Kairos Io Kairos Versions Save

Backported fixes for agent:

• Bumps yip for duplicated name of steps (was causing unexpected issues with users sometimes) Issue: https://github.com/kairos-io/kairos/issues/2488

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.12	v2.8.13
system	kairos-agent	v2.8.12	v2.8.13

---

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.7...v3.0.8

Backported fixes for agent and immucore:

• Bumps yip for user id reuse
• Adds sync calls before and after mounting
• [UKI] Fixes hooks in uki install
• [UKI] Fixes mounting oem before running rootfs stage under uki

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.11	v2.8.12
system	kairos-agent	v2.8.11	v2.8.12
system	immucore	v0.1.25	v0.1.26
fips	immucore	v0.1.25	v0.1.26

---

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.6...v3.0.7

What's Changed

• fix(orin): disable ISCSI in the initramfs generation by @mudler in https://github.com/kairos-io/kairos/pull/2476

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.5...v3.0.6

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.4...v3.0.5

:warning: Known issues

:bug: Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 https://github.com/kairos-io/kairos/issues/2249

We haven't been able to address the following issues on Alpine: :bug: It's not possible to login on an Alpine 3.18 RPi #2439 🐛 Filesystem expansion on rpi4 doesn't work with Alpine https://github.com/kairos-io/kairos/issues/1995 🐛 cgroup_memory not mounted in Alpine rpi4 https://github.com/kairos-io/kairos/issues/2002 🐛 Upgrade on alpine arm errors https://github.com/kairos-io/kairos/issues/2135 🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop https://github.com/kairos-io/kairos/issues/2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• Fix Reboot hangs for UKI images #2384 by @Itxaka
• Remove snap from Ubuntu based images by @mauromorales in https://github.com/kairos-io/kairos/pull/2415

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.3...v3.0.4

:warning: Known issues

:bug: Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 https://github.com/kairos-io/kairos/issues/2249

We haven't been able to address the following issues on Alpine: :bug: It's not possible to login on an Alpine 3.18 RPi #2439 🐛 Filesystem expansion on rpi4 doesn't work with Alpine https://github.com/kairos-io/kairos/issues/1995 🐛 cgroup_memory not mounted in Alpine rpi4 https://github.com/kairos-io/kairos/issues/2002 🐛 Upgrade on alpine arm errors https://github.com/kairos-io/kairos/issues/2135 🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop https://github.com/kairos-io/kairos/issues/2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• Fixes issue with the bootentry command in the agent when dealing with UKI by @mauromorales in https://github.com/kairos-io/kairos/pull/2410

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.2...v3.0.3

[!CAUTION] NOTE: The OpenSUSE Tumbleweed flavor of this release was affected by the xz backdoor (https://nvd.nist.gov/vuln/detail/CVE-2024-3094). For this reason all affected artifacts have been removed, both from quay.io (container images) and from GitHub. If you used the Tumbleweed artifacts of Kairos 3.0.1 or 3.0.2 you should immediately stop the affected machines and re-install a version which is not affected. If those systems were exposed to the internet (if ssh was possible) and they included passwords or keys, it's advised that you rotate those credentials.

Read more:

• https://news.opensuse.org/2024/03/29/xz-backdoor/
• https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

:warning: Known issues

:bug: Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 https://github.com/kairos-io/kairos/issues/2249

