---
name: "containerd-nerdctl-cli"
description: "Manage containerd runtimes directly with full Docker CLI compatibility and containerd features."
metadata:
  author: "containerd"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "use nerdctl run"
  - "switch containerd namespace"
  - "enable estargz lazy pulling nerdctl"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# containerd & nerdctl Docker-Compatible Management

Administers containerd using nerdctl: running containers, managing containerd namespaces (k8s.io vs default), inspecting IPFS and stargz lazy pulling (eStargz), and composing stacks with nerdctl compose.

## When to Invoke
Invoke this skill whenever you need to:
- use nerdctl run
- switch containerd namespace
- enable estargz lazy pulling nerdctl

## Execution SOP & Rules
1. Install nerdctl full bundle including CNI plugins and BuildKit daemon.
2. Query specific namespaces: nerdctl --namespace k8s.io ps to inspect pods managed by kubelet.
3. Launch container with lazy pull: nerdctl run --net host ghcr.io/stargz-containers/python:3.9-esgz.
4. Use nerdctl system prune to reclaim disk space across containerd content stores.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.