v1.59.0

Release Highlights

• Patch glibc to revert lazy THP initialization in malloc (bottlerocket-core-kit#905)
• Allow runtime processes to write fifos to content stores (bottlerocket-core-kit#895)
• Remove orphaned datastores during migration to reclaim disk space (bottlerocket-core-kit#812)

OS Changes

• Update bottlerocket-kernel-kit from 5.3.2 to 5.3.3 CHANGELOG (commits) (#4807)
• Update bottlerocket-core-kit from 14.0.0 to 14.1.0 CHANGELOG (commits) (#4807)
• Update admin-container from 0.20.4 to 0.20.5 CHANGELOG (commits) (#4807)
• Update control-container from 0.20.4 to 0.20.5 CHANGELOG (commits) (#4807)
• Update bootstrap-container from 0.2.14 to 0.2.15 CHANGELOG (commits) (#4807)

v1.58.0

⚠️ Note: v1.58.0 Rollout Stopped. This release introduced a regression that causes certain container images to fail during image pull. Please use Bottlerocket 1.59.0 instead. See #4798

Pre-release Note

This is the latest Bottlerocket release, and is currently being made available.
You may notice nodes upgrading to this new version, though it may not yet be available globally until the "pre-release" flag is removed.

Release Highlights

• Remove aws-k8s-1.29 variants (#4794)
• Add CDI support to host-ctr enabling NVIDIA GPU tools access in superpowered containers (bottlerocket-core-kit#879)

OS Changes

• Update bottlerocket-core-kit from 13.3.0 to 14.0.0 CHANGELOG (commits) (#4796)
• Update bottlerocket-kernel-kit from 5.2.0 to 5.3.1 CHANGELOG (commits) (#4796)

v1.57.0

Release Highlights

• Update glibc to 2.43 and runc to 1.3.4 (bottlerocket-core-kit#865, bottlerocket-core-kit#854)
• Add kubelet-env-nvidia template for kubernetes-1.35 (#4784, bottlerocket-core-kit#860)
• Reserve EKS add-on ports (bottlerocket-core-kit#864) - Thanks @Shreyank031!

OS Changes

• Update bottlerocket-core-kit from 13.1.0 to 13.3.0 CHANGELOG (commits) (#4789, #4791)
• Update bottlerocket-kernel-kit from 5.0.1 to 5.2.0 CHANGELOG (commits) (#4789, #4791)
• Update admin-container from 0.20.3 to 0.20.4 (#4780)
• Update control-container from 0.20.3 to 0.20.4 (#4780)
• Update bootstrap-container from 0.2.13 to 0.2.14 (#4780)

Build Changes

• Update twoliter from 0.16.0 to 0.17.0 (#4776)
• Update bottlerocket-sdk from 0.70.0 to 0.72.0 (commits) (#4789, #4791)

v1.56.0

Release Highlights

• Add support to render settings.container-registry into containerd supported hosts.toml (bottlerocket-core-kit#819, #4767)
• Expand image verifier support with a new helper to render trust policies for all image verifier plugins (bottlerocket-core-kit#820, #4766)
• Suppress IPv6 on interfaces with no IPv6 intent in net.toml (bottlerocket-core-kit#826)

OS Changes

• Update bottlerocket-kernel-kit from 4.8.2 to 5.0.1 CHANGELOG (commits) (#4764, #4775)
• Update bottlerocket-core-kit from 13.0.0 to 13.1.0 CHANGELOG (commits) (#4770)

Build Changes

• Update Rust dependencies (#4763)
• Update bottlerocket-settings-models to v0.21.0 (#4773)

v1.55.0

Release Highlights

• Add URI resolver support to apiclient apply and apiclient network configure (bottlerocket-core-kit#554)
  • s3:// - S3 bucket objects
  • secretsmanager:// - AWS Secrets Manager secrets
  • ssm:// - AWS SSM Parameter Store parameters
  • arn:aws:secretsmanager: and arn:aws:ssm: - cross-region access via full ARN
  • base64: - inline encoded content
• Remove separate FIPS binaries from Go packages in favor of Go built-in FIPS support (bottlerocket-core-kit#813)
• Remove hugepages from reservedMemory in kubelet config (bottlerocket-core-kit#821)
• Update SELinux policy to allow container communication with MPS daemon (bottlerocket-core-kit#831)

