Fedora CoreOS next stream rebased to Fedora Linux 44 beta

Project Discussion
1

The Fedora Linux 44 beta was released today[[1]]. The Fedora CoreOS next stream has been rebased and is currently rolling out with version 44.20260306.1.1. This is a preview of what is coming to the testing and stable streams when Fedora Linux 44 is released in the coming months.

For more information about Fedora 44, see the Fedora Project’s list of official
Changes[[2]] and the Fedora CoreOS analysis of each Change[[3]].

Some notable changes on the Fedora CoreOS side going into this release:

  • Setting the container_use_cephfs and virt_use_samba SELinux booleans to on has been dropped[[4]].
    • These knobs were historically set at the request of OpenShift but were no longer necessary for us to set in Fedora CoreOS. They now retain the default value shipped in Fedora RPMs.
    • If you were relying on these settings you may need to re-apply them after the update to F44 based CoreOS.
  • In Fedora 43, ssh-key-dir was replaced by an overlay[[5]]. In Fedora 44, the location of the overlay files has been moved again[[6]].
    • Following the transition in Fedora 43 where ssh-key-dir was replaced by an overlay, the location of these overlay files has been moved again in Fedora 44 to better align with upstream standards.
      • In Fedora 43, the configuration file was delivered by CoreOS at:
        • /etc/ssh/sshd_config.d/40-authorized-keys-file.conf
      • In Fedora 44, the configuration is delivered by the Ignition and Afterburn RPMs at:
        • /etc/ssh/sshd_config.d/90-afterburn-authorized-keys-file.conf
        • /etc/ssh/sshd_config.d/91-ignition-authorized-keys-file.conf
      • If you had previously updated any AuthorizedKeysFile config to handle the Fedora 43 change you may need to update it again.
  • podman v5.8.0 migrating away from legacy BoltDB database[[7]]
    • Fedora CoreOS 44 beta ships with podman 5.8.0 which introduces an automatic migration of the container database from BoltDB to SQLite[[8]]. BoltDB support will be fully removed in Podman 6.0, which is expected to ship with Fedora 45 [[9]].
  • The functionality from the nfs-utils-coreos has been folded into a generic nfs-client-utils package [[10]]. This is a non-breaking change. NFS client mounts should continue to work as before. There should be no breaking changes as a result of this.

Please test out the next stream over the coming months and report any issues in our issue tracker [[11]].

Thank you,

Michael Armijo for the CoreOS team

[1] Announcing Fedora Linux 44 Beta - Fedora Magazine
[2] Releases/44/ChangeSet - Fedora Project Wiki
[3] tracker: Fedora 44 changes considerations · Issue #2063 · coreos/fedora-coreos-tracker · GitHub
[4] manifests: some cleanups for selinux hacks by dustymabe · Pull Request #3997 · coreos/fedora-coreos-config · GitHub
[5] manifests: Replace ssh-key-dir by openssh config by travier · Pull Request #3885 · coreos/fedora-coreos-config · GitHub
[6] manifests: Replace ssh-key-dir by openssh config by travier · Pull Request #3885 · coreos/fedora-coreos-config · GitHub
[7] Making sure you're not a bot!
[8] podman v5.8.0 boltDB database migration · Issue #2110 · coreos/fedora-coreos-tracker · GitHub
[9] Changes/Podman6 - Fedora Project Wiki
[10] manifests: adjust NFS package specification by dustymabe · Pull Request #3680 · coreos/fedora-coreos-config · GitHub
[11] GitHub - coreos/fedora-coreos-tracker: Issue tracker for Fedora CoreOS · GitHub

2 Likes