CHANGELOG.md

v5.2.0 (2024-12-20)

OS Changes

• Third party package updates (#322, #323, #324, #325, #328)

Build Changes

• Add GPG verification where possible (#321)

v5.1.0 (2024-12-16)

OS Changes

• Update golang.org/x/crypto from 0.27.0 to 0.31.0 in /sources/host-ctr (#315)

Orchestrator Changes

Kubernetes

• Add beta sources for kubernetes-1.32 and ecr-credential-provider-1.32 (#317)

v5.0.0 (2024-12-12)

OS Changes

• Update binutils to 2.41 (#306)

Build Changes

• Update bottlerocket-sdk to v0.5.0 (#306)
• Remove the following packages and migrate them to the kernel-kit (#313)
  • grub
  • kernel-5.10
  • kernel-5.15
  • kernel-6.1
  • kmod-5.10-nvidia
  • kmod-5.15-nvidia
  • kmod-6.1-nvidia
  • libkcapi
  • linux-firmware
  • microcode
  • shim

v4.1.0 (2024-12-10)

OS Changes

• Enable plugins and detailed EBS volume stats for nvme-cli (#269)
• Set LoaderTimeInitUSec and LoaderTimeExecUSec in GRUB (#273)
• Third party package updates (#303, #308, #311)
• Update kernel to v6.1.119 (#309)

Build Changes

• Update twoliter to 0.6.0 (#302)

v4.0.1 (2024-12-05)

OS Changes

• Normalize amazon-ecs-cni-plugins version (#277)
• Add host certs to host containers using a volume mount (#278)
• Fix host-ctr to correctly extract regions from ECR URIs (#287)
• Run udev after the SELinux Policy files are available (#290)
• Update nvidia-container-toolkit and libnvidia-container (#296)

v4.0.0 (2024-11-20)

OS Changes

• Disable BPF preload and bpfilter helpers for kernel (#261)
• Allow overriding max-pods file with one from variant (#279)
• Update libdbus and libexpat (#270)
• Remove acpid package (#280)
• Prevent io_uring calls from hanging (#284)

Orchestrator Changes

Kubernetes

• Update EKS 1.28-1.31 versions to latest (#281)

Build Changes

• Use upstream sources for packages sourced from Amazon Linux (#265)
• Update twoliter to v0.5.1 (#259)
• Drop "dependencies" table for all packages (#262)

v3.3.2 (2024-11-15)

OS Changes

• Add kernel-5.15 patch to fix IPv6 typo (#266)

v3.3.1 (2024-11-14)

OS Changes

• Update kernel 5.10.228 and kernel 6.1.115 (#263)

v3.3.0 (2024-11-12)

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#250)

OS Changes

• Include rdma-core in AWS variants (#252)
• Add libstdc++ subpackage to libgcc (#253)
• Update third-party packages (#254)

v3.2.0 (2024-11-06)

Orchestrator Changes

Kubernetes

• Match the EKS Optimized AMIs secure TLS ciphers (#230, #245)

OS Changes

• Provide FIPS binaries for first-party rust programs (#173)
• Support ECR FIPS endpoints for host containers (#204)
• Adjust SELinux Policy to allow execute programs in NFS filesystems (#205)
• Mount binfmt_mics filesystem at boot (#206)
• Add proxy support for pluto FIPS binary (#213)
• Generate default AWS config file (#218)
• Adjust SELinux Policy for first-party FIPS rust programs (#222)
• Update third-party packages (#210, #212, #214, #219, #220, #246)
• Add rdma-core to packages (#223)
• Use Amazon Linux 2023 as upstream for libkcapi (#224)
• Set AWS_SDK_LOAD_CONFIG for system services (#243)
• Add proxy support for cfsignal (#234)

Build Changes

• Build Neuron kernel module in kernel packages (#207)
• Update Bottlerocket SDK to v0.47.0 (#241)

Tools

• Add insertFinalNewline for VSCode Workspaces (#242)

v3.1.5 (2024-11-04)

OS Changes

• Wait for kubelet device-manager socket before starting nvidia-k8s-device-plugin (#228)

v3.1.4 (2024-11-01)

OS Changes

• Update kernel 5.10.227 and kernel 5.15.168 (#235)

v3.1.3 (2024-10-31)

OS Changes

• Update kernel 6.1.112-124 (#231)

v3.1.2 (2024-10-30)

OS Changes

• Add kernel-6.1 patch to fix io statistics for cgroup v1 (#225)

v3.1.1 (2024-10-24)

OS Changes

• Revert system-wide configuration to block writeable/executable memory in systemd services (#215)

v3.1.0 (2024-10-22)

OS Changes

• Update NVIDIA driver versions to 535.216.01 (#209)

