Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.2 - Success
• 4.19.0-okd-scos.ec.10 (changes) - Success

---

Changes from 4.20.0-okd-scos.ec.2

Created: 2025-06-10 20:45:56 +0000 UTC

Image Digest: sha256:c180fea0effe7fb680baa93bb8e7b8ae5b4f0c42cd65c57fd3682686fe1d0b77

Release 4.20.0-okd-scos.ec.3 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-06-10-064608

Components

• Kubectl 1.32.1
• Kubernetes 1.32.5
• Kubernetes Tests upgraded from 1.32.4 to 1.32.5
• CentOS Stream CoreOS 9.0.20250521-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
RouteAdvertisements (11 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

• driver-toolkit git 686fdac5 sha256:51ea49bcbff8f93d028ba0af6fc24b32b40f76a98b437bab7c02b21b66731e09

agent-installer-api-server

• MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1131) #1131
• NO-ISSUE: Update Konflux references (#1130) #1130
• NO-ISSUE: Add konflux service account migration (#1129) #1129
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
• MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) #1009
• NO-ISSUE: Update Konflux references (#1003) #1003
• Full changelog

agent-installer-utils

• ART-13079: append .0 to go.mod version #105
• OCPBUGS-56934: Disable ESC key on checks page #102
• OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
• Full changelog

apiserver-network-proxy

• ART-13079: append .0 to go.mod version #78
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
• NO-JIRA: create-efs-volume: print files to log as a fallback #388
• Full changelog

azure-kms-encryption-provider

• ART-13079: append .0 to go.mod version #17
• NO-JIRA: Add OCP engineers to OWNERS for KMS #15
• CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
• OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
• OCPBUGS-53496: bump golang-jwt v4 #10
• Full changelog

azure-machine-controllers

• OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-3998: Remove base domain from metadata #9711
• OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
• OCPBUGS-51299: Set default project and location for KMS key manifest #9767
• AGENT-997: Internal dev docs for authentication-authorization #9224
• OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
• SPLAT-2045: [vsphere] promote multi-nic to default #9493
• Full changelog

cli, cli-artifacts, deployer, tools

• WRKLDS-1716: oc image serve: Remove as deprecated #2033
• OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
• OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
• Full changelog

cloud-credential-operator

• OCPBUGS-55777: Add missing Role, RoleBinding #860
• Full changelog

cluster-authentication-operator

• NO-JIRA: add logging when rendering bootstrap manifests #770
• CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
• CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
• AUTH-544: Extend e2e test to leverage new functionality #737
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-57041: update cluster provider type early #343
• NO-JIRA: Add autoscale members to OWNERS file #345
• Full changelog

cluster-capi-operator

• OCPBUGS-57013: Fix reset sync status in migration controllers #313
• NO-JIRA: Assorted cleanups #312
• OCPBUGS-57040: Fix failure to retry unpause #309
• Full changelog

cluster-config-api

• CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
• NO-ISSUE: Remove redundant image stream #2358
• Promote RouteAdvertisements feature gate to default feature set #2225
• MCO-1671: Add feature gates for azure boot image updates & skew management #2353
• SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
• OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
• Remove DataGather state print column #2350
• Full changelog

cluster-ingress-operator

• OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2607
• Full changelog

cluster-network-operator

• CORENET-5704: Consume latest vendoring from ocp api repo #2720
• OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
• CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
• Full changelog

cluster-node-tuning-operator

• Change /master to /control-plane node label (#1327) #1327
• NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) #1324
• Update performance_profile.md (#1329) #1329
• fix: stop referencing non existing git references in go.mod (#1332) #1332
• Full changelog

cluster-olm-operator

• OCPSTRAT-1976: Add readonlyRootFilesystem #120
• Full changelog

cluster-storage-operator

• STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
• STOR-2330: Network Policies for CSI drivers and operators #579
• OSASINFRA-3675: Add credentialRequest for manila namespace #573
• Full changelog

cluster-version-operator

• NO-JIRA: test: remove unnecessary integration tests layers #1202
• NO-JIRA: tests: fix make integration-test target #1203
• Full changelog

