nerdctl is a Docker-compatible CLI designed to work with containerd, offering a familiar Docker-like experience with additional features.
It bridges the gap for building and managing Docker images as Kubernetes phases out Docker Engine, focusing on experimental and modern capabilities like lazy pulling and image encryption.
Key features of nerdctl include Docker-style CLI and Compose support, rootless and UserNS-Remap modes for security, lazy pulling and P2P image distribution, image encryption and signing, and advanced build support.
nerdctl v2.1 introduces UserNS-Remap mode and gomodjail sandboxing, highlighting its compatibility with containerd-based Kubernetes setups over tools like Docker and Podman.