[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]
Re: [atomic-devel] Fedora Atomic Host Two Week Release Announcement: 29.20190516.0

From: Dusty Mabe <dusty dustymabe com>
To: Fedora Cloud SIG <cloud lists fedoraproject org>, noreply fedoraproject org, devel lists fedoraproject org, rel-eng lists fedoraproject org, atomic-devel projectatomic io, atomic-announce projectatomic io
Subject: Re: [atomic-devel] Fedora Atomic Host Two Week Release Announcement: 29.20190516.0
Date: Fri, 17 May 2019 10:21:16 -0400

On 5/16/19 6:27 PM, noreply fedoraproject org wrote:
> 
> A new Fedora Atomic Host update is available via an OSTree update:
> 
> Version: 29.20190516.0
> Commit(x86_64): 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3
> Commit(aarch64): 3930a03b8ffcce1aa66f17b8811e2a4da80aedb8234a1f47b62d603986b580ec
> Commit(ppc64le): 144bb02d1485234b79ba385b47dc64199a7df159d3a0a3f17837cc7fb90cf7e1
> 
> 
> We are releasing images from multiple architectures but please note
> that x86_64 architecture is the only one that undergoes automated
> testing at this time.
> 
> Existing systems can be upgraded in place via e.g. `atomic host upgrade`.
> 
> Corresponding image media for new installations can be downloaded from:
> 
>     https://getfedora.org/en/atomic/download/
> 
> Alternatively, image artifacts can be found at the following links:
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0.aarch64.qcow2
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0.aarch64.raw.xz
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/iso/Fedora-AtomicHost-ostree-aarch64-29-20190516.0.iso
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0.ppc64le.qcow2
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0.ppc64le.raw.xz
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/iso/Fedora-AtomicHost-ostree-ppc64le-29-20190516.0.iso
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0.x86_64.qcow2
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0.x86_64.raw.xz
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-Vagrant-29-20190516.0.x86_64.vagrant-libvirt.box
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-Vagrant-29-20190516.0.x86_64.vagrant-virtualbox.box
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/iso/Fedora-AtomicHost-ostree-x86_64-29-20190516.0.iso
> 
> Respective signed CHECKSUM files can be found here:
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0-aarch64-CHECKSUM
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/iso/Fedora-AtomicHost-29-20190516.0-aarch64-CHECKSUM
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0-ppc64le-CHECKSUM
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/iso/Fedora-AtomicHost-29-20190516.0-ppc64le-CHECKSUM
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0-x86_64-CHECKSUM
> https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/iso/Fedora-AtomicHost-29-20190516.0-x86_64-CHECKSUM
> 
> For direct download, the "latest" targets are always available here:
>     x86_64:
>     https://getfedora.org/atomic_qcow2_x86_64_latest
>     https://getfedora.org/atomic_raw_x86_64_latest
>     https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest
>     https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest
>     https://getfedora.org/atomic_dvd_ostree_x86_64_latest
> 
>     aarch64:
>     https://getfedora.org/atomic_qcow2_aarch64_latest
>     https://getfedora.org/atomic_raw_aarch64_latest
>     https://getfedora.org/atomic_dvd_ostree_aarch64_latest
> 
>     ppc64le:
>     https://getfedora.org/atomic_qcow2_ppc64le_latest
>     https://getfedora.org/atomic_raw_ppc64le_latest
>     https://getfedora.org/atomic_dvd_ostree_ppc64le_latest
> 
> Filename fetching URLs are available here:
>     x86_64:
>     https://getfedora.org/atomic_qcow2_x86_64_latest_filename
>     https://getfedora.org/atomic_raw_x86_64_latest_filename
>     https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest_filename
>     https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest_filename
>     https://getfedora.org/atomic_dvd_ostree_x86_64_latest_filename
> 
>     aarch64:
>     https://getfedora.org/atomic_qcow2_aarch64_latest_filename
>     https://getfedora.org/atomic_raw_aarch64_latest_filename
>     https://getfedora.org/atomic_dvd_ostree_aarch64_latest_filename
> 
>     ppc64le:
>     https://getfedora.org/atomic_qcow2_ppc64le_latest_filename
>     https://getfedora.org/atomic_raw_ppc64le_latest_filename
>     https://getfedora.org/atomic_dvd_ostree_ppc64le_latest_filename
> 
> For more information about the latest targets, please reference the Fedora
> Atomic Wiki space.
> 
>     https://fedoraproject.org/wiki/Atomic_WG#Fedora_Atomic_Image_Download_Links
> 
> Do note that it can take some of the mirrors up to 12 hours to "check-in" at
> their own discretion.
> 
> Thank you,
> Fedora Release Engineering
>

*NOTE* The getfedora.org download links are not currently working. We are tracking this
       in https://pagure.io/fedora-infrastructure/issue/7802

This release of atomic host is a security fix release for a collection of vulnerabilities
known as MDS. These were mitigated in the new versions of kernel and microcode_ctl that are
listed in the diff output below. More information on the vulnerabilities can be found by
reading the email from Justin Forbes [1] (Fedora Kernel Developer) and the nice writeup from
Red Hat [2] on the vulnerabilities.