configmap-reloader

• ART-13079: append .0 to go.mod version #67
• Full changelog

console

• OCPBUGS-56985: Getting “Oh no something went wrong” error message in web console. #15147
• CONSOLE-4550: Remove usage of Bootstrap grid in Console #15119
• OCPBUGS-56999: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15122
• OCPBUGS-57147: Disable tests A-02-TC02 and A-02-TC05 #15146
• OCPBUGS-56804: clarify verbiage for Lightspeed hide button #15144
• OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console #15121
• OCPBUGS-56044: fix VirtualizedTable runtime error if sortColumn is no… #15112
• OCPBUGS-56986: Fix runtime error when navigating alert actions #15118
• OCPBUGS-49709: Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook #14707
• OCPBUGS-56179: Add isAllNamespacesKey function to dynamic plugin API #15066
• OCPBUGS-56707: fix bug where Roles list was displaying invalid data f… #15115
• OCPBUGS-56917, OCPBUGS-56922: Remove ExternalLink and Timestamp reexport #15110
• Full changelog

coredns

• ART-13079: append .0 to go.mod version #132
• Full changelog

docker-builder

• OCPBUGS-56106: S2I build cpu limits observed by assemble are limited to 1 cpu #470
• Full changelog

docker-registry

• OCPBUGS-56483: bump jwt and oauth dependencies #427
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• Revert “TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector” #2329
• TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector #2322
• OCPNODE-3010: openshift-hack: enable userns e2e tests #2239
• Full changelog

hypershift

• OCPBUGS-55892: make image registry managed identity optional #6127
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6226
• OCPBUGS-57125: Support deserializing monitoring manifests when RHOBS enabled #6238
• OCPBUGS-56966: Fix ignition server route getting constantly recreated #6225
• OCPBUGS-57125: Support RHOBS when loading cpov2 monitoring manifests by replacing the API group #6228
• OCPBUGS-53259: Reuse hosted cluster release and metadata providers #6095
• OCPBUGS-54720: HCP payload doesn’t respect multiple mirrors #6222
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6013
• NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler #6221
• NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents #6216
• OCPBUGS-42938: Support proxy authentication when user/pass is included in URL #6207
• OCPBUGS-30260: Allow setting target node selector for control plane router #3946
• OCPBUGS-56930: test/e2e: fix version gate checks on minor upgrade #6219
• NO-JIRA: Follow up PR from #6192 #6204
• MGMT-20682: Enable disabling of openshift-samples capability #6197
• OCPBUGS-56430: Add DR operations after HC restoration #6195
• CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6223
• CNTRLPLANE-844: Delete legacy unused DeploymentConfig code #6210
• CNTRLPLANE-206: Add NetworkPolicy to shared-ingress #6173
• WRKLDS-1676: ocm: Make config compatible with library-go #6203
• NO-JIRA: Fix documentation field name for KubeAPIServerDNSName #6220
• OCPBUGS-56814: PodSecurityConfiguration Kas config render from gate #6213
• Full changelog

insights-operator

• NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) #1092
• feat: add Progressing condition (#1090) #1090
• Full changelog

ironic

• METAL-1376: Make sushy support NetworkAdapters #662
• Full changelog

ironic-machine-os-downloader

• ART-13079: append .0 to go.mod version #101
• Full changelog

kube-storage-version-migrator

• Fix verify job failure with build-machinery bump #214
• ART-13079: append .0 to go.mod version #212
• Full changelog

machine-api-operator

• OCPBUGS-57018: Fixed test logic for UPI scenario #1375
• Full changelog

machine-config-operator

• OCPBUGS-45459: Remove trailing period from hostnames #4966
• Full changelog

monitoring-plugin

• OU-842: fix: override notistack dependency to avoid conflict #422
• NO-JIRA: chore: Update OWNERS #420
• Full changelog

multus-admission-controller

• ART-13079: append .0 to go.mod version #94
• Full changelog

network-tools

• ART-13079: append .0 to go.mod version #145
• Full changelog

networking-console-plugin

• OCPBUGS-56929: Add fileupload translation #245
• OCPBUGS-49386: Fix pod contenxt #246
• Full changelog

