_EnableTLSStreaming_and_only_TLSKeyFile_set (0.00s)
+    --- PASS: TestValidateStreamServer/should_pass_with_default_withoutTLS (0.00s)
+    --- PASS: TestValidateStreamServer/should_pass_with_x509KeyPairTLS (0.00s)
+    --- PASS: TestValidateStreamServer/should_pass_with_selfSign (0.00s)
 === RUN   TestUpdateRuntimeConfig
 === RUN   TestUpdateRuntimeConfig/should_not_generate_cni_config_if_cidr_is_empty
 === RUN   TestUpdateRuntimeConfig/should_not_generate_cni_config_if_template_file_is_not_specified
-time="2025-03-15T19:25:55-12:00" level=info msg="No cni config template is specified, wait for other system components to drop the config."
+time="2026-04-19T03:53:12+14:00" level=info msg="No cni config template is specified, wait for other system components to drop the config."
 === RUN   TestUpdateRuntimeConfig/should_not_generate_cni_config_if_network_is_ready
-time="2025-03-15T19:25:55-12:00" level=info msg="Network plugin is ready, skip generating cni config from template \"/tmp/TestUpdateRuntimeConfigshould_not_generate_cni_config_if_network_is_ready1680194000/001/template\""
+time="2026-04-19T03:53:12+14:00" level=info msg="Network plugin is ready, skip generating cni config from template \"/tmp/TestUpdateRuntimeConfigshould_not_generate_cni_config_if_network_is_ready2021358966/001/template\""
 === RUN   TestUpdateRuntimeConfig/should_generate_cni_config_if_template_is_specified_and_cidr_is_provided
-time="2025-03-15T19:25:55-12:00" level=info msg="Generating cni config from template \"/tmp/TestUpdateRuntimeConfigshould_generate_cni_config_if_template_is_specified_and_cidr_is_provided4022503271/001/template\""
+time="2026-04-19T03:53:12+14:00" level=info msg="Generating cni config from template \"/tmp/TestUpdateRuntimeConfigshould_generate_cni_config_if_template_is_specified_and_cidr_is_provided3297114696/001/template\""
 --- PASS: TestUpdateRuntimeConfig (0.00s)
     --- PASS: TestUpdateRuntimeConfig/should_not_generate_cni_config_if_cidr_is_empty (0.00s)
     --- PASS: TestUpdateRuntimeConfig/should_not_generate_cni_config_if_template_file_is_not_specified (0.00s)
     --- PASS: TestUpdateRuntimeConfig/should_not_generate_cni_config_if_network_is_ready (0.00s)
     --- PASS: TestUpdateRuntimeConfig/should_generate_cni_config_if_template_is_specified_and_cidr_is_provided (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/server	0.628s
+ok  	github.com/containerd/containerd/pkg/cri/server	0.494s
 ?   	github.com/containerd/containerd/pkg/cri/server/bandwidth	[no test files]
 ?   	github.com/containerd/containerd/pkg/cri/server/testing	[no test files]
 === RUN   TestStoreErrAlreadyExistGRPCStatus
@@ -4106,7 +4142,7 @@
 === RUN   TestStoreErrNotExistGRPCStatus
 --- PASS: TestStoreErrNotExistGRPCStatus (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store	0.052s
+ok  	github.com/containerd/containerd/pkg/cri/store	0.051s
 === RUN   TestContainerStore
     container_test.go:175: should be able to add container
     container_test.go:180: should be able to get container
@@ -4135,11 +4171,11 @@
     metadata_test.go:74: should json.Unmarshal fail for unsupported version
 --- PASS: TestMetadataMarshalUnmarshal (0.00s)
 === RUN   TestContainerState
+    status_test.go:68: TestCase "running state"
     status_test.go:68: TestCase "exited state"
     status_test.go:68: TestCase "unknown state"
     status_test.go:68: TestCase "unknown state because there is no timestamp set"
     status_test.go:68: TestCase "created state"
-    status_test.go:68: TestCase "running state"
 --- PASS: TestContainerState (0.00s)
 === RUN   TestStatusEncodeDecode
