v1.39.0

Release Highlights

• Provide containerd-2.0 and containerd-1.7 (bottlerocket-core-kit#485)
• Add new k8s 1.33 variants (#4507, #4513):
  • Add aws-k8s-1.33, aws-k8s-1.33-nvidia, aws-k8s-1.33-fips, vmware-k8s-1.33, and vmware-k8s-1.33-fipsvariants
  • FIPS variants use 6.1 kernel, all others use 6.12 kernel
  • Use EROFS for root filesystem on Kernel 6.12 variants
  • Use containerd-2.0 on all k8s 1.33 variants
  • Use EBS volume gp3 for all AWS k8s 1.33 variant AMIs
  • Require IMDSv2 by default for new k8s 1.33 variant AMIs. For applications not yet compatible
    with IMDSv2, this can be disabled at the instance or account level. See
    the AWS documentation
    for more details.

OS Changes

• Update bottlerocket-core-kit from 8.0.0 to 8.1.0 CHANGELOG (commits) (#4510)
• Update bottlerocket-kernel-kit from 2.3.0 to 2.3.3 CHANGELOG (commits) (#4508)
• Update admin container from 0.11.19 to 0.11.20 CHANGELOG (commits) (#4509)
• Update bootstrap container from 0.2.0 to 0.2.1 CHANGELOG (commits) (#4509)
• Update control container from 0.8.2 to 0.8.3 CHANGELOG (commits) (#4509)

Orchestrator Changes

Kubernetes

• Add aws-k8s-1.33, aws-k8s-1.33-nvidia, aws-k8s-1.33-fips, vmware-k8s-1.33, and vmware-k8s-1.33-fipsvariants (#4507)
• Add new Kubernetes settings (#4506)
  • containerLogMaxWorkers
  • containerLogMonitorInterval
  • singleProcessOOMKill

Build Changes

• Use GP3 volumes and require IMDSv2 by default for AWS k8s 1.33 variant AMIs. (#4513)

Twoliter

• Update twoliter from 0.9.0 to 0.10.0 CHANGELOG (commits) (#4512)

v1.38.0

Release Highlights

• Move aws-ecs-2-nvidia, aws-k8s-1.28-nvidia, aws-k8s-1.29-nvidia, aws-k8s-1.30-nvidia, aws-k8s-1.31-nvidia, and aws-k8s-1.32-nvidia variants from NVIDIA r535 driver to r570 driver (#4499, #4441)
• Remove aws-k8s-1.25 variants (#4497, #4496)

OS Changes

• Update bottlerocket-core-kit from 7.0.1 to 8.0.0 CHANGELOG (commits) (#4501)
• Update bottlerocket-kernel-kit from 2.2.2 to 2.3.0 CHANGELOG (commits) (#4498)

Build Changes

• Pass missing vars to sbkeys script (#4493)

v1.37.0

Release Highlights

• Add brush to enable aws-signing-helper and IAM Roles Anywhere usage (bottlerocket-core-kit#451)
• Clear configuration-files and services on upgrades (bottlerocket-core-kit#456)
• Remove shimpei and oci-add-hooks (bottlerocket-core-kit#458)
• Use the NVIDIA Container Runtime to configure GPUs for containers (bottlerocket-core-kit#458)
• Update runc from 1.1.15 to 1.2.6 (bottlerocket-core-kit#463)
• Allow lookups of .local domains using unicast DNS (bottlerocket-core-kit#464) - Thanks @tzneal!
• Let kubelet start when swap is on (bottlerocket-core-kit#473)

OS Changes

• Remove unnecessary settings for OCI Hooks API (#4474)
• Update migrations to delete configuration-files and services on downgrade (#4478)
• Update bottlerocket-core-kit from 6.2.0 to 7.0.1 CHANGELOG (commits) (#4471, #4485, #4490)
• Update bottlerocket-kernel-kit from 2.1.0 to 2.2.2 CHANGELOG (commits) (#4485, #4489)
• Update admin container from 0.11.18 to 0.11.19 CHANGELOG (commits) (#4476)
• Update bootstrap container from 0.1.3 to 0.2.0 CHANGELOG (commits) (#4476)
• Update control container from 0.8.1 to 0.8.2 CHANGELOG (commits) (#4476)

Build Changes

• Update Rust dependencies (#4468, #4469)
• Update secure boot keys to include aws-partition & ca-signing-algo arguments (#4450)
• Update bottlerocket-sdk from 0.60.0 to 0.61.0 (commits) (#4485)

Twoliter

• Update twoliter from 0.8.1 to 0.9.0 CHANGELOG (commits) (#4484)

v1.36.0

Release Highlights

• Switch to igzip (x86_64) or pigz with zlib-ng (aarch64) to decompress container images (bottlerocket-core-kit#443)
• Add support for more AWS regions in schnauzer and host-ctr (bottlerocket-core-kit#454)

