cloud native OS Pulse (public preview)

Comparison matrix

One row per core entry, alphabetical by name. Every cell carries its evidence label and a source. Sort by any column; filter by value. Click a project name for its data sheet.

How to read the matrix

Each cell shows the values. Open a project's data sheet (click its name) for the evidence label and the sources behind each one.

Values

None a documented absence
Unknown not determined
does not apply
Not collected no data for this field yet

Badges

Inferred a dashed border: inferred, not stated outright
See note opens the note in the data sheet
Fact-fix a cell under review; it may change
Newer release released after collection, not yet re-checked
Version not checked the version check has no result for this entry

Entry kind

distribution ships released OS artifacts with versions and a release process
platform-os an OS produced mainly to run one vendor platform
framework a toolchain for producing an OS; the adopter owns the result
mechanism a component that implements part of the lifecycle; not an OS on its own
build-system builds an OS image from source recipes; the adopter owns the image, and each capability comes from the layers the adopter selects

Built with AI agents. Every documented claim cites its source in the project's data sheet. How it was made explains the sources and the checks behind every cell. The glossary defines the terms.

Lead comparison matrix. Rows sorted alphabetically by name.
?	?	?	?	?	?	?	?	?	?	?	?	?	?	?	?	?	?	?
Azure Container Linux (ACL), data sheet3.0.20260809 (os-release), in AKS node image 202609.23.0 · 23 Sep 2026distributionplatform-osVersion not checked	Vendor image	No, ships its own base	Cloud image azure-marketplace-image	Ignition, initramfs	AKS node image: Whole node (reimaged or replaced) In-node A/B: /usr only See note: AKS	systemd-sysext Derive the image	Possible	Level 3 verity hash signed Provided by the platform	Unknown	Managed service, replacement	Optional, not bundled AKS	SSH and shell	None documented	NVIDIA GPU	amd64 arm64	Unknown	Single vendor	Vendor lifecycle
bootc, data sheetv1.16.13 · 15 Sep 2026mechanismNewer release	You build it (framework)	Yes	Not an OS image	None of its own, none of its own	OS tree, /etc merged See note: /etc and /var	Derive the image	Possible Opt-in: signature policy	Level 3 Opt-in: Sealed UKI fs-verity digest signed	Backend dependent	Operator, in place Fleet server, in place	Not bundled MicroShift (build option)	Depends on the image	Does not apply	NVIDIA GPU AMD Intel Via your base distribution	Ships no OS image amd64, arm64, ppc64le, s390x via your base distribution	Yes	Foundation-held	None published
Bottlerocket, data sheetv1.65.0 · 9 Sep 2026distributionplatform-osNewer release	Vendor image You build it (framework)	No, ships its own base	Cloud image VM image Disk image	TOML settings, before services	Whole OS image	Build-time only	Possible	Level 3 verity hash signed	Yes	Operator, in place Fleet server, in place Managed service, replacement	Optional, bundled EKS self-hosted Kubernetes Karpenter-managed	API Shell through an optional admin container	None documented	NVIDIA GPU Neuron	amd64 arm64	Yes	Single vendor	Versioned, with end of life
Container-Optimized OS, data sheetcos-129-19506-448-36 · 17 Sep 2026platform-osGoogle Cloud onlyNewer release	Vendor image	No, ships its own base	Cloud image	cloud-init and startup scripts, unknown	In place: Whole OS image GKE: Whole node (reimaged or replaced)	Vendor extensions Derive the image	Possible	Level 2 Provided by the platform	Unknown	Managed service, replacement	Optional, not bundled managed Kubernetes	SSH and shell	None documented	NVIDIA GPU Google TPU	amd64 arm64	Unknown	Single vendor	LTS stream
Elemental, data sheetelemental-operator v1.9.2; elemental-toolkit v2.3.4; Elemental OS (Elemental Linux) v2.3.1 · 18 Jun 2026distributionframework	Vendor image Vendor base, you derive You build it (framework)	Yes	ISO Disk image PXE	MachineRegistration cloud-config, initramfs	Whole OS image See note	Derive the image Transactional packages	Unknown	Not collected	Yes	Fleet server, in place Reboot coordination	Optional, installed separately RKE2 (add-on) k3s (add-on)	SSH and shell	None documented	None documented	amd64	Yes	Single vendor	Unknown
EVE-OS, data sheet17.0.0-lts · 27 Jul 2026distribution	Vendor image	Unknown	Disk image ISO PXE	Installer options and controller, installer	Whole OS image	Build-time only	Digest only	Level 2	Yes	Fleet server, in place	Optional, bundled in some images k3s (in the image)	Fleet server or controller No SSH in production	None documented	Jetson	amd64 arm64	Yes	Foundation-held	LTS stream
Fedora CoreOS, data sheet44.20260829.3.1 · 15 Sep 2026distributionNewer release	Vendor image	No, ships its own base	ISO PXE Cloud image Disk image	Ignition, initramfs	OS tree, /etc merged	Package layering Derive the image	Possible	Level 1 Provided by the platform	No	Fleet server, in place Reboot coordination	Optional, not bundled	SSH and shell	Through kubeadm Reported to fail	NVIDIA GPU (unsupported)	amd64 arm64 ppc64le s390x	Yes	Community project, sponsor holds the trademark	Rolling, no LTS
Flatcar Container Linux, data sheet4757.2.0 · 14 Sep 2026distributionNewer release	Vendor image Vendor base, you derive	No, ships its own base	ISO PXE Cloud image Disk image	Ignition, initramfs coreos-cloudinit, userspace boot	/usr only See note: kernel	systemd-sysext Derive the image	Possible	Level 3 Opt-in: enrolled key verity hash signed	Yes	Fleet server, in place Cluster API, replacement Reboot coordination	Optional, not bundled k3s (add-on) Upstream Kubernetes (add-on) kubeadm Cluster API Kubespray Typhoon	SSH and shell	Through kubeadm	NVIDIA GPU	amd64 arm64	Yes	Foundation-held	LTS stream
Kairos, data sheetv4.3.0 · 8 Sep 2026frameworkdistributionHadron: default base, v0.5.1	You build it (framework) Vendor base, you derive Vendor image	Yes Hadron: the only released base	Installer ISO PXE Cloud image Disk image MAAS	yip, initramfs	Whole OS image See note: persistent paths	Derive the image systemd-sysext Vendor extensions	Possible Opt-in: Trusted Boot	Level 3 Opt-in: Trusted Boot UKI, no pivot	Yes	Operator, one-shot Fleet server, one-shot Cluster API, replacement	Optional, bundled in standard images only k3s (in the image) k0s (in the image) Upstream Kubernetes (in the image) kubeadm	SSH and shell Fleet server or controller	Own providers	Jetson Hadron: NVIDIA GPU Hadron: Jetson Via your base distribution	Hadron: amd64 Hadron: arm64 riscv64 via your base distribution	Yes	Foundation-held	None published
Talos Linux, data sheetv1.14.1 · 15 Sep 2026distributionNewer release	Vendor image You build it (framework)	No, ships its own base	ISO PXE UKI Cloud image Disk image Installer	Machine configuration, before services	Whole OS image See note: bootloader	Vendor extensions	Possible Opt-in: verification policy	Level 3 Opt-in: SecureBoot UKI UKI, no pivot	Only when the init process fails	Fleet server, in place Cluster API, replacement Reboot coordination	Bundled and required Upstream Kubernetes (set up by the OS)	API only Fleet server or controller	Own providers No longer actively developed	NVIDIA GPU AMD Intel Qualcomm Edge NPU	amd64 arm64	Yes	Single vendor	Versioned, with end of life
Ubuntu Core, data sheetUbuntu Core 26 · 14 May 2026distributionframeworkVersion not checked	Vendor image You build it (framework)	No, ships its own base	Disk image VM image Factory	gadget.yaml, installer	Per snap	Snaps	Possible	Level 2	Documented for a remodel only	Fleet server, in place Fleet server, one-shot Fleet server	Optional, not bundled MicroK8s (add-on)	SSH and shell Fleet server or controller	None documented	NVIDIA GPU Jetson	amd64 arm64	Commercial only	Single vendor	LTS stream
No entry matches these filters.

Project data sheets

One sheet per entry. Each lists every value from the matrix in full, with its evidence and sources. It does not rank or judge.

distribution, platform-os

Azure Container Linux (ACL)

Microsoft project

3.0.20260809 (os-release), in AKS node image 202609.23.0 · collected 5 Oct 2026

Entry ?: Azure Container Linux (ACL)3.0.20260809 (os-release), in AKS node image 202609.23.0 · 23 Sep 2026distributionplatform-osVersion not checked
Who owns the artifact ?: Vendor image
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[20]
Day-0 paths ?: Cloud image
azure-marketplace-image
Config: ignitionNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Ignition (shipped as ignition-flatcar) (Apache-2.0) Earliest: initramfs; Latest: first boot; Repeat: once; Scope: files and units
Formats and mounts additional disks and formats LUKS volumes in the initramfs; systemd-repart and growfs grow the root; Clevis/Tang disk encryption is not supported. After first boot: Reprovision.Inferred, evidence^[21,22,23]
Update unit ?: AKS node image: Whole node (reimaged or replaced); In-node A/B: /usr onlyNote: On AKS, ACL supports only full node image updates. The repository documents an in-node A/B /usr slot that Trident switches; no source says AKS uses it.Mechanism: Replace the instance, A/B partition switch.Documented, evidence^[20,21]
Mounts ?: Read-only /usr (btrfs filesystem under dm-verity)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent /etc (overlay, upper layer persisted on the ROOT partition); the rest of the ROOT partition (the documents do not list which paths)
Configurable Ignition can format and mount additional disks and set up mount points at first boot. The read-only /usr is fixed.
Documented, evidence^[3]
Adding software to the OS ?: systemd-sysextSysext images merge over the read-only /usr. The image carries a containerd sysext. Standalone sysexts for NVIDIA drivers and Docker are downloaded on demand.^[24]
Derive the imageRun the Azure Linux Image Customizer on an existing ACL image. The project's guide uses it to preload container images with a script that runs in a chroot on the image.^[25]
Documented, evidence
Update signature check ?: PossibleOn by default, through Trusted Launch.^[26] The kernel, initramfs and command line ship as one signed UKI, which Secure Boot checks at boot.^[26]Inferred, evidence
Boot trust chain ?: Level 3: Running root coveredOn by default, through Trusted Launch.^[26] Trust reaches the running root (level 3).^[26,27] How the root is covered: dm-verity root hash inside a signed boot artifact (signed UKI and per-slot addon). Secure Boot and vTPM are required. The public build signs the UKI only with a test key, so the vendor documents level 3 but it cannot be reproduced from the public source.Documented, evidence
Automatic rollback ?: Not found in the documentation we read. Know the answer?Unknown, evidence
Fleet upgrade paths ?: Managed node service: AKS NodeImage channel managed service, reconciled by replacement^[28,29]
On its own: The OS has no update agent of its own. AKS acts when the node OS upgrade channel is NodeImage.Documented, evidence
Kubernetes ?: Optional, not bundledDocumented ways to run Kubernetes: AKSNo row-level source. Sources for the Kubernetes relationship sectionDocumented, evidence
Node access ?: SSH and shell
Through the AKS node pool SSH setting, or kubectl debug node. Entra ID SSH is not supported on ACLNo row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU node pools amd64; vendor image or package; signed (inferred); GPU Operator not documented; inferred^[26,30,31]
Inferred, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: Not found in the documentation we read. Know the answer?Unknown, evidence
Who holds the assets ?: Single vendorVendor: MicrosoftNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: Vendor lifecycleCommercial support: unknownNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by AKS node image version and os-release VERSION. Condition: No optional system extensions beyond those baked into the image.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[243,244]
Maintainers: Single vendor.Documented, evidence^[245,246]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[244,247,248,249]}

Provisioning ^[250]

Kubernetes relationship ^{[20,251,252,253,254]}

Operations and debugging ^{[255,256,257,258,247]}

Fleet management ^[20,257]

Hardware and platform ^[259,20,254]

Governance ^{[260,245,246,250]}

Maturity ^{[261,262,263,264,29]}

OS model ^{[20,260,250,265]}

Upgrade ^{[20,254,257,250,266]}

Rollback and recovery ^{[254,267,268]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

mechanism

bootc

CNCF Sandbox project Red Hatmain sponsor

v1.16.13 · collected 15 Sep 2026

Entry ?: bootcv1.16.13 · 15 Sep 2026mechanismNewer releaseNewer release since collection: v1.17.1 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: You build it (framework)
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: YesAny bootc base image; adopters span several distributions.Documented, evidence^[5]
Day-0 paths ?: Not an OS imagebootc install to-disk and to-filesystemNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: None of its own (agnostic) Earliest: none of its own; Latest: depends on the tool; Repeat: depends on the tool; Scope: depends on the tool
At install: bootc install --block-setup tpm2-luks, kickstart --encrypted, or a bootc-image-builder disk layout. After first boot: A new image through bootc upgrade or bootc switch.Documented, evidence^[32,33,34]
Update unit ?: OS tree, /etc mergedNote: /etc is merged three ways on upgrade, unless etc.transient is set; one /var is shared.Mechanism: OCI image deployment.Documented, evidence^[35]
Mounts ?: Read-only /, /usr, /opt (default ostree backend with composefs enabled in prepare-root.conf, as the docs strongly recommend, which makes the whole of / read-only; fs-verity is off by default on this backend, so file contents are not checked at runtime; the separate native composefs backend turns fs-verity on by default)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent /etc (three-way merge on upgrade), /var
Configurable Opt in to a transient root or a transient /etc in prepare-root.conf. Make /var or its subdirectories separate mounts. Mount other filesystems with /etc/fstab or mount units.
Documented, evidence^[8,9,10]
Adding software to the OS ?: Derive the imageA Containerfile that starts from a bootc base image. Package installs run at build time with the tools of that base distribution. The docs say systemd-sysext is not currently supported on bootc hosts, and bootc usroverlay gives only a transient writable /usr.^[36,37]
Documented, evidence
Update signature check ?: PossibleOptional.^[9] With a signature policy in /etc/containers/policy.json, bootc checks image signatures when it fetches an update.^[9] The upstream default policy does not require signatures.^[9]Documented, evidence
Boot trust chain ?: Level 3: Running root coveredOptional.^[10] With Sealed UKI (the composefs backend, with the root digest in a UKI signed for Secure Boot), trust reaches the running root (level 3).^[10] The default ostree backend does not document Secure Boot. It boots through GRUB and shim, which bootupd installs.^[38] How the root is covered: composefs root digest (fs-verity) inside a signed UKI (sealed UKI). Measured boot for the sealed path is not documented.Documented, evidence
Automatic rollback ?: Backend dependentNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Kubernetes operator: bootc-operator open source, Apache-2.0, reconciled in place, pre-release^[39]
Fleet server: Flight Control open source, Apache-2.0, reconciled in place^[40]
On its own: The bootc-fetch-apply-updates timer is available upstream for operating systems and distributions to enable. The upstream unit runs 1 hour after boot and then every 8 hours, with up to 2 hours of random delay.^[41,42]Documented, evidence
Kubernetes ?: Not bundledDocumented through images built with it (MicroShift on RHEL image mode). Documented ways to run Kubernetes: MicroShift, on image mode for RHEL (documented by Red Hat). How each is offered: MicroShift, build optionDocumented, evidence^[43]
Node access ?: Depends on the imageNo row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: Does not applyNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA CUDA amd64, arm64; vendor image or package; Secure Boot not documented; GPU Operator not documented^[44,45]
AMD: AMD ROCm amd64, arm64; vendor image or package; Secure Boot not documented^[44]
Intel: Intel Gaudi 3 amd64, arm64; vendor image or package; Secure Boot not documented^[44]
Other accelerators: via your base distribution the drivers your chosen base distribution provides, installed when you build the image. Not documented per accelerator by bootc.^[46]
Documented, evidence
Architectures ?: Ships no OS image
amd64 via your base distribution own components built for it: bootc, system-reinstall-bootc
arm64 via your base distribution own components built for it: bootc, system-reinstall-bootc
ppc64le via your base distribution own components built for it: bootc, system-reinstall-bootc
s390x via your base distribution own components built for it: bootc, system-reinstall-bootc
Documented, evidence^[47,48]
Self-hostable update source ?: YesAny OCI registry; there is no update serverNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Foundation-heldCNCF, SandboxNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: None publishedCommercial support: through downstream products onlyNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by image digest reported in host status (imageDigest). Condition: No client-side package layering.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[269,270]
Maintainers: All six listed maintainers work for Red Hat.Documented, evidence^[271]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^[272]

Provisioning ^[273,274]

Rollback and recovery ^[275,276]

Operations and debugging ^[277,278]

Fleet management ^{[279,280,281,282,283,284,285]}

Upgrade ^{[277,279,286]}

Governance ^{[271,287,288,5]}

Maturity ^{[289,290,291,292]}

OS model ^[293,5]

OS artifact ^{[294,295,290]}

Kubernetes relationship ^{[43,291,293,285,296]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution, platform-os

Bottlerocket

Amazon (AWS) project

v1.65.0 · collected 15 Sep 2026

Entry ?: Bottlerocketv1.65.0 · 9 Sep 2026distributionplatform-osNewer releaseNewer release since collection: v1.66.0 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor image
You build it (framework)
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[49]
Day-0 paths ?: Cloud image
VM image
Disk image
Config: toml-user-data-via-early-boot-configNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: TOML settings (early-boot-config and the API) (Apache-2.0 OR MIT) Earliest: before services (before kubelet); Latest: running node; Repeat: once, every boot, on demand (API or CLI); Scope: any command
In userspace, user data can run apiclient ephemeral-storage init through settings.bootstrap-commands, which sets up devices as a RAID array and formats them; TPM2 data encryption is a build feature (INFERRED). After first boot: apiclient set, at any time. User data is read once. Stored settings are rendered again at every boot. Bootstrap containers run once or at every boot.Documented, evidence^{[50,51,52,53,54,55]}
Update unit ?: Whole OS imageMechanism: A/B partition switch.Documented, evidence^[16]
Mounts ?: Read-only / (dm-verity device)
Writable, reset on reboot /etc, /run (tmpfs)
Writable, persistent /local, /var, /opt
Configurable Only to add storage: a bootstrap container can mount extra disks under /mnt, a bind mount of /local/mnt. No setting found changes the read-only or ephemeral set.
Documented, evidence^[2,297]
Adding software to the OS ?: Build-time onlySoftware is added when the image is built. An adopter defines a custom variant out of tree with Twoliter. The design document says software cannot be installed after the image is created.^[56,57]
Documented, evidence
Update signature check ?: PossibleOn by default.^[58] An update downloads only through the TUF repository, whose metadata files are each signed.^[58]Documented, evidence
Boot trust chain ?: Level 3: Running root coveredOn by default, on new variants on UEFI platforms, when the firmware enforces Secure Boot. Not on legacy BIOS or Xen instances.^[59] Trust reaches the running root (level 3).^[60,61] How the root is covered: dm-verity root hash inside a signed boot artifact (signed GRUB config). Firmware measures PCR 4 and 7, and Bottlerocket services extend PCR 8, 9 and 11 after boot.Documented, evidence
Automatic rollback ?: YesAttempts: GPT tries-remaining field, one attempt after upgrade-to-inactiveNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Kubernetes operator: brupop (Bottlerocket update operator) open source, Apache-2.0 OR MIT, reconciled in place, maintained^[62,63]
Fleet server: Bottlerocket ECS updater open source, Apache-2.0 OR MIT, reconciled in place^[64]
Managed node service: EKS managed node groups and Karpenter managed service, reconciled by replacement^[65]
On its own: No update agent is documented as a default. The README offers the operator, the ECS updater or an apiclient update apply.Documented, evidence
Kubernetes ?: Optional, bundledDocumented ways to run Kubernetes: EKS; self-hosted Kubernetes; Karpenter-managedNo row-level source. Sources for the Kubernetes relationship sectionDocumented, evidence
Node access ?: API
Shell through an optional admin container
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, open and proprietary driver amd64, arm64; vendor image or package; unsigned modules; GPU Operator with host driver and toolkit^[66,67]
AWS Neuron: AWS Inferentia and Trainium amd64; vendor image or package; Secure Boot not documented^[68]
Documented, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesA mirrored or self-hosted TUF repositoryNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Single vendorAmazon.com, Inc. or its affiliatesNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: Versioned, with end of lifeCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by VARIANT_ID plus VERSION_ID (plus BUILD_ID) in os-release. No condition.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[298]
Maintainers: Single vendor.Documented, evidence^[299]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[298,300,301,302,303,304]}