 --- PASS: TestStatusEncodeDecode (0.00s)
@@ -4154,7 +4190,7 @@
     status_test.go:185: delete status should be idempotent
 --- PASS: TestStatus (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store/container	0.096s
+ok  	github.com/containerd/containerd/pkg/cri/store/container	0.031s
 === RUN   TestInternalStore
     image_test.go:65: should be able to add image
     image_test.go:71: should be able to get image
@@ -4177,18 +4213,18 @@
     image_test.go:114: should not be able to add duplicated references
     image_test.go:122: should be able to delete image references
     image_test.go:128: should be able to delete image
---- PASS: TestInternalStore (0.01s)
+--- PASS: TestInternalStore (0.00s)
 === RUN   TestImageStore
+    image_test.go:224: TestCase "nothing should happen if a non-exist ref disappear"
     image_test.go:224: TestCase "new ref for an existing image"
     image_test.go:224: TestCase "new ref for a new image"
     image_test.go:224: TestCase "existing ref point to a new image"
     image_test.go:224: TestCase "existing ref disappear"
-    image_test.go:224: TestCase "nothing should happen if a non-exist ref disappear"
 --- PASS: TestImageStore (0.00s)
 === RUN   TestReferenceSorting
 --- PASS: TestReferenceSorting (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store/image	0.118s
+ok  	github.com/containerd/containerd/pkg/cri/store/image	0.075s
 === RUN   TestAddThenRemove
     label_test.go:28: selinux is not enabled
 --- SKIP: TestAddThenRemove (0.00s)
@@ -4196,7 +4232,7 @@
     label_test.go:71: selinux is not enabled
 --- SKIP: TestJunkData (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store/label	0.049s
+ok  	github.com/containerd/containerd/pkg/cri/store/label	0.077s
 === RUN   TestMetadataMarshalUnmarshal
     metadata_test.go:44: should be able to do json.marshal
     metadata_test.go:54: should be able to do MarshalJSON
@@ -4231,7 +4267,7 @@
 === RUN   TestStateStringConversion
 --- PASS: TestStateStringConversion (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store/sandbox	0.076s
+ok  	github.com/containerd/containerd/pkg/cri/store/sandbox	0.045s
 === RUN   TestSnapshotStore
     snapshot_test.go:57: should be able to add snapshot
     snapshot_test.go:62: should be able to get snapshot
@@ -4240,7 +4276,7 @@
     snapshot_test.go:80: get should return empty struct and ErrNotExist after deletion
 --- PASS: TestSnapshotStore (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/store/snapshot	0.034s
+ok  	github.com/containerd/containerd/pkg/cri/store/snapshot	0.071s
 ?   	github.com/containerd/containerd/pkg/cri/store/stats	[no test files]
 ?   	github.com/containerd/containerd/pkg/cri/store/truncindex	[no test files]
 ?   	github.com/containerd/containerd/pkg/cri/streaming	[no test files]
@@ -4268,20 +4304,20 @@
 === RUN   TestMergeStringSlices
 --- PASS: TestMergeStringSlices (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/cri/util	0.069s
+ok  	github.com/containerd/containerd/pkg/cri/util	0.066s
 ?   	github.com/containerd/containerd/pkg/dialer	[no test files]
 === RUN   TestParseTerms
 --- PASS: TestParseTerms (0.00s)
 === RUN   TestEvaluate
---- PASS: TestEvaluate (1.01s)
+--- PASS: TestEvaluate (1.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/failpoint	1.066s
+ok  	github.com/containerd/containerd/pkg/failpoint	1.049s
 === RUN   TestWrapReadCloser
 --- PASS: TestWrapReadCloser (0.00s)
 === RUN   TestWriteCloseInformer
 --- PASS: TestWriteCloseInformer (0.00s)
 === RUN   TestSerialWriteCloser
---- PASS: TestSerialWriteCloser (0.18s)
+--- PASS: TestSerialWriteCloser (0.22s)
 === RUN   TestEmptyWriterGroup
