CHANGELOG.md

v12.3.0 (2026-01-21)

OS Changes

• Replace amazon-ecr-containerd-resolver with Docker resolver in host-ctr (#760)
• Add MPS control daemon support to nvidia-k8s-device-plugin (#789)
• Add trn3 device ids to pciclient (#800)
• Switch to using Go built-in runtime FIPS support (#783)

Third Party Package Updates

• Update docker-cli-29, docker-engine-29 (#785)
• Patch containerd-2.1 to update GRPC (#801)
• Update libnvme, xfsprogs, nvme-cli, makedumpfile, keyutils, e2fsprogs (#794)
• Update readline, libxcrypt, liburcu, libcap (#795)
• Update ecr-credential-helper (#796)

Build Changes

• Bump bottlerocket-settings-models to 0.20.0 (#803)
• Update bottlerocket-sdk to v0.70.0 (#783)

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#805)

v12.2.0 (2026-01-08)

OS Changes

Third Party Package Updates

• Update aws-signing-helper, aws-iam-authenticator, containerd-1.7, containerd-2.1 (#784)

Build Changes

• Update twoliter to v0.16.0 (#793)

Orchestrator Changes

Kubernetes

• Update kubernetes-1.35 package with official sources (#792)

• Update to latest versions of kubernetes packages (#784)

v12.1.0 (2026-01-02)

OS Changes

• Add audit-rules subpackage to libaudit and journald-audit subpackage to systemd (#781)
• Add rocm-container-toolkit package for AMD GPU support (#778)
• Override SBOM generation for Rust packages (#787)

Third Party Package Updates

• Update cni-plugins to v1.9.0 (#774)
• Update rocm-k8s-device-plugin to v1.31.0.9 (#788)

Build Changes

• Update twoliter to v0.15.1 (#779)

Orchestrator Changes

Kubernetes

• Add multi-user.target drop-in for kubelet restarts across all versions (#773)
• Add kubernetes-1.35 package with beta source and ecr-credential-provider-1.35 package with official source (#777)
• Add latest instance types to eni-max-pods mapping (#776, #782)

Documentation

• Remove OCI consideration from BUILDING.md (#615)

v12.0.1 (2025-12-12)

OS Changes

Third Party Package Updates

• Revert updates to libnvidia-container, nvidia-container-toolkit, and nvidia-k8s-device-plugin (#775)

v12.0.0 (2025-12-10)

OS Changes

• Disable concurrent layer fetch by default in containerd-2.1 (#764)
• Add latest instance types to eni-max-pods mapping (#763)
• Update host-ctr go dependencies (#758)
• Update ordering for drivers target to load before settings are applied (#749)

Third Party Package Updates

• Update amazon-ssm-agent(#768)
• Update core system utilities: bash, chrony, coreutils, iproute, strace, and open-vm-tools (#765)
• Update multiple core libraries: libnftnl, nftables, libpcre, libglib, libelf, libdevmapper, and libncurses (#767)
• Update rdma-core and enable PCI support in hwloc (#725)
• Update soci-snapshotter (#759)
• Update to latest versions of ecr-credential-provider and kubernetes packages (#758)
• Update libnvidia-container, nvidia-container-toolkit, and nvidia-k8s-device-plugin (#758)

Build Changes

• Update twoliter to v0.14.0 (#765)
• Update bottlerocket-sdk to v0.66.0 (#769)

Orchestrator Changes

Kubernetes

• Drop kubernetes-1.28 and ecr-credential-provider-1.28 packages (#761)

v11.1.0 (2025-11-26)

OS Changes

• Provide libdrm and rocm-k8s-device-plugin packages for AMD GPU detection (#748)
• Add latest instance types to eni-max-pods mapping (#752)

v11.0.1 (2025-11-12)

Orchestrator Changes

Kubernetes

• Return enableDebuggingHandlers to default behaviour (#747)

v11.0.0 (2025-11-12)

OS Changes

• Add image signing verification for ECR images signed by AWS Signer (#722)
• Add an apiclient command to lockdown the datastore to prevent further changes (#727)
• Provide rottweiler, a unified storage encryption helper (#717)
• Add support for encrypted storage (#721)
• Fix whippet defaults and wildcard replacements (#720)
• Add apiclient support to exclude settings prefixes and canonicalize output (#716)
• Add apiclient network configure subcommand (#714)
• Ensure that bootconfig keys are written in a consistent order (#735)
• Enhance bloodhound CIS compliance checks (#665, #738)
• Decouple the network stack initialization from the DATA partition (#638)
• Add EBS volumes support for ephemeral storage (#395) - Thanks @jesseanttila-cai
• Build systemd-257 with cryptsetup support (#691)
• Update host-ctr go dependencies (#723)
• Build libcryptsetup and libdevmapper with udev support (#706)
• Support kdump for zboot kernels on aarch64 (#707)

