diff --git a/containerd/.signature b/containerd/.signature
index 42b81a7dc..81abf2d2f 100644
--- a/containerd/.signature
+++ b/containerd/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF32F0g7gRRCY3g2mwjH/0EOUO8U9dvmEyEl9PiCpTR9gOwrH9qnOWAyBB+MdK7uNJV0qvt2WpsY3TxJiiIAj14gs=
-SHA256 (Pkgfile) = 7d8a2be2ea01772eea3849c328baaeadc82ded9535758e5f629c64974860cb98
+RWSagIOpLGJF35XMviJVdDfephfcTTvlMR4J6HRYCTBhim/Jt8kGzUS7oDyFHuHNdfA0xHJvFCC33RIzq9kjevTw39qVYgqsywA=
+SHA256 (Pkgfile) = c0d7cb833ddb18e2c21865836b5b3fa1dac821048fd1b9a4f8d23e27327695aa
 SHA256 (.footprint) = fcb21e77eaefae687cbea41bdacbe47a1191c052138040fc15368af8bf7b436c
-SHA256 (containerd-1.7.19.tar.xz) = 5937a7266d3d97df3f2b64bf9ad13c0f746e81a982ca6149e1f060eb2dc38394
+SHA256 (containerd-1.7.20.tar.xz) = 2a5bddd786bacf394b8387a094055ac649f1ad7f209474fb43d60df4001d08fc
diff --git a/containerd/Pkgfile b/containerd/Pkgfile
index 1ec9ce1c6..18bb3381c 100644
--- a/containerd/Pkgfile
+++ b/containerd/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: go btrfs-progs git libseccomp
 
 name=containerd
-version=1.7.19
+version=1.7.20
 release=1
 source=(https://crux.nu/files/$name-$version.tar.xz)
 
@@ -16,7 +16,7 @@ build() {
     cd $name
     export GOPATH=$SRC
     # use the long commit hash here
-    make GIT_COMMIT=2bf793ef6dc9a18e00cb12efb64355c2c9d5eb41
+    make GIT_COMMIT=8fc6bcff51318944179630522a095cc9dbf9f353
     install -d -m 0755 $PKG/usr/bin
     install -m 0755 bin/* $PKG/usr/bin/
 }