Docker 29 enables the containerd image store (containerd snapshotter)
by default, which has critical instability issues with rootless Docker:
- "context deadline exceeded" when starting dockerd with many images
(moby/moby#48569)
- Snapshot GC holds locks for 30+ seconds, blocking container operations
(moby/moby#11021)
- Broken rootless overlayfs on kernels < 5.11 (moby/moby#53029)
Fixes:
1. Pin Docker to 28.x via APT preferences (Debian/Ubuntu)
2. Add "features": {"containerd-snapshotter": false} to daemon.json
3. Lower healthcheck disk threshold from 85% to 75% (prune sooner)
4. Increase prune frequency from daily to every 6 hours
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Documentation: WARNING — Ansible role changed but no docs updated
Tests: OK
Commit conventions: OK
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
## Automated PR Review
- Architecture compliance: OK
- Best practices: OK
- Security: OK
- i18n: OK
- Resource management: OK
- Documentation: WARNING — Ansible role changed but no docs updated
- Tests: OK
- Commit conventions: OK
No issues found by automated checks.
---
**Auto-merge:** If all CI checks pass, this PR will be merged automatically.
emil
approved these changes 2026-08-05 20:18:34 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
emo
emil
Closes GRM-157
Automated PR Review
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
Auto-approved: all CI checks passed (validate, molecule-tests).