📢 Kairos release v3.1.0

[mudler]

🗺 What's left for release

• UKI: measured systemd-sysext #2117
• UKI: Verify images signature before upgrade #2200
• feat: remove firmware in Ubuntu uki images #2565
• spike: uki image revocation and rollback #2429
• Support for Ubuntu 24.04 LTS #2138
• UKI: kcrypt unlock-all doesn't unlock TPM-bound partitions #2217
• feat: expose systemd cert enrollment configuration of LiveCD in enki #2430
• UKI: Enroll keys during setup #2048
• Make ISO images hybrid and with GPT to improve compatability #2547
• suc-script needs to mount /sys for UKI upgrades #2586
• feat: Implement measurement and policy generation/luks unlock of sysextensions for UKI #2608

🐛

• Empty line in /etc/os-release breaks Ubuntu Pro #2526
• enki: the --local flag is missing #2212

Next release: #2052

🔦 Highlights

• This is the last release with Ubuntu 23.10 (marked for deprecation)

✅ Release Checklist

• Stage 0 - Finishing Touches
  • Check if Kairos-docs were updated and consider tagging them with the same version as Kairos
  • Check if osbuilder is in the wanted version/latest
  • Check if any kairos/packages was bumped and they were merged and repo updated (https://github.com/kairos-io/packages)
  • Check latest repository update was merged, otherwise trigger its job (https://github.com/kairos-io/kairos/actions/workflows/bump_repos.yml)
  • Make sure CI tests are passing.
  • Consider cutting an rc, alpha, ... based on changes on the CI
• Stage 1 - Manual testing
  • How: Using the assets from master, make sure that test scenarios not covered by automatic tests are passing, and that docs are still aligned
    • Fedora flavor install, and manual upgrade works
    • Any flavor interactive install
    • Any flavor recovery reset
    • ARM images (openSUSE, alpine) boots and manual upgrade works
    • ARM images passive and recovery booting
    • ARM images reset works
    • ARM images /oem exists
• Stage 3 - Release
  • Tag the release on master.
  • Create a branch vX.Y.Z on the docs (not tagging), so the new release can be built and displayed on the menu. Ideally open a PR so we can review and add/remove some commits if needed (in case we have documented WIP which is not available on the given release)
• Stage 4 - Announcement
  • Blog post announcement

[mudler]

We have to discuss internally if master does not have many breaking changes yet and has been tested enough by the prod team (cc @vipsharm ) - in that case we will move out some of the items of 3.1.0 to 3.2.0, and leave 3.1.0 to be mostly bug-fixing with small feats in (Ubuntu 24) and get rid of tech debt around 3.0.

jfyi @antongisli

[antongisli]

100%. Let's keep 3.1 as stable as possible and minimize breaking changes.

[jimmykarily]

rc1 one on its way: https://github.com/kairos-io/kairos/releases/tag/v3.1.0-rc1

[jimmykarily]

This should be addressed before we cut the "stable" one: https://www.qualys.com/regresshion-cve-2024-6387/
Let's check when the distros have a patch.

[mudler]

This should be addressed before we cut the "stable" one: https://www.qualys.com/regresshion-cve-2024-6387/ Let's check when the distros have a patch.

not a shipstopper - we can do patch releases.