oauth-server

• Use newer build-machinery-go #177
• ART-13079: append .0 to go.mod version #175
• Full changelog

oc-mirror

• OCPBUGS-55078: skips signature mirroring for rebuilt operator catalogs (#1154) #1154
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #377
• NO-ISSUE: Synchronize From Upstream Repositories #375
• NO-ISSUE: Synchronize From Upstream Repositories #367
• Full changelog

openshift-apiserver

• NO-JIRA: Add Apache 2.0 License file #523
• Full changelog

openshift-controller-manager

• OCPBUGS-57198: Make the pull secrets volume mounts in build containers read-only. #387
• Full changelog

openshift-state-metrics

• ART-13079: append .0 to go.mod version #121
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1013
• Full changelog

telemeter

• ART-13079: append .0 to go.mod version #559
• Full changelog

tests

• MCO-1652: Add MCO disruptive suite #29776
• OCPBUGS-56786: RouteExternalCertificate : Add fix for None platform type #29868
• OCPBUGS-56512: updates ruby to version 3.3 #29832
• OCPBUGS-57049: TLS registry: refactor testcase annotations #29327
• OCPBUGS-49441: Use different certificates for gRPC interoperability test routes #29757
• OCPBUGS-56436: Bump 4.20 1.32.5 #29889
• TRT-1854: set network for MicroShift to OVNKubernetes #29887
• add smg247 as root approver #29860
• OCPBUGS-56037: Stabilize custom MCP cleanup on MCN tests #29874
• Revert “OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19” #29886
• OCPBUGS-56698: Skip tests modifying cluster/network.config when it is not permitted #29859
• OCPBUGS-54412: Do not retry extension-sourced tests #29867
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.32.4-1.el9s
• kernel-5.14.0-585.el9
• openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
• systemd-252-53.el9

Full list (569 packages)