OS Changes

• Update bottlerocket-kernel-kit from 4.8.0 to 4.8.2 CHANGELOG (commits) (#4757)
• Update bottlerocket-core-kit from 12.3.0 to 13.0.0 CHANGELOG (commits) (#4761)
• Update admin-container from 0.20.1 to 0.20.3 CHANGELOG (commits) (#4759)
• Update control-container from 0.20.1 to 0.20.3 CHANGELOG (commits) (#4759)
• Update bootstrap-container from 0.2.11 to 0.2.13 CHANGELOG (commits) (#4759)

v1.54.0

Release Highlights

• Migrate to Go's native FIPS 140-3 runtime support for all FIPS variants (bottlerocket-core-kit#783)
• Add NVIDIA Multi-Process Service (MPS) support (#4744, bottlerocket-core-kit#789)
• Add trn3 device IDs to pciclient (bottlerocket-core-kit#800)

OS Changes

• Update bottlerocket-kernel-kit from 4.7.1 to 4.8.0 CHANGELOG (commits) (#4744)
• Update bottlerocket-core-kit from 12.2.0 to 12.3.0 CHANGELOG (commits) (#4744)
• Update admin-container from 0.20.0 to 0.20.1 CHANGELOG (commits) (#4749)
• Update control-container from 0.20.0 to 0.20.1 CHANGELOG (commits) (#4749)
• Update bootstrap-container from 0.2.10 to 0.2.11 CHANGELOG (commits) (#4749)

Build Changes

• Update bottlerocket-sdk from 0.66.0 to 0.70.0 (commits) (#4744)
• Update bottlerocket-settings-models to v0.20.0 (#4744)

v1.53.0

Release Highlights

• Add new kubernetes 1.35 variants (#4735):
  • Add aws-k8s-1.35, aws-k8s-1.35-nvidia, aws-k8s-1.35-fips, aws-k8s-1.35-nvidia-fips, vmware-k8s-1.35, and vmware-k8s-1.35-fips variants
  • All k8s-1.35 variants use the following:
    • kernel-6.12
    • systemd-257
    • nftables
    • containerd-2.1
    • whippet
    • release-swap - Enable zram-backed swap device to improve system stability in low-memory situations (bottlerocket-core-kit#590)
• Migrate all nvidia variants to use nvidia R580 drivers (#4733)
• Migrate admin-container and control-container to AL2023 (#4740)

OS Changes

• Update bottlerocket-kernel-kit from 4.7.0 to 4.7.1 CHANGELOG (commits) (#4736)
• Update bottlerocket-core-kit from 12.0.1 to 12.2.0 CHANGELOG (commits) (#4735)
• Enable erofs root partition in all variants (#4728)
• Use whippet in all variants (#4738)
• Update admin-container from 0.12.5 to 0.20.0 CHANGELOG (commits) (#4740)
• Update bootstrap-container from 0.2.9 to 0.2.10 CHANGELOG (commits) (#4740)
• Update control-container from 0.8.11 to 0.20.0 CHANGELOG (commits) (#4740)

Twoliter

• Update twoliter from v0.15.0 to v0.16.0 CHANGELOG (commits) (#4726, #4734)

Documentation Changes

• Remove stale settings extension design documents (#4716)

v1.52.0

Release Highlights

• Remove aws-k8s-1.28 variants (#4717)
• Disable concurrent layer fetch by default in containerd-2.1 (bottlerocket-core-kit#764)

