v3.0.11

Full Changelog: v3.0.10...v3.0.11

v3.0.10

Updated

• Bumps framework to v2.7.32
• Bumps kairos-agent to v2.8.14 (part of the framework)

Fixes

• Prevent unwanted yaml fields to be marshalled: Fixes some step duplication when triggering the install via events like providers do
• Avoid adding an extra line to os-release output: We were adding an extra line at the end of the os-release file, which some software had problems dealing with

Improvements

• kairos-agent state will now show SecureBoot state of the node (on/off)
• kairos-agent state will now show the common name of the EFI certificates in the node if any
• kairos-agent state will now show a list of encrypted partitions by label and by device if any

Full Changelog: v3.0.9...v3.0.10

v3.0.9

• 🐛 Fix broken pipeline for arm rpi Tumbleweed (caused by Python package being much bigger) by @mauromorales f1aa0ac
• 🐛 Move nfs-utils to common build target in opensuse flavor by @kaiehrhardt #2495
• 🐛 UKI custom mounts breaking the cos-layout file by @kreeuwijk kairos-io/packages#839 (actual fix) release fix (c95475c)
• ✨ Ubuntu 24.04 artifacts by @mauromorales #2527

Full Changelog: v3.0.8...v3.0.9

v3.0.8

Backported fixes for agent:

• Bumps yip for duplicated name of steps (was causing unexpected issues with users sometimes) Issue: #2488

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.12	v2.8.13
system	kairos-agent	v2.8.12	v2.8.13

---

Full Changelog: v3.0.7...v3.0.8

v3.0.7

Backported fixes for agent and immucore:

• Bumps yip for user id reuse
• Adds sync calls before and after mounting
• [UKI] Fixes hooks in uki install
• [UKI] Fixes mounting oem before running rootfs stage under uki

Updated packages

Category	Name	Old version	New Version
fips	kairos-agent	v2.8.11	v2.8.12
system	kairos-agent	v2.8.11	v2.8.12
system	immucore	v0.1.25	v0.1.26
fips	immucore	v0.1.25	v0.1.26

---

Full Changelog: v3.0.6...v3.0.7

v3.0.6

What's Changed

• fix(orin): disable ISCSI in the initramfs generation by @mudler in #2476

Full Changelog: v3.0.5...v3.0.6

v3.0.5

Full Changelog: v3.0.4...v3.0.5

v3.0.4

⚠️ Known issues

🐛 Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 #2249

We haven't been able to address the following issues on Alpine:
🐛 It's not possible to login on an Alpine 3.18 RPi #2439
🐛 Filesystem expansion on rpi4 doesn't work with Alpine #1995
🐛 cgroup_memory not mounted in Alpine rpi4 #2002
🐛 Upgrade on alpine arm errors #2135
🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop #2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• Fix Reboot hangs for UKI images #2384 by @Itxaka
• Remove snap from Ubuntu based images by @mauromorales in #2415

Full Changelog: v3.0.3...v3.0.4

v3.0.3

⚠️ Known issues

🐛 Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 #2249

We haven't been able to address the following issues on Alpine:
🐛 It's not possible to login on an Alpine 3.18 RPi #2439
🐛 Filesystem expansion on rpi4 doesn't work with Alpine #1995
🐛 cgroup_memory not mounted in Alpine rpi4 #2002
🐛 Upgrade on alpine arm errors #2135
🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop #2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• Fixes issue with the bootentry command in the agent when dealing with UKI by @mauromorales in #2410

Full Changelog: v3.0.2...v3.0.3

v3.0.2

Caution

NOTE: The OpenSUSE Tumbleweed flavor of this release was affected by the xz backdoor (https://nvd.nist.gov/vuln/detail/CVE-2024-3094). For this reason all affected artifacts have been removed, both from quay.io (container images) and from GitHub. If you used the Tumbleweed artifacts of Kairos 3.0.1 or 3.0.2 you should immediately stop the affected machines and re-install a version which is not affected. If those systems were exposed to the internet (if ssh was possible) and they included passwords or keys, it's advised that you rotate those credentials.

Read more:

• https://news.opensuse.org/2024/03/29/xz-backdoor/
• https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

⚠️ Known issues

🐛 Raspberry: EFI booting no longer supported on kernels shipped with ubuntu > 22.04 #2249

We haven't been able to address the following issues on Alpine:
🐛 It's not possible to login on an Alpine 3.18 RPi #2439
🐛 Filesystem expansion on rpi4 doesn't work with Alpine #1995
🐛 cgroup_memory not mounted in Alpine rpi4 #2002
🐛 Upgrade on alpine arm errors #2135
🐛 reset from the GRUB menu on alpine, gets stuck in an endless loop #2136

Deprecation warnings:

Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml

What's Changed

• 🤖 Run fedora and ubuntu uki tests by @Itxaka in #2366
• Replace a full test with a line in another test by @jimmykarily in #2368
• Reduce fedora uki image size by @mauromorales in #2365
• chore(deps): update earthly/earthly docker tag to v0.8.6 by @renovate in #2359
• 🤖 Allow manual testing of branches for uki jobs by @Itxaka in #2373
• Do installation of kernel at the end of dockerfile by @mauromorales in #2374
• chore(deps): update quay.io/kairos/osbuilder-tools docker tag to v0.200.8 by @renovate in #2382
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.0.27 by @renovate in #2383
• chore(deps): update dependency kairos-io/kairos-framework to v2.7.19 by @renovate in #2391
• Test that after-reset is run when in UKI mode by @jimmykarily in #2331
• 🤖 Bump osbuilder and drop keys by @Itxaka in #2381
• fix(deps): update module github.com/kairos-io/kairos-sdk to v0.0.28 by @renovate in #2394
• bump framework image by @mudler in #2407

Full Changelog: v3.0.1...v3.0.2