v2.4.3-rc4

What's Changed

• ⬆️ Update module github.com/kairos-io/kairos-sdk to v0.0.18 by @renovate in #2053
• ⬆️ Update repositories by @ci-robbot in #2059
• ✨ Add labels to kairos container images by @mauromorales in #2061

Full Changelog: v2.4.3-rc3...v2.4.3-rc4

v2.4.3-rc3

What's Changed

• ⬆️ Update repositories by @ci-robbot in #2046

Full Changelog: v2.4.3-rc2...v2.4.3-rc3

v2.4.3-rc2

What's Changed

• ⬆️ Update aquasec/trivy Docker tag to v0.47.0 by @renovate in #1918
• ⬆️ Bump repos by @Itxaka in #2047
• 🐛 kairos-io/packages#557
• 🐛 kairos-io/packages@0f9e981
• 🐛 kairos-io/packages#553

Full Changelog: v2.4.3-rc1...v2.4.3-rc2

v2.4.3-rc1

What's Changed

• 🐛 Fix arch name in arm artifacts by @mauromorales in #2011
• 🐛 Catch agent issue 174 by @jimmykarily in #2017
• 🐛 Check for duplicate entries in generated Kairos config by @jimmykarily in #2023
• ✨ Build and release multi arch framework images by @mauromorales in #2024
• ✨ Move Earthly logic into Dockerfiles by @mauromorales in #2008
• ⬆️ Update earthly/earthly Docker tag to v0.7.22 by @renovate in #2029
• ⬆️ Update module github.com/kairos-io/kairos-sdk to v0.0.16 by @renovate in #2022
• ⬆️ Update repositories by @ci-robbot in #2014
• ⬆️ Update repositories by @ci-robbot in #2042
• ⬆️ Bump osbuilder tools by @Itxaka in #2044

Full Changelog: v2.4.2...v2.4.3-rc1

v2.4.2

⚠️ There was an issue with the name of the arm images, you can read more about it here: #2009

What's Changed

• Release artifacts now have more consistent and clear naming

• Release container image are built with the correct architecture (there was a mistake in the previous 2 releases)

• Improve uki iso stuff by @Itxaka in #1854

• 🤖 Add target to save local uki artifacts by @Itxaka in #1880

• 🎨 Provide bootargs via package by @Itxaka in #1901

• 🐛 Do not install grub-bios on arm64 alpine dockerfile by @Itxaka in #1909

• 🐛 Add missing deps for initramfs by @Itxaka in #1905

• Fix alpine dockerfile by @Itxaka in #1915

• Fix alpine dockerfile by @Itxaka in #1916

• ✨ Add pure alpine flavor by @Itxaka in #1465

• 🎨 Build alpine initrd during image building by @Itxaka in #1924

• 🐛 Fix Dockerfile for ubuntu 20 lts non-hwe by @antongisli and @mauromorales #1927

• 🤖 Fix leftovers from alpine PR by @Itxaka in #1923

• 🎨 Use a single framework image by @Itxaka in #1929

• 🤖 Fix image workflow by @Itxaka in #1936

• Lint yaml indentation by @mauromorales in #1944

• 🤖 Apply base image fixes to arm by @mauromorales in #1943

• 1898 byoi by @jimmykarily in #1912

• 🤖 Fix security scans missing from master build by @Itxaka in #1948

• 🤖 Drop uki test as its no longer valid by @Itxaka in #1949

• Fix debian repository by @jimmykarily in #1951

• 🐛 Install ca-certificates on debian base image first by @Itxaka in #1952

• Introduce RHEL family by @mauromorales in #1953

• 🤖 Run bundles test on tumbleweed by @Itxaka in #1961

• Merge opnesuse families into one by @mauromorales in #1957

• Remove AlmaLinux from building by @mauromorales in #1965

• ⬆️ Update luet packages by @ci-robbot in

  • #1876
  • #1940
  • #1971
  • #1997
  • #2001

• 🐛 Enable tun module on boot for alpine by @Itxaka in #1968

• Merge 2 jobs in one and fix references to renamed opensuse-leap family by @jimmykarily in #1969

