|
| 1 | +architectures: |
| 2 | +- amd64 |
| 3 | +- arm64 |
| 4 | +channel: alpha |
| 5 | +github_release: |
| 6 | + assets: [] |
| 7 | + assets_url: https://api.github.com/repos/flatcar/scripts/releases/130946868/assets |
| 8 | + author: |
| 9 | + avatar_url: https://avatars.githubusercontent.com/u/28657343?v=4 |
| 10 | + events_url: https://api.github.com/users/tormath1/events{/privacy} |
| 11 | + followers_url: https://api.github.com/users/tormath1/followers |
| 12 | + following_url: https://api.github.com/users/tormath1/following{/other_user} |
| 13 | + gists_url: https://api.github.com/users/tormath1/gists{/gist_id} |
| 14 | + gravatar_id: '' |
| 15 | + html_url: https://github.com/tormath1 |
| 16 | + id: 28657343 |
| 17 | + login: tormath1 |
| 18 | + node_id: MDQ6VXNlcjI4NjU3MzQz |
| 19 | + organizations_url: https://api.github.com/users/tormath1/orgs |
| 20 | + received_events_url: https://api.github.com/users/tormath1/received_events |
| 21 | + repos_url: https://api.github.com/users/tormath1/repos |
| 22 | + site_admin: false |
| 23 | + starred_url: https://api.github.com/users/tormath1/starred{/owner}{/repo} |
| 24 | + subscriptions_url: https://api.github.com/users/tormath1/subscriptions |
| 25 | + type: User |
| 26 | + url: https://api.github.com/users/tormath1 |
| 27 | + body: "**This release removes the legacy \"torcx\" image customisation and replaces\ |
| 28 | + \ this feature with systemd-sysext. Torcx enabled users to deploy custom docker\ |
| 29 | + \ versions; however, it required special packaging using the Flatcar SDK.** Please\ |
| 30 | + \ refer to the \"Changes\" section below for details.\r\n\r\n**This release ships\ |
| 31 | + \ a major Docker update: Docker was upgraded to version 24 (from version 20 in\ |
| 32 | + \ the previous release). Please see the \"Changes\" section below for details.**\r\ |
| 33 | + \n\r\n _Changes since **Alpha 3760.0.0**_\r\n \r\n #### Security fixes:\r\n \r\ |
| 34 | + \n - Linux ([CVE-2023-35827](https://nvd.nist.gov/vuln/detail/CVE-2023-35827),\ |
| 35 | + \ [CVE-2023-46813](https://nvd.nist.gov/vuln/detail/CVE-2023-46813), [CVE-2023-46862](https://nvd.nist.gov/vuln/detail/CVE-2023-46862),\ |
| 36 | + \ [CVE-2023-5178](https://nvd.nist.gov/vuln/detail/CVE-2023-5178), [CVE-2023-5717](https://nvd.nist.gov/vuln/detail/CVE-2023-5717))\r\ |
| 37 | + \n - VMWare: open-vm-tools ([CVE-2023-34058](https://nvd.nist.gov/vuln/detail/CVE-2023-34058),\ |
| 38 | + \ [CVE-2023-34059](https://nvd.nist.gov/vuln/detail/CVE-2023-34059))\r\n - nghttp2\ |
| 39 | + \ ([CVE-2023-44487](https://nvd.nist.gov/vuln/detail/CVE-2023-44487))\r\n - samba\ |
| 40 | + \ ([CVE-2023-4091](https://nvd.nist.gov/vuln/detail/CVE-2023-4091))\r\n - zlib\ |
| 41 | + \ ([CVE-2023-45853](https://nvd.nist.gov/vuln/detail/CVE-2023-45853))\r\n \r\n\ |
| 42 | + \ #### Bug fixes:\r\n \r\n - Fixed iterating over the OEM update payload signatures\ |
| 43 | + \ which prevented the AWS OEM update to 3745.x.y ([update-engine#31](https://github.com/flatcar/update_engine/pull/31))\r\ |
| 44 | + \n - Made `sshkeys.service` more robust to only run `[email protected]`\ |