 --- PASS: TestEmptyWriterGroup (0.00s)
 === RUN   TestClosedWriterGroup
@@ -4291,7 +4327,7 @@
 === RUN   TestReplaceWriter
 --- PASS: TestReplaceWriter (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/ioutil	0.233s
+ok  	github.com/containerd/containerd/pkg/ioutil	0.281s
 === RUN   TestBasic
 === PAUSE TestBasic
 === RUN   TestReleasePanic
@@ -4305,11 +4341,11 @@
 === CONT  TestMultileAcquireOnKeys
 === CONT  TestReleasePanic
 --- PASS: TestReleasePanic (0.00s)
---- PASS: TestBasic (0.07s)
---- PASS: TestMultileAcquireOnKeys (0.28s)
---- PASS: TestMultiAcquireOnSameKey (0.55s)
+--- PASS: TestBasic (0.13s)
+--- PASS: TestMultileAcquireOnKeys (0.26s)
+--- PASS: TestMultiAcquireOnSameKey (0.43s)
 PASS
-ok  	github.com/containerd/containerd/pkg/kmutex	0.604s
+ok  	github.com/containerd/containerd/pkg/kmutex	0.499s
 ?   	github.com/containerd/containerd/pkg/netns	[no test files]
 ?   	github.com/containerd/containerd/pkg/oom	[no test files]
 ?   	github.com/containerd/containerd/pkg/oom/v1	[no test files]
@@ -4317,11 +4353,11 @@
 ?   	github.com/containerd/containerd/pkg/os	[no test files]
 ?   	github.com/containerd/containerd/pkg/os/testing	[no test files]
 === RUN   TestNewBinaryIO
---- PASS: TestNewBinaryIO (0.02s)
+--- PASS: TestNewBinaryIO (0.01s)
 === RUN   TestNewBinaryIOCleanup
 --- PASS: TestNewBinaryIOCleanup (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/process	0.076s
+ok  	github.com/containerd/containerd/pkg/process	0.050s
 ?   	github.com/containerd/containerd/pkg/progress	[no test files]
 === RUN   TestRegistrar
     registrar_test.go:29: should be able to reserve a name<->key mapping
@@ -4334,7 +4370,7 @@
     registrar_test.go:52: should be able to reserve same name/key name<->key
 --- PASS: TestRegistrar (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/registrar	0.054s
+ok  	github.com/containerd/containerd/pkg/registrar	0.064s
 ?   	github.com/containerd/containerd/pkg/runtimeoptions/v1	[no test files]
 ?   	github.com/containerd/containerd/pkg/schedcore	[no test files]
 ?   	github.com/containerd/containerd/pkg/seccomp	[no test files]
@@ -4348,7 +4384,7 @@
     --- PASS: TestImageLayersLabel/valid_number_of_layers (0.00s)
     --- PASS: TestImageLayersLabel/many_layers (0.00s)
 PASS
-ok  	github.com/containerd/containerd/pkg/snapshotters	0.043s
+ok  	github.com/containerd/containerd/pkg/snapshotters	0.069s
 ?   	github.com/containerd/containerd/pkg/stdio	[no test files]
 ?   	github.com/containerd/containerd/pkg/testutil	[no test files]
 ?   	github.com/containerd/containerd/pkg/timeout	[no test files]
@@ -4459,13 +4495,13 @@
     --- PASS: TestParseSelectorInvalid/linux/&arm (0.00s)
     --- PASS: TestParseSelectorInvalid/linux/arm/foo/bar (0.00s)
 PASS
-ok  	github.com/containerd/containerd/platforms	0.050s
+ok  	github.com/containerd/containerd/platforms	0.037s
 === RUN   TestContainerdPlugin
---- PASS: TestContainerdPlugin (0.09s)
+--- PASS: TestContainerdPlugin (0.07s)
 === RUN   TestPluginGraph
 --- PASS: TestPluginGraph (0.00s)
 PASS
-ok  	github.com/containerd/containerd/plugin	0.165s
+ok  	github.com/containerd/containerd/plugin	0.098s
 ?   	github.com/containerd/containerd/protobuf/plugin	[no test files]
 ?   	github.com/containerd/containerd/protobuf/plugin/fieldpath	[no test files]
 === RUN   TestReferenceParser
@@ -4497,12 +4533,12 @@
     --- PASS: TestReferenceParser/PunycodeWithDigest (0.00s)
     --- PASS: TestReferenceParser/SchemeDefined (0.00s)
 PASS
-ok  	github.com/containerd/containerd/reference	0.038s
+ok  	github.com/containerd/containerd/reference	0.027s
 ?   	github.com/containerd/containerd/reference/docker	[no test files]