We haven't been able to address the following issues on Alpine: :bug: It's not possible to login on an Alpine 3.18 RPi #2439 🐛 Filesystem expansion on rpi4 doesn't work with Alpine https://github.com/kairos-io/kairos/issues/1995 🐛 cgroup_memory not mounted in Alpine rpi4 https://github.com/kairos-io/kairos/issues/2002 🐛 Upgrade on alpine arm errors https://github.com/kairos-io/kairos/issues/2135 🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop https://github.com/kairos-io/kairos/issues/2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• :robot: Run fedora and ubuntu uki tests by @Itxaka in https://github.com/kairos-io/kairos/pull/2366
• Replace a full test with a line in another test by @jimmykarily in https://github.com/kairos-io/kairos/pull/2368
• Reduce fedora uki image size by @mauromorales in https://github.com/kairos-io/kairos/pull/2365
• chore(deps): update earthly/earthly docker tag to v0.8.6 by @renovate in https://github.com/kairos-io/kairos/pull/2359
• :robot: Allow manual testing of branches for uki jobs by @Itxaka in https://github.com/kairos-io/kairos/pull/2373
• Do installation of kernel at the end of dockerfile by @mauromorales in https://github.com/kairos-io/kairos/pull/2374
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.8 by @renovate in https://github.com/kairos-io/kairos/pull/2382
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.0.27 by @renovate in https://github.com/kairos-io/kairos/pull/2383
• chore(deps): update dependency kairos-io/kairos-framework to v2.7.19 by @renovate in https://github.com/kairos-io/kairos/pull/2391
• Test that after-reset is run when in UKI mode by @jimmykarily in https://github.com/kairos-io/kairos/pull/2331
• :robot: Bump osbuilder and drop keys by @Itxaka in https://github.com/kairos-io/kairos/pull/2381
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.0.28 by @renovate in https://github.com/kairos-io/kairos/pull/2394
• bump framework image by @mudler in https://github.com/kairos-io/kairos/pull/2407

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.1...v3.0.2

[!CAUTION] NOTE: The OpenSUSE Tumbleweed flavor of this release was affected by the xz backdoor (https://nvd.nist.gov/vuln/detail/CVE-2024-3094). For this reason all affected artifacts have been removed, both from quay.io (container images) and from GitHub. If you used the Tumbleweed artifacts of Kairos 3.0.1 or 3.0.2 you should immediately stop the affected machines and re-install a version which is not affected. If those systems were exposed to the internet (if ssh was possible) and they included passwords or keys, it's advised that you rotate those credentials.

Read more:

• https://news.opensuse.org/2024/03/29/xz-backdoor/
• https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

:warning: Known issues

:bug: Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 https://github.com/kairos-io/kairos/issues/2249

We haven't been able to address the following issues on Alpine: :bug: It's not possible to login on an Alpine 3.18 RPi #2439 🐛 Filesystem expansion on rpi4 doesn't work with Alpine https://github.com/kairos-io/kairos/issues/1995 🐛 cgroup_memory not mounted in Alpine rpi4 https://github.com/kairos-io/kairos/issues/2002 🐛 Upgrade on alpine arm errors https://github.com/kairos-io/kairos/issues/2135 🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop https://github.com/kairos-io/kairos/issues/2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• Add docs versioning item in the template by @mauromorales in https://github.com/kairos-io/kairos/pull/2317
• Update earthly/earthly Docker tag to v0.8.5 by @renovate in https://github.com/kairos-io/kairos/pull/2333
• Install nohang from source for ubuntu by @liyimeng in https://github.com/kairos-io/kairos/pull/2318
• Update softprops/action-gh-release digest to 9d7c94c by @renovate in https://github.com/kairos-io/kairos/pull/2320
• Update koalaman/shellcheck-alpine Docker tag to v0.10.0 by @renovate in https://github.com/kairos-io/kairos/pull/2321
• Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.6 - autoclosed by @renovate in https://github.com/kairos-io/kairos/pull/2339
• Update dependency kairos-io/kairos-framework to v2.7.15 by @renovate in https://github.com/kairos-io/kairos/pull/2344
• Move nfs-common to common build target in ubuntu flavor by @kaiehrhardt in https://github.com/kairos-io/kairos/pull/2340
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.7 by @renovate in https://github.com/kairos-io/kairos/pull/2350
• chore(deps): update quay.io/luet/base docker tag to v0.35.1 by @renovate in https://github.com/kairos-io/kairos/pull/2352
• Bump framework to v2.7.17 by @mauromorales in https://github.com/kairos-io/kairos/pull/2357

