upgrade containerd, fuse overlayfs, go

[BenTheElder]

No description provided.

[BenTheElder]

should be safe ™️

[stmcginnis]

/lgtm
/approve
/hold

Go ahead with unfreeze when comfortable. ;)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BenTheElder, stmcginnis

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [BenTheElder,stmcginnis]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[BenTheElder]

I guess let's roll this in a few PRs since there's no rush, we can let the automated build push the base image next

mostly just picking up some "easy" "safe" updates ahead of our next release (at the very least I want to align one to k8s 1.34)

/hold cancel

thanks!

[k8s-ci-robot]

@BenTheElder: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-kind-e2e-kubernetes-1-29	3857d78	link	true	/test pull-kind-e2e-kubernetes-1-29
pull-kind-e2e-kubernetes-1-30	3857d78	link	true	/test pull-kind-e2e-kubernetes-1-30
pull-kind-e2e-kubernetes-1-28	3857d78	link	true	/test pull-kind-e2e-kubernetes-1-28

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[BenTheElder]

those are expected, we're going to have to patch the CI and/or drop them, it is kubernetes/kubernetes#133261

[BenTheElder]

will look at the 1.28..1.29 CI in a bit

[BenTheElder]

wednesday is also the 1.34 branch cut, it would be a good time to rotate the CI jobs and make sure we stand up the 1.34 jobs for this repo

[BenTheElder]

the postsubmit didn't run? https://prow.k8s.io/?repo=kubernetes-sigs%2Fkind&type=postsubmit

[aojea]

I'm having issues with containerd version 2.1.1 having segfaults, I'm seeing this in kube-network-policies CI that createas a bunch of pods with multiple containers inside very quickly

Aug 13 21:16:32 kind-worker containerd[111]: time="2025-08-13T21:16:32.109203046Z" level=info msg="starting containerd" revision=cb1076646aa3740577fafbf3d914198b7fe8e3f7 version=v2.1.1
Aug 13 21:18:09 kind-worker systemd[1]: containerd.service: Main process exited, code=dumped, status=11/SEGV
Aug 13 21:18:09 kind-worker systemd[1]: containerd.service: Failed with result 'core-dump'.

If I build containerd from latest in the 2.1 release and 2.1.4 does not have the problem, I need to confirm if is still one containerd versions