Third Party Package Updates

• Add hwloc package (#672)
• Update systemd-252 to v252.39 (#700)
• Update systemd-257 to v257.9 (#691)
• Drop socat package (#742)
• Update libexpat (#695)
• Add libudev package (#706)
• Update kexec-tools (#707)
• Add docker-cli-29, docker-engine-29 packages (#711, #743, #745)
• Update aws-otel-collector, aws-signing-helper (#715)
• Update containerd-1.7, containerd-2.0, containerd-2.1 (#724)

Build Changes

• Add changelog validation improvements (#699)
• Update bottlerocket-settings-models to v0.17.0 (#689)
• Update twoliter from v0.12.0 to v0.13.0 (#736)

Orchestrator Changes

Kubernetes

• Update DNS IP generation to support IPv6 (#734)
• Update to latest versions of ecr-credential-provider and kubernetes packages (#715)
• Add enableDebuggingHandlers, imageMinimumGCAge, maxParallelImagePulls, ImageMaximumGCAge and CPU manager settings (#689)

ECS

• Default to containerd's transfer service for docker-engine-29 (#730)

v10.9.3 (2025-11-11)

Orchestrator Changes

Kubernetes

• Patch ecr-credential-provider to support AWS EUSC (#729)

v10.9.2 (2025-11-08)

Third Party Package Updates

• Patch runc to set the correct mode for tmpfs mounts (#731)

v10.9.1 (2025-11-05)

Third Party Package Updates

• Update runc to v1.2.8 (#708)

v10.9.0 (2025-11-05)

OS Changes

• Update runc to v1.2.7 and include CVE patches (#6813a59b, #6e3d3e2e, #f330515a)
• containerd-2.1: fix image pull error when range-get request is ignored (#702)

v10.8.1 (2025-10-22)

Build Changes

• Update bottlerocket-sdk from 0.65.0 to 0.65.1 (#698)

v10.8.0 (2025-10-15)

OS Changes

• Provide command to detect first and third-party accelerated hardware (#644)
• Provide whippet as an alternative dbus-launcher (#661, #678)
• Make dbus-broker require dbus-launcher capability (#677)
• Provide dbus-broker-launcher as a separate package (#677)
• Allow multiple sequential calls of apiclient ephemeral-storage bind (#679)
• Log pending settings only for debug or higher log levels (#690) - Thanks @fletcherw

Build Changes

• Update bottlerocket-sdk from 0.64.0 to 0.65.0 (#684)
• Fix clippy warnings for Rust 1.90.0 (#684)

Third Party Package Updates

• Update aws-iam-authenticator, aws-ssm-agent (#684, #688)

v10.7.1 (2025-10-06)

Third Party Package Updates

• Add a patch for libnvidia-container to support glibc (#687)

v10.7.0 (2025-10-02)

OS Changes

• Update Rust dependencies for first-party sources (#673)
• Update Go dependencies for first-party sources (#673)
• Patch systemd to suppress a warning log that is not applicable to Bottlerocket (#681)

Third Party Package Updates

• Update glibc and docker-engine (#676, #671)
• Update core libraries: libpcre, readline, libz, libtirpc, libnftl, libbncurses, libinih, libglib, libffi, libbpf, libdevmapper, and libscrypsetup (#683)
• Update core system utilities: iproute, strace, nvme-cli, libnvme, xfsprogs, ethtool, util-linux, pciutils, dbus-broker, and e2fsprogs(#675, #680)

Build Changes

• Update bottlerocket-settings-models to v0.16.0 (#646)

Orchestrator Changes

Kubernetes

• Add pid resource to kubeReserved setting (#646)

v10.6.0 (2025-09-23)

OS Changes

• Update ECR parsing in host-ctr after aws-sdk-go-v2 migration (#664)

v10.5.0 (2025-09-22)

OS Changes

• Support arguments with a -- separator in apiclient exec subcommand (#647)
• Backport systemd patch to suppress ENOENT error logs (#655)
• Install driverdog for all variants (#656) - Thanks @fletcherw

Third Party Package Updates

• Update libexpat, aws-iam-authenticator, containerd-1.7, containerd-2.0, kubernetes-1.28-1.34 (#663, #666)

v10.4.1 (2025-09-11)

Build Changes

• Update bottlerocket-settings-models to 0.15.0 (#658)

v10.4.0 (2025-09-08)

OS Changes

• Add command field to override default entrypoint for host and bootstrap containers (#594) - Thanks @kasimeka
• Update systemd-257 to remove shutdown timeout patch, migrate mount-rate patch to bootconfig, and remove kernel cmdline requirement for cgroupsv1 (#636)
• Add containerd-2.1 setting for concurrent-download-chunk-size (#645)
• Add support for more AWS regions in schnauzer and host-ctr (#651)