 === RUN   TestContextCustomKeyPrefix
 === RUN   TestContextCustomKeyPrefix/normal_supported_case
 === RUN   TestContextCustomKeyPrefix/unknown_media_type
-time="2025-03-15T19:25:21-12:00" level=warning msg="reference for unknown type: we.dont.know.what.this.is"
+time="2026-04-19T03:53:00+14:00" level=warning msg="reference for unknown type: we.dont.know.what.this.is"
 === RUN   TestContextCustomKeyPrefix/overwrite_supported_media_type
 === RUN   TestContextCustomKeyPrefix/custom_media_type
 --- PASS: TestContextCustomKeyPrefix (0.00s)
@@ -4513,9 +4549,9 @@
 === RUN   TestSkipNonDistributableBlobs
 --- PASS: TestSkipNonDistributableBlobs (0.00s)
 PASS
-ok  	github.com/containerd/containerd/remotes	0.032s
+ok  	github.com/containerd/containerd/remotes	0.037s
 === RUN   TestFetcherOpen
---- PASS: TestFetcherOpen (0.00s)
+--- PASS: TestFetcherOpen (0.01s)
 === RUN   TestDockerFetcherOpen
 === RUN   TestDockerFetcherOpen/should_return_status_and_error.message_if_it_exists_if_the_registry_request_fails
 === RUN   TestDockerFetcherOpen/should_return_just_status_if_the_registry_request_fails_and_does_not_return_a_docker_error
@@ -4524,7 +4560,7 @@
 --- PASS: TestDockerFetcherOpen (0.01s)
     --- PASS: TestDockerFetcherOpen/should_return_status_and_error.message_if_it_exists_if_the_registry_request_fails (0.00s)
     --- PASS: TestDockerFetcherOpen/should_return_just_status_if_the_registry_request_fails_and_does_not_return_a_docker_error (0.00s)
-    --- PASS: TestDockerFetcherOpen/should_return_StatusRequestTimeout_after_5_retries (0.00s)
+    --- PASS: TestDockerFetcherOpen/should_return_StatusRequestTimeout_after_5_retries (0.01s)
     --- PASS: TestDockerFetcherOpen/should_return_StatusTooManyRequests_after_5_retries (0.00s)
 === RUN   TestAppendDistributionLabel
 --- PASS: TestAppendDistributionLabel (0.00s)
@@ -4537,7 +4573,7 @@
 === RUN   TestGetManifestPath
 --- PASS: TestGetManifestPath (0.00s)
 === RUN   TestPusherErrClosedRetry
---- PASS: TestPusherErrClosedRetry (0.01s)
+--- PASS: TestPusherErrClosedRetry (0.00s)
 === RUN   TestPusherErrReset
 --- PASS: TestPusherErrReset (0.00s)
 === RUN   Test_dockerPusher_push
@@ -4555,38 +4591,38 @@
 === RUN   TestHTTPResolver
 --- PASS: TestHTTPResolver (0.00s)
 === RUN   TestHTTPSResolver
---- PASS: TestHTTPSResolver (0.03s)
+--- PASS: TestHTTPSResolver (0.02s)
 === RUN   TestBasicResolver
---- PASS: TestBasicResolver (0.02s)
+--- PASS: TestBasicResolver (0.01s)
 === RUN   TestAnonymousTokenResolver
---- PASS: TestAnonymousTokenResolver (0.03s)
+--- PASS: TestAnonymousTokenResolver (0.02s)
 === RUN   TestBasicAuthTokenResolver
---- PASS: TestBasicAuthTokenResolver (0.04s)
+--- PASS: TestBasicAuthTokenResolver (0.02s)
 === RUN   TestRefreshTokenResolver
---- PASS: TestRefreshTokenResolver (0.04s)
+--- PASS: TestRefreshTokenResolver (0.03s)
 === RUN   TestFetchRefreshToken
 === RUN   TestFetchRefreshToken/POST
     resolver_test.go:792: POST mode: returning JSON "{\"access_token\":\"testAccessToken-testname\",\"refresh_token\":\"testRefreshToken-testname\",\"expires_in\":0,\"issued_at\":\"0001-01-01T00:00:00Z\",\"scope\":\"\"}", for form map[access_type:[offline] client_id:[containerd-client] grant_type:[password] password:[testPassword-testname] scope:[repository:testname:pull] service:[registry] username:[testUser-testname]]
 === RUN   TestFetchRefreshToken/GET
     resolver_test.go:758: GET mode: returning JSON "{\"token\":\"testAccessToken-testname-disable-post\",\"access_token\":\"testAccessToken-testname-disable-post\",\"expires_in\":0,\"issued_at\":\"0001-01-01T00:00:00Z\",\"refresh_token\":\"testRefreshToken-testname-disable-post\"}", for query map[offline_token:[true] scope:[repository:testname-disable-post:pull] service:[registry]]