Provisioning ^{[305,306,307]}

Rollback and recovery ^{[16,307,308,309]}

Kubernetes relationship ^{[49,63,310,311,312,313,314,315]}

Operations and debugging ^{[307,298,316,309]}

Fleet management ^{[317,64,318,310,282,319,320,321]}

Hardware and platform ^{[304,307,322]}

Upgrade ^{[307,317,323,298]}

Governance ^{[324,299,325,326]}

Maturity ^{[298,326,327,328]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

platform-os

Container-Optimized OS

Google project

cos-129-19506-448-36 · collected 15 Sep 2026

Entry ?: Container-Optimized OScos-129-19506-448-36 · 17 Sep 2026platform-osGoogle Cloud onlyNewer releaseNewer build since collection; milestone 133 is now also LTS.
Who owns the artifact ?: Vendor image
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[69]
Day-0 paths ?: Cloud image
Config: cloud-init through instance metadataNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: cloud-init (instance metadata) and startup scripts (GPL-3.0 OR Apache-2.0) Earliest: unknown; Latest: every boot; Repeat: every boot; Scope: any command
Fixed boot disk; extra disks through bootcmd in userspace; encryption is not documented in the COS docs. After first boot: Edit the metadata, applied on the next boot (INFERRED). Earliest is unknown: no doc names the boot stage where cloud-init runs.Documented, evidence^{[70,71,17,72]}
Update unit ?: In place: Whole OS image; GKE: Whole node (reimaged or replaced)Mechanism: A/B partition switch, Replace the instance.Documented, evidence^[18,19]
Mounts ?: Read-only / (root filesystem mounted read-only, checked by the kernel at boot)
Writable, reset on reboot /etc, /tmp, /var/lib/cloud, /mnt/disks (tmpfs)
Writable, persistent /home, /var, /var/lib/docker, /var/lib/toolbox, /var/lib/google, /mnt/stateful_partition
Configurable Only to add storage: mount persistent disks in a subdirectory of /mnt/disks, from cloud-config bootcmd. /etc/fstab does not work because /etc is stateless.
Documented, evidence^[17]
Adding software to the OS ?: Vendor extensionsThe cos-extensions utility installs the NVIDIA GPU driver (cos-extensions install gpu). The page read documents it for the GPU driver only. The docs also state that COS has no package manager, so packages cannot be installed directly on an instance.^[73,74]
Derive the imageCOS Customizer creates a customized COS image from a COS VM. The GitHub repository is archived and points to cos.googlesource.com.^[75,76]
Documented, evidence
Update signature check ?: PossibleUpdate signing key.^[18] Whether it is on by default is not recorded. The auto-update page says the update payloads are signed and validated with keys. It does not describe the verification scheme or say where the keys are held.Inferred, evidence
Boot trust chain ?: Level 2: Measured bootProvided by the platform. Each boot stage is measured into the TPM (level 2, measured boot).^[77,78] Whether the platform turns it on by default is not recorded. Shielded VM provides a vTPM, integrity monitoring and Secure Boot. The kernel checks a build-time root checksum on each boot, but no source shows that the hash sits in a signed artifact.Documented, evidence
Automatic rollback ?: Not found in the documentation we read. Know the answer?Unknown, evidence
Fleet upgrade paths ?: Managed node service: GKE node auto-upgrade managed service, reconciled by replacement^[79]
On its own: In milestone 117 and later, the automatic updates feature is disabled by default.Documented, evidence
Kubernetes ?: Optional, not bundledDocumented ways to run Kubernetes: the vendor's managed KubernetesNo row-level source. Sources for the Kubernetes relationship sectionDocumented, evidence
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, proprietary driver, LTS milestone 85 or later amd64; signed driver from the project; signed modules; GPU Operator with the host driver^[74,80,81]
Google TPU: TPU through GKE inferred^[82]
Documented, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: Not found in the documentation we read. Know the answer?Unknown, evidence
Who holds the assets ?: Single vendorGoogleNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: LTS streamCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by milestone (VERSION_ID) plus build number (BUILD_ID), for example 12871.1160.0. No condition.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[329]
Maintainers: Single vendor.Documented, evidence^[69]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[74,330,331,332,73,333]}

Provisioning ^[72,17,334]

Kubernetes relationship ^{[335,336,337,338]}

Operations and debugging ^{[339,331,340]}

Fleet management ^{[341,342,18,282,343,344]}

Hardware and platform ^{[345,346,347]}

Governance ^[69,348,349]

Maturity ^{[350,351,346,352]}

OS model ^[69,73,353]

Rollback and recovery ^[354]

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution, framework

Elemental

SUSE (Rancher) SUSEmain sponsor

elemental-operator v1.9.2; elemental-toolkit v2.3.4; Elemental OS (Elemental Linux) v2.3.1 · collected 14 Oct 2026

Entry ?: Elementalelemental-operator v1.9.2; elemental-toolkit v2.3.4; Elemental OS (Elemental Linux) v2.3.1 · 18 Jun 2026distributionframework
Who owns the artifact ?: Vendor image
Vendor base, you derive
You build it (framework)
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: YesThe toolkit builds an OS image from a base container image the adopter picks. One of its examples starts from Ubuntu 24.04.Documented, evidence^[144]
Day-0 paths ?: ISO
Disk image
PXE
Config: MachineRegistration resource and cloud-configNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: MachineRegistration cloud-config (cloud-init and yip syntax) (Apache-2.0) Earliest: initramfs; Latest: running node; Repeat: every boot, reconcile (the node re-applies on its own); Scope: any command
install.device or install.device-selector, partition sizes through a config.yaml, snapshotter type and maxSnaps. After first boot: Edit the MachineRegistration labels and annotations (nodes re-register every 30 minutes), or reset the machine to re-apply the cloud-config.Documented, evidence^{[145,146,147,148]}
Update unit ?: Whole OS imageNote: The root image is replaced. The COS_PERSISTENT and COS_OEM partitions are not.Mechanism: A/B partition switch, Transactional snapshot.Documented, evidence^[149]
Mounts ?: Read-only /, /usr (the root image or btrfs snapshot is mounted read-only in the initramfs (sysroot mount with Options=ro))
Writable, reset on reboot /etc, /srv, /var (overlayfs on tmpfs. The toolkit default layout file sets size 25%, but that file is in the cloud-config-defaults feature, which the Elemental OS image build does not initialize (see notes))
Writable, persistent /etc/cni (overlay), /etc/iscsi (overlay), /etc/rancher (overlay), /etc/ssh (overlay), /etc/systemd (overlay), /home, /opt, /root, /usr/libexec, /var/lib/cni (overlay), /var/lib/kubelet (overlay), /var/lib/rancher (overlay), /var/lib/elemental (overlay), /var/lib/NetworkManager (overlay), /var/lib/calico (overlay), /var/log (overlay), /oem (COS_OEM partition), /usr/local (COS_PERSISTENT partition)
Configurable The writable and persistent paths are set in an immutable-layout cloud-config (RW_PATHS and PERSISTENT_STATE_PATHS), which a derivative or an OEM file can override. Immutability can be switched off at boot parameter rd.cos.debugrw, active and passive only, documented for debugging.
Documented, evidence^{[355,356,357,358]}
Adding software to the OS ?: Derive the imageWrite a Dockerfile FROM the SL Micro base OS container, run zypper or rpm in it, set IMAGE in /etc/os-release, re-run elemental init, push the image. The new image is then listed as a ManagedOSVersion.^[150]
Transactional packagesA cloud-config with after-upgrade-chroot, after-install-chroot and after-reset-chroot commands, for example zypper in or rpm -iv, runs in the new snapshot each time. The package is reinstalled on every upgrade.^[151,152]
Documented, evidence
Update signature check ?: UnknownAn optional cosign flag exists on the upgrade command. It is off by default and the fleet upgrade job does not set it. The profile does not establish that the SUSE images carry signatures. Layer digests are still checked when the image is pulled.No row-level source. Sources for the Upgrade sectionInferred, evidence
Boot trust chain ?: Not collected
Automatic rollback ?: YesAttempts: one step per boot attempt through the active entry and the passive snapshotsNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Elemental operator ManagedOSImage open source, Apache-2.0, reconciled in place^[153,154]
Reboot coordination: System Upgrade Controller plan with cordon and drain open source, Apache-2.0^[155,149]
On its own: Not applicable. A node upgrades when a ManagedOSImage targets it or when elemental upgrade is run on it.Documented, evidence
Kubernetes ?: Optional, installed separatelyDocumented ways to run Kubernetes: RKE2; K3s. How each is offered: RKE2, add-on; k3s, add-onDocumented, evidence^[156]
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: None documentedNo row-level source. Sources for the Hardware and platform sectionInferred, evidence
Architectures ?: amd64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesA private OCI registry and a channel image you build (airgap script)No row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Single vendorVendor: SUSENo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: UnknownCommercial support: available from SUSE, as SUSE Rancher Prime: OS Manager (part of Rancher Prime)No row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by IMAGE, IMAGE_REPO and IMAGE_TAG in /etc/os-release of the OS image. elemental state records the source for each snapshot, and a digest only if the source is an image. The fleet job upgrades from dir:/, and the toolkit sets a digest only for an image source, so a snapshot made that way records none. Condition: Rancher Manager v2.14 or later, because operator 1.9.x must be paired with it. No cloud-config hooks that install packages in the new snapshot. The docs show after-upgrade-chroot hooks and rpm installs that run on every upgrade and change the snapshot contents.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^{[150,359,152,360,361]}
Maintainers: Maintainer affiliation not published. CODEOWNERS names one team, @rancher/elemental. Most commits carry suse.com addresses.Documented, evidence^[362]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[150,363,364]}

Provisioning ^{[365,366,367,355,368]}

Upgrade ^{[369,360,359,361,370,371]}

Rollback and recovery ^{[372,145,373,374,375,376,377,378,379,380,381,382,383,384]}

Operations and debugging ^{[385,386,387,145]}

Fleet management ^{[388,389,153,390,391,392]}

Hardware and platform ^{[393,368,394,395]}

Governance ^{[396,397,362,398]}

Maturity ^{[399,400,389,401,398,402]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution

EVE-OS

LF Edge project ZEDEDAmain sponsor

17.0.0-lts · collected 5 Oct 2026

Entry ?: EVE-OS17.0.0-lts · 27 Jul 2026distribution
Who owns the artifact ?: Vendor image
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: UnknownUnknown, evidence
Day-0 paths ?: Disk image
ISO
PXE
Config: bootstrap-config.pbNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Installer grub options, bootstrap-config.pb and controller EdgeDevConfig (Apache-2.0) Earliest: installer; Latest: running node; Repeat: once, reconcile (the node re-applies on its own); Scope: settings only
The installer chooses disks, can wipe them and set ZFS RAID; /persist/vault encryption is automatic (fscrypt or ZFS, TPM-sealed) and not configurable. After first boot: Through the controller only. Once is the bootstrap config. Reconcile is the periodic fetch of the controller config. Settings only: bootstrap config is limited to connectivity attributes, and no host command mechanism was found.Documented, evidence^{[83,84,85,86]}
Update unit ?: Whole OS imageMechanism: A/B partition switch.Documented, evidence^[87]
Mounts ?: Read-only IMGA and IMGB root filesystem images (squashfs by default); CONFIG partition, from the point of view of EVE; EFI System partition, in practice (ext4 optional at build; EVE overlays a tmpfs layer at boot)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent persist partition (P3), holding application volumes and the encrypted vault
Configurable Not configurable. Install options choose the disk for persistent data (eve_persist_disk) and its ZFS RAID level. No option found changes which paths are persistent. (inferred)
Documented, evidence^{[403,404,405,406]}
Adding software to the OS ?: Build-time onlyHost software enters through a custom build of the EVE image or its packages. The root filesystem copies are read-only. Applications run as Edge Containers.Inferred from: CUSTOM-BUILD.md documents a build path only, and README.md calls the root filesystem read-only. No page read describes adding host software after install, and none states it is impossible.^[88,89]
Inferred, evidence
Update signature check ?: Digest onlyA sha256 digest in the controller configuration; no signature documented. Whether it is on by default is not recorded.No row-level source. Sources for the Upgrade sectionInferred, evidence
Boot trust chain ?: Level 2: Measured bootOn by default. Each boot stage is measured into the TPM (level 2, measured boot).^[90,91] Measured boot with remote attestation. GRUB measures the root filesystem into PCR 13 at boot, and the vault key is sealed to PCR 0 to 4 and 6 to 14 by default. Needs a TPM. Secure Boot is not documented.Documented, evidence
Automatic rollback ?: YesAttempts: the device remembers a failed version and refuses to retry it while the controller keeps requesting itNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Adam open source, Apache-2.0, reconciled in place^[92,93]
Fleet server: ZEDEDA Cloud managed service, proprietary, reconciled in place^[94]
On its own: The OS polls its controller. It has no schedule of its own.Inferred, evidence
Kubernetes ?: Optional, bundled in some imagesHV=k (EVE-k) flavor bundles k3s. Documented ways to run Kubernetes: k3s. How each is offered: k3s, in the imageDocumented, evidence^[95,96]
Node access ?: Fleet server or controller
No SSH in production builds. Adam (open source) or ZEDEDA CloudNo row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA Jetson: Jetson Xavier, Orin and Thor platform build; Secure Boot not documented; GPU Operator not documented^[97]
Documented, evidence
Architectures ?: amd64
arm64
Tooling only: riscv64 (listed in ZARCH and README, hypervisor mini; no riscv64 artifact in the 17.0.0-lts release)No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesYour own controller (Adam) and datastoreNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Foundation-heldLF Edge (Linux Foundation), Impact StageNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: LTS streamCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by release string in /etc/eve-release, for example 8.10.0-kvm-amd64. No condition for official release builds.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[407,408]
Maintainers: Four of six maintainers use a ZEDEDA email address.Documented, evidence^[409]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[410,411,408,412]}

Provisioning ^{[413,84,414,415,416]}

Upgrade ^{[87,417,418,419,420,421,96]}

Rollback and recovery ^[87,411,96]

Operations and debugging ^{[422,421,423,424]}

Fleet management ^{[420,416,411,409]}

Hardware and platform ^{[95,425,408,426]}

Governance ^{[427,428,429,409,430]}

Maturity ^{[431,432,425,95,416]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution

Fedora CoreOS

Fedora community Red Hatmain sponsor

44.20260829.3.1 · collected 15 Sep 2026

Entry ?: Fedora CoreOS44.20260829.3.1 · 15 Sep 2026distributionNewer releaseNewer release since collection: 44.20260928.3.1 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor image
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[98]
Day-0 paths ?: ISO
PXE
Cloud image
Disk image
Config: IgnitionNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Ignition (written as Butane) (Apache-2.0) Earliest: initramfs; Latest: first boot; Repeat: once; Scope: files and units
Partitions, RAID, filesystems and LUKS with Clevis TPM2 or Tang, including the root. After first boot: Reprovision. A live ISO or PXE boot runs Ignition on every boot.Documented, evidence^{[99,100,101,102,103]}
Update unit ?: OS tree, /etc mergedMechanism: OSTree deployment.Documented, evidence^[104,105]
Mounts ?: Read-only /, /usr, /boot (OSTree-managed, with / mounted through composefs since Fedora 41, which makes it a truly read-only filesystem; file contents are not verified at runtime: the Fedora change calls composefs the first step toward runtime verification)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent /etc, /var
Configurable Only to add storage: mount a separate partition, disk or network filesystem at /var or a subdirectory of it, with a Butane config and Ignition. The writable set stays /etc and /var.
Documented, evidence^[6,7]
Adding software to the OS ?: Package layeringrpm-ostree install, run from a systemd unit that Butane writes. The change goes into a new deployment and needs a reboot. The docs prefer containers, and the FAQ strongly discourages layering.^[106,107]
Derive the imageFedora CoreOS is an OCI image that can be the base for bootable derivative containers. The docs send heavy customization to Fedora bootc.^[108,107]
Documented, evidence
Update signature check ?: PossibleOn by default.^[109] The shipped policy requires a GPG signature on the OS update image, and rpm-ostree applies it to that image only.^[110]Documented, evidence
Boot trust chain ?: Level 1: Secure BootProvided by the platform. The firmware checks the first boot component (level 1, Secure Boot).^[111] Whether the platform turns it on by default is not recorded. Secure Boot through the signed shim, when the firmware enforces it. Binding a disk key to PCR 7 is opt-in. No measured-boot chain is documented.Documented, evidence
Automatic rollback ?: NoNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Cincinnati update graph open source, Apache-2.0, reconciled in place^[114]
Reboot coordination: FleetLock (Zincati) with airlock open source, Apache-2.0^[115,116]
Reboot coordination: FleetLock (Zincati) with poseidon/fleetlock open source, MIT^[117]
On its own: By default, the OS performs continual auto-updates. Also: Kubernetes operator: OKD Machine Config Operator (open source, Apache-2.0, no longer for Fedora CoreOS: OKD moved to CentOS Stream CoreOS in 4.16 (December 2024))^[112,113].Documented, evidence
Kubernetes ?: Optional, not bundledNo row-level source. Sources for the Kubernetes relationship sectionDocumented, evidence
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: Through kubeadm, reported to failFirst boot reported to fail. Ignition path alpha, behind a feature gateNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, DKMS open modules layered package; breaks Secure Boot; GPU Operator not documented; unsupported, work in progress^[118,119]
Documented, evidence
Architectures ?: amd64
arm64
ppc64le
s390x
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesYour own Cincinnati update graph serverNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Community project, sponsor holds the trademarkSponsor: Red HatNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: Rolling, no LTSCommercial support: unknownNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by release version, for example 44.20260829.3.1. Condition: No package layering or overrides.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^{[433,434,435]}
Maintainers: Maintainer affiliation is not published.Documented, evidence^[436,437]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[106,107,438,439,440,441,442]}

Provisioning ^{[443,444,445,446]}

Rollback and recovery ^{[447,448,449,450]}

Kubernetes relationship ^{[107,451,452,453]}

Operations and debugging ^{[454,455,107,456,457]}

Fleet management ^{[458,459,450,116,282,460,461,462,463,464]}

Hardware and platform ^{[465,466,467,6,468]}

Upgrade ^{[469,470,471,114,472]}

Governance ^{[473,436,437,474]}

Maturity ^{[475,476,466,477,107]}

OS model ^[478,479,98]

