Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.12

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.20.0-okd-scos.11 (changes) - Success
• 4.20.0-okd-scos.10 (changes) - Failed Success
• 4.20.0-okd-scos.9 (changes) - Success
• 4.20.0-okd-scos.8 (changes) - Success
• 4.20.0-okd-scos.7 - Success
• 4.20.0-okd-scos.6 (changes) - Success
• 4.20.0-okd-scos.5 (changes) - Success
• 4.20.0-okd-scos.4 (changes) - Failed Success
• 4.20.0-okd-scos.3 (changes) - Success
• 4.20.0-okd-scos.2 (changes) - Success
• 4.20.0-okd-scos.1 (changes) - Failed Success
• 4.20.0-okd-scos.0 (changes) - Success
• 4.19.0-okd-scos.19 (changes) - Success

Upgrades to:

• 4.21.0-okd-scos.ec.14 (changes) - Success
• 4.20.0-okd-scos.13 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.7

Created: 2025-12-08 05:30:34 +0000 UTC

Image Digest: sha256:9c0435c9552cfa98248532d3e8b0ecd7020ca332ba2a0bba21d2c8f0185d8fb5

Release 4.20.0-okd-scos.12 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-12-07-131728

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.5 to 1.33.6
• Kubernetes Tests 1.33.4
• CentOS Stream CoreOS 10.0.20251023-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCWithUIDAndExtraClaimMappings (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (9 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

• cluster-kube-scheduler-operator git 58cbd296 sha256:b9bfbd59e7f5e692935c21488a7106bb66b69c8eb9de5713d788476448b7d0cc
• cluster-kube-storage-version-migrator-operator git 5adc1429 sha256:b01e5e9dbbbe403323087a7c0b24c3377d896e879dc9074d80a6a7be3a1ac8bf
• gcp-pd-csi-driver-operator git e0ad050a sha256:c19fff77040aec65215e1a8102ee3bd0e5686011507517048067cb1f1bce9e6b
• olm-catalogd git 3e2401f2 sha256:123db214e23dd3965b2c0c7e60a23c1885764aadf6f3744c12b73fa41acf1f24
• olm-operator-controller git 3e2401f2 sha256:b5dcfa62693fdd0d7ca3da4adc812ab0ae21fd57a1cefecbc14360dcb7f47627
• ovirt-csi-driver git 1db726a9 sha256:9caf16aa1fc875592fa298bd9533b927856bd38119f34e41ee9e8200ab3a0290

agent-installer-api-server

• OCPBUGS-57606: Updating ose-agent-installer-api-server-container image to be consist… #8399
• Full changelog

agent-installer-node-agent

• OCPBUGS-57718: Update golang images to 1.24 for OpenShift 4.20 #1194
• Full changelog

agent-installer-utils

• OCPBUGS-66425: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 #186
• OCPBUGS-66422: Update Konflux references #185
• OCPBUGS-66406: Update Konflux release version to 4.20.6 #204
• OCPBUGS-65715: Update 4.20 version to 4.20.4 #196
• OCPBUGS-64694: Update 4.20 version to 4.20.2 #193
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-65895: allow all-egress for efs operator #473
• OCPBUGS-65686: Bump gophercloud #470
• Full changelog

azure-machine-controllers

• OCPBUGS-65708: Set updateDomainCount to one when faultDomainCount is one #173
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-65763: continue to update 02_storage.json using new property storageAccountId #10103
• OCPBUGS-66257: CORS-4249: bump ARO marketplace images #10142
• OCPBUGS-66207, OCPBUGS-66208: Fix console info for interactive agent installer #10136
• Revert “OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…” #10093
• OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511… #10084
• OCPBUGS-64924: Azure UPI ARM template: use storageAccountId #10069
• OCPBUGS-64595: Remove pending items on gcp no-op #10056
• OCPBUGS-63633: Update the RHCOS 4.20 bootimage metadata to 9.6.20251023-0 #10037
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-65481: pkg/cli/admin/upgrade: Tighten force warnings #2140
• OCPBUGS-65523: fix(must-gather): do not set node affinity if nodename is set #2142
• OCPBUGS-64791: Rely on overall available disk space of the mounted volume #2133
• OCPBUGS-64773: oc adm must-gather: Wrap gather in a session #2132
• Full changelog

