[Release-1.28] - Bump containerd to v1.7.22

[brandond]

Backport fix for Bump containerd to v1.7.22

• Bump containerd to v1.7.22 #6995

[aganesh-suse]

PR link: #7004

[brandond]

fixed link in PR

[aganesh-suse]

Validated on release-1.28 branch with commit 6985775

Environment Details

Infrastructure

• Cloud
• Hosted

Node(s) CPU architecture, OS, and Version:

$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04 LTS"

$ uname -m
x86_64

Cluster Configuration:

1 server

Server Flags

server_flags   = "profile: cis\nselinux: true\npod-security-admission-config-file: /etc/rancher/rke2/custom-psa.yaml\ncni: flannel"

Testing Steps

1. Copy config.yaml

$ sudo mkdir -p /etc/rancher/rke2 && sudo cp config.yaml /etc/rancher/rke2

2. Install RKE2

curl -sfL https://get.rke2.io | sudo INSTALL_RKE2_COMMIT='6985775d4af424a558220f714b705a50aa9b0026' INSTALL_RKE2_TYPE='server' INSTALL_RKE2_METHOD=tar sh -

3. Start the RKE2 service

$ sudo systemctl enable --now rke2-server

4. Verify containerd version: v1.7.22

Validation Results:

• rke2 version used for validation:

$ rke2 -v
rke2 version v1.28.14+dev.6985775d (6985775d4af424a558220f714b705a50aa9b0026)
go version go1.22.6 X:boringcrypto

$ find /var/lib/rancher/rke2/data/ -type f -name containerd -exec {} --version \;
containerd github.com/k3s-io/containerd v1.7.22-k3s1 d10f42149eca0b47964ba660f4049ba59cab93cd

$ /var/lib/rancher/rke2/bin/kubectl --kubeconfig /etc/rancher/rke2/rke2.yaml get node -o yaml | grep containerd -A1
      containerRuntimeVersion: containerd://1.7.22-k3s1
      kernelVersion: 6.8.0-1012-aws