| 45 | + \ when not masked and also retry on failure ([init#112](https://github.com/flatcar/init/pull/112))\r\ |
| 46 | + \n - Set TTY used for fetching server_context to RAW mode before running cloudinit\ |
| 47 | + \ on cloudsigma ([scripts#1280](https://github.com/flatcar/scripts/pull/1280))\r\ |
| 48 | + \n \r\n #### Changes:\r\n \r\n - **Torcx, the mechanism to provide a custom\ |
| 49 | + \ Docker version, was replaced by systemd-sysext in the OS image**. Learn more\ |
| 50 | + \ about sysext and how to customise OS images [here](https://www.flatcar.org/docs/latest/provisioning/sysext/).\r\ |
| 51 | + \n - Torcx entered deprecation 2 years ago in favour of [deploying plain Docker\ |
| 52 | + \ binaries](https://www.flatcar.org/docs/latest/container-runtimes/use-a-custom-docker-or-containerd-version/)\r\ |
| 53 | + \n (which is now also a legacy option because systemd-sysext offers a more\ |
| 54 | + \ robust and better structured way of customisation, including OS independent\ |
| 55 | + \ updates).\r\n - Torcx has been removed entirely; if you use Torcx to extend\ |
| 56 | + \ the Flatcar base OS image, please refer to our [conversion script](https://www.flatcar.org/docs/latest/provisioning/sysext/#torcx-deprecation)\ |
| 57 | + \ and to the sysext documentation mentioned above for migrating.\r\n - Consequently,\ |
| 58 | + \ `update_engine` will not perform torcx sanity checks post-update anymore.\r\n\ |
| 59 | + \ - Relevant changes: [scripts#1216](https://github.com/flatcar/scripts/pull/1216),\ |
| 60 | + \ [update_engine#30](https://github.com/flatcar/update_engine/pull/30), [Mantle#466](https://github.com/flatcar/mantle/pull/466),\ |
| 61 | + \ [Mantle#465](https://github.com/flatcar/mantle/pull/465).\r\n- cri-tools, runc,\ |
| 62 | + \ containerd, docker, and docker-cli are now built from Gentoo upstream ebuilds.\ |
| 63 | + \ Docker received a major version upgrade - it was updated to Docker 24 (from\ |
| 64 | + \ Docker 20; see \"updates\").\r\n - **NOTE:** The docker btrfs storage driver\ |
| 65 | + \ has been de-prioritised; BTRFS backed storage will now default to the `overlay2`\ |
| 66 | + \ driver\r\n ([changelog](https://docs.docker.com/engine/release-notes/23.0/#bug-fixes-and-enhancements-6),\ |
| 67 | + \ [upstream pr](https://github.com/moby/moby/pull/42661)).\r\n Using the btrfs\ |
| 68 | + \ driver can still be enforced by creating a respective [docker config](https://docs.docker.com/storage/storagedriver/btrfs-driver/#configure-docker-to-use-the-btrfs-storage-driver)\ |
| 69 | + \ at `/etc/docker/daemon.json`.\r\n - **NOTE:** If you are already using btrfs-backed\ |
| 70 | + \ Docker storage and are upgrading to this new version, Docker will automatically\ |
| 71 | + \ use the `btrfs` storage driver for backwards-compatibility with your deployment.\r\ |
| 72 | + \n - **Docker will remove the `btrfs` driver entirely in a future version.\ |
| 73 | + \ Please consider migrating your deployments to the `overlay2` driver.**\r\n -\ |
