# Prerequisites

## Kubernetes

If using Kubernetes, at least version `v1.22` is recommended. This is the first release that the CRI v1 API and the `RuntimeClass` left alpha.

## containerd

Kata requires a [CRI](https://kubernetes.io/docs/concepts/containers/cri/)-compatible container runtime. containerd is commonly used for Kata. We recommend installing containerd using your platform's package distribution mechanism. We recommend at least the latest version of containerd v2.1.x.[^1]


### Debian/Ubuntu

To install on Debian-based systems:

```sh
$ apt update
$ apt install containerd
$ systemctl status containerd
● containerd.service - containerd container runtime
     Loaded: loaded (/etc/systemd/system/containerd.service; enabled; preset: enabled)
    Drop-In: /etc/systemd/system/containerd.service.d
             └─http-proxy.conf
     Active: active (running) since Wed 2026-02-25 22:58:13 UTC; 5 days ago
       Docs: https://containerd.io
   Main PID: 3767885 (containerd)
      Tasks: 540
     Memory: 70.7G (peak: 70.8G)
        CPU: 4h 9min 26.153s
     CGroup: /runtime.slice/containerd.service
             ├─  12694 /usr/local/bin/container
```

### Fedora/RedHat

To install on Fedora-based systems:

```
$ yum install containerd
```

??? help

    Documentation assistance is requested for more specific instructions on Fedora systems.

### Pre-Built Releases

Many Linux distributions will not package the latest versions of containerd. If you find that your distribution provides very old versions of containerd, it's recommended to upgrade with the [pre-built releases](https://github.com/containerd/containerd/releases).

#### Executable

Download the latest release of containerd:

```sh
$ wget https://github.com/containerd/containerd/releases/download/v${VERSION}/containerd-${VERSION}-linux-${PLATFORM}.tar.gz

# Extract to the current directory
$ tar -xf ./containerd*.tar.gz

# Extract to root if you want it installed to its final location.
$ tar -C / -xf ./*.tar.gz
```

### Containerd Config

Containerd requires a config file at `/etc/containerd/config.toml`. This needs to be populated with a simple default config:

```sh
$ /usr/local/bin/containerd config default > /etc/containerd/config.toml
```

### Systemd Unit File

Install the systemd unit file:

```sh
$ wget -O /etc/systemd/system/containerd.service https://raw.githubusercontent.com/containerd/containerd/main/containerd.service
```

!!! info

    - You must modify the `ExecStart` line to the location of the installed containerd executable.
    - containerd's `PATH` variable must allow it to find `containerd-shim-kata-v2`. You can do this by either creating a symlink from `/usr/local/bin/containerd-shim-kata-v2` to `/opt/kata/bin/containerd-shim-kata-v2` or by modifying containerd's `PATH` variable to search in `/opt/kata/bin/`. See the Environment= command in systemd.exec(5) for further details.


Reload systemd and start containerd:

```sh
$ systemctl daemon-reload
$ systemctl enable --now containerd
$ systemctl start containerd
$ systemctl status containerd
```

More details can be found on the [containerd installation docs](https://github.com/containerd/containerd/blob/main/docs/getting-started.md).

### Enable CRI

If you're using Kubernetes, you must enable the containerd Container Runtime Interface (CRI) plugin:

```sh
$ ctr plugins ls | grep cri
io.containerd.cri.v1                      images                   -              ok
io.containerd.cri.v1                      runtime                  linux/amd64    ok
io.containerd.grpc.v1                     cri                      -              ok
```

If these are not enabled, you'll need to remove it from the `disabled_plugins` section of the containerd config.


[^1]: Kata makes use of containerd's drop-in config merging in `/etc/containerd/config.d/` which is only available starting from containerd v2. containerd v1 may work, but some Kata features will not work as expected.


## runc

The default `runc` runtime needs to be installed for non-kata containers. More details can be found at the [containerd docs](https://github.com/containerd/containerd/blob/979c80d8a5d7fc7be34102a1ada53ae5a0ff09e8/docs/RUNC.md).
