On 5/16/19 6:27 PM, noreply@xxxxxxxxxxxxxxxxx wrote: > > A new Fedora Atomic Host update is available via an OSTree update: > > Version: 29.20190516.0 > Commit(x86_64): 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 > Commit(aarch64): 3930a03b8ffcce1aa66f17b8811e2a4da80aedb8234a1f47b62d603986b580ec > Commit(ppc64le): 144bb02d1485234b79ba385b47dc64199a7df159d3a0a3f17837cc7fb90cf7e1 > > > We are releasing images from multiple architectures but please note > that x86_64 architecture is the only one that undergoes automated > testing at this time. > > Existing systems can be upgraded in place via e.g. `atomic host upgrade`. > > Corresponding image media for new installations can be downloaded from: > > https://getfedora.org/en/atomic/download/ > > Alternatively, image artifacts can be found at the following links: > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0.aarch64.qcow2 > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0.aarch64.raw.xz > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/iso/Fedora-AtomicHost-ostree-aarch64-29-20190516.0.iso > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0.ppc64le.qcow2 > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0.ppc64le.raw.xz > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/iso/Fedora-AtomicHost-ostree-ppc64le-29-20190516.0.iso > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0.x86_64.qcow2 > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0.x86_64.raw.xz > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-Vagrant-29-20190516.0.x86_64.vagrant-libvirt.box > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-Vagrant-29-20190516.0.x86_64.vagrant-virtualbox.box > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/iso/Fedora-AtomicHost-ostree-x86_64-29-20190516.0.iso > > Respective signed CHECKSUM files can be found here: > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/images/Fedora-AtomicHost-29-20190516.0-aarch64-CHECKSUM > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/aarch64/iso/Fedora-AtomicHost-29-20190516.0-aarch64-CHECKSUM > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/images/Fedora-AtomicHost-29-20190516.0-ppc64le-CHECKSUM > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/ppc64le/iso/Fedora-AtomicHost-29-20190516.0-ppc64le-CHECKSUM > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/images/Fedora-AtomicHost-29-20190516.0-x86_64-CHECKSUM > https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-20190516.0/AtomicHost/x86_64/iso/Fedora-AtomicHost-29-20190516.0-x86_64-CHECKSUM > > For direct download, the "latest" targets are always available here: > x86_64: > https://getfedora.org/atomic_qcow2_x86_64_latest > https://getfedora.org/atomic_raw_x86_64_latest > https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest > https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest > https://getfedora.org/atomic_dvd_ostree_x86_64_latest > > aarch64: > https://getfedora.org/atomic_qcow2_aarch64_latest > https://getfedora.org/atomic_raw_aarch64_latest > https://getfedora.org/atomic_dvd_ostree_aarch64_latest > > ppc64le: > https://getfedora.org/atomic_qcow2_ppc64le_latest > https://getfedora.org/atomic_raw_ppc64le_latest > https://getfedora.org/atomic_dvd_ostree_ppc64le_latest > > Filename fetching URLs are available here: > x86_64: > https://getfedora.org/atomic_qcow2_x86_64_latest_filename > https://getfedora.org/atomic_raw_x86_64_latest_filename > https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest_filename > https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest_filename > https://getfedora.org/atomic_dvd_ostree_x86_64_latest_filename > > aarch64: > https://getfedora.org/atomic_qcow2_aarch64_latest_filename > https://getfedora.org/atomic_raw_aarch64_latest_filename > https://getfedora.org/atomic_dvd_ostree_aarch64_latest_filename > > ppc64le: > https://getfedora.org/atomic_qcow2_ppc64le_latest_filename > https://getfedora.org/atomic_raw_ppc64le_latest_filename > https://getfedora.org/atomic_dvd_ostree_ppc64le_latest_filename > > For more information about the latest targets, please reference the Fedora > Atomic Wiki space. > > https://fedoraproject.org/wiki/Atomic_WG#Fedora_Atomic_Image_Download_Links > > Do note that it can take some of the mirrors up to 12 hours to "check-in" at > their own discretion. > > Thank you, > Fedora Release Engineering > *NOTE* The getfedora.org download links are not currently working. We are tracking this in https://pagure.io/fedora-infrastructure/issue/7802 This release of atomic host is a security fix release for a collection of vulnerabilities known as MDS. These were mitigated in the new versions of kernel and microcode_ctl that are listed in the diff output below. More information on the vulnerabilities can be found by reading the email from Justin Forbes [1] (Fedora Kernel Developer) and the nice writeup from Red Hat [2] on the vulnerabilities. [1] https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/message/KVBGDKZHO54ESUPUSMKPRFVIGHMBNJI6 [2] https://access.redhat.com/security/vulnerabilities/mds An example of the diff between this and the previous released version (for x86_64) is: ostree diff commit old: 575c9ee648a2a8ed9df9695c003c2776d73d7be01f03cd84f7367d5728be1f1c ostree diff commit new: 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 Upgraded: fuse-overlayfs 0.3-8.dev.gita6958ce.fc29 -> 0.3-9.dev.git89bd69b.fc29 glibc 2.28-27.fc29 -> 2.28-30.fc29 glibc-all-langpacks 2.28-27.fc29 -> 2.28-30.fc29 glibc-common 2.28-27.fc29 -> 2.28-30.fc29 kernel 5.0.13-200.fc29 -> 5.0.16-200.fc29 kernel-core 5.0.13-200.fc29 -> 5.0.16-200.fc29 kernel-modules 5.0.13-200.fc29 -> 5.0.16-200.fc29 libmodulemd1 1.8.8-1.fc29 -> 1.8.10-1.fc29 libxcrypt 4.4.4-2.fc29 -> 4.4.6-1.fc29 microcode_ctl 2:2.1-26.fc29 -> 2:2.1-29.fc29 x86_64 AMIs are here: Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0ccfbc53add4e2601 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-0ebbea3c0f7e50f16 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-02a942754b9aa2f80 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-030b20fa3bfdf170f hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-06fd5b1246ba3cdda hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-00d9f360bf9beae15 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-07b9e127269768545 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-0ba5b56aef9f7ef24 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0278476fe7d6bf362 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-03306f9f2b86c9a05 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0da9eb89f705d4ab4 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-01e58164c7d7ae5d0 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-0bdc45ba9e2ee5de3 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0a7fede8400c0f044 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-044c20ba4ff735131 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-053e342ef1f59bc0b hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-026f1f7962da66610 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-0914b6e3e54e3f308 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-0565c03e9fe9107de hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-0737796f3ac6d7e8a hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-08f5c818d4d73117a hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0ac9427e3f440b922 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-04825c00b2d4f672b hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0b620bba2adb4ec27 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-0d26e491e944a0912 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-08b4ff3ac125f8800 hvm gp2 aarch64 AMIs are here: Fedora-AtomicHost-29-20190516.0.aarch64 eu-west-1 ami-01f7e29aa0e9f572e hvm gp2 Fedora-AtomicHost-29-20190516.0.aarch64 us-east-1 ami-0a4003c8ae5150c7c hvm gp2 Fedora-AtomicHost-29-20190516.0.aarch64 us-west-2 ami-09c83be4be7b9c135 hvm gp2 The Vagrant Cloud page with the new Atomic Host: https://app.vagrantup.com/fedora/boxes/29-atomic-host https://app.vagrantup.com/fedora/boxes/29-atomic-host/versions/29.20190516.0 Thanks, Fedora Atomic Working Group _______________________________________________ cloud mailing list -- cloud@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to cloud-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/cloud@xxxxxxxxxxxxxxxxxxxxxxx