OS artifact ^{[480,481,465,482]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution

Flatcar Container Linux

CNCF Incubating project Microsoftmain sponsor

4757.2.0 · collected 15 Sep 2026

Entry ?: Flatcar Container Linux4757.2.0 · 14 Sep 2026distributionNewer releaseNewer release since collection: 4757.2.1 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor image
Vendor base, you derive
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[120]
Day-0 paths ?: ISO
PXE
Cloud image
Disk image
Config: ignitionNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Ignition (Apache-2.0) Earliest: initramfs; Latest: first boot; Repeat: once, on demand (API or CLI); Scope: files and units
coreos-cloudinit (legacy, not Canonical cloud-init) (Apache-2.0) Earliest: userspace boot; Latest: every boot; Repeat: every boot; Scope: any command
Partitions, filesystems and LUKS with Clevis or systemd-cryptenroll; TPM2 root encryption from 3913.0.1. After first boot: flatcar-reset.Documented, evidence^{[121,122,123,124,125,126,127,128]}
Update unit ?: /usr onlyNote: The update also copies that slot's kernel to the EFI partition.Mechanism: A/B partition switch.Documented, evidence^[1,129]
Mounts ?: Read-only /usr (separate partition, protected by dm-verity)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent /, /etc, /opt, /var
Configurable Only to add storage: format and attach additional filesystems with a Butane config and systemd mount units, for example at /var/lib/docker. The read-only /usr is fixed.
Documented, evidence^[1,483]
Adding software to the OS ?: systemd-sysextSysext images merge over /usr. Flatcar ships some in the image or its release servers. The sysext-bakery releases community ones.^[130]
Derive the imageMount the partitions of a Flatcar image before the first boot and add files to the boot, OEM or root partition. The /usr partition cannot be modified.^[131]
Documented, evidence
Update signature check ?: PossibleOn by default.^[132] Update images are checked against the update signing key before they are installed.^[132]Documented, evidence
Boot trust chain ?: Level 3: Running root coveredOptional.^[133] With Secure Boot and an enrolled key (Secure Boot signatures are documented for alpha channel images, in a maintainer comment of 23 June 2025), trust reaches the running root (level 3).^[134,135] For the default install, the boot trust level is not established. That comment covers alpha channel images only, and says their shim is not signed by the Microsoft third-party UEFI CA.^[133] How the root is covered: dm-verity root hash inside a signed boot artifact (signed kernel). The /usr root hash is written into the kernel before it is signed. Caveat from the code: GRUB always reads an unsigned OEM grub.cfg that can add kernel arguments, so the code does not show that /usr verity cannot be bypassed.Inferred, evidence
Automatic rollback ?: YesAttempts: GPT tries attributeNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Nebraska open source, Apache-2.0, reconciled in place^[136]
Cluster API: Cluster API providers for Flatcar open source, Apache-2.0, reconciled by replacement^[137]
Reboot coordination: FLUO (Flatcar Linux Update Operator) open source, Apache-2.0^[138,139]
Reboot coordination: kured open source, Apache-2.0^[140]
Reboot coordination: locksmith open source, Apache-2.0^[139]
On its own: Each machine should check in about 10 minutes after boot and roughly every hour after that.Documented, evidence
Kubernetes ?: Optional, not bundledDocumented ways to run Kubernetes: kubeadm; Cluster API; Kubespray; Typhoon; k3s (via Sysext Bakery). How each is offered: k3s, add-on; Upstream Kubernetes, add-onDocumented, evidence^[141,142]
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: Through kubeadmIgnition path alpha, behind a feature gateNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, open and non-open drivers amd64; signed driver from the project; signed modules; GPU Operator with host driver and toolkit^[143]
Documented, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesYour own Nebraska update serverNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Foundation-heldCNCF, IncubatingNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: LTS streamCommercial support: unknownNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by FLATCAR_VERSION in os-release, for example 4757.2.1. Condition: No system extensions beyond the default set, no default ones disabled, and no writable module overlay.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[484]
Maintainers: Nine of sixteen maintainers list Microsoft.Inferred, evidence^[485]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[130,486,143,487,120,488]}

Provisioning ^{[489,490,131]}

Rollback and recovery ^[491,1,492]

Operations and debugging ^{[493,494,495,496]}

Fleet management ^{[136,497,498,499,20,500,250,501,461,502,503,504]}

Hardware and platform ^{[505,506,507,508]}

Upgrade ^{[509,1,497,132]}

Governance ^{[485,510,511,512,513,514,515]}

Maturity ^{[516,505,517,518,501]}

Kubernetes relationship ^{[142,138,519,509]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

framework, distribution

Kairos

CNCF Sandbox project Spectro Cloudmain sponsor

v4.3.0 · collected 15 Sep 2026

Entry ?: Kairosv4.3.0 · 8 Sep 2026Default base: Hadron Linux v0.5.1. Values that come from it carry the label "Hadron", as in the matrix row. It has its own data sheet.frameworkdistributionHadron: default base, v0.5.1
Who owns the artifact ?: You build it (framework)
Vendor base, you derive
Vendor image
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: Yes7 bases advertised. Released OS images: Hadron only.Documented, evidence^[4]
Day-0 paths ?: Installer
ISO
PXE
Cloud image
Disk image
MAAS
Config: yipNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: yip (cloud-config stages) (Apache-2.0) Earliest: initramfs; Latest: running node; Repeat: every boot, reconcile (the node re-applies on its own); Scope: any command
The layout module partitions and formats in any stage; it is documented in the boot stage and at kairos-install.pre.before. From a raw image, the first boot enters recovery mode and creates COS_STATE and COS_PERSISTENT. LUKS with TPM or KMS is set at install and covers user-data partitions; first-boot encryption in the initramfs is on master only, not in v4.3.0. After first boot: Add or edit files in /oem; applied on the next boot or reconcile; install-time keys apply only at install, upgrade or reset.Documented, evidence^{[157,158,159,160,161,162,163]}
Update unit ?: Whole OS imageNote: Paths listed as persistent (including /opt, /etc/systemd, /etc/ssh, /etc/kubernetes; v4.3.0 also listed /usr/libexec, removed after it by kairos-io/kairos#4465) are synced from the image to persistent storage on every boot with rsync --update and no --delete, so a file the new image removes stays, and an image file is not applied when the persisted copy is newer. Not described in the Kairos docs; read from the code. Tracked in kairos-io/kairos#5268. Evidence: INFERRED.Boot files on upgrade: Standard install: not refreshed: a standard install upgrade does not write shim or GRUB; Trusted Boot: the whole artifact is written to the EFI partition, including the systemd-boot binary (INFERRED, code reading).Mechanism: A/B partition switch.Documented, evidence^{[164,165,166,167,168]}
Mounts ?: Read-only / (fixed-size ext2 file mounted read-only over loopback)
Writable, reset on reboot /var, /etc, /srv (overlay on tmpfs)
Writable, persistent /usr/local; /oem; paths in PERSISTENT_STATE_PATHS (for example /home, /opt, /root, /etc/ssh and /var/log), bind-mounted from /usr/local/.state
Configurable Add persistent bind mounts and ephemeral mounts in the install configuration (install.bind_mounts, install.ephemeral_mounts). The defaults come from cloud-config files that a later file can override. Immutability can be switched off at the kernel command line (rd.immucore.disable or rd.immucore.debugrw).
Documented, evidence^{[520,521,522,523]}
Adding software to the OS ?: Derive the imageA Dockerfile that starts from a Kairos image. The package manager of that image's base distribution runs at build time, not on the node.^[169]
systemd-sysextSystem extension images extend /usr at runtime. The base image needs systemd 255 or newer. Under Trusted Boot only signed images are supported. The docs also state that packages cannot be added to the system after installation; system extensions and bundles are the documented ways to add software.^[170,171]
Vendor extensionsBundles are Kairos container images that hold only files. They install once, at install time or on first boot. Changing a bundle's configuration later has no effect.^[172]
Documented, evidence
Update signature check ?: PossibleOptional.^[173] With Trusted Boot, an upgrade checks that the new UKI is signed with a key the machine's Secure Boot accepts, and stops if it is not.^[174,175] The standard install does not check update signatures by default. The cosign setting turns on a cosign check for images pulled from a registry (inferred).^[176,177]Documented, evidence
Boot trust chain ?: Level 3: Running root coveredOptional.^[173] With Trusted Boot (a UKI signed with your own keys), trust reaches the running root (level 3).^{[173,178,179]} For the standard install, the boot trust level is not established. The docs say every flavor works with Secure Boot through signed upstream artifacts, but Hadron, the only base with released images, builds its shim with no signing step (inferred).^{[180,181,182]} How the root is covered: the whole OS is inside the signed UKI, no pivot (signed UKI). The whole OS is packed in the UKI initrd and runs from memory, with signed system extensions only. Disk keys are sealed to the signed PCR 11 policy.Documented, evidence
Automatic rollback ?: YesAttempts: 1 on the GRUB path. On Trusted Boot the docs say there is none, while the agent code arms a boot counter of 3 on the entries it writesNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Kubernetes operator: kairos-operator open source, Apache-2.0, one-shot run^[183,184]
Fleet server: AuroraBoot fleet server open source, Apache-2.0, one-shot run^[187,188]
Cluster API: cluster-api-provider-kairos open source, Apache-2.0, reconciled by replacement, API may still change (README)^{[189,190,191,192]}
On its own: No self-update agent is documented. No timer or agent appears in the docs. Also: system-upgrade-controller: system-upgrade-controller Plans (open source, Apache-2.0, deprecated)^[185,186].Documented, evidence
Kubernetes ?: Optional, bundled in standard images onlyDocumented ways to run Kubernetes: k3s; k0s; kubeadm. How each is offered: k3s, in the image; k0s, in the image; Upstream Kubernetes, in the imageDocumented, evidence^{[193,194,195]}
Node access ?: SSH and shell
Fleet server or controller
AuroraBoot fleet server (open source)No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: Own providersbootstrap, control-plane, infrastructure. Pre-1.0, self-declaredNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA Jetson: Jetson AGX Orin, Orin NX, AGX Thor and DGX Spark (GB10) arm64; layered package; works with Secure Boot (documented); GPU Operator not documented^{[196,197,198]}
Hadron: NVIDIA GPU: NVIDIA discrete GPU, open kernel modules amd64; you build it; unsigned modules; GPU Operator with the host driver^[199,200]
Hadron: NVIDIA Jetson: Jetson AGX Thor; Orin image builds arm64; you build it; Secure Boot not documented; GPU Operator with host driver and toolkit^[199]
Other accelerators: via your base distribution the drivers your chosen base distribution provides, installed when you build the image. Not documented per accelerator by Kairos.^[201]
Documented, evidence
Architectures ?: Hadron: amd64
Hadron: arm64
riscv64 via your base distribution own components built for it: kairos-init, kairos-agent, immucore
Documented, evidence^{[202,203,204]}
Self-hostable update source ?: YesAny OCI registry, or a local file; there is no update serverNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Foundation-heldCNCF, SandboxNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: None publishedCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by KAIROS_VERSION in /etc/kairos-release plus flavor, variant and model fields. Condition: One version per build; no system extensions, no bundles, and nothing written to /usr/local or /usr/libexec.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^{[524,525,526,527,528]}
Maintainers: Five of six maintainers work for Spectro Cloud.Documented, evidence^[529]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[530,201,531,532]}

Provisioning ^{[533,187,534]}

Rollback and recovery ^{[535,536,537,538,523]}

Operations and debugging ^[539,187]

Fleet management ^{[187,189,540,192,282,541,542,543,544]}

Upgrade ^{[545,546,523,547]}

Governance ^{[548,529,549,550,551,552]}

Maturity ^{[194,553,551,543]}

OS model ^{[194,4,181,554]}

OS artifact ^{[537,522,545,194]}

Kubernetes relationship ^{[194,193,555,195,183]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution, base-images

Hadron Linux

v0.5.3 · collected 22 Sep 2026

Entry ?: Hadron Linuxv0.5.3 · 18 Sep 2026distributionbase-imagesNewer releaseNewer release since collection: v0.6.0 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor base, you derive
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: UnknownUnknown, evidence
Day-0 paths ?: every Kairos path: interactive, unattended cloud-config, ISO, netboot, cloud image, raw image
No row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Not collected
Update unit ?: Whole OS imageNote: Hadron is upgraded through Kairos, so the Kairos entry's note on persistent paths applies.Mechanism: A/B partition switch.Documented, evidence^[164]
Mounts ?: Read-only Set by the lifecycle manager (Kairos); see the Kairos data sheet
Writable, reset on reboot Set by the lifecycle manager (Kairos); see the Kairos data sheet
Writable, persistent Set by the lifecycle manager (Kairos); see the Kairos data sheet
Configurable Set by the lifecycle manager (Kairos); see the Kairos data sheet. Immutability can be switched off at the kernel command line, through Kairos.
Documented, evidence^[560]
Adding software to the OS ?: Derive the imageA Dockerfile that starts FROM the Hadron image. Pre-built Hadron layers and firmware images are copied in with COPY --from.^[556]
systemd-sysextBuild a sysext from a container image with AuroraBoot. Only the last image layer is converted, and the result is signed by the adopter.^[557]
Documented, evidence
Update signature check ?: Through KairosSee the Kairos data sheet.Documented, evidence^[558]
Boot trust chain ?: Through KairosSee the Kairos data sheet.Documented, evidence^[558]
Automatic rollback ?: YesNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Not collected
Kubernetes ?: Optional, not bundledBundled in Kairos standard images built from Hadron. Documented ways to run Kubernetes: k3s; k0s. How each is offered: k3s, build option; k0s, build optionDocumented, evidence^[559]
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA discrete GPU, open kernel modules amd64; you build it; unsigned modules; GPU Operator with the host driver^[199,200]
NVIDIA Jetson: Jetson AGX Thor; Orin image builds arm64; you build it; Secure Boot not documented; GPU Operator with host driver and toolkit^[199]
Documented, evidence
Architectures ?: amd64
arm64
Tooling only: riscv64No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: Not collected
Who holds the assets ?: UnknownCNCF, claimed through the Kairos project, not separately listedNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: None publishedCommercial support: through Kairos commercial supportNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Through Kairos. The Kairos release pins a Hadron version.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[559,561]
Maintainers: Maintained by the Kairos maintainers (CODEOWNERS), five of six of whom work for Spectro Cloud.Documented, evidence^[562,529]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[559,563,564,565,566,199]}

Provisioning ^{[567,568,560]}

Rollback and recovery ^[569,559]

Operations and debugging ^{[570,559,571]}

Fleet management ^{[559,572,573,565]}

Hardware and platform ^{[574,575,559,199,576]}

Governance ^{[577,562,529,578,559,579]}

Maturity ^{[580,578,581,543,561]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution

Talos Linux

Sidero Labs project (acquired by Yardi, September 2026)

v1.14.1 · collected 15 Sep 2026

Entry ?: Talos Linuxv1.14.1 · 15 Sep 2026distributionNewer releaseNewer release since collection: v1.14.4 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor image
You build it (framework)
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[205]
Day-0 paths ?: ISO
PXE
UKI
Cloud image
Disk image
Installer
Config: declarative machine configurationNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Machine configuration (machined, gRPC API) (MPL-2.0) Earliest: before services (before kubelet); Latest: running node; Repeat: every boot, on demand (API or CLI); Scope: files and units
Install disk selection and wipe, volume partitions, and disk encryption for system and user volumes with static, nodeID, KMS or TPM keys. After first boot: Yes, through the API; install keys have no effect after install. No reconcile: the node never fetches new configuration on its own. The config writes files; no cited source shows it defining units, so the scope value is the nearest one, files and units.Documented, evidence^{[206,207,208,209,210,211]}
Update unit ?: Whole OS imageNote: The bootloader is refreshed on every upgrade.Mechanism: A/B partition switch.Documented, evidence^[14,15]
Mounts ?: Read-only / (read-only squashfs mounted as a loop device)
Writable, reset on reboot /system, /tmp, /run (tmpfs, recreated on every boot)
Writable, persistent /var (the EPHEMERAL partition, XFS); STATE; META; /etc/kubernetes and similar directories (overlay, backed by /var)
Configurable Only to add storage: a UserVolumeConfig document in the machine configuration creates a persistent volume mounted at /var/mnt/<name>.
Documented, evidence^[582,583]
Adding software to the OS ?: Vendor extensionsTalos system extensions extend the root filesystem. They are built into boot assets or the installer image, and they activate only at install or upgrade.^[212]
Documented, evidence
Update signature check ?: PossibleOptional.^[213] With an image verification policy (ImageVerificationConfig), the node checks the signatures of the images it pulls, including the images Talos pulls itself.^[213] A machine with no verification policy does not require signatures.^[213]Documented, evidence
Boot trust chain ?: Level 3: Running root coveredOptional.^[214] With SecureBoot UKI (the SecureBoot installer image, signed by Sidero Labs or with your own keys), trust reaches the running root (level 3).^[214,215] The standard installer image does not document Secure Boot. GRUB boots legacy BIOS systems, where SecureBoot is not supported, and systemd-boot boots UEFI systems.^[15,214] How the root is covered: the whole OS is inside the signed UKI, no pivot (signed UKI). The squashfs root is inside the UKI initramfs. With TPM disk encryption, keys are sealed to the signed PCR 11 policy plus PCR 7.Documented, evidence
Automatic rollback ?: Only when the init process failsNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Omni source-available, BUSL-1.1, reconciled in place^[216,217]
Cluster API: CACPPT (Cluster API control plane provider Talos) open source, MPL-2.0, reconciled by replacement, no longer actively developed^[218]
Reboot coordination: Talos etcd quorum guard ^[14]
On its own: No self-update agent exists. OS upgrades are effected by an API call. Also: Kubernetes operator: tuppr (open source, AGPL-3.0, reconciled in place, third-party)^[219].Documented, evidence
Kubernetes ?: Bundled and requiredDocumented ways to run Kubernetes: upstream Kubernetes, rendered as static pods. How each is offered: Upstream Kubernetes, set up by the OSDocumented, evidence^[220,221]
Node access ?: API only
Fleet server or controller
No SSH and no local shell. Omni (source-available)No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: Own providers, no longer actively developedbootstrap, control-plane, infrastructure. README notices point to Omni; releases still shipNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, open and proprietary, lts and production amd64, arm64; signed driver from the project; signed (inferred); GPU Operator with host driver and toolkit^[222,223]
AMD: AMD GPU, amdgpu extension signed driver from the project; signed (inferred)^[224]
Intel: Intel i915, xe and intel-npu extensions signed driver from the project; signed (inferred)^[225]
Qualcomm: Qualcomm Cloud AI (qaic) signed driver from the project; signed (inferred)^[225]
Edge NPU: Hailo (hailort), Coral (gasket-driver), Tenstorrent, Rockchip (rockchip-rknn) signed driver from the project; signed (inferred)^[225]
Documented, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesAny OCI registry; Image Factory can run on-premisesNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Single vendorVendor: Sidero Labs, which announced on 2026-09-14 that it has been acquired by Yardi and continues to operate as a standalone companyNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: Versioned, with end of lifeCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by Talos version plus the Image Factory schematic ID. No condition on the Image Factory path.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[584]
Maintainers: Single vendor.Documented, evidence^[585]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[212,586,587,588]}