New Contributors

• @liyimeng made their first contribution in https://github.com/kairos-io/kairos/pull/2318
• @kaiehrhardt made their first contribution in https://github.com/kairos-io/kairos/pull/2340

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.0...v3.0.1

:warning: Known issues

:bug: Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 https://github.com/kairos-io/kairos/issues/2249

We haven't been able to address the following issues on Alpine: 🐛 Filesystem expansion on rpi4 doesn't work with Alpine https://github.com/kairos-io/kairos/issues/1995 🐛 cgroup_memory not mounted in Alpine rpi4 https://github.com/kairos-io/kairos/issues/2002 🐛 Upgrade on alpine arm errors https://github.com/kairos-io/kairos/issues/2135 🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop https://github.com/kairos-io/kairos/issues/2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

New and noteworthy

• :sparkles: Enable secureboot for all flavors (minus alpine) by @Itxaka in https://github.com/kairos-io/kairos/pull/2140
• :book: Docs now have versioning starting with 3.0.0

What's Changed

• Add scp to fedora by @jimmykarily in https://github.com/kairos-io/kairos/pull/2154
• Remove duplicated zfs installation on rhel by @mauromorales in https://github.com/kairos-io/kairos/pull/2161
• [uki] Provide proper artifacts for auto-key-enrollment by @Itxaka in https://github.com/kairos-io/kairos/pull/2172
• :robot: Allow passing flags to enki and bump version by @Itxaka in https://github.com/kairos-io/kairos/pull/2193
• :bug: Do not recompress compressed firmware by @Itxaka in https://github.com/kairos-io/kairos/pull/2237
• Have different compression depending on the ubuntu release by @mauromorales in https://github.com/kairos-io/kairos/pull/2270
• Slim down Ubuntu by @mauromorales in https://github.com/kairos-io/kairos/pull/2284
• Publish uki base image by @mauromorales in https://github.com/kairos-io/kairos/pull/2290

Full Changelog: https://github.com/kairos-io/kairos/compare/v2.5.0...v3.0.0

What's Changed

• Have different compression depending on the ubuntu release by @mauromorales in https://github.com/kairos-io/kairos/pull/2270
• Update earthly/earthly Docker tag to v0.8.4 by @renovate in https://github.com/kairos-io/kairos/pull/2276
• Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.2 by @renovate in https://github.com/kairos-io/kairos/pull/2277
• Update dependency kairos-io/kairos-framework to v2.7.4 by @renovate in https://github.com/kairos-io/kairos/pull/2278
• Slim down Ubuntu by @mauromorales in https://github.com/kairos-io/kairos/pull/2284
• Bump framework to use compressed binaries by @mauromorales in https://github.com/kairos-io/kairos/pull/2289
• Update quay.io/kairos/osbuilder-tools Docker tag to v0.200.4 by @renovate in https://github.com/kairos-io/kairos/pull/2280
• Update actions/download-artifact action to v4.1.3 by @renovate in https://github.com/kairos-io/kairos/pull/2288
• Publish uki base image by @mauromorales in https://github.com/kairos-io/kairos/pull/2290
• Update dependency kairos-io/kairos-framework to v2.7.7 by @renovate in https://github.com/kairos-io/kairos/pull/2294
• Add dracut-live to Ubuntu arm64 22+ by @mauromorales in https://github.com/kairos-io/kairos/pull/2296
• Update module github.com/kairos-io/kairos-sdk to v0.0.26 by @renovate in https://github.com/kairos-io/kairos/pull/2298
• Update dependency kairos-io/kairos-framework to v2.7.9 by @renovate in https://github.com/kairos-io/kairos/pull/2299
• Fix uki test by @Itxaka in https://github.com/kairos-io/kairos/pull/2302
• Update actions/download-artifact action to v4.1.4 by @renovate in https://github.com/kairos-io/kairos/pull/2303
• Add Ubuntu standard build on master by @mauromorales in https://github.com/kairos-io/kairos/pull/2306

Full Changelog: https://github.com/kairos-io/kairos/compare/v3.0.0-alpha3...v3.0.0-beta1