• NetworkManager-1:1.53.4-1.el9
• NetworkManager-cloud-setup-1:1.53.4-1.el9
• NetworkManager-libnm-1:1.53.4-1.el9
• NetworkManager-ovs-1:1.53.4-1.el9
• NetworkManager-team-1:1.53.4-1.el9
• NetworkManager-tui-1:1.53.4-1.el9
• WALinuxAgent-udev-2.7.0.6-13.el9
• aardvark-dns-2:1.14.0-3.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.8.2-1.el9
• afterburn-dracut-5.8.2-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-7.el9
• audit-libs-3.1.5-7.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-28.el9
• bind-license-32:9.16.23-28.el9
• bind-utils-32:9.16.23-28.el9
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.7-1.el9
• bootupd-0.2.27-3.el9
• bsdtar-3.5.3-4.el9
• bubblewrap-0.4.1-8.el9
• bzip2-1.0.8-10.el9
• bzip2-libs-1.0.8-10.el9
• c-ares-1.19.1-2.el9
• ca-certificates-2024.2.69_v8.0.303-91.4.el9
• centos-gpg-keys-9.0-28.el9
• centos-release-cloud-1-1.el9s
• centos-release-nfv-common-1-5.el9s
• centos-release-virt-common-1-4.el9s
• centos-stream-release-9.0-28.el9
• centos-stream-repos-9.0-28.el9
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.2-1.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.13-1.el9
• conmon-rs-0.6.6-2.el9s
• conntrack-tools-1.4.7-4.el9
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9
• containernetworking-plugins-1:1.7.1-1.el9
• containers-common-2:1-130.el9
• coreos-installer-0.24.0-1.el9
• coreos-installer-bootinfra-0.24.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.4-1.el9s
• cri-tools-1.33.0-2.el9s
• criu-3.19-3.el9
• criu-libs-3.19-3.el9
• crun-1.21-1.el9
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9
• cryptsetup-libs-2.7.2-3.el9
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-37.el9
• device-mapper-multipath-libs-0.8.7-37.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-29.el9
• dnf-data-4.14.0-29.el9
• dnsmasq-2.85-16.el9
• dosfstools-4.2-3.el9
• dracut-057-87.git20250311.el9
• dracut-network-057-87.git20250311.el9
• dracut-squash-057-87.git20250311.el9
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.193-1.el9
• elfutils-default-yama-scope-0.193-1.el9
• elfutils-libelf-0.193-1.el9
• elfutils-libs-0.193-1.el9
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.15-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.1-2.el9
• glib2-2.68.4-16.el9
• glibc-2.34-192.el9
• glibc-common-2.34-192.el9
• glibc-gconv-extra-2.34-192.el9
• glibc-minimal-langpack-2.34-192.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-107.el9
• grub2-efi-x64-1:2.06-107.el9
• grub2-pc-1:2.06-107.el9
• grub2-pc-modules-1:2.06-107.el9
• grub2-tools-1:2.06-107.el9
• grub2-tools-minimal-1:2.06-107.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-1.el9
• ignition-grub-2.21.0-1.el9
• ima-evm-utils-1.6.2-1.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9
• iptables-nft-1.8.10-11.el9
• iputils-20210202-11.el9
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-585.el9
• kernel-core-5.14.0-585.el9
• kernel-modules-5.14.0-585.el9
• kernel-modules-core-5.14.0-585.el9
• kernel-modules-extra-5.14.0-585.el9
• kexec-tools-2.0.29-7.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-37.el9
• krb5-libs-1.21.1-6.el9
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-4.el9
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9
• libcap-2.48-9.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-14.el9
• libdnf-plugin-subscription-manager-1.29.46-1.el9
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-9.el9
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-3.el9
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9
• libnfsidmap-1:2.5.4-37.el9
• libnftnl-1.2.6-4.el9
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.13-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-3.el9
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9.2
• libsss_idmap-2.9.6-4.el9.2
• libsss_nss_idmap-2.9.6-4.el9.2
• libsss_sudo-2.9.6-4.el9.2
• libstdc++-11.5.0-5.el9
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-3.el9
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-9.el9
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-12.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250513-152.el9
• linux-firmware-whence-20250513-152.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9
• microcode_ctl-4:20250211-1.el9
• mokutil-2:0.7.2-1.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9
• ncurses-base-6.2-10.20210508.el9
• ncurses-libs-6.2-10.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.0-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-37.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.44-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.13-1.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.20.0-202505231112.p0.g46e27e8.assembly.stream.el9
• openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.5.0-2.el9
• openssl-libs-1:3.5.0-2.el9
• openvswitch-selinux-extra-policy-1.0-36.el9s
• openvswitch3.5-3.5.0-22.el9s
• os-prober-1.77-12.el9
• ose-aws-ecr-image-credential-provider-4.20.0-202503251340.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202504231110.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202503251340.p0.gd8d3aeb.assembly.stream.el9
• ostree-2025.2-1.el9
• ostree-grub2-2025.2-1.el9
• ostree-libs-2025.2-1.el9
• p11-kit-0.25.3-3.el9
• p11-kit-trust-0.25.3-3.el9
• pam-1.5.1-23.el9
• passt-0^20250415.g8ec1341-1.el9
• passt-selinux-0^20250415.g8ec1341-1.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.el9
• perl-B-1.80-481.el9
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.el9
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.el9
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.el9
• perl-File-Basename-2.85-481.el9
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.el9
• perl-FileHandle-2.03-481.el9
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.el9
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.el9
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.el9
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.el9
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.el9
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.el9
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.el9
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.el9
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.el9
• perl-interpreter-4:5.32.1-481.el9
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.el9
• perl-mro-1.23-481.el9
• perl-overload-1.31-481.el9
• perl-overloading-0.02-481.el9
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.el9
• perl-vars-1.05-481.el9
• pigz-2.5-4.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-7.el9
• policycoreutils-3.6-3.el9
• policycoreutils-python-utils-3.6-3.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9
• python3-3.9.21-2.el9
• python3-audit-3.1.5-7.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.46-1.el9
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-29.el9
• python3-dnf-plugin-versionlock-4.3.0-21.el9
• python3-dnf-plugins-core-4.3.0-21.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-14.el9
• python3-idna-2.10-7.el9.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-14.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-3.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-14.el9
• python3-setuptools-wheel-53.0.0-14.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.46-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-20.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.8-1.el9
• rpm-ostree-libs-2025.8-1.el9
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.3.0-1.el9
• samba-client-libs-4.21.3-3.el9
• samba-common-4.21.3-3.el9
• samba-common-libs-4.21.3-3.el9
• sed-4.8-9.el9
• selinux-policy-38.1.56-1.el9
• selinux-policy-targeted-38.1.56-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15-15.el8_2
• skopeo-2:1.18.1-3.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9
• sqlite-libs-3.34.1-7.el9
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9.2
• sssd-ad-2.9.6-4.el9.2
• sssd-client-2.9.6-4.el9.2
• sssd-common-2.9.6-4.el9.2
• sssd-common-pac-2.9.6-4.el9.2
• sssd-ipa-2.9.6-4.el9.2
• sssd-krb5-2.9.6-4.el9.2
• sssd-krb5-common-2.9.6-4.el9.2
• sssd-ldap-2.9.6-4.el9.2
• sssd-nfs-idmap-2.9.6-4.el9.2
• sssd-proxy-2.9.6-4.el9.2
• stalld-1.19.6-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.46-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-12.el9
• systemd-252-53.el9
• systemd-journal-remote-252-53.el9
• systemd-libs-252-53.el9
• systemd-pam-252-53.el9
• systemd-rpm-macros-252-53.el9
• systemd-udev-252-53.el9
• tar-2:1.34-7.el9
• teamd-1.31-16.el9
• tmux-3.2a-5.el9
• toolbox-0.1.1-1.el9
• tpm2-tools-5.2-6.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-18.el9
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9
• virt-what-1.27-2.el9
• which-2.21-29.el9
• xfsprogs-6.4.0-7.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9
• xz-libs-5.2.5-8.el9
• yajl-2.1.0-25.el9
• zlib-1.2.11-41.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Extensions

