Due to https://github.com/golang/go/issues/33405 containerd will leak fds as reported here https://github.com/containerd/containerd/issues/3481. As soon as go 1.12.8 is released we should update to it to fix this issue.