Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.11

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.20.0-okd-scos.10 (changes) - Success
• 4.20.0-okd-scos.9 (changes) - Success
• 4.20.0-okd-scos.8 - Failed Success
• 4.20.0-okd-scos.7 (changes) - Failed Success
• 4.20.0-okd-scos.6 (changes) - Success
• 4.20.0-okd-scos.5 (changes) - Success
• 4.20.0-okd-scos.4 (changes) - Success
• 4.20.0-okd-scos.3 (changes) - Success
• 4.20.0-okd-scos.2 (changes) - Success
• 4.20.0-okd-scos.1 (changes) - Failed Success
• 4.20.0-okd-scos.0 (changes) - Success
• 4.19.0-okd-scos.19 (changes) - Success

Upgrades to:

• 4.21.0-okd-scos.ec.10 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.8

Created: 2025-12-01 05:30:36 +0000 UTC

Image Digest: sha256:e01396cf9753a998af2a2cbb4897daab7cdd656f1fdfa779019933a180933910

Release 4.20.0-okd-scos.11 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-11-30-140930

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.5 to 1.33.6
• Kubernetes Tests 1.33.4
• CentOS Stream CoreOS 10.0.20251023-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (9 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

• cluster-kube-scheduler-operator git 58cbd296 sha256:b9bfbd59e7f5e692935c21488a7106bb66b69c8eb9de5713d788476448b7d0cc
• cluster-kube-storage-version-migrator-operator git 5adc1429 sha256:b01e5e9dbbbe403323087a7c0b24c3377d896e879dc9074d80a6a7be3a1ac8bf
• gcp-pd-csi-driver-operator git e0ad050a sha256:c19fff77040aec65215e1a8102ee3bd0e5686011507517048067cb1f1bce9e6b
• olm-catalogd git 3e2401f2 sha256:123db214e23dd3965b2c0c7e60a23c1885764aadf6f3744c12b73fa41acf1f24
• olm-operator-controller git 3e2401f2 sha256:b5dcfa62693fdd0d7ca3da4adc812ab0ae21fd57a1cefecbc14360dcb7f47627
• ovirt-csi-driver git 1db726a9 sha256:9caf16aa1fc875592fa298bd9533b927856bd38119f34e41ee9e8200ab3a0290
• vsphere-problem-detector git 9d55c028 sha256:8fc184a75c7cc240b06cee936dafa73de0f97ace516e126941d561d3ca2a7b11

agent-installer-utils

• OCPBUGS-65715: Update 4.20 version to 4.20.4 #196
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-65895: allow all-egress for efs operator #473
• OCPBUGS-65686: Bump gophercloud #470
• Full changelog

azure-machine-controllers

• OCPBUGS-65708: Set updateDomainCount to one when faultDomainCount is one #173
• Full changelog

baremetal-installer, installer, installer-artifacts

• Revert “OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…” #10093
• OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511… #10084
• OCPBUGS-64924: Azure UPI ARM template: use storageAccountId #10069
• OCPBUGS-64595: Remove pending items on gcp no-op #10056
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-65481: pkg/cli/admin/upgrade: Tighten force warnings #2140
• OCPBUGS-65523: fix(must-gather): do not set node affinity if nodename is set #2142
• Full changelog

cloud-credential-operator

• OCPBUGS-65798: ccoctl azure: retry custom role creation on consistency errors #948
• OCPBUGS-63690: ccoctl: use pagination when listing resources in aws #941
• Full changelog

cloud-network-config-controller

• OCPBUGS-64742: Fix capacity calculation #188
• Full changelog

cluster-authentication-operator

• OCPBUGS-61896: set appropriate rolling update settings #792
• Full changelog

cluster-config-api

• OCPBUGS-64843: payload-command: remove authentication CR from hypershift payload #2573
• OCPBUGS-64940: Promote BYO OIDC features #2515
• Full changelog

cluster-etcd-operator

• OCPBUGS-63677: Backport 1504 1514 release.420 #1516
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-65679: enable resource v1beta2 api if DynamicResourceAllocation is enabled #1929
• OCPBUGS-62057: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1961
• Full changelog

cluster-network-operator

• OCPBUGS-46422: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] #2827
• Full changelog

console

• OCPBUGS-61785: Add validation and type guards on healthHandler calls to prevent errors #15500
• OCPBUGS-65793: OpenShift Console can only show user name instead of full name as the display name #15743
• OCPBUGS-65949: Add SDK-webpack 4.20 changelogs #15768
• NO-JIRA: Add SDK 4.20 changelogs #15765
• OCPBUGS-65761: Preserve query string in perspective switch + remove dev console folks from reviewers #15740
• OCPBUGS-64861, OCPBUGS-64863: Upgrade Helm to 3.18.5 #15705
• OCPBUGS-64702: Lack Chinese/Japanese/Korean translations for ‘On/Off’ switch button on editor setting modal of yaml page. #15683
• OCPBUGS-63125: use tenancy path for project scoped status card #15608
• OCPBUGS-61330: fix namespace path generation for non-namespaced resources #15498
• OCPBUGS-62953: Automatically redirect all-namespaces catalog to default namespace #15640
• OCPBUGS-64862: Convert standalone terminal route to extension #15702
• OCPBUGS-63499: Turn on fContentSecurityPolicyEnabled by default #15639
• OCPBUGS-64639: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15673
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-64811: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 #355
• Full changelog