---- PASS: TestFetchRefreshToken (0.05s)
-    --- PASS: TestFetchRefreshToken/POST (0.04s)
-    --- PASS: TestFetchRefreshToken/GET (0.01s)
+--- PASS: TestFetchRefreshToken (0.04s)
+    --- PASS: TestFetchRefreshToken/POST (0.02s)
+    --- PASS: TestFetchRefreshToken/GET (0.02s)
 === RUN   TestPostBasicAuthTokenResolver
 --- PASS: TestPostBasicAuthTokenResolver (0.02s)
 === RUN   TestBadTokenResolver
-time="2025-03-15T19:25:36-12:00" level=info msg="trying next host" error="pull access denied, repository does not exist or may require authorization: server message: insufficientscope: authorization failed" host="127.0.0.1:37291"
---- PASS: TestBadTokenResolver (0.02s)
+time="2026-04-19T03:53:03+14:00" level=info msg="trying next host" error="pull access denied, repository does not exist or may require authorization: server message: insufficientscope: authorization failed" host="127.0.0.1:38709"
+--- PASS: TestBadTokenResolver (0.01s)
 === RUN   TestHostFailureFallbackResolver
-time="2025-03-15T19:25:37-12:00" level=info msg="trying next host" error="failed to do request: Head \"http://127.0.0.1:46809/v2/testname/manifests/latest?ns=127.0.0.1%3A38549\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" host="127.0.0.1:46809"
+time="2026-04-19T03:53:04+14:00" level=info msg="trying next host" error="failed to do request: Head \"http://127.0.0.1:42609/v2/testname/manifests/latest?ns=127.0.0.1%3A34223\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" host="127.0.0.1:42609"
 --- PASS: TestHostFailureFallbackResolver (2.02s)
 === RUN   TestHostTLSFailureFallbackResolver
-time="2025-03-15T19:25:38-12:00" level=info msg="trying next host" error="failed to do request: Head \"https://127.0.0.1:35587/v2/testname/manifests/latest\": http: server gave HTTP response to HTTPS client" host="127.0.0.1:35587"
---- PASS: TestHostTLSFailureFallbackResolver (0.02s)
+time="2026-04-19T03:53:05+14:00" level=info msg="trying next host" error="failed to do request: Head \"https://127.0.0.1:46355/v2/testname/manifests/latest\": http: server gave HTTP response to HTTPS client" host="127.0.0.1:46355"
+--- PASS: TestHostTLSFailureFallbackResolver (0.01s)
 === RUN   TestResolveProxy
---- PASS: TestResolveProxy (0.02s)
+--- PASS: TestResolveProxy (0.01s)
 === RUN   TestResolveProxyFallback
-time="2025-03-15T19:25:38-12:00" level=info msg="trying next host - response was http.StatusNotFound" host="localhost:40405"
+time="2026-04-19T03:53:05+14:00" level=info msg="trying next host - response was http.StatusNotFound" host="localhost:42455"
 --- PASS: TestResolveProxyFallback (0.00s)
 === RUN   TestRepositoryScope
 === RUN   TestRepositoryScope/host/foo/bar:ignored
@@ -4599,15 +4635,15 @@
 === RUN   TestCustomScope
 --- PASS: TestCustomScope (0.00s)
 PASS
-ok  	github.com/containerd/containerd/remotes/docker	2.515s
+ok  	github.com/containerd/containerd/remotes/docker	2.360s
 === RUN   TestGenerateTokenOptions
 === RUN   TestGenerateTokenOptions/MultipleScopes
 === RUN   TestGenerateTokenOptions/SingleScope
 === RUN   TestGenerateTokenOptions/NoScope
 === RUN   TestGenerateTokenOptions/MissingRealm
 === RUN   TestGenerateTokenOptions/RealmParseError
---- PASS: TestGenerateTokenOptions (0.00s)
-    --- PASS: TestGenerateTokenOptions/MultipleScopes (0.00s)
+--- PASS: TestGenerateTokenOptions (0.01s)
+    --- PASS: TestGenerateTokenOptions/MultipleScopes (0.01s)
     --- PASS: TestGenerateTokenOptions/SingleScope (0.00s)
     --- PASS: TestGenerateTokenOptions/NoScope (0.00s)