Provisioning ^{[589,590,591]}

Rollback and recovery ^{[592,593,14,594,595,596]}

Operations and debugging ^{[597,598,599,600]}

Fleet management ^{[217,601,602,603,604,218,605,282]}

Hardware and platform ^{[606,587,607]}

Upgrade ^{[14,213,608,590,589,609]}

Governance ^{[602,610,585,611,612]}

Maturity ^{[613,606,614,615,616]}

Kubernetes relationship ^[14,220,606]

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution, framework

Ubuntu Core

Canonical project

Ubuntu Core 26 · collected 15 Sep 2026

Entry ?: Ubuntu CoreUbuntu Core 26 · 14 May 2026distributionframeworkVersion not checked
Who owns the artifact ?: Vendor image
You build it (framework)
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[226]
Day-0 paths ?: Disk image
VM image
Factory
Config: console-conf at first bootNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: snapd install mode with gadget.yaml (GPL-3.0) Earliest: installer; Latest: running node; Repeat: once, on demand (API or CLI); Scope: settings only
snapd creates partitions, encrypts ubuntu-data and ubuntu-save and seals keys in the TPM. After first boot: snap set system. A gadget that ships cloud-init configuration can run any command; snapd copies the gadget cloud config unfiltered. No doc names runcmd.Documented, evidence^{[227,228,229]}
Update unit ?: Per snapMechanism: Snap revision refresh.Longest hold: indefinite with snap refresh --hold=forever.Documented, evidence^[230,231]
Mounts ?: Read-only every snap, including the base snap that serves as the root filesystem; ubuntu-seed; ubuntu-boot (snap images (squashfs), presented read-only)
Writable, reset on reboot the whole system, in install and recover modes only (tmpfs)
Writable, persistent ubuntu-data, holding system and user data; ubuntu-save, holding device identity and recovery data
Configurable Only to add storage: declare extra partitions in the gadget snap's volume layout, before ubuntu-boot. The roles and the read-only set stay fixed. Immutability can be switched off at build time, with a model of grade dangerous (documented for development only).
Documented, evidence^{[230,226,617,228]}
Adding software to the OS ?: SnapsEverything on the device is a snap, and snaps can be installed on a running device. The model assertion names the snaps an image holds. In the signed grade, snaps outside the model cannot appear in the recovery system.^{[226,232,233]}
Documented, evidence
Update signature check ?: PossibleSigned assertions. Whether it is on by default is not recorded.No row-level source. Sources for the Upgrade sectionInferred, evidence
Boot trust chain ?: Level 2: Measured bootOn by default. Each boot stage is measured into the TPM (level 2, measured boot).^[234,235] Needs a device with UEFI Secure Boot and TPM 2.0. kernel.efi is a signed UKI, and disk encryption is sealed to the EFI boot state. The base snap is mounted from disk; snap dm-verity exists in snapd but is not enabled at boot.Documented, evidence
Automatic rollback ?: Documented for a remodel onlyNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidence
Fleet upgrade paths ?: Fleet server: Snap Store or brand store with validation sets managed service, proprietary, reconciled in place^[236]
Fleet server: Landscape proprietary, one-shot run^[237]
Fleet server: Canonical Enterprise Store proprietary^[238]
On its own: snapd checks for refreshes 4 times a day.Documented, evidence
Kubernetes ?: Optional, not bundledDocumented ways to run Kubernetes: MicroK8s, from its strict-confinement tracks. How each is offered: MicroK8s, add-onDocumented, evidence^[239,240]
Node access ?: SSH and shell
Fleet server or controller
Landscape (proprietary)No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA CUDA on Core 24 (x86_64 path) amd64; vendor image or package; Secure Boot not documented; GPU Operator not documented^[241]
NVIDIA Jetson: Jetson AGX Orin, Orin Nano, Orin NX (Ubuntu Core 22) platform build; works with Secure Boot (documented)^[242]
Documented, evidence
Architectures ?: amd64
arm64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: Commercial onlyCanonical Enterprise Store, a paid on-premises proxyNo row-level source. Sources for the Upgrade sectionDocumented, evidence
Who holds the assets ?: Single vendorCanonicalNo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: LTS streamCommercial support: availableNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Named by the model assertion plus a revision per snap, by default (none for the whole OS); with a pinning validation set, account-id/name/sequence. Condition: The fleet's OS version is the own-brand model assertion plus an enforced validation set that pins the base, kernel, gadget and snapd snaps at fixed revisions. This works on the public Snap Store, and a brand store is not required: the store header of a model is optional, and a device without it uses the main Ubuntu store. Without an enforced validation set, each device refreshes its snaps on its own, and R1 is not met.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^{[618,233,619,620]}
Maintainers: Single vendor.Documented, evidence^[621]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[233,226,234,622]}

Provisioning ^{[227,623,624,240]}

Upgrade ^{[625,240,231,626,627]}

Rollback and recovery ^{[628,629,630,631,625]}

Operations and debugging ^{[632,624,630]}

Fleet management ^{[633,627,625,231,240,634,282,635,636,464]}

Hardware and platform ^{[637,638,234,226,639,640,641,241,642]}

Governance ^{[643,621,644]}

Maturity ^{[240,638,642]}

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

distribution

openSUSE MicroOS

openSUSE project SUSEmain sponsor

16.0.0-Snapshot20260919 · collected 15 Sep 2026

Entry ?: openSUSE MicroOS16.0.0-Snapshot20260919 · 19 Sep 2026distributionNewer releaseNewer release since collection: Snapshot20261017 (checked 2026-10-19). Not yet re-validated.
Who owns the artifact ?: Vendor image
Assembled from packages
No row-level source. Sources for the Customization sectionDocumented, evidence
Bring your own distro ?: No, ships its own baseInferred, evidence^[645]
Day-0 paths ?: ISO
Disk image
Cloud image
PXE
Config: Combustion shell scriptNo row-level source. Sources for the Provisioning sectionDocumented, evidence
Configuration tool ?: Combustion (GPL-2.0-or-later) Earliest: unknown; Latest: unknown; Repeat: unknown; Scope: unknown
Ignition Earliest: unknown; Latest: unknown; Repeat: unknown; Scope: unknown
cloud-init (OpenStack images) Earliest: unknown; Latest: unknown; Repeat: unknown; Scope: unknown
jeos-firstboot (interactive) (MIT) Earliest: unknown; Latest: unknown; Repeat: unknown; Scope: unknown
Can re-partition the hard disk; TPM2 or FIDO2 enrollment of an existing LUKS2 device happens in userspace. After first boot: No (INFERRED); later changes go through transactional-update. All four cells are unknown: they were not researched in this edition. All four cells are unknown: they were not researched in this edition. All four cells are unknown: they were not researched in this edition. All four cells are unknown: they were not researched in this edition.Documented, evidence^[646,647]
Update unit ?: Root snapshot with /etcMechanism: Transactional snapshot.Documented, evidence^[13]
Mounts ?: Read-only / (read-only btrfs subvolume, made writable only inside a new snapshot)
Writable, reset on reboot Not found in the documentation we read. Know the answer?
Writable, persistent /var (separate btrfs subvolume, left out of snapshots); /etc (overlay); /home, /root, /opt, /srv and /usr/local (separate btrfs subvolumes in the image definition); /boot/writable (separate btrfs subvolume, in 20 of the 22 image profiles; not in kvm-and-xen-sdboot or kvm-and-xen-grub-bls)
Configurable Unknown
Documented, evidence^[11,12]
Adding software to the OS ?: Transactional packagestransactional-update installs RPM packages into a new snapshot. The system boots that snapshot on the next boot.^[648,649]
systemd-sysextsysextmgrcli downloads and version-checks sysext images, and systemd-sysext merges them. The images match the booted snapshot.^[650]
Documented, evidence
Update signature check ?: PossibleRPM and repository signing. Whether it is on by default is not recorded.No row-level source. Sources for the Upgrade sectionInferred, evidence
Boot trust chain ?: Level 2: Measured bootOptional. Each boot stage is measured into the TPM (level 2, measured boot).^[651,652] Where the default leaves you is not recorded. Measured boot applies with TPM2 full-disk encryption. No UKI or dm-verity root is documented.Documented, evidence
Automatic rollback ?: YesAttempts: 3 by default on BLS bootloaders, configurable in /etc/kernel/triesNo row-level source. Sources for the Rollback and recovery sectionDocumented, evidenceFact-fixhealth-checker is installed by default (documented). Whether its unit is enabled by default in a stock image is not verified.
Fleet upgrade paths ?: Reboot coordination: rebootmgr open source, GPL-2.0^[655]
On its own: transactional-update is run by systemd.timer in regular intervals (OnCalendar=daily). Whether openSUSE enables the timer by default is unverified. Also: Kubernetes operator: SUSE Edge Upgrade Controller (open source, Apache-2.0, reconciled in place, SUSE Linux Micro only, not openSUSE MicroOS)^[653]; system-upgrade-controller: system-upgrade-controller example Plan (open source, Apache-2.0)^[654].Documented, evidence
Kubernetes ?: Optional, not bundledDocumented ways to run Kubernetes: k3s, on a wiki page the project marks unmaintained. How each is offered: k3s, add-onDocumented, evidence^[656]
Node access ?: SSH and shell
No row-level source. Sources for the Operations and debugging sectionDocumented, evidence
Cluster API ?: None documentedNo row-level source. Sources for the Fleet management sectionDocumented, evidence
AI accelerators ?: NVIDIA GPU: NVIDIA GPU, open driver, SUSE Linux Micro 6.2 (subscription) amd64; layered package; signed (inferred); GPU Operator with the host driver^[657]
openSUSE MicroOS: applies to SUSE Linux Micro.Documented, evidence
Architectures ?: amd64
arm64
ppc64le
armv7l
s390x
riscv64
No row-level source. Sources for the Hardware and platform sectionDocumented, evidence
Self-hostable update source ?: YesA mirror of the Tumbleweed repositoriesNo row-level source. Sources for the Upgrade sectionInferred, evidence
Who holds the assets ?: Community project, sponsor holds the trademarkSponsor: SUSENo row-level source. Sources for the Governance sectionDocumented, evidence
Support model ?: Rolling, no LTSCommercial support: none for MicroOSNo row-level source. Sources for the Maturity sectionDocumented, evidence
What names the OS version: Does not meet criterion 1. Each node builds its next snapshot from packages with transactional-update, also from a pinned repository. No artifact is built once for the fleet.Inclusion criterion 1: atomic updates (versioned OS).Documented, evidence^[658,659]
Maintainers: Maintainer affiliation is not published. The sponsor, SUSE, holds the trademark and the infrastructure.Documented, evidence^[660]

Sources for this section

Rows here, and guide text, marked "No row-level source" rest on these lists. Each list backs its dimension as a whole, not one row.

Customization ^{[648,650,661,647]}

Provisioning ^{[661,647,648,662,663]}

Upgrade ^{[664,665,655,666,667]}

Rollback and recovery ^{[648,668,669,664,670,671]}

Operations and debugging ^{[648,663,672,655]}

Fleet management ^{[668,655,673,650,674,282,675,676,464]}

Hardware and platform ^{[677,678,679,680,663,657]}

Governance ^{[681,660,682,683,684]}

Maturity ^{[685,686,687,688,689]}

OS model ^{[645,690,691,692,685,672,688]}

Immutability ^[648,664]

Every value as the matrix records it, with its evidence label and sources. For open bugs and advisories, see the project's own issue tracker.

Sources

Primary sources only. Each was read on the date shown.