• 🤖 Fix provider tests by @Itxaka in #1973

• Update module github.com/kairos-io/kairos-sdk to v0.0.15 by @renovate in #1972

• Fix download path for ipxe by @mauromorales in #1986

• ⬆️ Update repositories by @ci-robbot in #1987

• Pass ARTIFACT down to os-release template by @jimmykarily in #1992

Full Changelog: v2.4.1...v2.4.2

Known issues:

• #1994
• #1995
• #1998
• #1999
• #2002
• Some keyboards may not before the OS is loaded (e.g. during grub menu) on raspberry Pi 4 on Alpine. @jimmykarily's mechanical ducky keyboard for example. The raspberry pi keyboard works so it's not a general issue.

v2.4.2-rc2

Pass ARTIFACT down to os-release template (#1992)

v2.4.2-rc1

Add missing `\`

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>

v2.4.1

⚠️ NOTE: Due to problems with our pipelines after merging the provider-kairos CI to kairos repo, some opensuse-leap images in quay which are supposed to be for amd64, were overwritten by arm pipelines and the images are now for arm64. E.g. quay.io/kairos/kairos-opensuse-leap:v2.4.0-k3svlatest-k3s1. This will be fixed in v2.4.2 where naming of artifacts is a lot clearer

Overview and important notes

• apt install was failing on Ubuntu systems. The issue seems to come upstream but in the meantime we decided to not remove the /var/cache directory to keep the same experience than before. For what we were able to tell, the impact on space wasn't much and users can always add some script to do the cleaning afterwards if they see fit. Ref: #1849
• kairos-agent introduces the `--source flag for various commands. Ref: kairos-io/kairos-agent#152
• Some flavors were unable to install giving an "out of space" error. This was caused by the size calculation not taking into account symlinks. This has been addressed but the calculation can still be improved. Ref: #1841 #1862
• Raspberry Pi auto-reset is now working. Ref. #1767
• Yip was updated to address some issues with name construction for devices like mmcblk0p1 and nvme0n1p1. Ref: mudler/yip#110
• A new converged bootargs for all flavors was merged and if you notice any issues, please report them.

New features and improvements

• ✨ Single magical bootargs by @Itxaka in #1824

Fixes

• 🐛 Provide a generic bootargs in the framework for fips by @Itxaka in #1818
• 🐛 Change where systemd-sysext extensions are installed by @jimmykarily in #1823
• 🐛 Do not remove cache dir by @mauromorales in #1855

Documentation

• 📖 Add wifi example by @Itxaka in #1817
• 📖 Fix ubuntu fips example by @Itxaka in #1834

Packages included in this release

Name	Version
container/kubectl	1.28.3
dracut/immucore	0.1.6
init-svc/systemd	0.9.0
k8s/k3s-systemd	1.27.3+2
static/grub-config	0.9
static/kairos-overlay-files	1.0.13
system/grub2-efi	2.06-150404
system/immucore	0.1.6
system/kairos-agent	2.4.1
system/kcrypt	0.7.0
system/kcrypt-challenger	0.6.0
system/provider-kairos	2.4.0
system/suc-upgrade	0.2.1
utils/edgevpn	0.24.6
utils/k9s	0.28.0
utils/kube-vip	0.6.3
utils/nerdctl	1.7.0

CI improvements

• 🤖 Fix systemd-fips framework trying to copy non-existing file by @Itxaka in #1844
• 🤖 Do not upload orin image on master by @mauromorales in #1873