cloud-credential-operator

• OCPBUGS-65798: ccoctl azure: retry custom role creation on consistency errors #948
• OCPBUGS-63690: ccoctl: use pagination when listing resources in aws #941
• OCPBUGS-63546: ccoctl: add public-key-file flag to create-all #936
• Full changelog

cloud-network-config-controller

• OCPBUGS-64742: Fix capacity calculation #188
• Full changelog

cluster-authentication-operator

• OCPBUGS-66315: externaloidc: return errors when node statuses cannot be used to determine oidc state #814
• OCPBUGS-61896: set appropriate rolling update settings #792
• OCPBUGS-63319: (bugfix): configure status controller to remove unset versions #802
• OCPBUGS-64668: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #804
• Full changelog

cluster-autoscaler

• OCPBUGS-63675: update node info processors to include unschedulable nodes #391
• OCPBUGS-63495: refactor cloud provider options #387
• Full changelog

cluster-config-api

• OCPBUGS-66204: Introduce ClosedClientConnectionPolicy to IngressController API #2609
• OCPBUGS-66135: Add HTTPKeepAliveTimeout to IngressController API #2607
• OCPBUGS-64843: payload-command: remove authentication CR from hypershift payload #2573
• OCPBUGS-64940: Promote BYO OIDC features #2515
• Full changelog

cluster-etcd-operator

• OCPBUGS-63677: Backport 1504 1514 release.420 #1516
• Full changelog

cluster-ingress-operator

• OCPBUGS-65664: IngressOperator not exposing some metrics for degraded… #1305
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-65679: enable resource v1beta2 api if DynamicResourceAllocation is enabled #1929
• OCPBUGS-62057: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1961
• OCPBUGS-64689: Add priority field to prevent early shutdown #1955
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-64684: Add priority field to prevent early shutdown #890
• Full changelog

cluster-monitoring-operator

• OCPBUGS-62978: add tls configuration for the monitoring plugin deployment #2718
• OCPBUGS-62829: Remove cluster from non-multicluster dashboards #2701
• OCPBUGS-64577: Fix KSM deny-list typo #2729
• Full changelog

cluster-network-operator

• OCPBUGS-66164: [release-4.20] CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes #2838
• OCPBUGS-66162: [release-4.20] CORENET-6488: Preserve custom resource requests on ovn-control-plane pods #2835
• OCPBUGS-46422: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] #2827
• OCPBUGS-64733: api, l2udn: subnets must be masked #2823
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-63010: E2E: Add test cases related to schedulable control plane nodes #1409
• OCPBUGS-62889: E2E: llc: make sure to remove any trailing newspaces #1408
• Full changelog

console

• OCPBUGS-66248: The number of Quick Starts item is wrong #15797
• OCPBUGS-66206: Sync YAML editor modal settings #15787
• OCPBUGS-65900: Fix unnecessary rerenders with pod-connect #15758
• OCPBUGS-61785: Add validation and type guards on healthHandler calls to prevent errors #15500
• OCPBUGS-65793: OpenShift Console can only show user name instead of full name as the display name #15743
• OCPBUGS-65949: Add SDK-webpack 4.20 changelogs #15768
• NO-JIRA: Add SDK 4.20 changelogs #15765
• OCPBUGS-65761: Preserve query string in perspective switch + remove dev console folks from reviewers #15740
• OCPBUGS-64861, OCPBUGS-64863: Upgrade Helm to 3.18.5 #15705
• OCPBUGS-64702: Lack Chinese/Japanese/Korean translations for ‘On/Off’ switch button on editor setting modal of yaml page. #15683
• OCPBUGS-63125: use tenancy path for project scoped status card #15608
• OCPBUGS-61330: fix namespace path generation for non-namespaced resources #15498
• OCPBUGS-62953: Automatically redirect all-namespaces catalog to default namespace #15640
• OCPBUGS-64862: Convert standalone terminal route to extension #15702
• OCPBUGS-63499: Turn on fContentSecurityPolicyEnabled by default #15639
• OCPBUGS-64639: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15673
• OCPBUGS-63616: Preserve path on perspective switch #15650
• OCPBUGS-64809: Never allow OTHER_CATEGORY in categories #15690
• Full changelog