Build Changes

• Update bottlerocket-settings-models to 0.14.0 (#645)

Orchestrator Changes

Kubernetes

• Update kubernetes-1.34 and ecr-credential-provider-1.34 packages with official sources (#653)

v10.3.0 (2025-08-26)

OS Changes

• Add default bind directories for ephemeral storage (#632)
• Extend netdog to look for net.toml under /usr/share/bottlerocket (#524) - Thanks @pb80
• Add containerd-2.1 package (#621)
  • Transfer service for image pull is now the default
  • Multipart layer fetch support was added and has a default of 8MiB in Bottlerocket
  • Containerd 2.1 removes the support for Schema 1 images
• Add systemd-257 package (#581)
• Update host-ctr to migrate to aws-sdk-go-v2 and bump to go 1.24 (#642)

Orchestrator Changes

Kubernetes

• Enable MutableCSINodeAllocatableCount feature gate on kubelet for kubernetes-1.34 (#634) - Thanks @torredil
• Add support for new Kubernetes Setting static-pods-enabled (#641)

Build Changes

• Update twoliter to 0.12.0 (#635)
• Update bottlerocket-settings-models to 0.13.0 (#641)

v10.2.0 (2025-08-19)

Orchestrator Changes

Kubernetes

• Add kubernetes-1.34 and ecr-credential-provider-1.34 packages with pre-release sources (#627)

Build Changes

• Update bottlerocket-sdk from 0.63.0 to 0.64.0 (#629)

v10.1.2 (2025-08-14)

Third Party Package Updates

• Revert ecs-agent update (#625)

v10.1.1 (2025-08-13)

OS Changes

• Fix containerd-2.0 settings for max_concurrent_downloads (#623)

v10.1.0 (2025-08-11)

OS Changes

• Add libjansson package to enable JSON support for nftables (#614)
• Refactor schnauzer to multicall binary for v1 and v2 (#561)
• Fix logind service ordering in release package (#609) - Thanks @115100
• Lowercase hostnames provided by the hostname helpers (#619) - Thanks @tzneal

Third Party Package Updates

• Update amazon-ssm-agent, docker-engine, and ecs-agent packages (#616)
• Update to latest versions for aws-iam-authenticator, aws-otel-collector, aws-signing-helper, nvidia-k8s-device-plugin, ecr-credential-provider, and kubernetes packages (#611)

Orchestrator Changes

ECS

• Fix ECS_DISABLE_PRIVILEGED in ecs-agent(#610) - Thanks @vermdeep

Build Changes

• Inject a trait into check execution to allow unit testing (#601) - Thanks @tzneal

Tools

• Add Amazon Q development rules and Git formatting guidelines (#561)

v10.0.1 (2025-07-31)

Orchestrator Changes

Kubernetes

• Backport a patch to fix kubelet drop-in config merge behavior in kubernetes-1.28 (#613)

v10.0.0 (2025-07-25)

OS Changes

• Deprecate wicked package (#560)
• Fix file descriptor leak in apiserver exec (#595)
• Add release subpackage to enable zram-backed swap (#590)

Third Party Package Updates

• Update cni, cni-plugins, libaudit, libbpf, libdevmapper, libglib, and libncurses (#600)

Orchestrator Changes

Kubernetes

• Add soci-snapshotter support
  • Configure soci-snapshotter for parallel pull unpack feature (#569)
  • Optionally configure containerd and kubelet with soci-snapshotter via drop-in configuration files (#576)
  • Extend selinux-policy to cover soci-snapshotter (#579)
  • Add configure-snapshotter.service to reset state directories of snapshotters on boot when selected snapshotter changes (#582)
  • Apply upstream patches to soci-snapshotter (#599)
  • Drop CLI from soci-snapshotter (#569)
• Support extending kubelet configuration via drop-in files (#576)
• Update to the latest CIS K8s guidance v1.11.1 (#563) - Thanks @tzneal
• Drop kubernetes-1.27 and ecr-credential-provider-1.27 (#605)

Build Changes

• Update twoliter to 0.11.0 (#592)

v9.2.1 (2025-07-24)

OS Changes

• Add latest instance types to eni-max-pods mapping (96d45ad5)

v9.2.0 (2025-07-16)

OS Changes

• Namespace systemd to systemd-252 (#537)
• Pass proxy environment variables to bootstrap-containers (#564) - Thanks @abhay-krishna
• Pass proxy environment variables to the soci-snapshotter service (#584)
• Allowlist soci-snapshotter paths to ephemeral storage (#571)
• Add nftables and iptables-nft (#549)
• Enable support for SELinux efficient relabling (#573)

