Containerd - v1.6.21

* [release/1.6] Prepare release notes for v1.6.21 ([#8463](https://github.com/containerd/containerd/pull/8463)) * [`9226c362a`](https://github.com/containerd/containerd/commit/9226c362a92b9a19860a3facc3eaeb0d2ec22e0c) Add release notes for v1.6.21 * [release/1.6] update go to go1.19.9 ([#8469](https://github.com/containerd/containerd/pull/8469)) * [`39566aade`](https://github.com/containerd/containerd/commit/39566aadecc45abcfa242e41ad7bf07142f49c8c) [release/1.6] update go to go1.19.9 * [release/1.6] fix the task setting the runtime path ([#8454](https://github.com/containerd/containerd/pull/8454)) * [`e8840f688`](https://github.com/containerd/containerd/commit/e8840f688ae402bef461963321d63cf9cf6fbb34) skip TestContainerStartWithAbsRuntimePath if the runtime is v1 * [`75ab094de`](https://github.com/containerd/containerd/commit/75ab094de81b2d6806434e2f9ac94cb409e36314) integration: add container start test using abs runtime path * [`f49254f0b`](https://github.com/containerd/containerd/commit/f49254f0b7e17951c1be6e8a8063eb3f47175cd5) WithRuntimePath uses the TaskInfo.RuntimePath field * [release/1.6 backport] update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450)) * [`ccb51ff26`](https://github.com/containerd/containerd/commit/ccb51ff26971c10f88f8e594aeb8d29159f93e82) update runc binary to v1.1.7 * [release/1.6] Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456)) * [`95d31551d`](https://github.com/containerd/containerd/commit/95d31551d0f7b1a842bcb87b2c2916fda52f07a6) Remove entry for container from container store on error * [release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403)) * [`c33eb574d`](https://github.com/containerd/containerd/commit/c33eb574dbc064ad8556512fff6b2cd81e510101) oci: partially restore comment on read-only mounts for uid/gid uses * [release/1.6 ] Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247)) * [`bc2e01303`](https://github.com/containerd/containerd/commit/bc2e01303b7103d7fe81a97caadc224102db1460) Fix argsEscaped tests * [`8b81d5acc`](https://github.com/containerd/containerd/commit/8b81d5acca2e6f390af99756128392253c5d0a5c) Add ArgsEscaped support for CRI * [release/1.6 backport] update runc binary to v1.1.6 ([#8385](https://github.com/containerd/containerd/pull/8385)) * [`57d953482`](https://github.com/containerd/containerd/commit/57d953482083cb99c5814f5c414641599aa7c206) update runc binary to v1.1.6 * [release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357)) * [`fb5e663d0`](https://github.com/containerd/containerd/commit/fb5e663d0d4e7e5091e2dedfa079c1a8f310f0bb) oci: Use WithReadonlyTempMount when adding users/groups * [release/1.6] update go to go1.19.8 ([#8353](https://github.com/containerd/containerd/pull/8353)) * [`26efb8fd5`](https://github.com/containerd/containerd/commit/26efb8fd53de5bac26b28f4a2b8d8adf284ba7c2) [release/1.6] update go to go1.19.8 * [release/1.6] archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345)) * [`ec13b497e`](https://github.com/containerd/containerd/commit/ec13b497ee7fba96d892637b75bdfd1932e64f12) export: add test for WithSkipDockerManifest * [`d1f3771c4`](https://github.com/containerd/containerd/commit/d1f3771c41470b3460b37edad9e8776b913f02e5) archive: consistently respect value of WithSkipDockerManifest