     --- PASS: TestGenerateTokenOptions/MissingRealm (0.00s)
@@ -4621,21 +4657,21 @@
 === RUN   TestParseAuthHeader
 --- PASS: TestParseAuthHeader (0.00s)
 PASS
-ok  	github.com/containerd/containerd/remotes/docker/auth	0.089s
+ok  	github.com/containerd/containerd/remotes/docker/auth	0.053s
 === RUN   TestDefaultHosts
 --- PASS: TestDefaultHosts (0.00s)
 === RUN   TestParseHostFile
 --- PASS: TestParseHostFile (0.00s)
 === RUN   TestLoadCertFiles
+=== RUN   TestLoadCertFiles/cert_pair_only
 === RUN   TestLoadCertFiles/crt_only
 === RUN   TestLoadCertFiles/crt_and_cert_pair
-=== RUN   TestLoadCertFiles/cert_pair_only
 --- PASS: TestLoadCertFiles (0.00s)
+    --- PASS: TestLoadCertFiles/cert_pair_only (0.00s)
     --- PASS: TestLoadCertFiles/crt_only (0.00s)
     --- PASS: TestLoadCertFiles/crt_and_cert_pair (0.00s)
-    --- PASS: TestLoadCertFiles/cert_pair_only (0.00s)
 PASS
-ok  	github.com/containerd/containerd/remotes/docker/config	0.068s
+ok  	github.com/containerd/containerd/remotes/docker/config	0.090s
 ?   	github.com/containerd/containerd/remotes/docker/schema1	[no test files]
 ?   	github.com/containerd/containerd/remotes/errors	[no test files]
 ?   	github.com/containerd/containerd/rootfs	[no test files]
@@ -4661,7 +4697,7 @@
     --- PASS: TestRemappedGID/3 (0.00s)
     --- PASS: TestRemappedGID/4 (0.00s)
 PASS
-ok  	github.com/containerd/containerd/runtime/v1/linux	0.073s
+ok  	github.com/containerd/containerd/runtime/v1/linux	0.042s
 ?   	github.com/containerd/containerd/runtime/v1/shim	[no test files]
 ?   	github.com/containerd/containerd/runtime/v1/shim/client	[no test files]
 ?   	github.com/containerd/containerd/runtime/v1/shim/v1	[no test files]
@@ -4683,7 +4719,7 @@
 === RUN   TestCheckCopyShimLogError
 --- PASS: TestCheckCopyShimLogError (0.00s)
 PASS
-ok  	github.com/containerd/containerd/runtime/v2	0.048s
+ok  	github.com/containerd/containerd/runtime/v2	0.051s
 ?   	github.com/containerd/containerd/runtime/v2/example	[no test files]
 ?   	github.com/containerd/containerd/runtime/v2/logging	[no test files]
 ?   	github.com/containerd/containerd/runtime/v2/runc	[no test files]
@@ -4694,7 +4730,7 @@
 ?   	github.com/containerd/containerd/runtime/v2/runc/v1	[no test files]
 ?   	github.com/containerd/containerd/runtime/v2/runc/v2	[no test files]
 === RUN   TestRuntimeWithEmptyMaxEnvProcs
---- PASS: TestRuntimeWithEmptyMaxEnvProcs (0.01s)
+--- PASS: TestRuntimeWithEmptyMaxEnvProcs (0.00s)
 === RUN   TestRuntimeWithNonEmptyMaxEnvProcs
 --- PASS: TestRuntimeWithNonEmptyMaxEnvProcs (0.00s)
 === RUN   TestShimOptWithValue
@@ -4702,7 +4738,7 @@
 === RUN   TestChainUnaryServerInterceptors
 --- PASS: TestChainUnaryServerInterceptors (0.00s)
 PASS
-ok  	github.com/containerd/containerd/runtime/v2/shim	0.080s
+ok  	github.com/containerd/containerd/runtime/v2/shim	0.028s
 ?   	github.com/containerd/containerd/runtime/v2/task	[no test files]
 ?   	github.com/containerd/containerd/services	[no test files]
 ?   	github.com/containerd/containerd/services/containers	[no test files]
@@ -4723,7 +4759,7 @@
 === RUN   TestCreateTopLevelDirectoriesWithEmptyRootPath
 --- PASS: TestCreateTopLevelDirectoriesWithEmptyRootPath (0.00s)
 PASS
-ok  	github.com/containerd/containerd/services/server	0.111s
+ok  	github.com/containerd/containerd/services/server	0.087s
 === RUN   TestMergeConfigs
 --- PASS: TestMergeConfigs (0.00s)
 === RUN   TestResolveImports
@@ -4737,17 +4773,17 @@
 === RUN   TestDecodePlugin
 --- PASS: TestDecodePlugin (0.00s)
 === RUN   TestDecodePluginInV1Config