console-operator

• OCPBUGS-64602: Remove v1alpha1 ConsolePlugin version from CRDs status #1060
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-64811: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.33 into release-4.20 #355
• Full changelog

docker-builder

• OCPBUGS-64857: BuildConfig inline Dockerfile fails with heredoc syntax #483
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-65551: Bump 1.33.6 #2518
• OCPBUGS-46422: Remove patch/update from ServiceCIDR API conformance test #2466
• NO-JIRA: enable CBOR tests #2502
• Full changelog

hypershift

• CNTRLPLANE-1710: feat(globalps): security enhancements on GlobalPullSecret feature #7234
• OCPBUGS-65576: add hypershift-no-cgo to the latest operator conta… #7229
• CORENET-6484: Restart ovnkube-control-plane pods when restart-date annotation is set #7190
• OCPBUGS-63509: fix(ingress): add LoadBalancerSourceRanges support for external router service #7098
• OCPBUGS-64848: feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift #7204
• OCPBUGS-61774: fix(capi-provider): use single replica deployment for aws and azure #6834
• CNTRLPLANE-1908: control-plane-operator-4-20 Konflux pipelines #7216
• OCPBUGS-63539: remove NTO Service and ServiceMonitor #7099
• OCPBUGS-63718: specify SCC annotation for pods in data plane #7132
• Full changelog

insights-operator

• OCPBUGS-66062: Add filtering to add other possible pod status to QEMU gatherer #1185
• OCPBUGS-64800: QEMU logs are not gathered if there are pending status virt-launcher pods #1174
• OCPBUGS-65660: [bugfix] The archive’s records may include files whose names are out of bounds #1177
• Full changelog

ironic

• METAL-1695: OKD: install Ironic from the OpenShift fork #740
• OKD-304: Fix python dependencies for OKD #731
• OCPBUGS-64850: Handle HTTP 400 and 409 race condition in Redfish power operations #720
• OCPBUGS-64820: Fix IPA external inspection callback url override #713
• Full changelog

ironic-agent

• OCPBUGS-66084, OKD-295: Fix broken OKD ironic-agent-image #216
• OCPBUGS-65519: Include Test advertised ip reachability before assigning it #212
• Full changelog

machine-config-operator

• OKD-294: Migrate runtime from runc to crun on an upgrade for OKD #5467
• OCPBUGS-65898: fixes systemd unit creation for empty units #5437
• OCPBUGS-64822: block upgrades for conflict non-default ClusterImagePolicy resources #5414
• OCPBUGS-65777: Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default #5387
• OCPBUGS-65781: Remove –mount directives #5425
• OCPBUGS-65556: [release-4.20] Backport: Add delays to reduce TestOSBuildController failures #5396
• OCPBUGS-64822: remove check for conflicting ClusterImagePolicy in syncUpgradeableStatus #5413
• OCPBUGS-65509: e2e gcp ocl PR backport #5407
• OCPBUGS-64822: Implement upgrade blocking for conflicting ClusterImagePolicy named “openshift” #5397
• OCPBUGS-59766: Update timing of MCN desired config spec update to align with node annotation setting #5367
• OCPBUGS-64656: Update the OCP base image in Dockerfile to 4.20 reference #5392
• OCPBUGS-63534: Create temporal allow policy #5373
• Full changelog