Third Party Package Updates

• Update kmod (#562)
• Update soci-snapshotter (#565)
• Update xfsprogs and chrony (#577)

Orchestrator Changes

Kubernetes

• Enable DynamicResourceAllocation feature gate on kubelet for k8s-1.33 (#567)

Build Changes

• Update bottlerocket-sdk from 0.62.0 to 0.63.0 (#587)

v9.1.0 (2025-06-23)

OS Changes

• Add an option to write settings once during boot (#548)

Third Party Package Updates

• Update libcrypto patches (#546)
• Update to latest versions of kubernetes packages (#551)
• Update nvidia-container-toolkit and libnvidia-container to 1.17.8 (#552)
• Update core system utilities: kexec-tools, open-vm-tools, and iputils (#553)

Orchestrator Changes

Kubernetes

• Add support for Kubernetes setting memory-swap-behaviour (#541) Thanks @teskje

v9.0.0 (2025-06-10)

OS Changes

• Add support for default configuration file in xfsprogs (#521)
• Add support for more AWS regions in schnauzer and host-ctr (#535)
• Backport systemd fix to speed up systemctl daemon-reload (#528)
• Replace systemctl isolate with systemctl start (#528)
• Add capability markers ioctl_skip_cloexec and userspace_initial_context to SELinux policy (#534)
• Add zramctl to util-linux package (#543)

Third Party Package Updates

• Update to latest versions of aws-iam-authenticator, ecr-credential-provider, and kubernetes packages (#531)
• Update multiple core libraries: SELinux components, libseccomp, libinih, libffi, libnftnl, libelf, liburcu, libglib, and libcap (#515)
• Update core system utilities: ethtool, grep, iproute, strace, makedumpfile, nvme-cli, and libnvme (#532)

Build Changes

• Fix clippy warnings for Rust 1.87.0 (#525)
• Build glibc with frame pointers (#527)
• Fix various build warnings and LTO compatibility issues in packages (#526)
• Update bottlerocket-sdk from 0.61.0 to 0.62.0 (#542)

Orchestrator changes

Kubernetes

• Drop kubernetes-1.26 and ecr-credential-provider-1.26 (#523)
• Make soci-snapshotter a socket-activated systemd service (#529)
• Add latest instance types to eni-max-pods mapping (#538)

v8.2.0 (2025-05-20)

OS Changes

• Third party package updates (#494, #498, #513, #514)
• Extend ghostdog for Infiniband detection and configuration (#499)
• Enable cryptsetup and tpm2 functionality for systemd (#518)

Build Changes

• Update twoliter from 0.9.0 to 0.10.1 (#491, #509)
• Update bottlerocket-settings-models to 0.10.0 (#520)

Orchestrator changes

ECS

• Migrate ECS to use CDI (#482)

Kubernetes

• Support CDI and legacy NVIDIA Container Runtime modes (#459, #500, #507, #511)
• Patch nvidia-k8s-device-plugin to add ldcache parsing (#501)
• Apply upstream patches for EKS 1.26 (#517)

v8.1.1 (2025-05-14)

OS Changes

• Fix containerd-2.0 settings for container-registry (#504)

v8.1.0 (2025-05-05)

OS Changes

• Add containerd-2.0 package (#485)
• Update containerd-1.7 CRI spec to match upstream (#485)
• Update containerd-1.7 service with OOMScoreAdjust to match upstream (#485)

Orchestrator Changes

Kubernetes

• Add support for more Kubernetes Settings (#487, #489)
  • containerLogMaxWorkers
  • containerLogMonitorInterval
  • singleProcessOOMKill
• Update kubernetes-1.33 and ecr-credential-provider-1.33 packages with official sources (#488)

v8.0.0 (2025-04-28)

OS Changes

• Update host-ctr dependencies (#475)
• Add support for GRID drivers (#483)

Build Changes

• Update twoliter from 0.8.1 to 0.9.0 (#478)

Orchestrator Changes

Kubernetes

• Drop kubernetes-1.25 and ecr-credential-provider-1.25 (#484)

v7.0.1 (2025-04-22)

Orchestrator Changes

ECS

• Revert CDI migration for ECS (#480)

v7.0.0 (2025-04-18)

OS Changes

• Fix aws-signing-helper and IAM Roles Anywhere (#451)
• Clear configuration-files and services in migrator (#456)
• Drop shimpei and oci-add-hooks packages (#458)
• Restrict kernel dump collection to x86_64 (#465)
• Third party package updates (#469, #472)

Orchestrator Changes

Kubernetes

• Apply upstream patches for EKS 1.25-1.27 (#472)
• Let kubelet start when swap is on (#473)
• Add kubernetes-1.33 and ecr-credential-provider-1.33 packages with pre-release sources (#476)

ECS

• Migrate ECS to use CDI (#471)

Build Changes

• Update bottlerocket-sdk from 0.60.0 to 0.61.0 (#449, #474)

v6.3.0 (2025-04-11)

OS Changes

• Add cryptsetup package and its dependencies (#444) - Thanks @mikn !
• Third party package updates (#457)
• Update runc from 1.1.15 to 1.2.6 (#463)
• Allow lookups of .local domains using unicast DNS (#464) - Thanks @tzneal !