-time="2025-03-15T19:25:24-12:00" level=warning msg="containerd config version `1` has been deprecated and will be removed in containerd v2.0, please switch to version `2`, see https://github.com/containerd/containerd/blob/main/docs/PLUGINS.md#version-header"
+time="2026-04-19T03:53:03+14:00" level=warning msg="containerd config version `1` has been deprecated and will be removed in containerd v2.0, please switch to version `2`, see https://github.com/containerd/containerd/blob/main/docs/PLUGINS.md#version-header"
 --- PASS: TestDecodePluginInV1Config (0.00s)
 PASS
-ok  	github.com/containerd/containerd/services/server/config	0.066s
+ok  	github.com/containerd/containerd/services/server/config	0.051s
 ?   	github.com/containerd/containerd/services/snapshots	[no test files]
 ?   	github.com/containerd/containerd/services/tasks	[no test files]
 ?   	github.com/containerd/containerd/services/version	[no test files]
 ?   	github.com/containerd/containerd/snapshots	[no test files]
 testing: warning: no tests to run
 PASS
-ok  	github.com/containerd/containerd/snapshots/benchsuite	0.069s [no tests to run]
+ok  	github.com/containerd/containerd/snapshots/benchsuite	0.043s [no tests to run]
 === RUN   TestBtrfs
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestBtrfs (0.00s)
@@ -4755,7 +4791,7 @@
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestBtrfsMounts (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/btrfs	0.059s
+ok  	github.com/containerd/containerd/snapshots/btrfs	0.054s
 ?   	github.com/containerd/containerd/snapshots/btrfs/plugin	[no test files]
 === RUN   TestLoadConfig
 --- PASS: TestLoadConfig (0.00s)
@@ -4789,15 +4825,15 @@
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestPoolDevice (0.00s)
 === RUN   TestPoolDeviceMarkFaulty
-time="2025-03-15T19:25:25-12:00" level=warning msg="devmapper device \"1\" has invalid state \"unknown 0\", marking as faulty" dev_id=1 error= parent=
+time="2026-04-19T03:53:05+14:00" level=warning msg="devmapper device \"1\" has invalid state \"unknown 0\", marking as faulty" dev_id=1 error= parent=
 --- PASS: TestPoolDeviceMarkFaulty (0.00s)
 === RUN   TestSnapshotterSuite
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestSnapshotterSuite (0.00s)
 === RUN   TestMkfsExt4
---- PASS: TestMkfsExt4 (0.01s)
+--- PASS: TestMkfsExt4 (0.00s)
 === RUN   TestMkfsExt4NonDefault
---- PASS: TestMkfsExt4NonDefault (0.01s)
+--- PASS: TestMkfsExt4NonDefault (0.00s)
 === RUN   TestMkfsXfs
 --- PASS: TestMkfsXfs (0.00s)
 === RUN   TestMkfsXfsNonDefault
@@ -4806,28 +4842,28 @@
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestMultipleXfsMounts (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/devmapper	0.138s
+ok  	github.com/containerd/containerd/snapshots/devmapper	0.052s
 ?   	github.com/containerd/containerd/snapshots/devmapper/blkdiscard	[no test files]
 === RUN   TestDMSetup
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestDMSetup (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/devmapper/dmsetup	0.056s
+ok  	github.com/containerd/containerd/snapshots/devmapper/dmsetup	0.040s
 ?   	github.com/containerd/containerd/snapshots/devmapper/plugin	[no test files]
 === RUN   TestNaive
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestNaive (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/native	0.061s
+ok  	github.com/containerd/containerd/snapshots/native	0.039s
 ?   	github.com/containerd/containerd/snapshots/native/plugin	[no test files]
 === RUN   TestOverlay
     helpers_unix.go:42: skipping test that requires root
 --- SKIP: TestOverlay (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/overlay	0.084s
+ok  	github.com/containerd/containerd/snapshots/overlay	0.018s