Flatcar disk partitions: read-only /usr, stateful / Flatcar Container Linux. official-docs. Retrieved 12 Oct 2026.https://www.flatcar.org/docs/latest/devguide/sdk-disk-partitions/
Bottlerocket security guidance: system mounts Bottlerocket. source-repo. Retrieved 12 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/8db07cb/SECURITY_GUIDANCE.md
Azure Container Linux architecture: the /usr partition Azure Container Linux (ACL). source-repo. Retrieved 12 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/4dd4f8b/acl/docs/architecture.md
kairos.io/docs/architecture/meta/ Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/architecture/meta/
github.com/bootc-dev/bootc/blob/main/ADOPTERS.md bootc. source-repo. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/blob/main/ADOPTERS.md
Fedora CoreOS storage: immutable root Fedora CoreOS. official-docs. Retrieved 12 Oct 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/storage/
Fedora Change: composefs by default for CoreOS and IoT (targeted release Fedora Linux 41) Fedora CoreOS. design-doc. Retrieved 19 Oct 2026.https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
bootc filesystem: read-only root bootc. official-docs. Retrieved 12 Oct 2026.https://bootc.dev/bootc/bootc-filesystem.7.html
bootc security: fs-verity by backend bootc. official-docs. Retrieved 19 Oct 2026.https://bootc.dev/bootc/bootc-security.7.html
bootc composefs backend: two storage backends bootc. official-docs. Retrieved 19 Oct 2026.https://bootc.dev/bootc/bootc-composefs.7.html
openSUSE-MicroOS image definition (kiwi), openSUSE:Factory, revision 103: separate subvolumes openSUSE MicroOS. source-repo. Retrieved 12 Oct 2026.https://api.opensuse.org/public/source/openSUSE:Factory/openSUSE-MicroOS/openSUSE-MicroOS.kiwi?rev=103
transactional-update guide: /var openSUSE MicroOS. official-docs. Retrieved 12 Oct 2026.https://kubic.opensuse.org/documentation/transactional-update-guide/tu-setup.html
openSUSE transactional-update documentation, /etc openSUSE MicroOS. source-repo. Retrieved 6 Oct 2026.https://github.com/openSUSE/transactional-update/blob/ef8af9f/doc/transactional-update.xml
Upgrading Talos Talos Linux. official-docs. Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/lifecycle-management/upgrading-talos
Talos bootloader Talos Linux. official-docs. Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.14/platform-specific-installations/bare-metal-platforms/bootloader
Bottlerocket signpost README, partition sets Bottlerocket. source-repo. Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/sources/updater/signpost/README.md
COS disks and file system: stateless partitions Container-Optimized OS. official-docs. Retrieved 12 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/concepts/disks-and-filesystem
Container-Optimized OS auto update Container-Optimized OS. vendor-docs. Retrieved 6 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/concepts/auto-update
GKE node pool upgrade strategies (surge, blue-green) Container-Optimized OS. vendor-docs. Retrieved 6 Oct 2026.https://docs.cloud.google.com/kubernetes-engine/docs/concepts/node-pool-upgrade-strategies
learn.microsoft.com/en-us/azure/azure-linux/azure-container-linux-overview Azure Container Linux (ACL). vendor-docs. Retrieved 22 Sep 2026.https://learn.microsoft.com/en-us/azure/azure-linux/azure-container-linux-overview
ACL architecture Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/6adc59d/acl/docs/architecture.md
ACL 99-acl.conf Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/6adc59d/build_library/rpm/additional_files/99-acl.conf
Azure Container Linux: image build Azure Container Linux (ACL). . Retrieved 15 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/6adc59d/build_library/rpm/build_image_util.sh
ACL docs: System Extensions (sysexts) Azure Container Linux (ACL). source-repo. Retrieved 12 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/4dd4f8b3b53d2aef5f342ffad5a0ce304c26c9ab/acl/docs/sysexts.md
ACL docs: Preloading Container Images into an ACL Image Azure Container Linux (ACL). source-repo. Retrieved 12 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/4dd4f8b3b53d2aef5f342ffad5a0ce304c26c9ab/acl/docs/containerd-image-preload.md
Azure Container Linux overview (AKS), considerations and limitations Azure Container Linux (ACL). vendor-docs. Retrieved 19 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/azure-container-linux-overview
azure-container-linux: per-slot verity addon Azure Container Linux (ACL). source-code. Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/commit/6adc59d7c164456f8203b2651f787ccca8764331
Azure Container Linux limitations (azure-aks-docs) Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://github.com/MicrosoftDocs/azure-aks-docs/blob/main/articles/aks/includes/azure-container-linux-limitations.md
Auto-upgrade node OS images (AKS) Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-os-image
AKS NVIDIA GPU Operator Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/nvidia-gpu-operator
azure-container-linux acl/docs/sysexts.md at 6adc59d Azure Container Linux (ACL). . Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/6adc59d/acl/docs/sysexts.md
bootc installation bootc. . Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/bootc-installation.7.md
bootc filesystem encryption bootc. . Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/bootc-filesystem-encryption.7.md
bootc: installation, provisioning and first boot bootc. . Retrieved 15 Oct 2026.https://github.com/bootc-dev/bootc/blob/v1.17.1/docs/src/bootc-installation.7.md
bootc-filesystem(7), /etc bootc. source-repo. Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/bootc-filesystem.7.md
bootc docs: Package manager integration bootc. source-repo. Retrieved 12 Oct 2026.https://github.com/bootc-dev/bootc/blob/654978a62f5fe50b62d4e8c21c8246bd6409e296/docs/src/bootc-package-managers.7.md
bootc docs: Filesystem, systemd-confext and systemd-sysext bootc. source-repo. Retrieved 12 Oct 2026.https://github.com/bootc-dev/bootc/blob/654978a62f5fe50b62d4e8c21c8246bd6409e296/docs/src/bootc-filesystem.7.md
bootc bootloaders bootc. official-docs. Retrieved 19 Oct 2026.https://bootc.dev/bootc/bootc-bootloaders.7.html
bootc-operator README bootc. . Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc-operator
flightctl repository bootc. . Retrieved 6 Oct 2026.https://github.com/flightctl/flightctl
bootc-fetch-apply-updates.timer, upstream unit at v1.16.13 bootc. source-repo. Retrieved 19 Oct 2026.https://github.com/bootc-dev/bootc/blob/v1.16.13/systemd/bootc-fetch-apply-updates.timer
bootc upgrades: the upstream timer bootc. official-docs. Retrieved 19 Oct 2026.https://bootc.dev/bootc/bootc-upgrades.7.html
https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.22/html/installing_with_image_mode_for_rhel/index bootc. vendor-docs. Retrieved 5 Oct 2026.https://docs.redhat.com/en/documentation/red_hat_build_of_microshift/4.22/html/installing_with_image_mode_for_rhel/index
RHEL AI 3.4 documentation bootc. . Retrieved 6 Oct 2026.https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.4
fedora/bootc/examples nvidia/Containerfile at d6ac3be bootc. . Retrieved 6 Oct 2026.https://gitlab.com/fedora/bootc/examples/-/blob/d6ac3be/nvidia/Containerfile
bootc: building images bootc. . Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/building/bootc-building-images.7.md
Fedora build bootc-1.17.1-1.fc44: x86_64 bootc. source-repo. Retrieved 12 Oct 2026.https://koji.fedoraproject.org/koji/buildinfo?buildID=3116345
Fedora bootc.spec: excluded architectures bootc. source-repo. Retrieved 12 Oct 2026.https://src.fedoraproject.org/rpms/bootc/blob/06c498efe4303f0f454557b79553b977e0c9690c/f/bootc.spec
bottlerocket.dev/en/os/1.64.x/concepts/variants/ Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/concepts/variants/
early-boot-config.service Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/2d7f4ea/packages/early-boot-config/early-boot-config.service
apiclient README Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/2d7f4ea/sources/api/apiclient/README.md
Bottlerocket: early-boot-config service Bottlerocket. . Retrieved 15 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/v17.2.0/packages/early-boot-config/early-boot-config.service
Bottlerocket: thar-be-settings Bottlerocket. . Retrieved 15 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/v17.2.0/sources/api/thar-be-settings/README.md
Bottlerocket: settings-applier service Bottlerocket. . Retrieved 15 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/v17.2.0/packages/os/settings-applier.service
Bottlerocket: bootstrap containers Bottlerocket. . Retrieved 15 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/v17.2.0/sources/api/bootstrap-containers/README.md
Twoliter design document Bottlerocket. design-doc. Retrieved 12 Oct 2026.https://github.com/bottlerocket-os/twoliter/blob/ff81b1732407cbeb2f6730ec0ce251a762064eb4/docs/design/README.md
Building Bottlerocket Bottlerocket. source-repo. Retrieved 12 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/8db07cb89e233ea931d74e0c0aab331d12a6b5af/BUILDING.md
Bottlerocket updater README, TUF repository Bottlerocket. source-repo. Retrieved 19 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/d8b7dfa08c8e2093d770580c58844881849491db/sources/updater/README.md
Bottlerocket security features, Secure Boot enabled Bottlerocket. official-docs. Retrieved 19 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/SECURITY_FEATURES.md#secure-boot-enabled
Bottlerocket security features Bottlerocket. official-docs. Retrieved 6 Oct 2026.https://raw.githubusercontent.com/bottlerocket-os/bottlerocket/develop/SECURITY_FEATURES.md
Bottlerocket chain of trust Bottlerocket. official-docs. Retrieved 6 Oct 2026.https://bottlerocket.dev/en/os/1.64.x/concepts/chain-of-trust/
Bottlerocket in-place updates Bottlerocket. . Retrieved 6 Oct 2026.https://bottlerocket.dev/en/os/1.64.x/update/methods/in-place/
bottlerocket-update-operator repository Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-update-operator
bottlerocket-ecs-updater repository Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket-ecs-updater
EKS managed node groups Bottlerocket. . Retrieved 6 Oct 2026.https://docs.aws.amazon.com/eks/latest/userguide/managed-node-groups.html
bottlerocket SECURITY_FEATURES.md at b2e2bee Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/b2e2bee/SECURITY_FEATURES.md
Amazon EKS optimized Bottlerocket AMI, GPU Operator Bottlerocket. . Retrieved 6 Oct 2026.https://docs.aws.amazon.com/eks/latest/userguide/ml-eks-optimized-ami.html
bottlerocket README.md at b2e2bee Bottlerocket. . Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/b2e2bee/README.md
docs.cloud.google.com/container-optimized-os/docs/resources/sources Container-Optimized OS. official-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/resources/sources
COS: create and configure an instance Container-Optimized OS. . Retrieved 6 Oct 2026.https://cloud.google.com/container-optimized-os/docs/how-to/create-configure-instance
COS: disks and file system Container-Optimized OS. . Retrieved 6 Oct 2026.https://cloud.google.com/container-optimized-os/docs/concepts/disks-and-filesystem
Container-Optimized OS: create and configure an instance Container-Optimized OS. . Retrieved 15 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/create-configure-instance
Container-Optimized OS: features and benefits Container-Optimized OS. vendor-docs. Retrieved 12 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/concepts/features-and-benefits
Run GPUs on Container-Optimized OS VM instances Container-Optimized OS. vendor-docs. Retrieved 12 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/run-gpus
COS Customizer README, cos.googlesource.com Container-Optimized OS. source-repo. Retrieved 12 Oct 2026.https://cos.googlesource.com/cos/tools/+/refs/heads/master/src/cmd/cos_customizer/README.md
COS Customizer README, GitHub (archived) Container-Optimized OS. source-repo. Retrieved 12 Oct 2026.https://github.com/GoogleCloudPlatform/cos-customizer/blob/master/README.md
Container-Optimized OS security overview Container-Optimized OS. official-docs. Retrieved 6 Oct 2026.https://docs.cloud.google.com/container-optimized-os/docs/concepts/security
Shielded VM Container-Optimized OS. official-docs. Retrieved 6 Oct 2026.https://docs.cloud.google.com/compute/shielded-vm/docs/shielded-vm
GKE node auto-upgrades Container-Optimized OS. . Retrieved 6 Oct 2026.https://cloud.google.com/kubernetes-engine/docs/concepts/node-auto-upgrades
NVIDIA GPU Operator on Google GKE Container-Optimized OS. . Retrieved 6 Oct 2026.https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/latest/google-gke.html
GKE: GPU Operator Container-Optimized OS. . Retrieved 6 Oct 2026.https://docs.cloud.google.com/kubernetes-engine/docs/how-to/gpu-operator
GKE: plan TPUs Container-Optimized OS. . Retrieved 6 Oct 2026.https://docs.cloud.google.com/kubernetes-engine/docs/concepts/plan-tpus
EVE booting EVE-OS. . Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/BOOTING.md
EVE configuration EVE-OS. . Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/CONFIG.md
EVE-OS: configuration EVE-OS. . Retrieved 15 Oct 2026.https://github.com/lf-edge/eve/blob/17.0.0-lts/docs/CONFIG.md
EVE-OS: zedagent EVE-OS. . Retrieved 15 Oct 2026.https://github.com/lf-edge/eve/blob/17.0.0-lts/pkg/pillar/docs/zedagent.md
lf-edge/eve baseimage update EVE-OS. official-docs. Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/BASEIMAGE-UPDATE.md
EVE docs: Custom Build EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/0e1afbf619e8800745d4481b91b6abd4b765d73b/docs/CUSTOM-BUILD.md
EVE docs: Design and implementation EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/0e1afbf619e8800745d4481b91b6abd4b765d73b/docs/README.md
EVE-OS security architecture EVE-OS. official-docs. Retrieved 6 Oct 2026.https://raw.githubusercontent.com/lf-edge/eve/master/docs/SECURITY-ARCHITECTURE.md
EVE-OS GRUB rootfs.cfg EVE-OS. source-code. Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/e10c5710f5ab5781458a8436a43593065d8b35b7/pkg/grub/rootfs.cfg#L125
Adam repository EVE-OS. . Retrieved 6 Oct 2026.https://github.com/lf-edge/adam
EVE repository EVE-OS. . Retrieved 6 Oct 2026.https://github.com/lf-edge/eve
ZEDEDA EVE-OS. . Retrieved 6 Oct 2026.https://zededa.com
https://github.com/lf-edge/eve/releases/tag/17.0.0-lts EVE-OS. release-notes. Retrieved 17 Oct 2026.https://github.com/lf-edge/eve/releases/tag/17.0.0-lts
https://github.com/lf-edge/eve/blob/master/docs/EVE-K.md EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/EVE-K.md
lf-edge/eve docs/NVIDIA.md at 1f00022 EVE-OS. . Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/1f00022/docs/NVIDIA.md
docs.fedoraproject.org/en-US/bootc/fedora-coreos/ Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/bootc/fedora-coreos/
Ignition getting started Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/ignition/blob/9417372/docs/getting-started.md
Ignition rationale Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/ignition/blob/9417372/docs/rationale.md
Fedora CoreOS: producing an Ignition config Fedora CoreOS. . Retrieved 15 Oct 2026.https://github.com/coreos/fedora-coreos-docs/blob/1fec1ac/modules/ROOT/pages/producing-ign.adoc
Ignition flow Fedora CoreOS. . Retrieved 15 Oct 2026.https://github.com/coreos/ignition/blob/v2.27.0/docs/ignition-flow.md
Ignition configuration spec v3.5.0 Fedora CoreOS. . Retrieved 15 Oct 2026.https://github.com/coreos/ignition/blob/v2.27.0/docs/configuration-v3_5.md
Fedora CoreOS auto-updates Fedora CoreOS. official-docs. Retrieved 6 Oct 2026.https://github.com/coreos/fedora-coreos-docs/blob/main/modules/ROOT/pages/auto-updates.adoc
OSTree atomic upgrades, /etc merge Fedora CoreOS. official-docs. Retrieved 6 Oct 2026.https://ostreedev.github.io/ostree/atomic-upgrades/
Fedora CoreOS docs: Adding OS extensions to the host system Fedora CoreOS. official-docs. Retrieved 12 Oct 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/os-extensions/
Fedora CoreOS docs: FAQ Fedora CoreOS. official-docs. Retrieved 12 Oct 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/faq/
coreos/layering-examples README Fedora CoreOS. source-repo. Retrieved 12 Oct 2026.https://github.com/coreos/layering-examples/blob/dc59c03692915de9c3046bb3b51a6a8c1bed8283/README.md
Fedora CoreOS config, rpm-ostreed drop-in for the shipped signature policy Fedora CoreOS. source-repo. Retrieved 19 Oct 2026.https://github.com/coreos/fedora-coreos-config/blob/1590d19721f2319b580a92c82520f7db5be9410e/overlay.d/17fcos-container-signing/usr/lib/systemd/system/rpm-ostreed.service.d/coreos-containers-policy.conf
Fedora CoreOS config, shipped containers policy Fedora CoreOS. source-repo. Retrieved 19 Oct 2026.https://github.com/coreos/fedora-coreos-config/blob/1590d19721f2319b580a92c82520f7db5be9410e/overlay.d/17fcos-container-signing/usr/lib/coreos/coreos-containers-policy.json
Fedora CoreOS storage docs Fedora CoreOS. official-docs. Retrieved 6 Oct 2026.https://raw.githubusercontent.com/coreos/fedora-coreos-docs/main/modules/ROOT/pages/storage.adoc
OKD 4.16 and 4.17 release Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/okd-project/okd-web/blob/749fc3ab/blog/2024/12-16-okd-4-16-and-4-17-release.md
Fedora CoreOS FAQ Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/fedora-coreos-docs/blob/main/modules/ROOT/pages/faq.adoc
fedora-coreos-cincinnati repository Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/fedora-coreos-cincinnati
Zincati repository Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/zincati
airlock repository Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/airlock
poseidon/fleetlock repository Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/poseidon/fleetlock
fedora-coreos-tracker#2047 Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/fedora-coreos-tracker/issues/2047
coreos/fedora-bootc-nvidia at 121c7d2 Fedora CoreOS. . Retrieved 6 Oct 2026.https://github.com/coreos/fedora-bootc-nvidia/tree/121c7d2
www.flatcar.org/docs/latest/devguide/sdk-modifying-flatcar/ Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/devguide/sdk-modifying-flatcar/
Flatcar: Ignition boot process Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/fb-provision/ignition/boot-process/
Flatcar: LUKS encryption Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/security/encryption/luks/
Flatcar: Ignition Flatcar Container Linux. . Retrieved 15 Oct 2026.https://github.com/flatcar/flatcar-website/blob/6e71d13/content/docs/latest/fb-provision/ignition/_index.md
Flatcar: Ignition boot process Flatcar Container Linux. . Retrieved 15 Oct 2026.https://github.com/flatcar/flatcar-website/blob/6e71d13/content/docs/latest/fb-provision/ignition/boot-process.md
Flatcar: from cloud-config Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/fb-provision/cl-config/from-cloud-config/
Flatcar: notes for distributors Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/deploy/virt-options/notes-for-distributors/
Flatcar: from cloud-config Flatcar Container Linux. . Retrieved 15 Oct 2026.https://github.com/flatcar/flatcar-website/blob/6e71d13/content/docs/latest/fb-provision/cl-config/from-cloud-config.md
coreos-cloudinit: cloud-config Flatcar Container Linux. . Retrieved 15 Oct 2026.https://github.com/flatcar/coreos-cloudinit/blob/fb2cd66/Documentation/cloud-config.md
flatcar/update_engine, kernel path for the target slot (coreos-postinst is no longer on main) Flatcar Container Linux. source-code. Retrieved 6 Oct 2026.https://github.com/flatcar/update_engine/blob/f23d6ea/src/update_engine/omaha_response_handler_action.h
Flatcar docs: systemd-sysext Flatcar Container Linux. official-docs. Retrieved 12 Oct 2026.https://www.flatcar.org/docs/latest/sys-ext/
Flatcar docs: Customizing a Flatcar image Flatcar Container Linux. official-docs. Retrieved 12 Oct 2026.https://www.flatcar.org/docs/latest/fb-provision/customize-image/customize-the-image/
Supply chain security, update payloads Flatcar Container Linux. official-docs. Retrieved 19 Oct 2026.https://www.flatcar.org/docs/latest/security/supply-chain/
[RFE] Support Secure Boot, maintainer comment of 2025-06-23 Flatcar Container Linux. maintainer-statement. Retrieved 19 Oct 2026.https://github.com/flatcar/Flatcar/issues/501#issuecomment-2995634891
flatcar/scripts build_image_util.sh Flatcar Container Linux. source-code. Retrieved 6 Oct 2026.https://github.com/flatcar/scripts/blob/2bda3aa36db92f282ecb1981d6191fc97d8e7608/build_library/build_image_util.sh#L786-L798
flatcar/scripts grub.cfg Flatcar Container Linux. source-code. Retrieved 6 Oct 2026.https://github.com/flatcar/scripts/blob/2bda3aa36db92f282ecb1981d6191fc97d8e7608/build_library/grub.cfg#L27
Nebraska repository Flatcar Container Linux. . Retrieved 6 Oct 2026.https://github.com/flatcar/nebraska
Flatcar: getting started with Kubernetes Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/container-runtimes/getting-started-with-kubernetes/
FLUO repository Flatcar Container Linux. . Retrieved 6 Oct 2026.https://github.com/flatcar/flatcar-linux-update-operator
Flatcar update strategies Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/setup/releases/update-strategies/
kured repository Flatcar Container Linux. . Retrieved 6 Oct 2026.https://github.com/kubereboot/kured
https://github.com/flatcar/sysext-bakery/blob/main/docs/k3s.md Flatcar Container Linux. source-repo. Retrieved 17 Oct 2026.https://github.com/flatcar/sysext-bakery/blob/main/docs/k3s.md
https://www.flatcar.org/docs/latest/orchestrate/kubernetes/getting-started-with-kubernetes/ Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/orchestrate/kubernetes/getting-started-with-kubernetes/
Flatcar: using NVIDIA Flatcar Container Linux. . Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/os-config/host-config/using-nvidia/
Elemental toolkit, orange example Dockerfile Elemental. source-repo. Retrieved 19 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/examples/orange/Dockerfile
MachineRegistration reference Elemental. . Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/machineregistration-reference
elemental-toolkit: stages Elemental. . Retrieved 15 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Customizing/stages.md
elemental-toolkit: reconcile timer Elemental. . Retrieved 15 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/elemental-setup/etc/systemd/system/elemental-setup-reconcile.timer
Elemental image build Elemental. . Retrieved 15 Oct 2026.https://github.com/rancher/elemental/blob/v2.3.1/.obs/dockerfile/SL-Micro-baremetal-container/Dockerfile
Toolkit upgrading Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Getting%20started/upgrading.md
Build custom OS images Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/custom-images
Runtime persistent changes Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Customizing/runtime_persistent_changes.md
Add third party RPMs Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/extra-rpms
Elemental upgrade lifecycle Elemental. . Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/upgrade-lifecycle
ManagedOSImage reference Elemental. . Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/managedosimage-reference
System Upgrade Controller repository Elemental. . Retrieved 14 Oct 2026.https://github.com/rancher/system-upgrade-controller
https://elemental.docs.rancher.com/architecture-clusterdeployment Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/architecture-clusterdeployment
Kairos docs: cloud-init architecture Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/4420f5e/docs/architecture/cloud-init.md