metallb-frr

• OCPBUGS-65516: [release-4.20] Dockerfile: unpin FRR rpm #111
• Full changelog

monitoring-plugin

• OCPBUGS-66240: configure max TLS version only when specified #664
• OCPBUGS-65947: add missing conversion units #654
• Full changelog

networking-console-plugin

• OCPBUGS-66335: fix flickerying in synced editor #304
• CNV-72771: fix null error #300
• CNV-71965: replacing the broken link to VirtualMachine network docs #298
• Full changelog

oc-mirror

• OCPBUGS-64647: fix: return only requested version #1306
• OCPBUGS-65787: Remove empty status field from generated IDMS/ITMS files #1313
• OCPBUGS-63030: removes unintended exec permissions #1291
• Full changelog

openshift-apiserver

• OCPBUGS-65848: Add ValidatingAdmissionPolicy and check for omissions next time. #577
• OCPBUGS-61982: pkg/image: conditionally parse raw image manifest #559
• OCPBUGS-65814: update pkg/image/OWNERS #575
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-64724: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1139
• Full changelog

operator-marketplace

• OCPBUGS-65680: enforce client side auth requirement for metrics endpoint #688
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-64836: back-port IP & MAC conflict detection #2827
• OCPBUGS-65514: [4.20] status manager: remove managedFields for deleted zone upon zone deletion #2855
• OCPBUGS-65951: [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 #2866
• OCPBUGS-65618: [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers #2865
• OCPBUGS-65605: add lint target to run golanci natively #2856
• OCPBUGS-64697: [release-4.20] Referencing pod named ports within a service results in bad DNAT rules containing tcp/0 target port #2844
• OCPBUGS-63686: Fix stale EIP assignments during failover and controller restart #2835
• OCPBUGS-64590: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2841
• OCPBUGS-63696: Fixes OF flows to be VLAN aware as well as add DPU checks for certain features #2837
• OCPBUGS-63007: kubevirt: fix bad release of IPs of live migratable pods #2801
• Full changelog

prometheus-node-exporter

• OCPBUGS-63624: bump github.com/prometheus/procfs to v0.16.1 #173
• Full changelog

tests

• OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20 #30467
• OCPBUGS-64777: [release-4.20] Add e2e tests for storage network policy #30468
• OCPBUGS-46422: Add test that the ServiceCIDR API is blocked [4.20] #30434
• OCPBUGS-63656: Redact bearertoken in TestContext #30435
• OCPBUGS-64598: Updated the upgrade duration limit to 100 minutes for ppc64le #30451
• OCPBUGS-64593: [release-4.20] NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30415
• OCPBUGS-63725: CNTRLPLANE-1766:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30439
• OCPBUGS-63171: Add imagestream update dryrun test #30389
• Full changelog

vsphere-problem-detector

• OCPBUGS-65795: Fixed logic for vSphere compute cluster permission #197
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.4-1.el10s
• kernel-6.12.0-142.el10
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• systemd-257-16.el10

Full list (575 packages)