Build Changes

• Set Epoch to 1 in necessary packages (#208)

Orchestrator Changes

Kubernetes

• Apply upstream patches for Kubernetes v1.24 to v1.31 (#186)

v3.0.0 (2024-10-17)

OS Changes

• Drop kubernetes-1.23 (#184)
• Move kmod-5.10-nvidia from branch R470 to R535 (#181)
• Block writeable/executable memory in systemd services by default (#158)

Build Changes

• Update twoliter to 0.5.0 (#195)
• Update bottlerocket-sdk to 0.46.0 (#191)
• Update tough and reqwest to latest versions (#197)
• Set Epoch to 1 in necessary packages (#180)
• Drop dependency on glibc for nvidia kmods (#194)

v2.9.1 (2024-10-16)

OS Changes

• Update kernels to 5.10.226, 5.15.167 and 6.1.112 (#200)

v2.9.0 (2024-10-09)

OS Changes

• Add nvidia-persistenced and nvidia-modprobe to kmod-*-nvidia (#122)
• Add NVIDIA time-slicing settings to nvidia-k8s-device-plugin (#169)
• libcap: fix cross-compile toolchain usage (#174)
• login: start the getty services earlier (#175)
• Update amazon-ssm-agent to v3.3.987.0 (#182)

Build Changes

• Update twoliter to 0.4.7 (#183)
• Update bottlerocket-settings-models to 0.6.0 (#169)

v2.8.4 (2024-10-03)

OS Changes

• Update kernels to 5.10.226 and 5.15.167 (#177)

v2.8.3 (2024-10-02)

OS Changes

• Update ecs-agent to v1.86.3 (#168)
• Update kmod-6.1-neuron to 2.18.12.0 (#170)

Build Changes

• Exclude more object files from kernel-6.1-devel (#172)

v2.8.2 (2024-09-28)

OS Changes

• Fix driver unit dependencies for ecs-gpu-init (#166)

v2.8.1 (2024-09-27)

Build Changes

• Install squashed kernel-devel if erofs is not positively selected (#163)

v2.8.0 (2024-09-26)

Build Changes

• Choose the correct checksum when validating a twoliter binary (#157)

OS Changes

• Use open GPU drivers on P4 and P5 instances (#114)
• Add package-level support for EROFS as a root filesystem (#159)
• Update libnvidia-container and nvidia-container-toolkit to 1.16.2 (#161)

v2.7.0 (2024-09-19)

Build Changes

• Update twoliter to 0.4.6 (#153)

OS Changes

• Add the ability for ghostdog to detect EFA devices attachment (#141)
• Apply higher MEMLOCK limits in oci-defaults when EFA devices are detected (#141)
• Add the ability for corndog to generate the hugepages setting (#141)
• Compile host-ctr with go 1.23 (#146)
• Update host-ctr dependencies (#146)
• Include nvidia-cdi-hook in nvidia-container-toolkit (#150)
• Update kernels to 5.10.225 and 5.15.166 (#154)
• Use Go 1.22 for kubernetes 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29 (#155)

v2.6.0 (2024-09-17)

Build Changes

• Validate twoliter upon install (#147)

OS Changes

• Add the ability for driverdog to copy modules (#119)
• Add pciclient crate for high level access to lspci (#149)
• Update 6.1 kernel to 6.1.109 (#151)

v2.5.0 (2024-09-11)

Build Changes

• Update tough (#136)
• Update bottlerocket-sdk to v0.45.0 (#131)

OS Changes

• Build open source NVIDIA kernel modules (#118)
• Update third party packages (#129, #143)
• Split ECS and VPC CNI plugins from ecs-agent (#85)
• Add helper functions for ipcidr (#116)
• Add aws-otel-collector package (#50)
• Add pciutils package (#142)

Orchestrator Changes

Kubernetes

• Use kubelet-device-plugins API (#132)

v2.4.1 (2024-09-09)

OS Changes

• Use direct paths for ephemeral storage (#133)
• Update libexpat to 2.6.3 (#130)

v2.4.0 (2024-09-05)

OS Changes

• Add ephemeral-storage commands (#15) - thanks @tzneal
• Add support for bootstrap commands (#62, #127)
• Update runc to 1.1.14 (#123)
• Update kernels to 5.10.224, 5.15.165 and 6.1.106 (#128, #126)

Orchestrator Changes

Kubernetes

• Add Kubernetes 1.31 packages (#117)
• Apply EKS-D upstream patches for Kubernetes v1.23 to v1.26 (#121)
• Add latest instance types to eni-max-pods mapping (#120)

v2.3.6 (2024-08-28)

Build Changes

• Update Twoliter to 0.4.5 (#106)
• schnauzer: add reflective template helpers (#105)
• Update bottlerocket-sdk to v0.44.0 (#109)

