A new Fedora Atomic Host update is available via an OSTree update:
Version: 29.20190516.0 Commit(x86_64): 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 Commit(aarch64): 3930a03b8ffcce1aa66f17b8811e2a4da80aedb8234a1f47b62d603986b580ec Commit(ppc64le): 144bb02d1485234b79ba385b47dc64199a7df159d3a0a3f17837cc7fb90cf7e1
We are releasing images from multiple architectures but please note that x86_64 architecture is the only one that undergoes automated testing at this time.
Existing systems can be upgraded in place via e.g. `atomic host upgrade`.
Corresponding image media for new installations can be downloaded from:
https://getfedora.org/en/atomic/download/
Alternatively, image artifacts can be found at the following links: https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905...
Respective signed CHECKSUM files can be found here: https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905...
For direct download, the "latest" targets are always available here: x86_64: https://getfedora.org/atomic_qcow2_x86_64_latest https://getfedora.org/atomic_raw_x86_64_latest https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest https://getfedora.org/atomic_dvd_ostree_x86_64_latest
aarch64: https://getfedora.org/atomic_qcow2_aarch64_latest https://getfedora.org/atomic_raw_aarch64_latest https://getfedora.org/atomic_dvd_ostree_aarch64_latest
ppc64le: https://getfedora.org/atomic_qcow2_ppc64le_latest https://getfedora.org/atomic_raw_ppc64le_latest https://getfedora.org/atomic_dvd_ostree_ppc64le_latest
Filename fetching URLs are available here: x86_64: https://getfedora.org/atomic_qcow2_x86_64_latest_filename https://getfedora.org/atomic_raw_x86_64_latest_filename https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest_filename https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest_filename https://getfedora.org/atomic_dvd_ostree_x86_64_latest_filename
aarch64: https://getfedora.org/atomic_qcow2_aarch64_latest_filename https://getfedora.org/atomic_raw_aarch64_latest_filename https://getfedora.org/atomic_dvd_ostree_aarch64_latest_filename
ppc64le: https://getfedora.org/atomic_qcow2_ppc64le_latest_filename https://getfedora.org/atomic_raw_ppc64le_latest_filename https://getfedora.org/atomic_dvd_ostree_ppc64le_latest_filename
For more information about the latest targets, please reference the Fedora Atomic Wiki space.
https://fedoraproject.org/wiki/Atomic_WG#Fedora_Atomic_Image_Download_Links
Do note that it can take some of the mirrors up to 12 hours to "check-in" at their own discretion.
Thank you, Fedora Release Engineering
On 5/16/19 6:27 PM, noreply@fedoraproject.org wrote:
A new Fedora Atomic Host update is available via an OSTree update:
Version: 29.20190516.0 Commit(x86_64): 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 Commit(aarch64): 3930a03b8ffcce1aa66f17b8811e2a4da80aedb8234a1f47b62d603986b580ec Commit(ppc64le): 144bb02d1485234b79ba385b47dc64199a7df159d3a0a3f17837cc7fb90cf7e1
We are releasing images from multiple architectures but please note that x86_64 architecture is the only one that undergoes automated testing at this time.
Existing systems can be upgraded in place via e.g. `atomic host upgrade`.
Corresponding image media for new installations can be downloaded from:
https://getfedora.org/en/atomic/download/
Alternatively, image artifacts can be found at the following links: https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905...
Respective signed CHECKSUM files can be found here: https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905... https://alt.fedoraproject.org/pub/alt/atomic/stable/Fedora-29-updates-201905...
For direct download, the "latest" targets are always available here: x86_64: https://getfedora.org/atomic_qcow2_x86_64_latest https://getfedora.org/atomic_raw_x86_64_latest https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest https://getfedora.org/atomic_dvd_ostree_x86_64_latest
aarch64: https://getfedora.org/atomic_qcow2_aarch64_latest https://getfedora.org/atomic_raw_aarch64_latest https://getfedora.org/atomic_dvd_ostree_aarch64_latest ppc64le: https://getfedora.org/atomic_qcow2_ppc64le_latest https://getfedora.org/atomic_raw_ppc64le_latest https://getfedora.org/atomic_dvd_ostree_ppc64le_latest
Filename fetching URLs are available here: x86_64: https://getfedora.org/atomic_qcow2_x86_64_latest_filename https://getfedora.org/atomic_raw_x86_64_latest_filename https://getfedora.org/atomic_vagrant_libvirt_x86_64_latest_filename https://getfedora.org/atomic_vagrant_virtualbox_x86_64_latest_filename https://getfedora.org/atomic_dvd_ostree_x86_64_latest_filename
aarch64: https://getfedora.org/atomic_qcow2_aarch64_latest_filename https://getfedora.org/atomic_raw_aarch64_latest_filename https://getfedora.org/atomic_dvd_ostree_aarch64_latest_filename ppc64le: https://getfedora.org/atomic_qcow2_ppc64le_latest_filename https://getfedora.org/atomic_raw_ppc64le_latest_filename https://getfedora.org/atomic_dvd_ostree_ppc64le_latest_filename
For more information about the latest targets, please reference the Fedora Atomic Wiki space.
