The runc maintainers have indicated that the libcontainer package is not intended for external consumption, and because of that has an "unstable" API.

We should reduce our use of this dependency.

• libcontainer/cgroups Use the container/cgroups package (https://github.com/containerd/cgroups) instead of libcontainer/cgroups (where possible), e.g. see Fix setting swaplimit=true without checking memory.swap.max #42071 (comment).
  • identify what functionality is provided by libcontainer/cgroups that is not provided by containerd/cgroups
• libcontainer/configs
  • device parts we need have moved into libcontainer/devices: vendor: github.com/opencontainers/runc v1.0.0-rc95 #42143
  • still used by libcontainer/cgroups
• libcontainer/devices
  • still used by libcontainer/configs
• libcontainer/utils
  • still used by libcontainer/cgroups
• libcontainer/system
  • removed through vendor: github.com/opencontainers/runc v1.2.0 #47668
• libcontainer/devices used for oci.Device, oci.DevicesFromPath(). Need to look what's needed (and if this can be replaced with code from containerd; oci.DeviceFromPath() switch to use containerd implementation #43055
• libcontainer/userns
  • used by libcontainer/cgroups libcontainer/userns: migrate to github.com/moby/sys/userns opencontainers/runc#4350
  • partially addressed through; migrate to github.com/moby/sys/userns #48307, migrate to github.com/moby/sys/user/userns #48170
  • removed through vendor: github.com/opencontainers/runc v1.2.0 #47668
• libcontainer/nsenter is not used, but vendored because it has c code
• libcontainer/user Is still needed; perhaps this package should live elsewhere (also used by containerd);
  • migrate to github.com/moby/sys/user #46711
  • removed through vendor: github.com/opencontainers/runc v1.2.0 #47668