immucore normal boot DAG Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos/blob/2a3c309/immucore/pkg/dag/dag_normal_boot.go
Kairos docs: Raspberry Pi Kairos. . Retrieved 15 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/0db8614/docs/installation/edge-devices/raspberry.md
Kairos docs: stage modules (layout) Kairos. . Retrieved 15 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/0db8614/docs/reference/stage_modules.md
Kairos docs: cloud-init architecture Kairos. . Retrieved 15 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/0db8614/docs/architecture/cloud-init.md
immucore: shared boot steps Kairos. . Retrieved 15 Oct 2026.https://github.com/kairos-io/kairos/blob/4433f21/immucore/pkg/state/steps_shared.go
kairos-init: reconcile timer Kairos. . Retrieved 15 Oct 2026.https://github.com/kairos-io/kairos/blob/4433f21/kairos-init/pkg/bundled/cloudconfigs/09_systemd_services.yaml
Kairos docs: immutable architecture Kairos. official-docs. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/main/docs/architecture/immutable.md
immucore SyncState, v4.3.0 Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/immucore/internal/utils/mounts.go
kairos-init 00_rootfs.yaml, PERSISTENT_STATE_PATHS, v4.3.0 Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/kairos-init/pkg/bundled/cloudconfigs/00_rootfs.yaml
kairos-agent UKI upgrade, v4.3.0 Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/agent/pkg/uki/upgrade.go
AuroraBoot UKI artifact files, v0.27.1 Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/AuroraBoot/blob/v0.27.1/pkg/uki/uki.go
Kairos docs: Customizing the system image Kairos. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/versioned_docs/version-v4.3.0/advanced/customizing.md
Kairos docs: Immutable architecture Kairos. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/versioned_docs/version-v4.3.0/architecture/immutable.md
Kairos docs: Extending the system with systemd extensions Kairos. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/versioned_docs/version-v4.3.0/advanced/sys-extensions.md
Kairos docs: Bundles Kairos. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/versioned_docs/version-v4.3.0/advanced/bundles.md
Kairos v4.3.0 docs: Trusted Boot installation Kairos. official-docs. Retrieved 19 Oct 2026.https://kairos.io/docs/v4.3.0/installation/trustedboot/
Kairos Trusted Boot upgrade code, signature check, v4.3.0 Kairos. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/agent/pkg/uki/upgrade.go#L75-L86
kairos sdk CheckArtifactSignatureIsValid, v4.3.0 Kairos. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/sdk/signatures/signatures.go#L153-L155
Kairos v4.3.0 docs: configuration reference, cosign Kairos. official-docs. Retrieved 19 Oct 2026.https://kairos.io/docs/v4.3.0/reference/configuration/
Kairos DumpSource code, cosign check, v4.3.0 Kairos. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/kairos/blob/v4.3.0/agent/pkg/elemental/elemental.go#L428-L442
Kairos v4.3.0 docs: Trusted Boot architecture Kairos. official-docs. Retrieved 19 Oct 2026.https://kairos.io/docs/v4.3.0/architecture/trustedboot/
AuroraBoot UKI build Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/AuroraBoot/blob/adfcf37fad0d2d0dcfe505f14b4d24c522032520/pkg/uki/uki.go#L686-L714
Kairos v4.3.0 docs: SecureBoot support Kairos. official-docs. Retrieved 19 Oct 2026.https://kairos.io/docs/v4.3.0/architecture/secureboot/
Kairos v4.3.0 release assets Kairos. release-notes. Retrieved 19 Oct 2026.https://github.com/kairos-io/kairos/releases/tag/v4.3.0
Hadron Dockerfile, shim stage Kairos. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/hadron/blob/0c1856e83447ebc726c4f7c929fc0448aaab7433/Dockerfile#L3230-L3261
kairos-operator repository Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-operator
Kairos docs: upgrade on Kubernetes Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/main/docs/upgrade/kubernetes.md
Kairos docs: system-upgrade-controller Kairos. . Retrieved 6 Oct 2026.https://kairos.io/docs/upgrade/system-upgrade-controller/
Kairos docs: reset Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/main/docs/reference/reset.md
AuroraBoot repository Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/AuroraBoot
AuroraBoot pkg/handlers/commands.go (CreateBulk) Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/AuroraBoot/blob/master/pkg/handlers/commands.go
cluster-api-provider-kairos repository Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/cluster-api-provider-kairos
cluster-api-provider-kairos README at v0.1.3, control-plane replicas Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/cluster-api-provider-kairos/blob/v0.1.3/README.md
cluster-api-provider-kairos high availability at v0.1.3, k3s member removal (KD-5d) Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/cluster-api-provider-kairos/blob/v0.1.3/docs/HIGH_AVAILABILITY.md
cluster-api-provider-kairos-fleet repository Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/cluster-api-provider-kairos-fleet
https://kairos.io/docs/examples/choosing-kubernetes-distribution/ Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/examples/choosing-kubernetes-distribution/
https://kairos.io/docs/reference/image_matrix/ Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/reference/image_matrix/
https://kairos.io/provider-kubernetes-docs/ Kairos. official-docs. Retrieved 17 Oct 2026.https://kairos.io/provider-kubernetes-docs/
Kairos docs v4.3.0: NVIDIA Jetson images Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/4420f5e/versioned_docs/version-v4.3.0/installation/edge-devices/nvidia-jetson-images.md
Kairos docs v4.3.0: NVIDIA DGX Spark Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/4420f5e/versioned_docs/version-v4.3.0/installation/edge-devices/nvidia_dgx_spark.md
Kairos docs v4.3.0: NVIDIA AGX Thor Kairos. . Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/4420f5e/versioned_docs/version-v4.3.0/installation/edge-devices/nvidia_agx_thor.md
Hadron docs: NVIDIA Hadron Linux. . Retrieved 6 Oct 2026.https://kairos.io/hadron-docs/nvidia/
hadron examples/add-packages/Dockerfile.nvidia at b6b25d3 Hadron Linux. . Retrieved 6 Oct 2026.https://github.com/kairos-io/hadron/blob/b6b25d3/examples/add-packages/Dockerfile.nvidia
Kairos Factory Kairos. . Retrieved 6 Oct 2026.https://kairos.io/docs/reference/kairos-factory/
kairos-init v0.17.3 release assets Kairos. release-notes. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-init/releases/tag/v0.17.3
kairos-agent v2.31.4 release assets Kairos. release-notes. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-agent/releases/tag/v2.31.4
immucore v0.20.4 release assets Kairos. release-notes. Retrieved 12 Oct 2026.https://github.com/kairos-io/immucore/releases/tag/v0.20.4
docs.siderolabs.com/talos/v1.14/learn-more/philosophy Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/learn-more/philosophy
Talos machined config acquire controller Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/talos/blob/527a272/internal/app/machined/pkg/controllers/config/acquire.go
Talos v1.14: disk encryption Talos Linux. . Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/storage-and-disk-management/disk-encryption
Talos: boot sequencer Talos Linux. . Retrieved 15 Oct 2026.https://github.com/siderolabs/talos/blob/v1.14.1/internal/app/machined/pkg/runtime/v1alpha1/v1alpha1_sequencer.go
Talos: editing machine configuration (v1.11 docs) Talos Linux. . Retrieved 15 Oct 2026.https://github.com/siderolabs/talos/blob/v1.11.0/website/content/v1.11/talos-guides/configuration/editing-machine-configuration.md
Talos: config acquire controller Talos Linux. . Retrieved 15 Oct 2026.https://github.com/siderolabs/talos/blob/v1.14.1/internal/app/machined/pkg/controllers/config/acquire.go
Talos: EtcFileConfig Talos Linux. . Retrieved 15 Oct 2026.https://github.com/siderolabs/talos/blob/v1.14.1/website/content/v1.14/reference/configuration/runtime/etcfileconfig.md
Talos docs: System extensions Talos Linux. official-docs. Retrieved 12 Oct 2026.https://docs.siderolabs.com/talos/v1.14/build-and-extend-talos/custom-images-and-development/system-extensions
Talos v1.14 verifying image signatures Talos Linux. official-docs. Retrieved 19 Oct 2026.https://docs.siderolabs.com/talos/v1.14/security/verifying-image-signatures
Talos v1.14 SecureBoot Talos Linux. official-docs. Retrieved 19 Oct 2026.https://docs.siderolabs.com/talos/v1.14/platform-specific-installations/bare-metal-platforms/secureboot
Talos Dockerfile: initramfs Talos Linux. source-code. Retrieved 6 Oct 2026.https://github.com/siderolabs/talos/blob/e18d5ce093d98f6076f220dbf88bc4dc45be7651/Dockerfile#L1132-L1144
Omni repository Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/omni
Omni LICENSE Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/omni/blob/main/LICENSE
CACPPT repository Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/cluster-api-control-plane-provider-talos
tuppr repository Talos Linux. . Retrieved 6 Oct 2026.https://github.com/home-operations/tuppr
https://docs.siderolabs.com/talos/v1.14/learn-more/control-plane Talos Linux. official-docs. Retrieved 17 Oct 2026.https://docs.siderolabs.com/talos/v1.14/learn-more/control-plane
https://docs.siderolabs.com/talos/v1.14/platform-specific-installations/air-gapped Talos Linux. official-docs. Retrieved 17 Oct 2026.https://docs.siderolabs.com/talos/v1.14/platform-specific-installations/air-gapped
Talos v1.14: NVIDIA GPU Talos Linux. . Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/hardware-and-drivers/nvidia-gpu
siderolabs/pkgs at f6b8411 Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/pkgs/tree/f6b8411
Talos v1.14: AMD GPU Talos Linux. . Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/hardware-and-drivers/amd-gpu
siderolabs/extensions README at 7d75c4b Talos Linux. . Retrieved 6 Oct 2026.https://github.com/siderolabs/extensions/blob/7d75c4b/README.md
documentation.ubuntu.com/core/explanation/core-elements/inside-ubuntu-core/ Ubuntu Core. official-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/explanation/core-elements/inside-ubuntu-core/
Ubuntu Core: how installation works Ubuntu Core. . Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/explanation/how-installation-works/
Ubuntu Core: gadget snap format Ubuntu Core. . Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/reference/gadget-snap-format/
Ubuntu Core: set system options Ubuntu Core. . Retrieved 15 Oct 2026.https://documentation.ubuntu.com/core/how-to-guides/manage-ubuntu-core/set-system-options/
Snaps in Ubuntu Core Ubuntu Core. official-docs. Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/explanation/core-elements/snaps-in-ubuntu-core/
Ubuntu Core refresh control Ubuntu Core. official-docs. Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/explanation/refresh-control/
Ubuntu Core docs: Deploy Docker from a snap Ubuntu Core. official-docs. Retrieved 12 Oct 2026.https://documentation.ubuntu.com/core/how-to-guides/container-deployment/deploy-docker-from-a-snap/
Ubuntu Core docs: model assertion Ubuntu Core. official-docs. Retrieved 12 Oct 2026.https://documentation.ubuntu.com/core/reference/assertions/model/
Ubuntu Core full disk encryption Ubuntu Core. official-docs. Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/explanation/full-disk-encryption/
snapd initramfs mounts Ubuntu Core. source-code. Retrieved 6 Oct 2026.https://github.com/canonical/snapd/blob/e5a0d3605f8c03d6dd51f5d9ad53fd37dab7aa6a/cmd/snap-bootstrap/cmd_initramfs_mounts.go#L1862-L1867
Snapcraft documentation Ubuntu Core. . Retrieved 6 Oct 2026.https://documentation.ubuntu.com/snapcraft/
Landscape Ubuntu Core. . Retrieved 6 Oct 2026.https://ubuntu.com/landscape
Ubuntu Core documentation Ubuntu Core. . Retrieved 6 Oct 2026.https://ubuntu.com/core/docs
https://canonical.com/microk8s/docs/install-strict Ubuntu Core. official-docs. Retrieved 22 Sep 2026.https://canonical.com/microk8s/docs/install-strict
https://documentation.ubuntu.com/core/reference/release-notes/ Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/reference/release-notes/
Ubuntu Core: CUDA workloads Ubuntu Core. . Retrieved 6 Oct 2026.https://documentation.ubuntu.com/core/how-to-guides/cuda-workloads/
Ubuntu for Jetson: Core 22 release notes Ubuntu Core. . Retrieved 6 Oct 2026.https://canonical-ubuntu-for-jetson.readthedocs-hosted.com/latest/reference/release-notes/core-jammy/
ACL build_library/set_lsb_release Azure Container Linux (ACL). source-code. Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/build_library/set_lsb_release
ACL system extensions Azure Container Linux (ACL). official-docs. Retrieved 6 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/sysexts.md
CODEOWNERS Azure Container Linux (ACL). governance-doc. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/.github/CODEOWNERS
ACL contribution guide Azure Container Linux (ACL). governance-doc. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/CONTRIBUTING.md
Kdump on ACL Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/kdump.md
Preloading container images into an ACL image Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/containerd-image-preload.md
Documentation and system requirements to build ACL images Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/issues/50
ACL architecture, Ignition and addons Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/architecture.md
Create node pools, the default OS SKU and ACL limits Azure Container Linux (ACL). vendor-docs. Retrieved 5 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/create-node-pools
AKS Automatic and Standard feature comparison, node operating system Azure Container Linux (ACL). vendor-docs. Retrieved 5 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic
[Feature] AKS Automatic: Azure Container Linux as the default node image type Azure Container Linux (ACL). announcement. Retrieved 5 Oct 2026.https://github.com/Azure/AKS/issues/5918
Tutorial: migrate existing nodes to ACL, considerations and limitations Azure Container Linux (ACL). vendor-docs. Retrieved 5 Oct 2026.https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-migrate-azure-container-linux-aks
Manage SSH for secure access to Azure Kubernetes Service (AKS) nodes Azure Container Linux (ACL). vendor-docs. Retrieved 6 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/manage-ssh-node-access
Connect to Azure Kubernetes Service (AKS) cluster nodes Azure Container Linux (ACL). vendor-docs. Retrieved 6 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/node-access
Manage CVEs Azure Container Linux (ACL). vendor-docs. Retrieved 5 Oct 2026.https://learn.microsoft.com/en-us/azure/azure-linux/manage-cves
SELinux container domain reference, journal storage Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/selinux.md
ACL supported platforms Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/platforms.md
microsoft/azure-container-linux README, license Azure Container Linux (ACL). governance-doc. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/README.md
Azure Container Linux (ACL) Azure Container Linux (ACL). announcement. Retrieved 5 Oct 2026.https://github.com/Azure/AKS/issues/5649
AKS VHD notes, Azure Container Linux, directory listing Azure Container Linux (ACL). release-notes. Retrieved 5 Oct 2026.https://github.com/Azure/AKS/tree/master/vhd-notes/AzureContainerLinuxv3
RPM-based image build system for ACL Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/BUILD_RPM_IMAGE_README.md
ACL support Azure Container Linux (ACL). governance-doc. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/SUPPORT.md
AKS VHD notes, Azure Container Linux 202609.23.0 Azure Container Linux (ACL). release-notes. Retrieved 5 Oct 2026.https://github.com/Azure/AKS/blob/master/vhd-notes/AzureContainerLinuxv3/202609.23.0.txt
microsoft/trident Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/trident
Upgrade the node image Azure Container Linux (ACL). vendor-docs. Retrieved 5 Oct 2026.https://learn.microsoft.com/en-us/azure/aks/upgrade-node-image
ACL testing Azure Container Linux (ACL). source-repo. Retrieved 5 Oct 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/docs/testing.md
bootc host status schema bootc. source-code. Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/host-v1.schema.json
bootc relationships bootc. official-docs. Retrieved 6 Oct 2026.https://github.com/bootc-dev/bootc/blob/7702842/docs/src/bootc-relationships.7.md
bootc maintainers bootc. governance-doc. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/blob/main/MAINTAINERS.md
Building guidance bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/building/guidance.html
bootc install manual page bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/man/bootc-install.8.html
bootc install to-filesystem manual page bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/man/bootc-install-to-filesystem.8.html
Boot failure detection bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/boot-failure-detection.html
bootc rollback manual page bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/man/bootc-rollback.8.html
bootc status and staged state bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/upgrades.html
bootc status manual page bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/man/bootc-status.8.html
Fedora bootc generic management bootc. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/bootc/management-generic/
rpm-ostree status bootc. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/rpm-ostree/blob/main/README.md
Image mode for RHEL bootc. vendor-docs. Retrieved 22 Sep 2026.https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html-single/using_image_mode_for_rhel_to_build_deploy_and_manage_operating_systems/index
Cluster API provider list, searched for this project bootc. official-docs. Retrieved 22 Sep 2026.https://cluster-api.sigs.k8s.io/reference/providers
bootc operator design document, relationship to Cluster API bootc. design-doc. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc-operator/blob/main/docs/design/PRD.md
Investigate CAPI integration via in-place upgrade hooks, open bootc. source-repo. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc-operator/issues/113
bootc operator README bootc. source-repo. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc-operator/blob/main/README.md
bootc registries and offline updates bootc. official-docs. Retrieved 5 Oct 2026.https://bootc.dev/bootc/bootc-registries-and-offline.7.html
bootc governance bootc. governance-doc. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/blob/main/GOVERNANCE.md
CNCF project page, bootc bootc. foundation-page. Retrieved 22 Sep 2026.https://www.cncf.io/projects/bootc/
bootc releases bootc. governance-doc. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/blob/main/RELEASES.md
bootc stability statement bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/
bootc roadmap bootc. design-doc. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/blob/main/ROADMAP.md
bootc v1.16.0 release, start of the weekly cadence bootc. release-notes. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc/releases/tag/v1.16.0
Relationship to other projects bootc. official-docs. Retrieved 19 Oct 2026.https://github.com/bootc-dev/bootc/blob/main/docs/src/bootc-relationships.7.md
Registries and offline operation bootc. official-docs. Retrieved 19 Oct 2026.https://github.com/bootc-dev/bootc/blob/main/docs/src/bootc-registries-and-offline.7.md
bootc security, signature policy bootc. official-docs. Retrieved 22 Sep 2026.https://bootc.dev/bootc/security.html
bootc operator releases, v0.1.0 pre-release bootc. release-notes. Retrieved 22 Sep 2026.https://github.com/bootc-dev/bootc-operator/releases
Bottlerocket README: mount propagation Bottlerocket. source-repo. Retrieved 12 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/8db07cb/README.md
Bottlerocket security features Bottlerocket. official-docs. Retrieved 6 Oct 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/SECURITY_FEATURES.md
Trademark policy Bottlerocket. governance-doc. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/TRADEMARKS.md
Bootstrap containers Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/concepts/bootstrap-containers/
Host containers Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/concepts/host-containers/
Twoliter design Bottlerocket. design-doc. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/twoliter/blob/develop/docs/design/README.md
Building, kmod kit Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/BUILDING.md
Supported hardware Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/SUPPORTED-HARDWARE.md
Provisioning on bare metal Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/PROVISIONING-METAL.md
Variants README, user data sources Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/variants/README.md
Bottlerocket README, early-boot-config Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/README.md
Regaining access Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/login/regaining-access/
Security guidance Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/SECURITY_GUIDANCE.md
Bottlerocket AMIs for EKS Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami-bottlerocket.html
EKS-optimized Amazon Linux AMIs, the managed node group default Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html
EKS Auto Mode, node operating system Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/eks/latest/userguide/automode.html
EKS Auto Mode best practices, custom AMI support Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/eks/latest/best-practices/automode.html
Security overview of EKS Auto Mode, node operating system Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/whitepapers/latest/security-overview-amazon-eks-auto-mode/eks-auto-mode-data-plane.html
Amazon Linux 2023 package management tool Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://docs.aws.amazon.com/linux/al2023/ug/package-management.html
Shell-less host Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/concepts/shell-less-host/
Updater, waves Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/sources/updater/README.md
Bottlerocket control container, Inspector SBOM upload Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket-control-container/blob/develop/README.md
Bottlerocket OS support in kubeadm bootstrap, closed without implementation Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/cluster-api/issues/7840
Bottlerocket worker node support in the AWS provider, open since 2023-12-20 Bottlerocket. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/cluster-api-provider-aws/issues/4708
EKS Anywhere operating system artifacts Bottlerocket. vendor-docs. Retrieved 22 Sep 2026.https://anywhere.eks.amazonaws.com/docs/osmgmt/artifacts/
Changelog, v1.27.0 metal variant removal Bottlerocket. release-notes. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/CHANGELOG.md
Update guidelines Bottlerocket. official-docs. Retrieved 22 Sep 2026.https://bottlerocket.dev/en/os/1.64.x/update/guidelines/
Copyright and licence Bottlerocket. governance-doc. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/COPYRIGHT
Charter Bottlerocket. governance-doc. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/CHARTER.md
Roadmap Bottlerocket. governance-doc. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/blob/develop/ROADMAP.md
Bottlerocket general availability Bottlerocket. announcement. Retrieved 22 Sep 2026.https://aws.amazon.com/about-aws/whats-new/2020/08/announcing-general-availability-of-bottlerocket/
Bottlerocket releases Bottlerocket. release-notes. Retrieved 22 Sep 2026.https://github.com/bottlerocket-os/bottlerocket/releases