https://fedoraproject.org/wiki/Atomic_WG#Fedora_Atomic_Image_Download_Links
Do note that it can take some of the mirrors up to 12 hours to "check-in" at their own discretion.
Thank you, Fedora Release Engineering
*NOTE* The getfedora.org download links are not currently working. We are tracking this in https://pagure.io/fedora-infrastructure/issue/7802
This release of atomic host is a security fix release for a collection of vulnerabilities known as MDS. These were mitigated in the new versions of kernel and microcode_ctl that are listed in the diff output below. More information on the vulnerabilities can be found by reading the email from Justin Forbes [1] (Fedora Kernel Developer) and the nice writeup from Red Hat [2] on the vulnerabilities.
[1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/... [2] https://access.redhat.com/security/vulnerabilities/mds
An example of the diff between this and the previous released version (for x86_64) is:
ostree diff commit old: 575c9ee648a2a8ed9df9695c003c2776d73d7be01f03cd84f7367d5728be1f1c ostree diff commit new: 7f719bf60b865ca96aacd0e8ae3e6074c7eb5783d8ceb9003dbba5dfd5a29ba3 Upgraded: fuse-overlayfs 0.3-8.dev.gita6958ce.fc29 -> 0.3-9.dev.git89bd69b.fc29 glibc 2.28-27.fc29 -> 2.28-30.fc29 glibc-all-langpacks 2.28-27.fc29 -> 2.28-30.fc29 glibc-common 2.28-27.fc29 -> 2.28-30.fc29 kernel 5.0.13-200.fc29 -> 5.0.16-200.fc29 kernel-core 5.0.13-200.fc29 -> 5.0.16-200.fc29 kernel-modules 5.0.13-200.fc29 -> 5.0.16-200.fc29 libmodulemd1 1.8.8-1.fc29 -> 1.8.10-1.fc29 libxcrypt 4.4.4-2.fc29 -> 4.4.6-1.fc29 microcode_ctl 2:2.1-26.fc29 -> 2:2.1-29.fc29
x86_64 AMIs are here: Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0ccfbc53add4e2601 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-0ebbea3c0f7e50f16 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-02a942754b9aa2f80 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-030b20fa3bfdf170f hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-06fd5b1246ba3cdda hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-00d9f360bf9beae15 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-07b9e127269768545 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-0ba5b56aef9f7ef24 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0278476fe7d6bf362 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-03306f9f2b86c9a05 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0da9eb89f705d4ab4 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-01e58164c7d7ae5d0 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-0bdc45ba9e2ee5de3 hvm standard Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-1 ami-0a7fede8400c0f044 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-northeast-2 ami-044c20ba4ff735131 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-south-1 ami-053e342ef1f59bc0b hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-1 ami-026f1f7962da66610 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ap-southeast-2 ami-0914b6e3e54e3f308 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 ca-central-1 ami-0565c03e9fe9107de hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-central-1 ami-0737796f3ac6d7e8a hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-1 ami-08f5c818d4d73117a hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 eu-west-2 ami-0ac9427e3f440b922 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 sa-east-1 ami-04825c00b2d4f672b hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-east-1 ami-0b620bba2adb4ec27 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-west-1 ami-0d26e491e944a0912 hvm gp2 Fedora-AtomicHost-29-20190516.0.x86_64 us-west-2 ami-08b4ff3ac125f8800 hvm gp2
aarch64 AMIs are here: Fedora-AtomicHost-29-20190516.0.aarch64 eu-west-1 ami-01f7e29aa0e9f572e hvm gp2 Fedora-AtomicHost-29-20190516.0.aarch64 us-east-1 ami-0a4003c8ae5150c7c hvm gp2 Fedora-AtomicHost-29-20190516.0.aarch64 us-west-2 ami-09c83be4be7b9c135 hvm gp2
The Vagrant Cloud page with the new Atomic Host: https://app.vagrantup.com/fedora/boxes/29-atomic-host https://app.vagrantup.com/fedora/boxes/29-atomic-host/versions/29.20190516.0
Thanks, Fedora Atomic Working Group