| 74 | + \ Brightbox: The regular OpenStack image should now be used, it includes Afterburn\ |
| 75 | + \ for instance metadata attributes\r\n - OpenStack: An uncompressed image is provided\ |
| 76 | + \ for simpler import (since the images use qcow2 inline compression, there is\ |
| 77 | + \ no benefit in using the `.gz` or `.bz2` images)\r\n\r\n #### Updates:\r\n \r\ |
| 78 | + \n - Azure: WALinuxAgent ([v2.9.1.1](https://github.com/Azure/WALinuxAgent/releases/tag/v2.9.1.1))\r\ |
| 79 | + \n - DEV, AZURE: python ([3.11.6](https://docs.python.org/release/3.11.6/whatsnew/changelog.html#python-3-11-6))\r\ |
| 80 | + \n - DEV: iperf ([3.15](https://github.com/esnet/iperf/releases/tag/3.15))\r\n\ |
| 81 | + \ - DEV: smartmontools ([7.4](https://www.smartmontools.org/browser/tags/RELEASE_7_4/smartmontools/NEWS))\r\ |
| 82 | + \n - Go ([1.20.11](https://go.dev/doc/devel/release#go1.20.11))\r\n - Linux ([6.1.62](https://lwn.net/Articles/950700)\ |
| 83 | + \ (includes [6.1.61](https://lwn.net/Articles/949826), [6.1.60](https://lwn.net/Articles/948817)\ |
| 84 | + \ and [6.1.59](https://lwn.net/Articles/948297)))\r\n - Linux Firmware ([20231111](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20231111)\ |
| 85 | + \ (includes [20231030](https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/tag/?h=20231030)))\r\ |
| 86 | + \n - SDK: Rust ([1.73.0](https://github.com/rust-lang/rust/releases/tag/1.73.0))\r\ |
| 87 | + \n - SDK: python packaging ([23.2](https://github.com/pypa/packaging/releases/tag/23.2)),\ |
| 88 | + \ platformdirs ([3.11.0](https://github.com/platformdirs/platformdirs/releases/tag/3.11.0))\ |
| 89 | + \ \r\n - VMWare: open-vm-tools ([12.3.5](https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5))\r\ |
| 90 | + \n - containerd ([1.7.9](https://github.com/containerd/containerd/releases/tag/v1.7.9)\ |
| 91 | + \ (includes [1.7.8](https://github.com/containerd/containerd/releases/tag/v1.7.8)))\r\ |
| 92 | + \n - cri-tools ([1.27.0](https://github.com/kubernetes-sigs/cri-tools/releases/tag/v1.27.0))\r\ |
| 93 | + \n - ding-libs ([0.6.2](https://github.com/SSSD/ding-libs/releases/tag/0.6.2))\r\ |
| 94 | + \n - docker ([24.0.6](https://docs.docker.com/engine/release-notes/24.0/), includes\ |
| 95 | + \ changes from [23.0](https://docs.docker.com/engine/release-notes/23.0/))\r\n\ |
| 96 | + \ - ethtool ([6.5](https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/tree/NEWS?h=v6.5))\r\ |
| 97 | + \n - hwdata ([v0.375](https://github.com/vcrhonek/hwdata/releases/tag/v0.375)\ |
| 98 | + \ (includes [0.374](https://github.com/vcrhonek/hwdata/commits/v0.374)))\r\n -\ |
| 99 | + \ iproute2 ([6.5.0](https://marc.info/?l=linux-netdev&m=169401822317373&w=2))\r\ |
| 100 | + \n - json-c ([0.17](https://github.com/json-c/json-c/blob/json-c-0.17-20230812/ChangeLog))\r\ |
| 101 | + \n - libffi ([3.4.4](https://github.com/libffi/libffi/releases/tag/v3.4.4) (includes\ |
| 102 | + \ [3.4.2](https://github.com/libffi/libffi/releases/tag/v3.4.2) and [3.4.3](https://github.com/libffi/libffi/releases/tag/v3.4.3)))\r\ |
