Announcing Flatcar Container Linux Stable release 2905.2.3, Beta release 2942.1.2, Alpha release 2983.0.0 and LTS-2021 release 2605.20.1
Flatcar Container Linux User
Hello,
We are pleased to announce a Flatcar Container Linux maintenance release for our Beta and Stable and LTS-2021 channel, as well as new major releases for our Alpha channel.
New Alpha release 2983.0.0
Update to CGroupsV2
As of Alpha version 2969.0.0, Flatcar Container Linux migrates to the unified cgroup hierarchy (aka CGroupsV2)! New nodes will utilize CGroupsV2 by default. Existing nodes remain on CGroupsV1 and need to be manually migrated to CGroupsV2. To learn more about CGroupsV2 on Flatcar Container Linux and the migration guide, please refer to https://kinvolk.io/docs/flatcar-container-linux/latest/container-runtimes/switching-to-unified-cgroups/
Changes since Alpha 2969.0.0
Security fixes
Linux (CVE-2021-3653, CVE-2021-3656, CVE-2021-38166)
openssl (CVE-2021-3711, CVE-2021-3712)
c-ares (CVE-2021-3672)
Bug Fixes
Re-enabled kernel config FS_ENCRYPTION (coreos-overlay#1212)
Fixed Perl in dev-container (coreos-overlay#1238)
Fixed containerd config after introduction of CGroupsV2 (coreos-overlay#1214)
Fixed path for amazon-ssm-agent in base-ec2.ign (coreos-overlay#1228)
flatcar-install: randomized OEM filesystem UUID if mounting fails (init#47)
Fixed null-pointer deref crash in Ignition when specifying the OEM filesystem without a label (ignition#25)
Fixed locksmith adhering to reboot window when getting the etcd lock (locksmith#10)
Changes
Added Azure Generation 2 VM support (coreos-overlay#1198)
Switched Docker ecosystem packages to go1.16 (coreos-overlay#1217)
Added lbzip2 binary to the image (coreos-overlay#1221)
flatcar-install uses lbzip2 if present, falls back on bzip2 if not (init#46)
Added Intel E800 series network adapter driver (coreos-overlay#1237)
Enabled 'audit' use flag for sys-libs/pam (coreos-overlay#1233)
Bumped etcd and flannel to respectively `3.5.0`, `0.14.0` to get multiarch images for arm64 support. Note for users of the old etcd v2 support: `ETCDCTL_API=2` must be set to use v2 store as well as `ETCD_ENABLE_V2=true` in the `etcd-member.service` - this support will be removed in `3.6.0` (coreos-overlay#1179)
Updates
Linux (5.10.61)
Linux firmware (20210818)
openssl (1.1.1l)
c-ares (1.17.2)
docker (20.10.8)
etcd (3.5.0)
flannel (0.14.0)
runc (1.0.2)
strace (5.12)
wa-linux-agent (2.3.1.1)
Note: Please note that ARM images remain experimental for now.
New Beta release 2942.1.2
Changes since Beta 2942.1.1
Security fixes
Linux (CVE-2021-3653, CVE-2021-3656, CVE-2021-38166)
openssl (CVE-2021-3711, CVE-2021-3712)
Bug Fixes
Re-enabled kernel config FS_ENCRYPTION (coreos-overlay#1212)
Fixed Perl in dev-container (coreos-overlay#1238)
Updates
New Stable release 2905.2.3
Changes since Stable 2905.2.2
Security fixes
Linux (CVE-2021-3653, CVE-2021-3656, CVE-2021-38166)
openssl (CVE-2021-3711, CVE-2021-3712)
Bug Fixes
Re-enabled kernel config FS_ENCRYPTION (coreos-overlay#1212)
Fixed Perl in dev-container (coreos-overlay#1238)
Updates
New LTS release 2605.20.1
Changes since LTS 2605.19.1
Security fixes
Linux (CVE-2021-3653, CVE-2021-3656, CVE-2021-38166)
openssl (CVE-2021-3711, CVE-2021-3712)
Updates
Best,
The Flatcar Container Linux maintainers