OS Changes

• Update bottlerocket-core-kit from 6.1.0 to 6.2.0 CHANGELOG (commits) (#4460, #4452)
• Update bottlerocket-kernel-kit from 1.3.0 to 2.1.0 CHANGELOG (commits) (#4461)

Orchestrator Changes

Kubernetes

• Authenticate with ECR public to avoid rate limits (#4419) - Thanks @MarkIannucci!
• Support ECR credential provider in more ISO partitions (#4459)

Build Changes

• Remove redundant metadata migration helpers (#4459)
• Archive migrations prior to v1.34.0 (#4459)
• Remove schnauzer and apiclient dependencies from bottlerocket repo (#4459)

Documentation Changes

• Fix links to ./packages to point to the bottlerocket-core-kit/packages (#4446)

v1.35.0

Release Highlights

• Move the aws-ecs-1 kernel from 5.10 to 5.15 (#4434)
• Persist sysctl setting changes to /etc/sysctl.d (bottlerocket-core-kit#333) - Thanks @aetimmes
• Updated cis report to account for formatting change in iptables (bottlerocket-core-kit#390)
• Include SHA-256 and SHA-512 CPU routines in the ARM kernel image (bottlerocket-kernel-kit#67)

OS Changes

• Update admin container from 0.11.16 to 0.11.18 CHANGELOG (commits) (#4431, #4443)
• Update bootstrap container from 0.1.1 to 0.1.3 CHANGELOG (commits) (#4432, #4443)
• Update control container from 0.7.20 to 0.8.1 CHANGELOG (commits) (#4431, #4443)

Build Changes

• Update bottlerocket-core-kit from 6.0.2 to 6.1.0 CHANGELOG (commits) (#4439)
• Update bottlerocket-kernel-kit from 1.2.0 to 1.3.0 CHANGELOG (commits) (#4439)
• Update bottlerocket-sdk from 0.50.1 to 0.60.0 (commits) (#4439)
• Bump ring from 0.17.8 to 0.17.13 (#4430)

Twoliter

• Update twoliter from 0.7.3 to 0.8.1 CHANGELOG (commits) (#4433, #4438)

v1.34.0

OS Changes

• Add support for NVIDIA Multi-Instance GPU (MIG) (#4418)

Build Changes

• Update bottlerocket-core-kit from 6.0.1 to 6.0.2 CHANGELOG (#4416)
• Update bottlerocket-kernel-kit from 1.1.2 to 1.2.0 CHANGELOG (#4416)

Twoliter

• Update Twoliter to 0.7.3 (#4416)

v1.33.0

⚠️ Note

We have discovered an issue that prevents the Nvidia Device Plugin from starting on the aws-k8s-*-nvidia variants in this release. We have paused the rollout of the release. We recommend you do not consume Bottlerocket 1.33.0 if you use these variants.

Pre-release Note

This is the latest Bottlerocket release, and is currently being made available.
You may notice nodes upgrading to this new version, though it may not yet be available globally until the "pre-release" flag is removed.

Release Highlights

• Remove aws-k8s-1.24 variants (#4359)

OS Changes

• Allow default host containers to be changed without a migration (#4324)
• Add default managed Bootstrap container (#4349)
• Correct migrations for public control containers. (#4388)

Build Changes

• Update bottlerocket-kernel-kit to 1.1.2 (#4383, #4386, #4394, #4408)
• Update bottlerocket-core-kit to 6.0.1 (#4387, #4403)

Twoliter

• Update Twoliter to 0.7.2 (#4384)

Orchestrator Changes

Kubernetes

• Deprecate Kubernetes 1.24 AWS variants (#4379)

v1.32.0

Build Changes

• Update bottlerocket-core-kit to 5.4.2 (#4374)
• Update bottlerocket-kernel-kit to 1.0.6 (#4374)
• Update bottlerocket-sdk to 0.50.1 (#4374)

Twoliter

• Update Twoliter to 0.7.1 (#4373)

v1.31.0

OS Changes

• Update host containers (#4360)

Build Changes

• Update bottlerocket-core-kit to 5.4.1 (#4365)
• Update bottlerocket-kernel-kit to 1.0.4 (#4366)

Twoliter

• Update Twoliter to 0.7.0 (#4362)

v1.30.0

OS Changes

• Update host containers (#4353)

Orchestrator Changes

Kubernetes

• Add Kubernetes 1.32 variants (#4320)
• Add device-ownership-from-security-context setting (default to true on aws-k8s-1.32) (#4345)

Build Changes

• Update bottlerocket-core-kit to 5.3.0 (#4351)
• Update bottlerocket-kernel-kit to 1.0.2 (#4344)