docker-builder

• OCPBUGS-64857: BuildConfig inline Dockerfile fails with heredoc syntax #483
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-65551: Bump 1.33.6 #2518
• OCPBUGS-46422: Remove patch/update from ServiceCIDR API conformance test #2466
• Full changelog

hypershift

• CNTRLPLANE-1710: feat(globalps): security enhancements on GlobalPullSecret feature #7234
• OCPBUGS-65576: add hypershift-no-cgo to the latest operator conta… #7229
• CORENET-6484: Restart ovnkube-control-plane pods when restart-date annotation is set #7190
• OCPBUGS-63509: fix(ingress): add LoadBalancerSourceRanges support for external router service #7098
• OCPBUGS-64848: feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift #7204
• OCPBUGS-61774: fix(capi-provider): use single replica deployment for aws and azure #6834
• CNTRLPLANE-1908: control-plane-operator-4-20 Konflux pipelines #7216
• OCPBUGS-63539: remove NTO Service and ServiceMonitor #7099
• Full changelog

insights-operator

• OCPBUGS-66062: Add filtering to add other possible pod status to QEMU gatherer #1185
• OCPBUGS-64800: QEMU logs are not gathered if there are pending status virt-launcher pods #1174
• OCPBUGS-65660: [bugfix] The archive’s records may include files whose names are out of bounds #1177
• Full changelog

ironic

• OCPBUGS-64850: Handle HTTP 400 and 409 race condition in Redfish power operations #720
• OCPBUGS-64820: Fix IPA external inspection callback url override #713
• Full changelog

ironic-agent

• OCPBUGS-66084, OKD-295: Fix broken OKD ironic-agent-image #216
• OCPBUGS-65519: Include Test advertised ip reachability before assigning it #212
• Full changelog

machine-config-operator

• OCPBUGS-65777: Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default #5387
• OCPBUGS-65781: Remove –mount directives #5425
• OCPBUGS-65556: [release-4.20] Backport: Add delays to reduce TestOSBuildController failures #5396
• OCPBUGS-64822: remove check for conflicting ClusterImagePolicy in syncUpgradeableStatus #5413
• OCPBUGS-65509: e2e gcp ocl PR backport #5407
• OCPBUGS-64822: Implement upgrade blocking for conflicting ClusterImagePolicy named “openshift” #5397
• OCPBUGS-59766: Update timing of MCN desired config spec update to align with node annotation setting #5367
• Full changelog

metallb-frr

• OCPBUGS-65516: [release-4.20] Dockerfile: unpin FRR rpm #111
• Full changelog

monitoring-plugin

• OCPBUGS-65947: add missing conversion units #654
• Full changelog

networking-console-plugin

• CNV-72771: fix null error #300
• CNV-71965: replacing the broken link to VirtualMachine network docs #298
• Full changelog

oc-mirror

• OCPBUGS-64647: fix: return only requested version #1306
• OCPBUGS-65787: Remove empty status field from generated IDMS/ITMS files #1313
• Full changelog

openshift-apiserver

• OCPBUGS-61982: pkg/image: conditionally parse raw image manifest #559
• OCPBUGS-65814: update pkg/image/OWNERS #575
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-64724: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1139
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-64836: back-port IP & MAC conflict detection #2827
• OCPBUGS-65514: [4.20] status manager: remove managedFields for deleted zone upon zone deletion #2855
• OCPBUGS-65951: [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 #2866
• OCPBUGS-65618: [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers #2865
• OCPBUGS-65605: add lint target to run golanci natively #2856
• OCPBUGS-64697: [release-4.20] Referencing pod named ports within a service results in bad DNAT rules containing tcp/0 target port #2844
• OCPBUGS-63686: Fix stale EIP assignments during failover and controller restart #2835
• Full changelog

tests

• OCPBUGS-64777: [release-4.20] Add e2e tests for storage network policy #30468
• OCPBUGS-46422: Add test that the ServiceCIDR API is blocked [4.20] #30434
• OCPBUGS-63656: Redact bearertoken in TestContext #30435
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.4-1.el10s
• kernel-6.12.0-142.el10
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• systemd-257-16.el10

Full list (575 packages)