 testing: warning: no tests to run
 PASS
-ok  	github.com/containerd/containerd/snapshots/overlay/overlayutils	0.066s [no tests to run]
+ok  	github.com/containerd/containerd/snapshots/overlay/overlayutils	0.032s [no tests to run]
 ?   	github.com/containerd/containerd/snapshots/overlay/plugin	[no test files]
 ?   	github.com/containerd/containerd/snapshots/proxy	[no test files]
 === RUN   TestMetastore
@@ -4866,7 +4902,7 @@
     --- PASS: TestMetastore/CreateActiveExist (0.00s)
     --- PASS: TestMetastore/CreateActiveFromActive (0.00s)
     --- PASS: TestMetastore/Commit (0.00s)
-    --- PASS: TestMetastore/CommitNotExist (0.01s)
+    --- PASS: TestMetastore/CommitNotExist (0.00s)
     --- PASS: TestMetastore/CommitExist (0.00s)
     --- PASS: TestMetastore/CommitCommitted (0.00s)
     --- PASS: TestMetastore/CommitViewFails (0.00s)
@@ -4875,19 +4911,19 @@
     --- PASS: TestMetastore/RemoveWithChildren (0.00s)
     --- PASS: TestMetastore/ParentIDs (0.00s)
 PASS
-ok  	github.com/containerd/containerd/snapshots/storage	0.059s
+ok  	github.com/containerd/containerd/snapshots/storage	0.019s
 ?   	github.com/containerd/containerd/snapshots/testsuite	[no test files]
 === RUN   TestSetPositiveOomScoreAdjustment
---- PASS: TestSetPositiveOomScoreAdjustment (0.02s)
+--- PASS: TestSetPositiveOomScoreAdjustment (0.00s)
 === RUN   TestSetNegativeOomScoreAdjustmentWhenPrivileged
     oom_linux_test.go:41: requires root and not running in user namespace
 --- SKIP: TestSetNegativeOomScoreAdjustmentWhenPrivileged (0.00s)
 === RUN   TestSetNegativeOomScoreAdjustmentWhenUnprivilegedHasNoEffect
---- PASS: TestSetNegativeOomScoreAdjustmentWhenUnprivilegedHasNoEffect (0.01s)
+--- PASS: TestSetNegativeOomScoreAdjustmentWhenUnprivilegedHasNoEffect (0.00s)
 === RUN   TestSetOOMScoreBoundaries
 --- PASS: TestSetOOMScoreBoundaries (0.00s)
 PASS
-ok  	github.com/containerd/containerd/sys	0.067s
+ok  	github.com/containerd/containerd/sys	0.013s
 ?   	github.com/containerd/containerd/sys/reaper	[no test files]
 ?   	github.com/containerd/containerd/tracing	[no test files]
 ?   	github.com/containerd/containerd/version	[no test files]
@@ -4923,9 +4959,9 @@
 dpkg-gencontrol: warning: package containerd: substitution variable ${misc:Static-Built-Using} unused, but is defined
    dh_md5sums -O--buildsystem=golang -O--builddirectory=_build
    dh_builddeb -O--buildsystem=golang -O--builddirectory=_build
-dpkg-deb: building package 'containerd' in '../containerd_1.6.20~ds1-1+deb12u1_arm64.deb'.
-dpkg-deb: building package 'containerd-dbgsym' in '../containerd-dbgsym_1.6.20~ds1-1+deb12u1_arm64.deb'.
 dpkg-deb: building package 'golang-github-containerd-containerd-dev' in '../golang-github-containerd-containerd-dev_1.6.20~ds1-1+deb12u1_all.deb'.
+dpkg-deb: building package 'containerd-dbgsym' in '../containerd-dbgsym_1.6.20~ds1-1+deb12u1_arm64.deb'.
+dpkg-deb: building package 'containerd' in '../containerd_1.6.20~ds1-1+deb12u1_arm64.deb'.
  dpkg-genbuildinfo --build=binary -O../containerd_1.6.20~ds1-1+deb12u1_arm64.buildinfo
  dpkg-genchanges --build=binary -O../containerd_1.6.20~ds1-1+deb12u1_arm64.changes
 dpkg-genchanges: info: binary-only upload (no source code included)
@@ -4933,12 +4969,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/3246693/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/2356780 and its subdirectories
-I: Current time: Sat Mar 15 19:27:19 -12 2025
-I: pbuilder-time-stamp: 1742110039
+I: removing directory /srv/workspace/pbuilder/3246693 and its subdirectories
+I: Current time: Sun Apr 19 03:53:57 +14 2026
+I: pbuilder-time-stamp: 1776520437