Container-Optimized OS versioning Container-Optimized OS. official-docs. Retrieved 6 Oct 2026.https://cloud.google.com/container-optimized-os/docs/concepts/versioning
Secure kernel module loading Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/security/secure-modules-cos
Toolbox Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/toolbox
OS config limitations Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/osconfig
Archived GitHub mirror of cos-customizer Container-Optimized OS. source-repo. Retrieved 22 Sep 2026.https://github.com/GoogleCloudPlatform/cos-customizer
Deploying containers, agent deprecation Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/compute/docs/containers/deploying-containers
Node images Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/docs/concepts/node-images
About node pools, the default node pool of a Standard cluster Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/docs/concepts/node-pools
Running a container on a VM instance Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/run-container-instance
Release channels Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/docs/concepts/release-channels
sosreport Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/sosreport
Node problem detector Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/monitoring
Node auto-repair Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/docs/how-to/node-auto-repair
Node auto-upgrades Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/docs/how-to/node-auto-upgrades
Cluster API Provider GCP prerequisites, which name a different distribution Container-Optimized OS. official-docs. Retrieved 22 Sep 2026.https://cluster-api-gcp.sigs.k8s.io/prerequisites
image-builder GCP targets, Ubuntu only Container-Optimized OS. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/image-builder/blob/main/docs/book/src/capi/providers/gcp.md
Arm-based images Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/arm
Operating system details, security features table Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/compute/docs/images/os-details
Distributed cloud node operating system requirements Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/os-reqs
Tooling contributing guide Container-Optimized OS. governance-doc. Retrieved 22 Sep 2026.https://cos.googlesource.com/cos/tools/+/refs/heads/master/CONTRIBUTING.md
Tooling licence Container-Optimized OS. governance-doc. Retrieved 22 Sep 2026.https://cos.googlesource.com/cos/tools/+/refs/heads/master/LICENSE
COS release notes and milestone table Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/release-notes
Support policy Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/resources/support-policy
General availability Container-Optimized OS. announcement. Retrieved 22 Sep 2026.https://cloud.google.com/blog/products/gcp/container-optimized-os-from-google-is-generally-available/
Building from open source Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/container-optimized-os/docs/how-to/building-from-open-source
Troubleshooting using the serial console Container-Optimized OS. vendor-docs. Retrieved 22 Sep 2026.https://docs.cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console
Installation, Elemental Immutable Root Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/installation
elemental-sysroot dracut generator Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/elemental-sysroot/usr/lib/dracut/modules.d/20elemental-sysroot/sysroot-generator.sh
Default layout OEM file Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/cloud-config-defaults/system/oem/00_layout.yaml
Elemental toolkit, embedded images example Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Examples/embedded_images.md
Installation state Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Reference/installation_state.md
Release notes, Rancher compatibility Elemental. release-notes. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/release-notes
Toolkit, digest set only for an image source Elemental. source-repo. Retrieved 15 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/elemental/elemental.go#L570-L588
Toolkit CODEOWNERS Elemental. governance-doc. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/CODEOWNERS
Configuration persistency Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Customizing/configuration_persistency.md
Elemental toolkit, getting started Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Getting%20started/_index.md
Elemental operator README Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/blob/v1.9.2/README.md
Machine onboarding Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/architecture-machineonboarding
Authentication Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/authentication
Raw disk images for Raspberry Pi Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/raspi-disk
Upgrade Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/upgrade
suc-upgrade, version check, FORCE and reboot Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental/blob/v2.3.1/framework/files/usr/sbin/suc-upgrade#L71-L105
suc-upgrade, same version exit Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental/blob/v2.3.1/framework/files/usr/sbin/suc-upgrade#L71-L76
Default grub.cfg, one entry per passive snapshot Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/grub-config/etc/elemental/grub.cfg#L113-L122
Snapshotter constants Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/constants/constants.go#L187-L188
Operator CRD snapshotter defaults Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/blob/v1.9.2/api/v1beta1/types.go#L56-L68
Operator passes max snaps to the CLI Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/blob/v1.9.2/pkg/elementalcli/elementalcli.go#L104
Snapshotter writes the fallback list Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/snapshotter/loopdevice.go#L492-L502
Elemental OS base image Dockerfile, boot-assessment feature Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental/blob/v2.3.1/.obs/dockerfile/SL-Micro-base-container/Dockerfile#L107
Machine reset, partitions Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/reset
Boot assessment feature Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/boot-assessment/system/oem/08_boot_assessment.yaml
Embedded features Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Customizing/embedded_features.md
GRUB configuration, fallback logic Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Customizing/configure_grub.md
Default grub.cfg, fallback Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/pkg/features/embedded/grub-config/etc/elemental/grub.cfg#L40-L45
Recovery Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Getting%20started/recovery.md
Fallback test Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/tests/fallback/fallback_test.go
Elemental support Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/troubleshooting-support
Toolkit troubleshooting Elemental. official-docs. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/docs/content/en/docs/Reference/troubleshooting.md
Elemental cloud-config reference, Set serial console Elemental. official-docs. Retrieved 15 Oct 2026.https://elemental.docs.rancher.com/cloud-config-reference
Elemental operator daemon Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/architecture-components
SUSE Rancher Prime: OS Manager 1.9 release notes Elemental. vendor-docs. Retrieved 15 Oct 2026.https://documentation.suse.com/cloudnative/os-manager/1.9/en/release-notes.html
Backup Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/backup
rancher/rancher repository, license Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/rancher
rancher/fleet repository, license Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/fleet
Welcome to Elemental, hardware Elemental. official-docs. Retrieved 14 Oct 2026.https://elemental.docs.rancher.com/
Toolkit goreleaser config Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/.goreleaser.yaml
Elemental OS base image Dockerfile, architectures Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental/blob/v2.3.1/.obs/dockerfile/SL-Micro-base-container/Dockerfile#L8
Operator LICENSE Elemental. governance-doc. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/blob/v1.9.2/LICENSE
Toolkit README, license Elemental. source-repo. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/blob/v2.3.4/README.md
Operator CONTRIBUTING Elemental. governance-doc. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/blob/v1.9.2/CONTRIBUTING.md
Elemental toolkit releases Elemental. release-notes. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-toolkit/releases
Elemental operator releases Elemental. release-notes. Retrieved 14 Oct 2026.https://github.com/rancher/elemental-operator/releases
Elemental Linux releases Elemental. release-notes. Retrieved 14 Oct 2026.https://github.com/rancher/elemental/releases
Rancher Guide (Elemental), SUSE documentation Elemental. vendor-docs. Retrieved 14 Oct 2026.https://documentation.suse.com/smart/rancher/html/Rancher-OS/index.html
EVE docs: the P3 partition EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/e933b99/docs/README.md
EVE docs: rootfs image format EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/e933b99/docs/BUILD.md
EVE docs: BOOTING.md, stacked root filesystem EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/0e1afbf619e8800745d4481b91b6abd4b765d73b/docs/BOOTING.md
EVE docs: install options EVE-OS. source-repo. Retrieved 12 Oct 2026.https://github.com/lf-edge/eve/blob/e933b99/docs/BOOTING.md
EVE image sources EVE-OS. official-docs. Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/EVE-IMAGE-SOURCES.md
EVE build EVE-OS. official-docs. Retrieved 6 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/BUILD.md
lf-edge/eve MAINTAINERS EVE-OS. governance-doc. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/MAINTAINERS.md
lf-edge/eve custom build EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/CUSTOM-BUILD.md
lf-edge/eve docs/README.md EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/README.md
lf-edge/eve porting to a new CPU architecture EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/PORTING.md
lf-edge/eve installer boot EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/BOOT-INSTALLER.md
lf-edge/eve registration EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/REGISTRATION.md
lf-edge/eve Edge Containers EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/ECOS.md
lf-edge/eve deployment EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/DEPLOYMENT.md
lf-edge/eve configuration properties EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/CONFIG-PROPERTIES.md
lf-edge/eve microservice classification EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/MICROSERVICE-CLASSIFICATION.md
lf-edge/eve-api storage.proto, DsType EVE-OS. source-repo. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve-api/blob/main/proto/config/storage.proto
lf-edge/adam README EVE-OS. source-repo. Retrieved 5 Oct 2026.https://github.com/lf-edge/adam/blob/master/README.md
lf-edge/eve disconnected operation EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/DISCONNECTED-OPERATION.md
lf-edge/eve debugging EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/DEBUGGING.md
lf-edge/eve FAQ EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/FAQ.md
lf-edge/eve security architecture, remote access EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/SECURITY-ARCHITECTURE.md
lf-edge/eve README EVE-OS. source-repo. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/README.md
lf-edge/eve hardware model EVE-OS. official-docs. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/docs/HARDWARE-MODEL.md
Project EVE hits maturity within LF Edge (31 March 2025) EVE-OS. foundation-page. Retrieved 19 Oct 2026.https://www.linuxfoundation.org/press/project-eve-hits-maturity-within-lf-edge-releases-multi-node-support-for-enhanced-edge-computing-resilience
lf-edge/eve LICENSE EVE-OS. governance-doc. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/LICENSE
lf-edge/eve CONTRIBUTING EVE-OS. governance-doc. Retrieved 5 Oct 2026.https://github.com/lf-edge/eve/blob/master/CONTRIBUTING.md
GitHub commits API, lf-edge/eve, five pages of 100 EVE-OS. source-repo. Retrieved 5 Oct 2026.https://api.github.com/repos/lf-edge/eve/commits?since=2026-07-05T00:00:00Z&per_page=100
lf-edge/eve docs/RELEASE-SUPPORT.md, LTS support length EVE-OS. governance-doc. Retrieved 19 Oct 2026.https://github.com/lf-edge/eve/blob/e10c5710f5ab5781458a8436a43593065d8b35b7/docs/RELEASE-SUPPORT.md
lf-edge/eve SECURITY.md, supported versions EVE-OS. governance-doc. Retrieved 19 Oct 2026.https://github.com/lf-edge/eve/blob/master/SECURITY.md
Fedora CoreOS os-extensions Fedora CoreOS. official-docs. Retrieved 6 Oct 2026.https://github.com/coreos/fedora-coreos-docs/blob/main/modules/ROOT/pages/os-extensions.adoc
rpm-ostree core: version tag copied from parent commit Fedora CoreOS. source-code. Retrieved 6 Oct 2026.https://github.com/coreos/rpm-ostree/blob/e5f67f1/src/libpriv/rpmostree-core.cxx
rpm-ostree override replace Fedora CoreOS. official-docs. Retrieved 6 Oct 2026.https://github.com/coreos/rpm-ostree/blob/e5f67f1/docs/ex-replace.md
Fedora CoreOS Working Group Fedora CoreOS. governance-doc. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/blob/main/README.md
Meeting ping list, 23 handles Fedora CoreOS. governance-doc. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/blob/main/meeting-people.txt
Running containers Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/running-containers/
coreos-assembler Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/coreos-assembler
Kernel module support tracker, maintainer pointer to layering examples Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/15
Layering examples, kernel module examples last changed 2023 Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/layering-examples
Work-in-progress NVIDIA image for CoreOS Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-bootc-nvidia
Producing an Ignition config Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/producing-ign/
Ignition rationale Fedora CoreOS. design-doc. Retrieved 22 Sep 2026.https://coreos.github.io/ignition/rationale/
Live booting Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/live-booting/
Butane repository, archived after the merge into Ignition Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/butane
Manual rollbacks Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/manual-rollbacks/
Automatic rollback design question, open since 2018 Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/47
Factory reset feature request, open since 2020 Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/399
greenboot-rs, documented as an addition to a derived image Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/fedora-iot/greenboot-rs
OKD SCOS migration FAQ Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://okd.io/docs/project/scos-migration-faq/
OKD 4.17 and 4.16 releases, 2024-12-16 Fedora CoreOS. announcement. Retrieved 22 Sep 2026.https://okd.io/blog/2024/12/16/okd-4-16-and-4-17-release/
OKD architecture chapter, the stale statement Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.okd.io/latest/architecture/architecture-rhcos.html
Debugging with toolbox Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/debugging-with-toolbox/
Authentication Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/authentication/
Emergency console access Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/access-recovery/
Audit Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/audit/
Zincati Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://coreos.github.io/zincati/
FleetLock protocol Fedora CoreOS. design-doc. Retrieved 22 Sep 2026.https://coreos.github.io/zincati/development/fleetlock/protocol/
Fedora CoreOS tracker, Cluster API Ignition version mismatch Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/2010
Cluster API Ignition bootstrap config, alpha and v2 only Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://cluster-api.sigs.k8s.io/tasks/experimental-features/ignition.html
Cluster API feature gate tracking, KubeadmBootstrapFormatIgnition Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/cluster-api/issues/11116
Cluster API request for Ignition v3, closed into the bootstrap working group Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/cluster-api/issues/12610
image-builder supported operating system targets Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/image-builder
Stable stream metadata, architectures and platforms Fedora CoreOS. release-notes. Retrieved 22 Sep 2026.https://builds.coreos.fedoraproject.org/streams/stable.json
Stable stream release index, first release per architecture Fedora CoreOS. release-notes. Retrieved 22 Sep 2026.https://builds.coreos.fedoraproject.org/prod/streams/stable/releases.json
riscv64 support tracker Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/1931
Supported platforms page, lists x86_64, AArch64 and s390x only Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/platforms/
Auto updates Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/auto-updates/
Zincati update strategies Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://coreos.github.io/zincati/usage/updates-strategy/
Zincati auto-updates, phased rollouts and downgrades Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://coreos.github.io/zincati/usage/auto-updates/
Migration to an OCI-native update graph Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/issues/1872
Fedora trademark guidelines Fedora CoreOS. governance-doc. Retrieved 19 Oct 2026.https://docs.fedoraproject.org/en-US/legal/trademarks/
Product requirements document Fedora CoreOS. governance-doc. Retrieved 22 Sep 2026.https://fedoraproject.org/wiki/CoreOS/PRD
Release process Fedora CoreOS. governance-doc. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-tracker/blob/main/RELEASES.md
Fedora CoreOS general availability Fedora CoreOS. announcement. Retrieved 22 Sep 2026.https://fedoramagazine.org/fedora-coreos-out-of-preview/
Stable stream rollout commits, release dates Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-streams/commits/main/streams/stable.json
Update streams Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/update-streams/
FESCo #2823, make Fedora CoreOS an Edition Fedora CoreOS. governance-doc. Retrieved 22 Sep 2026.https://pagure.io/fesco/issue/2823
Fedora Change: move updates from OSTree to OCI Fedora CoreOS. design-doc. Retrieved 22 Sep 2026.https://fedoraproject.org/wiki/Changes/CoreOSOstree2OCIUpdates
Update barriers and signing keys Fedora CoreOS. official-docs. Retrieved 22 Sep 2026.https://docs.fedoraproject.org/en-US/fedora-coreos/update-barrier-signing-keys/
Shipped container signature policy for OS image pulls Fedora CoreOS. source-repo. Retrieved 22 Sep 2026.https://github.com/coreos/fedora-coreos-config/tree/testing-devel/overlay.d/17fcos-container-signing
Flatcar: mounting storage Flatcar Container Linux. official-docs. Retrieved 12 Oct 2026.https://www.flatcar.org/docs/latest/os-config/storage/mounting-storage/
Flatcar system extensions Flatcar Container Linux. official-docs. Retrieved 6 Oct 2026.https://www.flatcar.org/docs/latest/sys-ext
Flatcar maintainer roster (.project, commit 026ea0f, 2026-08-31) Flatcar Container Linux. governance-doc. Retrieved 6 Oct 2026.https://github.com/flatcar/.project/blob/main/maintainers.yaml
Extending Flatcar: goodbye torcx, hello systemd-sysext Flatcar Container Linux. announcement. Retrieved 22 Sep 2026.https://www.flatcar.org/blog/2023/12/extending-flatcar-say-goodbye-to-torcx-and-hello-to-systemd-sysext/
Kernel modules Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/devguide/kernel-modules/
flatcar/sysext-bakery Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/sysext-bakery
Ignition Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/fb-provision/ignition/
Installing to disk Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/deploy/bare-metal/installing-to-disk/
Manual rollbacks Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/diagnostics/manual-rollbacks/
Booting with ISO Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/deploy/bare-metal/booting-with-iso/
Installing debugging tools Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/diagnostics/install-debugging-tools/
Adding users Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/os-config/host-config/adding-users/
Collecting crash logs Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/diagnostics/collecting-crash-logs/
flatcar/mayday Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/mayday
Managing updates with Nebraska Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/updates-releases/nebraska/managing-updates/
Flatcar Container Linux for AKS Flatcar Container Linux. vendor-docs. Retrieved 22 Sep 2026.https://learn.microsoft.com/en-us/azure/aks/flatcar-container-linux-for-aks
Microsoft acquires Kinvolk Flatcar Container Linux. announcement. Retrieved 22 Sep 2026.https://kinvolk.io/blog/2021/04/microsoft-acquires-kinvolk/
Azure Container Linux README Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/microsoft/azure-container-linux/blob/aclmain/acl/README.md
Running Flatcar on Microsoft Azure Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/deploy/cloud/azure/
CAPZ Flatcar documentation Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/cluster-api-provider-azure/blob/main/docs/book/src/self-managed/flatcar.md
image-builder Flatcar build files Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kubernetes-sigs/image-builder/blob/main/images/capi/packer/files/flatcar/README.md
The empty Flatcar bootstrap provider repository Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/cluster-api-bootstrap-provider-kubeadm-ignition
Flatcar releases, architecture selectors Flatcar Container Linux. release-notes. Retrieved 22 Sep 2026.https://www.flatcar.org/releases
[RFE] Add RISC-V support for Flatcar Container Linux (open, created 2024-04-09) Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/issues/1420
Cloud deployment Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/deploy/cloud/
Raspberry Pi Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/deploy/bare-metal/raspberry-pi/
Update strategies Flatcar Container Linux. official-docs. Retrieved 22 Sep 2026.https://www.flatcar.org/docs/latest/updates-releases/releases/update-strategies/
Flatcar governance Flatcar Container Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/blob/main/governance.md
CNCF project page, Flatcar Flatcar Container Linux. foundation-page. Retrieved 22 Sep 2026.https://www.cncf.io/projects/flatcar/
Flatcar maintainers Flatcar Container Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/blob/main/MAINTAINERS.md
Flatcar security policy Flatcar Container Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/blob/main/SECURITY.md
Monthly contribution report, 2026-06-22 to 2026-07-21 Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/issues/2218
Licence and project policies Flatcar Container Linux. governance-doc. Retrieved 22 Sep 2026.https://www.flatcar.org/license/
Flatcar release process Flatcar Container Linux. release-notes. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/blob/main/RELEASES.md
Is LTS channel dead? Flatcar Container Linux. maintainer-statement. Retrieved 22 Sep 2026.https://github.com/flatcar/Flatcar/issues/2040
Announcing the Flatcar Linux project Flatcar Container Linux. announcement. Retrieved 22 Sep 2026.https://www.flatcar.org/blog/2018/03/announcing-the-flatcar-linux-project/