| 103 | + \n - liblinear (246)\r\n - libsodium ([1.0.19](https://github.com/jedisct1/libsodium/releases/tag/1.0.19-RELEASE))\r\ |
| 104 | + \n - libunistring ([1.1](https://git.savannah.gnu.org/gitweb/?p=libunistring.git;a=blob;f=NEWS;h=5a43ddd7011d62a952733f6c0b7ad52aa4f385c7;hb=8006860b710aae2e8442088c3ddc7d819dfa8ac7))\r\ |
| 105 | + \n - mpc ([1.3.1](https://sympa.inria.fr/sympa/arc/mpc-discuss/2022-12/msg00049.html)\ |
| 106 | + \ (includes [1.3.0](https://sympa.inria.fr/sympa/arc/mpc-discuss/2022-12/msg00028.html))\r\ |
| 107 | + \n - mpfr ([4.2.1](https://gitlab.inria.fr/mpfr/mpfr/-/blob/4.2.1/NEWS))\r\n -\ |
| 108 | + \ nghttp2 ([1.57.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0) (includes\ |
| 109 | + \ [1.52.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0), [1.53.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.53.0),\ |
| 110 | + \ [1.54.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.54.0), [1.55.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.55.0),\ |
| 111 | + \ [1.55.1](https://github.com/nghttp2/nghttp2/releases/tag/v1.55.1) and [1.56.0](https://github.com/nghttp2/nghttp2/releases/tag/v1.56.0)))\r\ |
| 112 | + \n - nspr ([4.35](https://hg.mozilla.org/projects/nspr/log/b563bfc16c887c48b038b7b441fcc4e40a126d3b))\r\ |
| 113 | + \n - ntp ([4.2.8p17](https://www.ntp.org/support/securitynotice/4_2_8p17-release-announcement/))\r\ |
| 114 | + \n - nvme-cli ([v2.6](https://github.com/linux-nvme/nvme-cli/releases/tag/v2.6),\ |
| 115 | + \ libnvme [v1.6](https://github.com/linux-nvme/libnvme/releases/tag/v1.6))\r\n\ |
| 116 | + \ - protobuf ([21.12](https://github.com/protocolbuffers/protobuf/releases/tag/v21.12)\ |
| 117 | + \ (includes [21.10](https://github.com/protocolbuffers/protobuf/releases/tag/v21.10)\ |
| 118 | + \ and [21.11](https://github.com/protocolbuffers/protobuf/releases/tag/v21.11)))\r\ |
| 119 | + \n - samba ([4.18.8](https://www.samba.org/samba/history/samba-4.18.8.html))\r\ |
| 120 | + \n - sqlite ([3.43.2](https://www.sqlite.org/releaselog/3_43_2.html))\r\n - thin-provisioning-tools\ |
| 121 | + \ ([1.0.6](https://github.com/jthornber/thin-provisioning-tools/blob/v1.0.6/CHANGES))" |
| 122 | + created_at: '2023-11-20T16:11:03Z' |
| 123 | + draft: false |
| 124 | + html_url: https://github.com/flatcar/scripts/releases/tag/alpha-3794.0.0 |
| 125 | + id: 130946868 |
| 126 | + name: '' |
| 127 | + node_id: RE_kwDOB2MTHs4Hzhc0 |
| 128 | + prerelease: false |
| 129 | + published_at: '2023-11-22T07:53:31Z' |
| 130 | + tag_name: alpha-3794.0.0 |
| 131 | + tarball_url: https://api.github.com/repos/flatcar/scripts/tarball/alpha-3794.0.0 |
| 132 | + target_commitish: main |
| 133 | + upload_url: https://uploads.github.com/repos/flatcar/scripts/releases/130946868/assets{?name,label} |
| 134 | + url: https://api.github.com/repos/flatcar/scripts/releases/130946868 |
| 135 | + zipball_url: https://api.github.com/repos/flatcar/scripts/zipball/alpha-3794.0.0 |
| 136 | +image_packages: |
| 137 | + ignition: 2.15.0 |
| 138 | + kernel: 6.1.62 |
| 139 | + systemd: '252' |
| 140 | +release: 3794.0.0 |
| 141 | +version: 3794.0.0 |
0 commit comments