Orchestrator Changes

Kubernetes

• Update EKS 1.28-1.32 versions to latest (#457)

Build Changes

• Update rust build dependencies (#457, #460, #462)

v6.2.0 (2025-04-01)

OS Changes

• Update readline from 8.2 to 8.2.13 (#446)
• Update glibc from 2.40 to 2.41 (#437)
• Fix usage of /var/run in mdadm tmpfiles snippet (#442)
• Refactor systemd to explicitly list packaged files (#438)
• Switch to igzip (x86_64) or pigz with zlib-ng (aarch64) to decompress container images (#443)
• Add support for more AWS regions in schnauzer and host-ctr (#454)

Build Changes

• Remove bottlerocket-variant crate (#435)

v6.1.1 (2025-03-24)

OS Changes

• Third party package updates (#432, #434)
• Update host-ctr dependencies (#431)
• Update containerd from 1.7.26 to 1.7.27 (#434)

Build Changes

• Update twoliter from 0.8.0 to 0.8.1 (#428)

Orchestrator Changes

Kubernetes

• Apply upstream patches for EKS 1.25-1.26 (#434)
• Update ecr-credential-provider 1.29-1.32 to latest (#434)
• Add ecr-credential-provider 1.26 and 1.28 (#434)

v6.1.0 (2025-03-14)

OS Changes

• Persist sysctl setting changes to /etc/sysctl.d (#333) - Thanks @aetimmes
• Updated cis report to account for formatting change in iptables (#390)
• Update MIG template to handle the no-default case (#399)
• Third party package updates (#365, #371, #383, #384, #403, #404, #406)

Build Changes

• Update bottlerocket-sdk from 0.50.1 to 0.60.0 (#375, #402)
• Update twoliter from 0.7.3 to 0.8.0 (#368, #398)

Orchestrator Changes

Kubernetes

• Apply upstream patches for Kubernetes 1.25-1.32 (#379, #400)

v6.0.2 (2025-02-26)

Build Changes

• Update twoliter from 0.6.0 to 0.7.3 (#382)

v6.0.1 (2025-02-14)

OS Changes

• Update containerd from 1.7.24 to 1.7.25 (#374)
• Patchcontainerd 1.7.25 to address issues in runc shim and CRI plugin (#374)

v6.0.0 (2025-02-07)

OS Changes

• Add the ability to run custom transaction checks when committing transactions to Bottlerocket’s datastore (#294)
• Add support for weak settings values, which are deleted on update (#294)
• Only return strong settings-generators from the apiserver’s /metadata/settings-generator route (#294)
• Always delete and re-populate metadata on first boot or update (#294)
• Add support for dynamic settings-generators via the depth attribute (#294)
• Add NVIDIA Multi-Instance GPU (MIG) settings to nvidia-k8s-device-plugin (#258)
• Conditionalize source and mode in Bootstrap container template (#335)
• Update host-ctr dependencies (#337)
• Accept comment lines in boot config (#361)

Orchestrator Changes

Kubernetes

• Drop Kubernetes 1.24 variants (#364)

v5.4.2 (2025-01-24)

OS Changes

• Update nvidia-container-toolkit and libnvidia-container to v1.17.4 (#358)

Build Changes

• Update Bottlerocket SDK to v0.50.1 (#345)

Orchestrator Changes

Kubernetes

• Update EKS 1.28-1.31 versions to latest (#356)

v5.4.1 (2025-01-16)

OS Change

• Parse proxy URI after prepending URL scheme (#339)
• Normalize inputs for ephemeral-storage (#350)

v5.4.0 (2025-01-14)

OS Change

• Allow bind mounts prefixed with /mnt/ for ephemeral storage (#320) - Thanks @zaheerm!
• Improve API Server error message for invalid metadata (#342)

Orchestrator Changes

Kubernetes

• Add support for device-ownership-from-security-context to nvidia (#343)

ECS

• Update ecs-agent to 1.89.2 and update the amazon-ecs-cni-plugins (#341)

v5.3.0 (2025-01-03)

Orchestrator Changes

Kubernetes

• Add Kubernetes 1.32 packages (#334)
• Add support for device-ownership-from-security-context (#329)