OS Changes

• Third party package updates (#108)

v2.3.5 (2024-08-21)

Orchestrator Changes

Kubernetes

• Fix issue where a null value would fail to render the credential provider template for Kubernetes (#101)

OS Changes

• Improve EBS volume udev rules by adding a symlink to /dev/by-ebs-id and remove /dev/ from the device name returned by ghostdog (#98)
• Update kernels to 5.10.223-212 and 6.1.102-111 (#99)

tools

• Add collect-kernel-config script to tools (#84)

v2.3.4 (2024-08-19)

OS Changes

• Update libnvidia-container to v550.54.14 and nvidia-container-toolkit to v1.16.1 (#88)
• Fix a bug in sundog that caused it to regenerate populated settings (#94)

v2.3.3 (2024-08-14)

Orchestrator Changes

Kubernetes

• kubernetes 1.24, 1.25, 1.26: Apply upstream patches (#76, #77, #78)
• packages: use GO_MAJOR for selecting Go version (#86)

Build Changes

• pluto: use settings SDK to parse API response (#89)
• schnauzer: add support for update repository & ecr registry in ISO-E (#91)

v2.3.2 (2024-08-13)

OS Changes

• Update kernels: 5.10.223 5.15.164, and 6.1.102 (#73, #82)

Orchestrator Changes

Kubernetes

• ecr-credential-provider: update to 1.25.15 (#66)
• ecr-credential-provider-1.27: update to 1.27.8 (#66)
• ecr-credential-provider-1.29: update to 1.29.6 (#66)
• ecr-credential-provider-1.30: update to 1.30.3 (#66)
• soci-snapshotter: update to 0.7.0 (#66)

Build Changes

• Re-enable fmt and licenses lints in CI (#69)
• Use workspace dependencies for all dependencies (#70)
• Update datastore serializer to expect JSON and correctly handle null values (#80, #87)

v2.3.1 (2024-08-01)

OS Changes

• Update docker-engine to v25.0.6 (#55)

Orchestrator Changes

Kubernetes

• nvidia-container-runtime, nvidia-k8s-device-plugin: support Nvidia settings APIs #48
• Support hostname-override-source (#59)

Build Changes

• Update bottlerocket-settings-models to v0.2.0 (#58)
• Update bottlerocket-sdk to v0.43.0 (#60)

v2.3.0 (2024-07-24)

OS Changes

• Update containerd to 1.7.20 (#40)
• Update runc to 1.1.13 (#40)
• Update kernels: 5.10.220, 5.15.162, and 6.1.97 (#46)
• Add kmod-6.1-neuron-devel (#42)

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#43)

Build Changes

• Update Twoliter to 0.4.3 (#39)

v2.2.0 (2024-07-18)

OS Changes

• Add libbpf (#24, thanks @ndbaker1)
• Add kube-proxy (#25, thanks @tzneal)
• Third party package updates (#28, #35, #36)
• Update rust dependencies for first-party sources (#34)
• Update kernels: 5.10.220, 5.15.161, and 6.1.96 (#29)

Build Changes

• Update twoliter (#30, #39)

Tools

• Fix diff-kernel-config to work with Core Kit (#32)

v2.1.0 (2024-07-08)

OS Changes

• Update kernels: 5.10.219, 5.15.160-104, and 6.1.94 (#13, #17)
• Add kmod-6.1-neuron package in core kit (#21)
• Provide SSM agent as a system service (#22)
• Enable host containers and in-place updates to be optional (#23)

Orchestrator Changes

Kubernetes

• Move dockershim link to relative path (#18)

v2.0.0 (2024-06-20)

Kit Features

• Move code to core kit (#1)
• Use Bottlerocket Settings SDK for settings models (#7)

OS Changes

• Add mdadm packages for software RAID (#4035) - Thanks tzneal!
• Update kernels: 5.10.217, 5.15.156, and 6.1.92(#4049,#4039, #4005, #3972, #3976)
• Update containerd to 1.7.17 (#4016)

Build Changes

• Change pluto to act more like a settings generator (#4032)
• Update pluto for kits and Out of Tree Builds (#3828)
• Remove API Client dependency on the Settings model (#3987)
• Create CloudFormation settings extension (#4010)
• Add symlink to latest version for amazon-ssm-agent (#3986)
• Prepare os package for build system changes (#4006)
• Move to DNS settings extension (#3980)
• Move to OCI Hooks Settings Extension (#3978)
• Add Metrics Settings Extension (#3963)
• Move to PKI Settings Extension (#3971)
• Remove metadata migration (#3958)
• Remove version from makefile (#4)
• Improve cache behavior (#6)
• Twoliter updates (#8)