📢 Kairos release v3.0

[mudler]

🗺 What's left for release

• Build UKI's with osbuilder #870
• UKI: (kairos-agent) install #2049
• UKI: encryption of additional partitions #2165
• UKI: branding and menu configuration for active, passive and recovery #2167
• 🔒 Offline encryption with static measured boot #119
• Static measured boot #873
• Implementation of secure boot #1153
• Discoverable KMS #2087
• UKI: [enki/osbuilder] generate container image ready for upgrades #2202
• UKI: certificate duration and expiration #2218
• UKI: kairos-agent reset #2051
• UKI: kairos-agent upgrade #2050
• [QA] Test opensuse based osbuilder builds #2231
• build-uki: --overlay flag adds content to rootfs rather than the ISO #2271
• Reduce binary size of kairos components #2285

Regressions/bugfixes

• Default system configuration file #2221
• /run/initramfs/live is not accessible when booting LiveCD in UKI mode #2222
• Config collector should read configuration from /system/oem #2223
• Uki: Failed to mount iso during interactive install #2224
• Correctly identify the booting system with sentinel files #2226
• 🐛 machine-id of UKI images never changes #2168
• v3.0.0-alpha2 upgrade recovery fails #2244
• fix(entrypoint.sh): quote when passing-by arguments osbuilder#140
• UKI: after-install triggers before installation is ended #2292

🔦 Highlights

This release will officially start by enabling support for Trusted Boot with Kairos. The feature will be marked experimental until feature-complete ( planned in #1792 ).

✅ Release Checklist

• Stage 0 - Finishing Touches
  • Check if Kairos-docs were updated and consider tagging them with the same version as Kairos
  • Check if osbuilder is in the wanted version/latest
  • Check if any kairos/packages was bumped and they were merged and repo updated (https://github.com/kairos-io/packages)
  • Check latest repository update was merged, otherwise trigger its job (https://github.com/kairos-io/kairos/actions/workflows/bump_repos.yml)
  • Make sure CI tests are passing.
  • Consider cutting an rc, alpha, ... based on changes on the CI
• Stage 1 - Manual testing
  • How: Using the assets from master, make sure that test scenarios not covered by automatic tests are passing, and that docs are still aligned
    • Fedora flavor install, and manual upgrade works
    • Any flavor interactive install
    • Any flavor recovery reset
    • ARM images (openSUSE, alpine) boots and manual upgrade works
    • ARM images passive and recovery booting
    • ARM images reset works
    • ARM images /oem exists
• Stage 3 - Release
  • Merge Add versioning with sub dirs starting with v3 kairos-docs#146
  • Tag the release on master.
• Stage 4 - Update provider-kairos
  • Update go mod to consume kairos-io/kairos.
  • Check if any changes on the pipelines and building pieces are required
    • Flavor changes
    • osbuilder version bumps
  • Update the CORE_VERSION file of kairos-io/provider to match the release tag of kairos-io/kairos
  • Tag the release on provider-kairos
• Stage 5 - Announcement
  • release notes
    • Reading of /etc/elemental/config.yaml is working again but will be deprecated in favor of /etc/kairos/config.yaml
  • Blog post announcement

[mudler]

Closing this as 3.0 is out, and we are about to cut a patch release including a bugfix for #2384 which is making otherwise UKI images impossible to work with