locksmith Flatcar Container Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/flatcar/locksmith
kairos-init: default rootfs layout, v4.3.0 Kairos. source-repo. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos/blob/d17464a/kairos-init/pkg/bundled/cloudconfigs/00_rootfs.yaml
immucore README: ephemeral overlay Kairos. source-repo. Retrieved 12 Oct 2026.https://github.com/kairos-io/immucore/blob/98d6a52/README.md
Immutable architecture: default paths Kairos. official-docs. Retrieved 12 Oct 2026.https://kairos.io/docs/architecture/immutable/
Configuration reference, bind mounts Kairos. official-docs. Retrieved 12 Oct 2026.https://kairos.io/docs/reference/configuration/
Kairos release workflow (image tag format) Kairos. source-code. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos/blob/2a3c309/.github/workflows/release.yaml
Kairos factory Kairos. official-docs. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/cd96078/docs/reference/kairos-factory.mdx
Kairos immutable architecture Kairos. official-docs. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/cd96078/docs/architecture/immutable.md
Kairos bundles Kairos. official-docs. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/cd96078/docs/advanced/bundles.md
Kairos system extensions Kairos. official-docs. Retrieved 6 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/cd96078/docs/advanced/sys-extensions.md
Kairos maintainers (six maintainers, five at Spectro Cloud and one at Mirantis; four administrators, all at Spectro Cloud; two emeritus, both Spectro Cloud) Kairos. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/community/blob/main/MAINTAINERS.md
Bring your own image Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/reference/byoi/
System extensions Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/advanced/sys-extensions/
Bundles Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/advanced/bundles/
Installation Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/installation/
Schema validator, versioned schema URL (v1.6.0 returns 200; v3.5.0, v4.2.0 and v4.3.0 return 404 on 2026-09-22) Kairos. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos/blob/master/sdk/schema/validate.go
Boot assessment (development docs), automatic rollback is GRUB-only Kairos. official-docs. Retrieved 19 Oct 2026.https://kairos.io/docs/upgrade/boot_assessment/
kairos-agent, UKI upgrade adds a boot assessment counter to the boot entries Kairos. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/kairos-agent/blob/96f93a04a554e30ad034ec9ee8bbf7b9ac242c5d/pkg/uki/upgrade.go
Container architecture, position on rollback Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/architecture/container/
Boot assessment under Trusted Boot Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/examples/boot_assessment_trusted_boot/
Troubleshooting, Trusted Boot debugging Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/reference/troubleshooting/
cluster-api-provider-kairos v0.1.3 Kairos. release-notes. Retrieved 22 Sep 2026.https://github.com/kairos-io/cluster-api-provider-kairos/releases/tag/v0.1.3
NodeOpUpgrade Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/operator-docs/nodeop-upgrade/
Spectro Cloud Edge architecture Kairos. vendor-docs. Retrieved 22 Sep 2026.https://docs.spectrocloud.com/clusters/edge/architecture/
Kairos commercial support Kairos. vendor-docs. Retrieved 22 Sep 2026.https://www.spectrocloud.com/solutions/kairos-support
Commercial support announcement Kairos. announcement. Retrieved 22 Sep 2026.https://kairos.io/blog/2025/08/08/growing-stronger-introducing-commercial-support-for-kairos/
Manual upgrade Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/upgrade/manual/
Upgrade action Kairos. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos/blob/master/agent/pkg/action/upgrade.go
fix(upgrade): refresh the shim, grub and grub.cfg on the ESP (#4513), committed 2026-09-11, not an ancestor of v4.3.0 Kairos. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos/commit/beaa9cc6
Kairos governance Kairos. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/community/blob/main/GOVERNANCE.md
Vote configuration, maintainer profile Kairos. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos/blob/master/.gitvote.yml
Contributing organizations Kairos. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/community/blob/main/CONTRIBUTING_ORGANIZATIONS.md
CNCF project page, Kairos Kairos. foundation-page. Retrieved 22 Sep 2026.https://www.cncf.io/projects/kairos/
Site footer, LF Projects and sponsorship Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/
Kairos releases (314 releases, 197 not flagged pre-release, on 2026-09-22) Kairos. release-notes. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos/releases
Hadron Kairos. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron
Running without Kubernetes Kairos. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/examples/without-kubernetes/
Hadron docs: Adding Hadron layers Hadron Linux. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/hadron-docs/layers.md
Hadron docs: Extending Hadron with extensions Hadron Linux. official-docs. Retrieved 12 Oct 2026.https://github.com/kairos-io/kairos-docs/blob/53e6883b7904253438ce0fa1b573da6bda926041/hadron-docs/expand-with-sysext.md
Hadron README, upgrade system Hadron Linux. source-repo. Retrieved 19 Oct 2026.https://github.com/kairos-io/hadron/blob/0c1856e83447ebc726c4f7c929fc0448aaab7433/README.md
https://github.com/kairos-io/hadron/blob/main/README.md Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/README.md
Hadron home page Hadron Linux. official-docs. Retrieved 12 Oct 2026.https://hadron-linux.io/
Kairos docs site configuration, per-version Hadron pairing Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/kairos-docs/blob/main/docusaurus.config.ts
Hadron CODEOWNERS Hadron Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/.github/CODEOWNERS
Adding Hadron layers Hadron Linux. official-docs. Retrieved 22 Sep 2026.https://kairos.io/hadron-docs/layers
Hadron toolchain image Hadron Linux. official-docs. Retrieved 22 Sep 2026.https://kairos.io/hadron-docs/toolchain
hadron-layers README Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron-layers/blob/main/README.md
hadron-firmware README Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron-firmware/blob/main/README.md
Hadron Makefile, ISO targets and key warning Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/Makefile
Kairos Trusted Boot installation Hadron Linux. official-docs. Retrieved 22 Sep 2026.https://kairos.io/docs/installation/trustedboot/
Hadron UKI acceptance tests Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/tests/uki_test.go
Hadron v0.5.2 Hadron Linux. release-notes. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/releases/tag/v0.5.2
Hadron documentation index Hadron Linux. official-docs. Retrieved 22 Sep 2026.https://kairos.io/hadron-docs/
hadron-layers repository Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron-layers
hadron-firmware repository Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron-firmware
Build workflow, riscv64 pipeline gated off Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/.github/workflows/build-multiarch-images.yml
riscv64 pull-request workflow Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/.github/workflows/PR_riscv64.yml
Hadron Dockerfile, shim stage Hadron Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/Dockerfile
Hadron LICENSE Hadron Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/blob/main/LICENSE
Introducing Hadron, governance claim Hadron Linux. announcement. Retrieved 22 Sep 2026.https://kairos.io/blog/2025/12/17/introducing-hadron-the-minimal-upstream-first-linux-base-for-kairos
Kairos contributors Hadron Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/kairos-io/community/blob/main/CONTRIBUTORS.md
Hadron releases Hadron Linux. release-notes. Retrieved 22 Sep 2026.https://github.com/kairos-io/hadron/releases
Hadron-only artifacts with ongoing distro support Hadron Linux. announcement. Retrieved 22 Sep 2026.https://kairos.io/blog/2026/02/25/kairos-v4-hadron-artifacts-and-distro-flexibility
Talos architecture: tmpfs layer Talos Linux. official-docs. Retrieved 12 Oct 2026.https://docs.siderolabs.com/talos/v1.14/learn-more/architecture
Talos user volumes Talos Linux. official-docs. Retrieved 12 Oct 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/storage-and-disk-management/disk-management/user
Talos Image Factory Talos Linux. official-docs. Retrieved 6 Oct 2026.https://docs.siderolabs.com/talos/v1.13/learn-more/image-factory
Security insights, maintainer roster Talos Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/siderolabs/talos/blob/main/security-insights.yml
Customizing the kernel Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/build-and-extend-talos/custom-images-and-development/customizing-the-kernel
Extensions catalog and rootfs restrictions Talos Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/siderolabs/extensions/blob/main/README.md
Overlays Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/build-and-extend-talos/custom-images-and-development/overlays
Image Factory frontends Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/learn-more/image-factory
Unattended install Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/lifecycle-management/unattended-install
Maintenance mode and insecure access Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/system-configuration/insecure
machined main.go at v1.14.1, the only call to revertBootloader is in the fatal-error handler Talos Linux. source-repo. Retrieved 19 Oct 2026.https://github.com/siderolabs/talos/blob/v1.14.1/internal/app/machined/main.go
sd-boot setup at v1.14.1, the new UKI becomes the persistent default entry Talos Linux. source-repo. Retrieved 19 Oct 2026.https://github.com/siderolabs/talos/blob/v1.14.1/internal/app/machined/pkg/runtime/v1alpha1/bootloader/sdboot/sdboot.go
Disaster recovery Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/build-and-extend-talos/cluster-operations-and-maintenance/disaster-recovery
Interactive dashboard Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/deploy-and-manage-workloads/interactive-dashboard
Resetting a machine Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/configure-your-talos-cluster/lifecycle-management/resetting-a-machine
FAQ, why no shell or SSH Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/troubleshooting/faqs
talosctl debug Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/troubleshooting/talosctl-debug
RBAC Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/security/rbac
Talos for Linux admins Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/learn-more/talos-for-linux-admins
Omni production versus non-production Talos Linux. vendor-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/omni/self-hosted/production-vs-non-production
Sidero Labs joins Yardi Talos Linux. announcement. Retrieved 22 Sep 2026.https://www.siderolabs.com/blog/sidero-labs-joins-yardi
Introducing Talos Enterprise Linux Talos Linux. announcement. Retrieved 22 Sep 2026.https://www.siderolabs.com/blog/introducing-talos-enterprise-linux
CABPT README, deprecation notice Talos Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/siderolabs/cluster-api-bootstrap-provider-talos
Sidero Metal README, deprecation notice Talos Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/siderolabs/sidero
Support matrix Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/talos/v1.14/getting-started/support-matrix
Overlays Talos Linux. source-repo. Retrieved 22 Sep 2026.https://github.com/siderolabs/overlays/blob/main/README.md
Upgrading Kubernetes Talos Linux. official-docs. Retrieved 22 Sep 2026.https://docs.siderolabs.com/kubernetes-guides/advanced-guides/upgrading-kubernetes
Air-gapped environments, registry mirrors Talos Linux. official-docs. Retrieved 5 Oct 2026.https://docs.siderolabs.com/talos/v1.14/platform-specific-installations/air-gapped.md
Talos licence Talos Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/siderolabs/talos/blob/main/LICENSE
Contributing Talos Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/siderolabs/talos/blob/main/CONTRIBUTING.md
CNCF landscape data, Talos Linux entry Talos Linux. foundation-page. Retrieved 22 Sep 2026.https://github.com/cncf/landscape/blob/master/landscape.yml
Release policy Talos Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/siderolabs/talos/blob/main/RELEASE.md
Security policy, supported versions Talos Linux. governance-doc. Retrieved 22 Sep 2026.https://github.com/siderolabs/talos/blob/main/SECURITY.md
Pricing Talos Linux. vendor-docs. Retrieved 22 Sep 2026.https://www.siderolabs.com/pricing/
Support, covered versions and response times Talos Linux. vendor-docs. Retrieved 22 Sep 2026.https://www.siderolabs.com/support/
snapd: mount unit for a squashfs snap Ubuntu Core. source-repo. Retrieved 12 Oct 2026.https://github.com/canonical/snapd/blob/e1f349c/systemd/systemd.go
Ubuntu Core 24 amd64 model Ubuntu Core. source-code. Retrieved 6 Oct 2026.https://github.com/canonical/models/blob/78b94dc/ubuntu-core-24-amd64.json
Manage validation sets Ubuntu Core. vendor-docs. Retrieved 14 Oct 2026.https://snapcraft.io/docs/manage-validation-sets
Ubuntu Core model assertion Ubuntu Core. official-docs. Retrieved 6 Oct 2026.https://github.com/canonical/ubuntu-core-docs/blob/9321118/docs/reference/assertions/model.md
Canonical contributor agreement Ubuntu Core. governance-doc. Retrieved 22 Sep 2026.https://canonical.com/legal/contributors
CVE remediation in Ubuntu Core Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/explanation/cve-remediation/
Using console-conf Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/explanation/system-snaps/console-conf/usage/
console-conf Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/explanation/system-snaps/console-conf/
Managing updates Ubuntu Core. official-docs. Retrieved 22 Sep 2026.https://snapcraft.io/docs/how-to-guides/manage-snaps/manage-updates/
Upgrade Ubuntu Core Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/how-to-guides/manage-ubuntu-core/upgrade-ubuntu-core/
Snap store overview, on-premises proxy Ubuntu Core. vendor-docs. Retrieved 5 Oct 2026.https://documentation.ubuntu.com/core/explanation/stores/store-overview/
Remodel essential snaps, boot verification Ubuntu Core. vendor-docs. Retrieved 19 Oct 2026.https://documentation.ubuntu.com/core/explanation/remodel-essential-snaps/
Ubuntu Core documentation home page Ubuntu Core. vendor-docs. Retrieved 19 Oct 2026.https://documentation.ubuntu.com/core/
Recovery modes Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/explanation/recovery-modes/
Using recovery modes Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/how-to-guides/manage-ubuntu-core/use-a-recovery-mode/
Ubuntu Core 26 Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/uc26/
Ubuntu Pro for Devices Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://ubuntu.com/pricing/devices
Landscape quickstart installation, self-hosted Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://ubuntu.com/landscape/docs/how-to-guides/landscape-installation-and-set-up/quickstart-installation/
Canonical Cluster API bootstrap provider install script, classic snap Ubuntu Core. source-repo. Retrieved 22 Sep 2026.https://github.com/canonical/cluster-api-k8s/blob/main/pkg/cloudinit/scripts/install.sh
Classic confinement caveats Ubuntu Core. official-docs. Retrieved 22 Sep 2026.https://snapcraft.io/docs/reference/administration/reviewing-classic-confinement-snaps/
Ubuntu Core 26 stable image directory Ubuntu Core. release-notes. Retrieved 19 Oct 2026.https://cdimage.ubuntu.com/ubuntu-core/26/stable/current/
Download Ubuntu Core Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://ubuntu.com/download/core
System requirements Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/reference/system-requirements/
Testing platforms Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/reference/testing-platforms/
Ubuntu Core 22 stable image directory Ubuntu Core. release-notes. Retrieved 22 Sep 2026.https://cdimage.ubuntu.com/ubuntu-core/22/stable/current/
Ubuntu Core support duration, architecture column Ubuntu Core. vendor-docs. Retrieved 22 Sep 2026.https://documentation.ubuntu.com/core/reference/support-duration/
snapd licence Ubuntu Core. governance-doc. Retrieved 22 Sep 2026.https://github.com/snapcore/snapd/blob/master/COPYING
snapd Ubuntu Core. source-repo. Retrieved 22 Sep 2026.https://github.com/snapcore/snapd
en.opensuse.org/Portal:MicroOS/Intro openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/Portal:MicroOS/Intro
Combustion README openSUSE MicroOS. . Retrieved 6 Oct 2026.https://github.com/openSUSE/combustion/blob/c60eaac/README.md
openSUSE MicroOS: Ignition openSUSE MicroOS. . Retrieved 6 Oct 2026.https://en.opensuse.org/Portal:MicroOS/Ignition
openSUSE MicroOS design openSUSE MicroOS. official-docs. Retrieved 12 Oct 2026.https://en.opensuse.org/Portal:MicroOS/Design
transactional-update README openSUSE MicroOS. source-repo. Retrieved 12 Oct 2026.https://github.com/openSUSE/transactional-update/blob/ef8af9f43526c7e482a4a290439a24fd1cb22ffc/README.md
Managing System Extensions with sysextmgrcli openSUSE MicroOS. announcement. Retrieved 12 Oct 2026.https://news.opensuse.org/2026/05/21/sysextmgr
MicroOS: FDE with TPM2 openSUSE MicroOS. official-docs. Retrieved 6 Oct 2026.https://microos.opensuse.org/blog/2025-08-11-fde-tpm2-yast2/
openSUSE: systemd-based FDE openSUSE MicroOS. official-docs. Retrieved 6 Oct 2026.https://news.opensuse.org/2023/12/20/systemd-fde/
suse-edge/upgrade-controller README openSUSE MicroOS. . Retrieved 19 Oct 2026.https://github.com/suse-edge/upgrade-controller
SUC examples/openSUSE/microos.yaml openSUSE MicroOS. . Retrieved 6 Oct 2026.https://github.com/rancher/system-upgrade-controller/blob/master/examples/openSUSE/microos.yaml
rebootmgr repository openSUSE MicroOS. . Retrieved 6 Oct 2026.https://github.com/SUSE/rebootmgr
https://en.opensuse.org/SDB:K3s_cluster_deployment_on_MicroOS openSUSE MicroOS. official-docs. Retrieved 17 Oct 2026.https://en.opensuse.org/SDB:K3s_cluster_deployment_on_MicroOS
SUSE Edge 3.6: NVIDIA on SUSE Linux Micro openSUSE MicroOS. . Retrieved 6 Oct 2026.https://documentation.suse.com/suse-edge/3.6/html/edge/nvidia-on-slemicro.html
openSUSE Tumbleweed appliance images openSUSE MicroOS. official-docs. Retrieved 6 Oct 2026.https://download.opensuse.org/tumbleweed/appliances/
transactional-update man page openSUSE MicroOS. source-code. Retrieved 6 Oct 2026.https://github.com/openSUSE/transactional-update/blob/ef8af9f/man/transactional-update.8.xml
openSUSE licence and stewardship openSUSE MicroOS. governance-doc. Retrieved 22 Sep 2026.https://en.opensuse.org/openSUSE:License
Portal:MicroOS, Combustion openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/Portal:MicroOS/Combustion
SUSE Linux Micro 6.1, deployment images including PXE openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/sle-micro/6.1/html/Micro-deployment-images/index.html
SUSE Linux Micro 6.1 release notes, installation media openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/releasenotes/sle-micro/html/releasenotes_sle-micro_6.1/index.html
SUSE Linux Micro 6.2, transactional updates openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/sle-micro/6.2/html/Micro-transactional-updates/index.html
transactional-update openSUSE MicroOS. source-repo. Retrieved 22 Sep 2026.https://github.com/openSUSE/transactional-update
Portal:MicroOS, zypper repositories openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/Portal:MicroOS/Zypper
openSUSE mirrors openSUSE MicroOS. official-docs. Retrieved 5 Oct 2026.https://mirrors.opensuse.org/
health-checker openSUSE MicroOS. source-repo. Retrieved 22 Sep 2026.https://github.com/openSUSE/health-checker
SLE Micro 5.5, health checker openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/sle-micro/5.5/html/SLE-Micro-all/cha-health-checker.html
SUSE Linux Micro 6.2, snapper default settings openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/sle-micro/6.2/html/Micro-snapper-basic-concepts/index.html
patterns-microos spec, package base (microos_base) openSUSE MicroOS. source-repo. Retrieved 5 Oct 2026.https://api.opensuse.org/public/source/openSUSE:Factory/patterns-microos/patterns-microos.spec
SUSE Linux Micro 6.2, user space live patching openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/releasenotes/sle-micro/html/releasenotes_sle-micro_6.2/index.html
SUSE Edge 3.5 components, RKE2 installation openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/suse-edge/3.5/html/edge/components-rke2.html
SUSE Multi-Linux Manager 5.1, supported client systems openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/multi-linux-manager/5.1/en/docs/client-configuration/supported-features.html
RKE2 Cluster API bootstrap and control-plane providers openSUSE MicroOS. source-repo. Retrieved 22 Sep 2026.https://github.com/rancher/cluster-api-provider-rke2
Elemental Cluster API infrastructure provider, archived 2026-05-12 openSUSE MicroOS. source-repo. Retrieved 22 Sep 2026.https://github.com/rancher-sandbox/cluster-api-provider-elemental
openSUSE riscv64 appliance directory (filename observed 2026-09-22; the same snapshot was current at collection) openSUSE MicroOS. release-notes. Retrieved 22 Sep 2026.https://download.opensuse.org/ports/riscv/tumbleweed/appliances/
openSUSE s390x appliance directory (filename observed 2026-09-22; Snapshot20260914 at collection) openSUSE MicroOS. release-notes. Retrieved 22 Sep 2026.https://download.opensuse.org/ports/zsystems/tumbleweed/appliances/
openSUSE ppc64le appliance directory (filename observed 2026-09-22) openSUSE MicroOS. release-notes. Retrieved 22 Sep 2026.https://download.opensuse.org/ports/ppc/tumbleweed/appliances/
Get openSUSE MicroOS, board and platform images openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://get.opensuse.org/microos/
openSUSE documentation, legal notice openSUSE MicroOS. official-docs. Retrieved 19 Oct 2026.https://doc.opensuse.org/documentation/leap/startup/html/book-startup/index.html
openSUSE Board openSUSE MicroOS. governance-doc. Retrieved 22 Sep 2026.https://en.opensuse.org/openSUSE:Board
openSUSE foundation portal openSUSE MicroOS. governance-doc. Retrieved 22 Sep 2026.https://en.opensuse.org/Portal:Foundation/Intro
The Geeko Foundation openSUSE MicroOS. foundation-page. Retrieved 22 Sep 2026.https://geekos.org/
SUSE product lifecycle, SUSE Linux Micro rows (version, FCS date, general support end) openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://www.suse.com/lifecycle/
Portal:MicroOS, features openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/Portal:MicroOS/Features
openSUSE Kubic moves in a new direction openSUSE MicroOS. announcement. Retrieved 22 Sep 2026.https://news.opensuse.org/2018/08/09/opensuse-kubic-moves-in-a-new-direction/
openSUSE roadmap, Leap Micro releases openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/openSUSE:Roadmap
openSUSE Lifetime, Leap Micro support model openSUSE MicroOS. official-docs. Retrieved 22 Sep 2026.https://en.opensuse.org/Lifetime
SUSE Linux Micro 6.2 documentation openSUSE MicroOS. vendor-docs. Retrieved 22 Sep 2026.https://documentation.suse.com/sle-micro/6.2/
SLES 16.1 immutable mode, and the SUSE Linux Micro upgrade path openSUSE MicroOS. announcement. Retrieved 22 Sep 2026.https://www.suse.com/c/the-next-leap-unifying-the-immutable-future-with-suse-linux-enterprise-server-16-1/
SUSE Linux 16.1 public beta openSUSE MicroOS. announcement. Retrieved 22 Sep 2026.https://www.suse.com/c/suse-linux-16-1-public-beta/