[1] https://lists.fedoraproject.org/archives/list/devel lists fedoraproject org/message/KVBGDKZHO54ESUPUSMKPRFVIGHMBNJI6
[2] https://access.redhat.com/security/vulnerabilities/mds


An example of the diff between this and the previous released version (for x86_64) is:

ostree diff commit old: 575c9ee648a2a8ed9df9695c003c2776d73d7be01f03cd84f7367d5728be1f1c
ostree diff commit new: 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3
Upgraded:
  fuse-overlayfs 0.3-8.dev.gita6958ce.fc29 -> 0.3-9.dev.git89bd69b.fc29
  glibc 2.28-27.fc29 -> 2.28-30.fc29
  glibc-all-langpacks 2.28-27.fc29 -> 2.28-30.fc29
  glibc-common 2.28-27.fc29 -> 2.28-30.fc29
  kernel 5.0.13-200.fc29 -> 5.0.16-200.fc29
  kernel-core 5.0.13-200.fc29 -> 5.0.16-200.fc29
  kernel-modules 5.0.13-200.fc29 -> 5.0.16-200.fc29
  libmodulemd1 1.8.8-1.fc29 -> 1.8.10-1.fc29
  libxcrypt 4.4.4-2.fc29 -> 4.4.6-1.fc29
  microcode_ctl 2:2.1-26.fc29 -> 2:2.1-29.fc29

x86_64 AMIs are here:
Fedora-AtomicHost-29-20190516.0.x86_64        ap-northeast-1       ami-0ccfbc53add4e2601 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        ap-northeast-2       ami-0ebbea3c0f7e50f16 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        ap-south-1           ami-02a942754b9aa2f80 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        ap-southeast-1       ami-030b20fa3bfdf170f hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        ap-southeast-2       ami-06fd5b1246ba3cdda hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        ca-central-1         ami-00d9f360bf9beae15 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        eu-central-1         ami-07b9e127269768545 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        eu-west-1            ami-0ba5b56aef9f7ef24 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        eu-west-2            ami-0278476fe7d6bf362 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        sa-east-1            ami-03306f9f2b86c9a05 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        us-east-1            ami-0da9eb89f705d4ab4 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        us-west-1            ami-01e58164c7d7ae5d0 hvm           standard       
Fedora-AtomicHost-29-20190516.0.x86_64        us-west-2            ami-0bdc45ba9e2ee5de3 hvm           standard
Fedora-AtomicHost-29-20190516.0.x86_64        ap-northeast-1       ami-0a7fede8400c0f044 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        ap-northeast-2       ami-044c20ba4ff735131 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        ap-south-1           ami-053e342ef1f59bc0b hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        ap-southeast-1       ami-026f1f7962da66610 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        ap-southeast-2       ami-0914b6e3e54e3f308 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        ca-central-1         ami-0565c03e9fe9107de hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        eu-central-1         ami-0737796f3ac6d7e8a hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        eu-west-1            ami-08f5c818d4d73117a hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        eu-west-2            ami-0ac9427e3f440b922 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        sa-east-1            ami-04825c00b2d4f672b hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        us-east-1            ami-0b620bba2adb4ec27 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        us-west-1            ami-0d26e491e944a0912 hvm           gp2            
Fedora-AtomicHost-29-20190516.0.x86_64        us-west-2            ami-08b4ff3ac125f8800 hvm           gp2

aarch64 AMIs are here:
Fedora-AtomicHost-29-20190516.0.aarch64       eu-west-1            ami-01f7e29aa0e9f572e hvm           gp2            
Fedora-AtomicHost-29-20190516.0.aarch64       us-east-1            ami-0a4003c8ae5150c7c hvm           gp2            
Fedora-AtomicHost-29-20190516.0.aarch64       us-west-2            ami-09c83be4be7b9c135 hvm           gp2            
       

The Vagrant Cloud page with the new Atomic Host:
https://app.vagrantup.com/fedora/boxes/29-atomic-host
https://app.vagrantup.com/fedora/boxes/29-atomic-host/versions/29.20190516.0

Thanks,
Fedora Atomic Working Group
References:
- [atomic-devel] Fedora Atomic Host Two Week Release Announcement: 29.20190516.0
  - From: noreply
[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]