• NetworkManager-1:1.55.4-1.el10
• NetworkManager-cloud-setup-1:1.55.4-1.el10
• NetworkManager-libnm-1:1.55.4-1.el10
• NetworkManager-ovs-1:1.55.4-1.el10
• NetworkManager-tui-1:1.55.4-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.10.0-1.el10
• afterburn-dracut-5.10.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.8.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2025.2.80_v9.0.305-101.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-12.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-12.el10
• centos-stream-repos-10.0-12.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.241.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.4-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-4.1-1.el10
• criu-libs-4.1-1.el10
• crun-1.24-1.el10
• crypto-policies-20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
• cryptsetup-2.8.1-1.el10
• cryptsetup-libs-2.8.1-1.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-12.el10
• device-mapper-multipath-libs-0.9.9-12.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-69.el10
• glibc-common-2.39-69.el10
• glibc-gconv-extra-2.39-69.el10
• glibc-minimal-langpack-2.39-69.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-29.el10
• grub2-efi-x64-1:2.12-29.el10
• grub2-pc-1:2.12-29.el10
• grub2-pc-modules-1:2.12-29.el10
• grub2-tools-1:2.12-29.el10
• grub2-tools-minimal-1:2.12-29.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.24.0-1.el10
• ignition-grub-2.24.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-1.el10
• kernel-6.12.0-142.el10
• kernel-core-6.12.0-142.el10
• kernel-modules-6.12.0-142.el10
• kernel-modules-core-6.12.0-142.el10
• kernel-modules-extra-6.12.0-142.el10
• kernel-modules-extra-matched-6.12.0-142.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-12.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.2.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.2.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.0-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-2.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.15-3.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.23.0-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-3.el10
• libsss_idmap-2.11.1-3.el10
• libsss_nss_idmap-2.11.1-3.el10
• libsss_sudo-2.11.1-3.el10
• libstdc++-14.3.1-2.2.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.0-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.23-1.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-2.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.54-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.15-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-2.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.20.0-202510212154.p2.g7f1d6f8.assembly.stream.el9
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• openssh-9.9p1-14.el10
• openssh-clients-9.9p1-14.el10
• openssh-server-9.9p1-14.el10
• openssl-1:3.5.1-5.el10
• openssl-fips-provider-1:3.5.1-5.el10
• openssl-libs-1:3.5.1-5.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202509051528.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
• ostree-2025.6-1.el10
• ostree-grub2-2025.6-1.el10
• ostree-libs-2025.6-1.el10
• p11-kit-0.25.10-1.el10
• p11-kit-server-0.25.10-1.el10
• p11-kit-trust-0.25.10-1.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.6.0-2.el10
• policycoreutils-3.9-2.el10
• policycoreutils-python-utils-3.9-2.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-2.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-20.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-2.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-20.el10
• rpm-build-libs-4.19.1.1-20.el10
• rpm-libs-4.19.1.1-20.el10
• rpm-ostree-2025.11-1.el10
• rpm-ostree-libs-2025.11-1.el10
• rpm-plugin-audit-4.19.1.1-20.el10
• rpm-plugin-selinux-4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
• rpm-sequoia-1.9.0.3-1.el10
• rpm-sign-libs-4.19.1.1-20.el10
• rsync-3.4.1-3.el10
• samba-client-libs-4.23.0-101.el10
• samba-common-4.23.0-101.el10
• samba-common-libs-4.23.0-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-8.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-3.el10
• sssd-ad-2.11.1-3.el10
• sssd-client-2.11.1-3.el10
• sssd-common-2.11.1-3.el10
• sssd-common-pac-2.11.1-3.el10
• sssd-ipa-2.11.1-3.el10
• sssd-krb5-2.11.1-3.el10
• sssd-krb5-common-2.11.1-3.el10
• sssd-ldap-2.11.1-3.el10
• sssd-nfs-idmap-2.11.1-3.el10
• sssd-proxy-2.11.1-3.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-16.el10
• systemd-journal-remote-257-16.el10
• systemd-libs-257-16.el10
• systemd-pam-257-16.el10
• systemd-udev-257-16.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.27-3.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.3.1-2.2.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.2.el10.x86_64
• glibc-devel-2.39-69.el10.x86_64
• kernel-6.12.0-142.el10.x86_64
• kernel-core-6.12.0-142.el10.x86_64
• kernel-devel-6.12.0-142.el10.x86_64
• kernel-headers-6.12.0-142.el10.x86_64
• kernel-modules-6.12.0-142.el10.x86_64
• kernel-modules-extra-6.12.0-142.el10.x86_64
• kernel-rt-core-6.12.0-142.el10.x86_64
• kernel-rt-devel-6.12.0-142.el10.x86_64
• kernel-rt-modules-6.12.0-142.el10.x86_64
• kernel-rt-modules-core-6.12.0-142.el10.x86_64
• kernel-rt-modules-extra-6.12.0-142.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-5.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251023-0