Build Changes

• Update bottlerocket-settings-models to 0.7.0 (#329)

v5.2.0 (2024-12-20)

OS Changes

• Third party package updates (#322, #323, #324, #325, #328)

Build Changes

• Add GPG verification where possible (#321)

v5.1.0 (2024-12-16)

OS Changes

• Update golang.org/x/crypto from 0.27.0 to 0.31.0 in /sources/host-ctr (#315)

Orchestrator Changes

Kubernetes

• Add beta sources for kubernetes-1.32 and ecr-credential-provider-1.32 (#317)

v5.0.0 (2024-12-12)

OS Changes

• Update binutils to 2.41 (#306)

Build Changes

• Update bottlerocket-sdk to v0.5.0 (#306)
• Remove the following packages and migrate them to the kernel-kit (#313)
  • grub
  • kernel-5.10
  • kernel-5.15
  • kernel-6.1
  • kmod-5.10-nvidia
  • kmod-5.15-nvidia
  • kmod-6.1-nvidia
  • libkcapi
  • linux-firmware
  • microcode
  • shim

v4.1.0 (2024-12-10)

OS Changes

• Enable plugins and detailed EBS volume stats for nvme-cli (#269)
• Set LoaderTimeInitUSec and LoaderTimeExecUSec in GRUB (#273)
• Third party package updates (#303, #308, #311)
• Update kernel to v6.1.119 (#309)

Build Changes

• Update twoliter to 0.6.0 (#302)

v4.0.1 (2024-12-05)

OS Changes

• Normalize amazon-ecs-cni-plugins version (#277)
• Add host certs to host containers using a volume mount (#278)
• Fix host-ctr to correctly extract regions from ECR URIs (#287)
• Run udev after the SELinux Policy files are available (#290)
• Update nvidia-container-toolkit and libnvidia-container (#296)

v4.0.0 (2024-11-20)

OS Changes

• Disable BPF preload and bpfilter helpers for kernel (#261)
• Allow overriding max-pods file with one from variant (#279)
• Update libdbus and libexpat (#270)
• Remove acpid package (#280)
• Prevent io_uring calls from hanging (#284)

Orchestrator Changes

Kubernetes

• Update EKS 1.28-1.31 versions to latest (#281)

Build Changes

• Use upstream sources for packages sourced from Amazon Linux (#265)
• Update twoliter to v0.5.1 (#259)
• Drop "dependencies" table for all packages (#262)

v3.3.2 (2024-11-15)

OS Changes

• Add kernel-5.15 patch to fix IPv6 typo (#266)

v3.3.1 (2024-11-14)

OS Changes

• Update kernel 5.10.228 and kernel 6.1.115 (#263)

v3.3.0 (2024-11-12)

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#250)

OS Changes

• Include rdma-core in AWS variants (#252)
• Add libstdc++ subpackage to libgcc (#253)
• Update third-party packages (#254)

v3.2.0 (2024-11-06)

Orchestrator Changes

Kubernetes

• Match the EKS Optimized AMIs secure TLS ciphers (#230, #245)

OS Changes

• Provide FIPS binaries for first-party rust programs (#173)
• Support ECR FIPS endpoints for host containers (#204)
• Adjust SELinux Policy to allow execute programs in NFS filesystems (#205)
• Mount binfmt_mics filesystem at boot (#206)
• Add proxy support for pluto FIPS binary (#213)
• Generate default AWS config file (#218)
• Adjust SELinux Policy for first-party FIPS rust programs (#222)
• Update third-party packages (#210, #212, #214, #219, #220, #246)
• Add rdma-core to packages (#223)
• Use Amazon Linux 2023 as upstream for libkcapi (#224)
• Set AWS_SDK_LOAD_CONFIG for system services (#243)
• Add proxy support for cfsignal (#234)

Build Changes

• Build Neuron kernel module in kernel packages (#207)
• Update Bottlerocket SDK to v0.47.0 (#241)

Tools

• Add insertFinalNewline for VSCode Workspaces (#242)

v3.1.5 (2024-11-04)

OS Changes

• Wait for kubelet device-manager socket before starting nvidia-k8s-device-plugin (#228)

v3.1.4 (2024-11-01)

OS Changes

• Update kernel 5.10.227 and kernel 5.15.168 (#235)

v3.1.3 (2024-10-31)

OS Changes

• Update kernel 6.1.112-124 (#231)

v3.1.2 (2024-10-30)

OS Changes

• Add kernel-6.1 patch to fix io statistics for cgroup v1 (#225)

v3.1.1 (2024-10-24)

OS Changes

• Revert system-wide configuration to block writeable/executable memory in systemd services (#215)

v3.1.0 (2024-10-22)

OS Changes

• Update NVIDIA driver versions to 535.216.01 (#209)