• NetworkManager-1:1.55.4-1.el10
• NetworkManager-cloud-setup-1:1.55.4-1.el10
• NetworkManager-libnm-1:1.55.4-1.el10
• NetworkManager-ovs-1:1.55.4-1.el10
• NetworkManager-tui-1:1.55.4-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.10.0-1.el10
• afterburn-dracut-5.10.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.8.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2025.2.80_v9.0.305-101.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-12.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-12.el10
• centos-stream-repos-10.0-12.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.241.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.4-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-4.1-1.el10
• criu-libs-4.1-1.el10
• crun-1.24-1.el10
• crypto-policies-20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
• cryptsetup-2.8.1-1.el10
• cryptsetup-libs-2.8.1-1.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-12.el10
• device-mapper-multipath-libs-0.9.9-12.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-69.el10
• glibc-common-2.39-69.el10
• glibc-gconv-extra-2.39-69.el10
• glibc-minimal-langpack-2.39-69.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-29.el10
• grub2-efi-x64-1:2.12-29.el10
• grub2-pc-1:2.12-29.el10
• grub2-pc-modules-1:2.12-29.el10
• grub2-tools-1:2.12-29.el10
• grub2-tools-minimal-1:2.12-29.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.24.0-1.el10
• ignition-grub-2.24.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-1.el10
• kernel-6.12.0-142.el10
• kernel-core-6.12.0-142.el10
• kernel-modules-6.12.0-142.el10
• kernel-modules-core-6.12.0-142.el10
• kernel-modules-extra-6.12.0-142.el10
• kernel-modules-extra-matched-6.12.0-142.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-12.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.2.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.2.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.0-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-2.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.15-3.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.23.0-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-3.el10
• libsss_idmap-2.11.1-3.el10
• libsss_nss_idmap-2.11.1-3.el10
• libsss_sudo-2.11.1-3.el10
• libstdc++-14.3.1-2.2.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.0-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.23-1.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-2.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.54-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.15-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-2.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.20.0-202510212154.p2.g7f1d6f8.assembly.stream.el9
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• openssh-9.9p1-14.el10
• openssh-clients-9.9p1-14.el10
• openssh-server-9.9p1-14.el10
• openssl-1:3.5.1-5.el10
• openssl-fips-provider-1:3.5.1-5.el10
• openssl-libs-1:3.5.1-5.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202509051528.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
• ostree-2025.6-1.el10
• ostree-grub2-2025.6-1.el10
• ostree-libs-2025.6-1.el10
• p11-kit-0.25.10-1.el10
• p11-kit-server-0.25.10-1.el10
• p11-kit-trust-0.25.10-1.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.6.0-2.el10
• policycoreutils-3.9-2.el10
• policycoreutils-python-utils-3.9-2.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-2.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-20.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-2.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-20.el10
• rpm-build-libs-4.19.1.1-20.el10
• rpm-libs-4.19.1.1-20.el10
• rpm-ostree-2025.11-1.el10
• rpm-ostree-libs-2025.11-1.el10
• rpm-plugin-audit-4.19.1.1-20.el10
• rpm-plugin-selinux-4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
• rpm-sequoia-1.9.0.3-1.el10
• rpm-sign-libs-4.19.1.1-20.el10
• rsync-3.4.1-3.el10
• samba-client-libs-4.23.0-101.el10
• samba-common-4.23.0-101.el10
• samba-common-libs-4.23.0-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-8.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-3.el10
• sssd-ad-2.11.1-3.el10
• sssd-client-2.11.1-3.el10
• sssd-common-2.11.1-3.el10
• sssd-common-pac-2.11.1-3.el10
• sssd-ipa-2.11.1-3.el10
• sssd-krb5-2.11.1-3.el10
• sssd-krb5-common-2.11.1-3.el10
• sssd-ldap-2.11.1-3.el10
• sssd-nfs-idmap-2.11.1-3.el10
• sssd-proxy-2.11.1-3.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-16.el10
• systemd-journal-remote-257-16.el10
• systemd-libs-257-16.el10
• systemd-pam-257-16.el10
• systemd-udev-257-16.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.27-3.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.3.1-2.2.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.2.el10.x86_64
• glibc-devel-2.39-69.el10.x86_64
• kernel-6.12.0-142.el10.x86_64
• kernel-core-6.12.0-142.el10.x86_64
• kernel-devel-6.12.0-142.el10.x86_64
• kernel-headers-6.12.0-142.el10.x86_64
• kernel-modules-6.12.0-142.el10.x86_64
• kernel-modules-extra-6.12.0-142.el10.x86_64
• kernel-rt-core-6.12.0-142.el10.x86_64
• kernel-rt-devel-6.12.0-142.el10.x86_64
• kernel-rt-modules-6.12.0-142.el10.x86_64
• kernel-rt-modules-core-6.12.0-142.el10.x86_64
• kernel-rt-modules-extra-6.12.0-142.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-5.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251023-0