The final resolve is that containerd only be accessed over unix socket because the api is local to the machine.