Build Changes

• Set Epoch to 1 in necessary packages (#208)

Orchestrator Changes

Kubernetes

• Apply upstream patches for Kubernetes v1.24 to v1.31 (#186)

v3.0.0 (2024-10-17)

OS Changes

• Drop kubernetes-1.23 (#184)
• Move kmod-5.10-nvidia from branch R470 to R535 (#181)
• Block writeable/executable memory in systemd services by default (#158)

Build Changes

• Update twoliter to 0.5.0 (#195)
• Update bottlerocket-sdk to 0.46.0 (#191)
• Update tough and reqwest to latest versions (#197)
• Set Epoch to 1 in necessary packages (#180)
• Drop dependency on glibc for nvidia kmods (#194)

v2.9.1 (2024-10-16)

OS Changes

• Update kernels to 5.10.226, 5.15.167 and 6.1.112 (#200)

v2.9.0 (2024-10-09)

OS Changes

• Add nvidia-persistenced and nvidia-modprobe to kmod-*-nvidia (#122)
• Add NVIDIA time-slicing settings to nvidia-k8s-device-plugin (#169)
• libcap: fix cross-compile toolchain usage (#174)
• login: start the getty services earlier (#175)
• Update amazon-ssm-agent to v3.3.987.0 (#182)

Build Changes

• Update twoliter to 0.4.7 (#183)
• Update bottlerocket-settings-models to 0.6.0 (#169)

v2.8.4 (2024-10-03)

OS Changes

• Update kernels to 5.10.226 and 5.15.167 (#177)

v2.8.3 (2024-10-02)

OS Changes

• Update ecs-agent to v1.86.3 (#168)
• Update kmod-6.1-neuron to 2.18.12.0 (#170)

Build Changes

• Exclude more object files from kernel-6.1-devel (#172)

v2.8.2 (2024-09-28)

OS Changes

• Fix driver unit dependencies for ecs-gpu-init (#166)

v2.8.1 (2024-09-27)

Build Changes

• Install squashed kernel-devel if erofs is not positively selected (#163)

v2.8.0 (2024-09-26)

Build Changes

• Choose the correct checksum when validating a twoliter binary (#157)

OS Changes

• Use open GPU drivers on P4 and P5 instances (#114)
• Add package-level support for EROFS as a root filesystem (#159)
• Update libnvidia-container and nvidia-container-toolkit to 1.16.2 (#161)

v2.7.0 (2024-09-19)

Build Changes

• Update twoliter to 0.4.6 (#153)

OS Changes

• Add the ability for ghostdog to detect EFA devices attachment (#141)
• Apply higher MEMLOCK limits in oci-defaults when EFA devices are detected (#141)
• Add the ability for corndog to generate the hugepages setting (#141)
• Compile host-ctr with go 1.23 (#146)
• Update host-ctr dependencies (#146)
• Include nvidia-cdi-hook in nvidia-container-toolkit (#150)
• Update kernels to 5.10.225 and 5.15.166 (#154)
• Use Go 1.22 for kubernetes 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29 (#155)

v2.6.0 (2024-09-17)

Build Changes

• Validate twoliter upon install (#147)

OS Changes

• Add the ability for driverdog to copy modules (#119)
• Add pciclient crate for high level access to lspci (#149)
• Update 6.1 kernel to 6.1.109 (#151)

v2.5.0 (2024-09-11)

Build Changes

• Update tough (#136)
• Update bottlerocket-sdk to v0.45.0 (#131)

OS Changes

• Build open source NVIDIA kernel modules (#118)
• Update third party packages (#129, #143)
• Split ECS and VPC CNI plugins from ecs-agent (#85)
• Add helper functions for ipcidr (#116)
• Add aws-otel-collector package (#50)
• Add pciutils package (#142)

Orchestrator Changes

Kubernetes

• Use kubelet-device-plugins API (#132)

v2.4.1 (2024-09-09)

OS Changes

• Use direct paths for ephemeral storage (#133)
• Update libexpat to 2.6.3 (#130)

v2.4.0 (2024-09-05)

OS Changes

• Add ephemeral-storage commands (#15) - thanks @tzneal
• Add support for bootstrap commands (#62, #127)
• Update runc to 1.1.14 (#123)
• Update kernels to 5.10.224, 5.15.165 and 6.1.106 (#128, #126)

Orchestrator Changes

Kubernetes

• Add Kubernetes 1.31 packages (#117)
• Apply EKS-D upstream patches for Kubernetes v1.23 to v1.26 (#121)
• Add latest instance types to eni-max-pods mapping (#120)

v2.3.6 (2024-08-28)

Build Changes

• Update Twoliter to 0.4.5 (#106)
• schnauzer: add reflective template helpers (#105)
• Update bottlerocket-sdk to v0.44.0 (#109)

