v1.7.0

With this release, an inventory of software installed in Bottlerocket will now be reported to SSM if the control container is in use and inventorying has been enabled.

OS Changes

• Generate host software inventory and make it available to host containers (#1996)
• Update admin and control containers (#2014)

Build Changes

• Update third-party packages (#1977, #1983, #1987, #1992, #2022)
• Update Rust and Go dependencies (#2016, #2019)
• Makefile: lock tuftool version (#2009)
• Fix tmpfilesd configuration for kmod-5.10-nvidia (#2020)

Documentation Changes

• Fix tuftool download instruction in VMWare Quickstart (#1994)
• Explain data partition extension (#2013)

v1.6.2

With this release, the vmware-k8s variants have graduated from preview status and are now generally available. 🎉

Security Fixes

• Update kernel-5.4 and kernel-5.10 to include recent security fixes (a8e4a20ca7d1, 3d0c10abeecb)

OS Changes

• Add support for Kubernetes 1.22 variants (#1962)
• Add settings support for registry credentials (#1955)
• Add support for AWS CloudFormation signaling (#1728, thanks, @mello7tre!)
• Add TCMU support to the kernel (#1953, thanks, @cvlc!)
• Fix issue with closing frame construction in apiserver (#1948)

Build Changes

• Fix dead code warning during build in netdog (#1949)

Documentation Changes

• Correct variable name in bootstrap-containers/README.md (#1959, thanks, @dangen-effy!)
• Add art to the console (#1970)

v1.6.1

Security Fixes

• Apply patch to containerd for CVE-2022-23648 (0de1b39efa64)
• Update kernel-5.4 and kernel-5.10 to include recent security fixes (#1973)

v1.6.0

Deprecation Notice

The Kubernetes 1.18 variant, aws-k8s-1.18, will lose support in March 2022. Kubernetes 1.18 is no longer receiving support upstream. We recommend replacing aws-k8s-1.18 nodes with a later variant, preferably aws-k8s-1.21 if your cluster supports it. See this issue for more details.

Security Fixes

• Apply patch to the kernel for CVE-2022-0492 (#1943)

OS Changes

• Add aws-k8s-1.21-nvidia variant with Nvidia driver support (#1859, #1860, #1861, #1862, #1900, #1912, #1915, #1916, #1928)
• Add metal-k8s-1.21 variant with support for running on bare metal (#1904)
• Update host containers to the latest version (#1939)
• Add driverdog, a configuration-driven utility for linking kernel modules at runtime (#1867)
• Kubernetes: Fix a potential inconsistency with IPv6 node-ip comparisons (#1932)
• Allow setting multiple Kubernetes node taints with the same key (#1906)
• Fix a bug which would prevent Bottlerocket from booting when setting container-registry to an empty table (#1910)
• Add /etc/bottlerocket-release to host containers (#1883)
• Send grub output to the local console on BIOS systems (#1894)
• Fix minor issues with systemd units (#1889)

Build Changes

• Update third-party packages (#1936)
• Update Rust dependencies (#1940)
• Update Go dependencies of host-ctr (#1938)
• Add the ability to fetch licenses at build time (#1901)
• Pin tuftool to a specific version (#1940)

Documentation Changes

• Add a no-proxy setting example to the README (#1765 thanks, @mrajashree!)
• Document variant image-layout options in the README (#1896)

v1.5.3

Security Fixes

• Update Bottlerocket SDK to 0.25.1 for Rust 1.58.1 (#1918)
• Update kernel-5.4 and kernel-5.10 to include recent security fixes (#1921)
• Migrate host-container to the latest version for vmware variants (#1898)

OS Changes

• Fix an issue which could impair nodes in Kubernetes 1.21 IPv6 clusters (#1925)

v1.5.2

Security Fixes

• Update containerd for CVE-2021-43816 (8f085929588a)

v1.5.1

Security Fixes

• Update hotdog to the latest release. Hotdog now mimics the permissions of the target JVM process (#1884)

OS Changes

• Updated host containers to the latest version (#1881, #1882)

v1.5.0

Security Enhancements

• Add the ability to hotpatch log4j for CVE-2021-44228 in running containers (#1872, #1871, #1869)

OS Changes

• Enable configuration for OCI hooks in the container lifecycle (#1868)
• Retry all failed requests to IMDS (#1841)
• Enable node feature discovery for Kubernetes device plugins (#1863)
• Add apiclient get subcommand for simple API retrieval (#1836)
• Add support for CPU microcode updates (#1827)
• Consistently support API prefix queries (#1835)

Build Changes

• Add support for custom image sizes (#1826)
• Add support for unifying the OS and data partitions on a single disk (#1870)

Documentation Changes

• Fixed typo in the README (#1847 thanks, @PascalBourdier!)

v1.4.2

Security Fixes

• Update default admin and control host containers to address CVE-2021-43527 (#1852)
• Update kernel-5.4 and kernel-5.10 to include recent security fixes. (#1851)

Build Changes

• Update containerd (to v1.5.8) and Docker (to v20.10.11) (#1851)

v1.4.1

Security Fixes

• Apply patches to docker and containerd for CVE-2021-41190 (#1832, #1833)

Build Changes

• Update Bottlerocket SDK to 0.23.1 (#1831)