@dmcgowan @estesp @cpuguy83 I think this fix would be good to have in containerd/2.0 rc1 tag.
We hit the following error with containerd rc0 if golang 1.22 is installed on the local machine:

"PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image "k8s.gcr.io/pause@sha256:85cfebc79dccc7a0e56680778a614b29a0b1c2ae98d4b1efc746764c04d5656c": failed to extract layer sha256:854c34fa52f62f6d21267a43ce3af03d90cf0af6d61df2df7107b80e5ac86c81: SetFileInformationByHandle \\?\C:\Users\jstur\AppData\Local\Temp\hcs1087947868\Hives.$wcidirs$: Invalid access to memory location.: unknown" image="k8s.gcr.io/pause@sha256:85cfebc79dccc7a0e56680778a614b29a0b1c2ae98d4b1efc746764c04d5656c"

This hcsshim update brings in a new version of go-winio that fixes it.