Full Changelog: v2.4.0...v2.4.1

v2.4.0

⚠️ NOTE: Due to problems with our pipelines after merging the provider-kairos CI to kairos repo, some opensuse-leap images in quay which are supposed to be for amd64, were overwritten by arm pipelines and the images are now for arm64. E.g. quay.io/kairos/kairos-opensuse-leap:v2.4.0-k3svlatest-k3s1. This will be fixed in v2.4.2 where naming of artifacts is a lot clearer

Overview and important notes

• ⚠️ From this release the provider-kairos images are now released from here instead of its own separated repo. We now provider core image and standard images in our releases. core means the plain Kairos image as we use to release here, standard is the Kairos image + provider-kairos bundled. If you used to get your images from https://github.com/kairos-io/provider-kairos you can now get them all from this repo directly.
• ⚠️ We have limited the number of k3s releases that we bundle and release to align with upstream releases. Now its limited to 3 minor release versions, same as upstream Kubernetes
• ⚠️ RPI images build has been split into rpi3 and rpi4 due to partitioning issues (only rpi4 supports GPT). For now we only release rpi4 images. For rpi3 images, the user need to use Earthly to build its own by passing --MODEL=rpi3 when building.
• 🎨 Kairos overlay files now come from luet packages directly instead of being along in the repository.
• 🎨 K3S packages now come from luet packages directly instead of being installed on the fly during building. This allows us to have a better upgrade cadence and to have the versions more under our control.
• Kairos-agent has been updated to v2.2.11 which brings the following improvements and features
  • ✨ Single source for configuration: We used to have 2 different files to configure install/upgrade/reset behaviour (/etc/elemental/config.yaml and cloud-config file). That has been merged and all configuration of agent behaviour is now done via the cloud-config. You can see the full reference in our docs. If you have override anything in your image by setting the /etc/elemental/config.yaml please migrate that config into your cloud-config
  • ✨ Create dirs in rootfs: We noticed that some users needed to create dirs in the rootfs but as our system is immutable they were unable to do so. There is now a new option in the configuration that allows creating dirs in the rootfs during install or upgrade for those corner cases in which they are needed. See our docs the extra-dirs-rootfs key.
  • ✨ Upgrade workflow while booting from passive: Update workflow used to be the same when runing from active or passive, but that could lead to issues and a broken system as it was upgrading passive as well. Now when upgrading the system from the passive boot image, only the active image will be updated to avoid overwriting a know bootable passive image.
  • ✨ Auto partition and image size: No more fixed sizes for partitions and images! Now the agent will calculate the optimal size by analyzing the source for the install and creating the proper partitions to hold the images on them.
  • ✨Overridable partition and image size: Dont like our auto image size? Do you want to override it to set it yourself? Now its possible to override partition and image sizes via cloud config directly and set the sizes for each action (install/upgrade/reset) so there is maximum flexibility to configure your system.
  • 🎨 Improve unnatended reset: In some cases it was blocking the terminal and not rebooting correctly. We have now added flags to make unnatended reset work in any terminal/service and reboot automatically so it has gained more flexibility to work in all situations.
  • 🎨 run-stage command: Fixed several underlying issues with cloud provider metadata, user creation and layout partition and expansion.
  • 🎨 Allow upgrading recovery: We noticed that recovery was no longer being able to be upgraded as we were not exposing the flags to do so. Now its possible to upgrade recovery only by calling upgrade with the --recovery flag. Normal upgrade also has gained a warning to advise the user to remember to upgrade the recovery.