Full list (64 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• cpp-11.5.0-5.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-3.el9.noarch
• elfutils-libelf-devel-0.193-1.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-5.el9.x86_64
• glibc-devel-2.34-192.el9.x86_64
• glibc-headers-2.34-192.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-2.5.2-1.el9s.x86_64
• kernel-5.14.0-585.el9.x86_64
• kernel-core-5.14.0-585.el9.x86_64
• kernel-devel-5.14.0-585.el9.x86_64
• kernel-headers-5.14.0-585.el9.x86_64
• kernel-modules-5.14.0-585.el9.x86_64
• kernel-modules-extra-5.14.0-585.el9.x86_64
• kernel-rt-core-5.14.0-585.el9.x86_64
• kernel-rt-devel-5.14.0-585.el9.x86_64
• kernel-rt-modules-5.14.0-585.el9.x86_64
• kernel-rt-modules-core-5.14.0-585.el9.x86_64
• kernel-rt-modules-extra-5.14.0-585.el9.x86_64
• krb5-pkinit-1.21.1-6.el9.x86_64
• krb5-workstation-1.21.1-6.el9.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-6.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-4.15-8.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• nspr-4.35.0-17.el9.x86_64
• nss-3.101.0-10.el9.x86_64
• nss-softokn-3.101.0-10.el9.x86_64
• nss-softokn-freebl-3.101.0-10.el9.x86_64
• nss-sysinit-3.101.0-10.el9.x86_64
• nss-tools-3.101.0-10.el9.x86_64
• nss-util-3.101.0-10.el9.x86_64
• openssl-devel-1:3.5.0-2.el9.x86_64
• openvswitch3.5-ipsec-3.5.0-22.el9s.x86_64
• pcp-conf-6.3.7-4.el9.x86_64
• pcp-libs-6.3.7-4.el9.x86_64
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-openvswitch3.5-3.5.0-22.el9s.x86_64
• qemu-img-17:9.1.0-20.el9.x86_64
• qemu-kvm-common-17:9.1.0-20.el9.x86_64
• qemu-kvm-core-17:9.1.0-20.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• sysstat-12.5.4-9.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• zlib-devel-1.2.11-41.el9.x86_64

CentOS Stream CoreOS base layer: 9.0.20250521-0