OS Changes

• Third party package updates (#108)

v2.3.5 (2024-08-21)

Orchestrator Changes

Kubernetes

• Fix issue where a null value would fail to render the credential provider template for Kubernetes (#101)

OS Changes

• Improve EBS volume udev rules by adding a symlink to /dev/by-ebs-id and remove /dev/ from the device name returned by ghostdog (#98)
• Update kernels to 5.10.223-212 and 6.1.102-111 (#99)

tools

• Add collect-kernel-config script to tools (#84)

v2.3.4 (2024-08-19)

OS Changes

• Update libnvidia-container to v550.54.14 and nvidia-container-toolkit to v1.16.1 (#88)
• Fix a bug in sundog that caused it to regenerate populated settings (#94)

v2.3.3 (2024-08-14)

Orchestrator Changes

Kubernetes

• kubernetes 1.24, 1.25, 1.26: Apply upstream patches (#76, #77, #78)
• packages: use GO_MAJOR for selecting Go version (#86)

Build Changes

• pluto: use settings SDK to parse API response (#89)
• schnauzer: add support for update repository & ecr registry in ISO-E (#91)

v2.3.2 (2024-08-13)

OS Changes

• Update kernels: 5.10.223 5.15.164, and 6.1.102 (#73, #82)

Orchestrator Changes

Kubernetes

• ecr-credential-provider: update to 1.25.15 (#66)
• ecr-credential-provider-1.27: update to 1.27.8 (#66)
• ecr-credential-provider-1.29: update to 1.29.6 (#66)
• ecr-credential-provider-1.30: update to 1.30.3 (#66)
• soci-snapshotter: update to 0.7.0 (#66)

Build Changes

• Re-enable fmt and licenses lints in CI (#69)
• Use workspace dependencies for all dependencies (#70)
• Update datastore serializer to expect JSON and correctly handle null values (#80, #87)

v2.3.1 (2024-08-01)

OS Changes

• Update docker-engine to v25.0.6 (#55)

Orchestrator Changes

Kubernetes

• nvidia-container-runtime, nvidia-k8s-device-plugin: support Nvidia settings APIs #48
• Support hostname-override-source (#59)

Build Changes

• Update bottlerocket-settings-models to v0.2.0 (#58)
• Update bottlerocket-sdk to v0.43.0 (#60)

v2.3.0 (2024-07-24)

OS Changes

• Update containerd to 1.7.20 (#40)
• Update runc to 1.1.13 (#40)
• Update kernels: 5.10.220, 5.15.162, and 6.1.97 (#46)
• Add kmod-6.1-neuron-devel (#42)

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#43)

Build Changes

• Update Twoliter to 0.4.3 (#39)

v2.2.0 (2024-07-18)

OS Changes

• Add libbpf (#24, thanks @ndbaker1)
• Add kube-proxy (#25, thanks @tzneal)
• Third party package updates (#28, #35, #36)
• Update rust dependencies for first-party sources (#34)
• Update kernels: 5.10.220, 5.15.161, and 6.1.96 (#29)

Build Changes

• Update twoliter (#30, #39)

Tools

• Fix diff-kernel-config to work with Core Kit (#32)

v2.1.0 (2024-07-08)

OS Changes

• Update kernels: 5.10.219, 5.15.160-104, and 6.1.94 (#13, #17)
• Add kmod-6.1-neuron package in core kit (#21)
• Provide SSM agent as a system service (#22)
• Enable host containers and in-place updates to be optional (#23)

Orchestrator Changes

Kubernetes

• Move dockershim link to relative path (#18)

v2.0.0 (2024-06-20)

Kit Features

• Move code to core kit (#1)
• Use Bottlerocket Settings SDK for settings models (#7)

OS Changes

• Add mdadm packages for software RAID (#4035) - Thanks tzneal!
• Update kernels: 5.10.217, 5.15.156, and 6.1.92(#4049,#4039, #4005, #3972, #3976)
• Update containerd to 1.7.17 (#4016)

Build Changes

• Change pluto to act more like a settings generator (#4032)
• Update pluto for kits and Out of Tree Builds (#3828)
• Remove API Client dependency on the Settings model (#3987)
• Create CloudFormation settings extension (#4010)
• Add symlink to latest version for amazon-ssm-agent (#3986)
• Prepare os package for build system changes (#4006)
• Move to DNS settings extension (#3980)
• Move to OCI Hooks Settings Extension (#3978)
• Add Metrics Settings Extension (#3963)
• Move to PKI Settings Extension (#3971)
• Remove metadata migration (#3958)
• Remove version from makefile (#4)
• Improve cache behavior (#6)
• Twoliter updates (#8)