Known issues

• ubuntu-20-lts flavor on rpi is currently not able to bring the eth0 interface. No workaround at the moment.
• automatic expansion of the last partition doesn't work in some cases (#1831)

New features and improvements

• 🐧 Add Debian ARM RPi flavor by @mauromorales in #1554
• 🐧 Separate rpi3 from rpi4 by @Itxaka in #1705
• 🌱 Release standard images by @jimmykarily in #1689
• 🌱 Add /var/lib/containerd to bind paths by @Itxaka in #1706
• 🎨 Drop scripts and rework ipxe by @Itxaka in #1735
• 🎨 Bundle bootargs with framework images by @Itxaka in #1796
• 🎨 Drop elemental config file by @Itxaka in #1629
• 🎨 Drop files-iso folder from iso building by @Itxaka in #1727
• 🎨 Fully remove machine-id and systemd-firstboot by @Itxaka in #1702
• ✨ Refactor Dockerfiles for Ubuntu based flavors by @mauromorales in #1656
• ✨ Refactor Dockerfiles by @mauromorales in #1703
• ✨ Introduce new naming convention for artifacts by @mauromorales in #1625
• ✨ Bundle luet versions in the framework by @Itxaka in #1748
• ✨ Move logic to overlays by @jimmykarily in #1738
• ✨ Easy option to build non-hwe kernels by @mauromorales in #1781

Fixes

• 🐛 duplicate repository definition by @mudler in #1659
• 🐛 Stop kairos services in proper time by @Itxaka in #1643
• 🐛 Add missing packages by @mauromorales in #1658
• 🐛 Fix bootargs matcher for rpi by @Itxaka in #1810
• 🐛 Fix rpi partition sizes for upgrade by @Itxaka in #1786
• 🐛 Bring back the bootargs.cfg files to the base image by @jimmykarily in #1756
• 🐛 Install cryptsetup also on opensuse rpi by @mauromorales in #1782
• 🐛 Add missing standard arm rpi flavors by @mauromorales in #1764
• 🐛 Fix rpi4 serial by @jimmykarily in #1768
• 🐛 Install the right k3s package based on the init system by @jimmykarily in #1802
• 🐛 Add growpart to base images by @Itxaka in #1806
• 🐛 Fix secureboot livecd images by @Itxaka in #1712

Documentation

• 📖 Update README and drop duplicated content from community by @mudler in #1649

Packages included in this release

Name	Version
bundles/kairos-overlay-files	1.0.6
container/kubectl	1.28.1
dracut/immucore	0.1.4
dracut/network-legacy	0.9
dracut/sysext	0.9
init-svc/systemd	0.8.0
static/grub-config	0.7
systemd-default/network	1.0
system/grub2-efi	2.06-150404
system/immucore	0.1.4
system/kairos-agent	2.2.11
system/ provider-kairos	2.4.0
system/suc-upgrade	0.2.1
system/kcrypt	0.7.0
system/kcrypt-challenger	0.5.0
utils/kube-vip	0.6.2
utils/nerdctl	1.5.0
utils/k9s	0.27.4
utils/edgevpn	0.23.1

CI improvements

• 🤖 Build provider in kairos and bring tests by @Itxaka in #1592
• 🤖 Use reusable jobs by @mauromorales in #1587
• 🤖 Add simple UKI test by @Itxaka in #1619
• 🤖 Fix+move image size test by @Itxaka in #1648
• 🤖 Fix provider tests by @Itxaka in #1674
• 🤖 Use proper job for the matrix get in framework by @Itxaka in #1679
• 🤖 Add raw image target to earthly by @Itxaka in #1675
• 🤖 Add missing targetarch argument by @mauromorales in #1670
• 🤖 Notify of master failures via slack by @Itxaka in #1616
• 🤖 Add guards to UKI test by @Itxaka in #1632
• 🤖 Keep distro calculation in sync with provider repo by @mauromorales in #1655
• 🤖 Use our (paid) kvm workers by @jimmykarily in #1709
• 🤖 Fix arm pipeline dependency by @mauromorales in #1710
• 🤖 Use one...

v2.4.0-rc3

What's Changed

• ⬆️ Update repositories by @ci-robbot in #1809
  • Brings new immucore with latest yip
  • Brings new kairos-agent with latest yip
• 🐛 Fix bootargs matcher for rpi by @Itxaka in #1810

Full Changelog: v2.4.0-rc2...v2.4.0-rc3