OS Changes

• Update bottlerocket-kernel-kit from 4.5.1 to 4.7.0 CHANGELOG (commits) (#4719)
• Update bottlerocket-core-kit from 11.0.1 to 12.0.1 CHANGELOG (commits) (#4719, #4724)
• Update admin-container from 0.12.4 to 0.12.5 CHANGELOG (commits) (#4712)
• Update bootstrap-container from 0.2.8 to 0.2.9 CHANGELOG (commits) (#4712)
• Update control-container from 0.8.10 to 0.8.11 CHANGELOG (commits) (#4712)
• Update aws-dev and vmware-dev variants with the latest Bottlerocket features(#4705)

Build Changes

• Update bottlerocket-sdk from 0.65.1 to 0.66.0 (commits) (#4719)

Twoliter

• Update twoliter from v0.13.0 to v0.15.0 CHANGELOG (commits)(#4718, #4722)

v1.51.0

Release Highlights

• New ecs-3 variants are now available as a preview (#4685)
  • Add aws-ecs-3, aws-ecs-3-nvidia, aws-ecs-3-fips, and aws-ecs-3-nvidia-fips variants
  • All ecs-3 variants use the following:
    • kernel-6.12
    • containerd-2.1
    • systemd-257
    • nftables
    • whippet (bottlerocket-core-kit#720)
    • docker-engine-29 (bottlerocket-core-kit#711)
    • docker-cli-29 (bottlerocket-core-kit#711)
  • Use EROFS for root filesystem
  • Use EBS volume gp3 for all variants
  • Require IMDSv2 by default
  • aws-ecs-3-nvidia and aws-ecs-nvidia-fips variants use NVIDIA R580 drivers
  • Enable support for image verification
  • Enable support for encrypted storage
• Add NVIDIA FIPS variants for Kubernetes 1.29-1.34 and ECS-2 (#4671)
• Add support for new Kubernetes settings, image-minimum-gc-age, image-maximum-gc-age, max-parallel-image-pulls, ids-per-pod, and Beta options for cpu-manager-policy-options (#4690, bottlerocket-core-kit#689)

OS Changes

• Update bottlerocket-kernel-kit from 4.4.2 to 4.5.1 CHANGELOG (commits) (#4693, #4698)
• Update bottlerocket-core-kit from 10.9.0 to 11.0.1 CHANGELOG (commits) (#4699)
• Bump containerd from 2.0 to 2.1 on all aws-k8s-1.33 variants (#4687)
• Drop socat from aws-dev variant (#4699)
• Update ECR credential provider image patterns to include EUSC image formats (#4689)
• Use whippet in aws-ecs-2, aws-k8s-1.34, and vmware-k8s-1.34 variants (#4701)

Twoliter

• Update twoliter from v0.12.0 to v0.13.0 CHANGELOG (commits) (#4691)

Settings Extensions

• Update bottlerocket-settings-models to v0.17.0 (#4690)

v1.50.0

Release Highlights

• Add support for new kubernetes setting kube-reserved.pid and system-reserved.pid (#4661, bottlerocket-core-kit#646)
• Allow multiple sequential calls of apiclient ephemeral-storage bind (bottlerocket-core-kit#679)
• Patch containerd-2.1 to fix image pull when range-get is ignored by the registry (bottlerocket-core-kit#702)

Security Fixes

• Patch runc to mitigate CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 (bottlerocket-core-kit#6e3d3e2e)

OS Changes

• Update bottlerocket-sdk from 0.64.0 to 0.65.1 (commits)(#4664, #4667)
• Update bottlerocket-kernel-kit from 4.3.3 to 4.4.2 CHANGELOG (commits) (#4664, #4667, #4672)
• Update bottlerocket-core-kit from 10.6.0 to 10.9.0 CHANGELOG (commits) (#4661, #4664, #4667, #07b40823)
• Update admin-container from 0.12.3 to 0.12.4 CHANGELOG (commits) (#4669)
• Update bootstrap-container from 0.2.6 to 0.2.8 CHANGELOG (commits) (#4664, #4669)
• Update control-container from 0.8.8 to 0.8.10 CHANGELOG (commits) (#4664, #4669)

Settings Extensions

• Update bottlerocket-settings-models to v0.16.0 (#4661)