Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.ec.4

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.21.0-okd-scos.ec.3 - F F F
• 4.20.0-okd-scos.ec.16 (changes) - F F F

---

Loading changelog, this may take a while ...

Changes from 4.21.0-okd-scos.ec.3

Created: 2025-10-20 05:00:30 +0000 UTC

Image Digest: sha256:e22dfb86de9e39fcdf78c12a166f316821a269ed395c1c3641d13a62a20aeafd

Release 4.21.0-okd-scos.ec.4 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-10-17-100629

Components

• Kubectl 1.33.3
• Kubernetes 1.33.5
• Kubernetes Tests 1.33.4
• CentOS Stream CoreOS 10.0.20251003-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

agent-installer-api-server

• MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
• NO-ISSUE: Update Konflux references #8050
• ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
• MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
• OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
• OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
• OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
• Full changelog

agent-installer-node-agent

• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
• OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
• Full changelog

agent-installer-utils

• OCPBUGS-62986: Update Konflux references #177
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
• STOR-1945: STOR-2056: add Azure File NFS test manifest #445
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
• Full changelog

aws-machine-controllers

• OCPBUGS-62395: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 #139
• OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
• CCO-665: Merge upstream changes #40
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
• OKD-237: Remove fcos references #9970
• OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
• NO-JIRA: shiftstack: Update OWNERS #9994
• Full changelog

cloud-credential-operator

• CCO-435: Migrate away from deprecated ioutil package. #920
• Full changelog

cluster-authentication-operator

• OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
• API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
• NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
• Full changelog

cluster-capi-controllers

• OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
• Full changelog

cluster-capi-operator

• OCPCLOUD-2999: AWSMachine status conversion and syncing #372
• OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
• OCPCLOUD-3104: Fix v1beta2 condition setting #385
• OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
• OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
• OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
• Full changelog

cluster-config-api

• MCO-1873: promote ManagedBootImagesAzure to default #2526
• OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
• CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
• Full changelog

cluster-etcd-operator

• OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
• OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
• Full changelog

cluster-ingress-operator

• NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
• Full changelog

cluster-kube-apiserver-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
• Full changelog

cluster-kube-controller-manager-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
• no-jira: Add priority field to prevent early shutdown #865
• CNTRLPLANE-1544: Enable user namespaces for the operator #886
• Full changelog

cluster-kube-scheduler-operator

• no-jira: Add priority field to prevent early shutdown #572
• CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
• Full changelog

cluster-monitoring-operator

• OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
• NO-JIRA: [bot] Synchronize versions of the downstream components #2705
• OCPBUGS-62972: enhance case 66736 #2708
• Full changelog

cluster-network-operator

• CORENET-6423: api, l2udn: subnets must be masked #2808
• CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
• OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
• Full changelog

cluster-node-tuning-operator

• NO-ISSUE: pkg/metrics/server: Log bind address #1411
• OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
• Full changelog

cluster-storage-operator

• STOR-2523: Add hypershift managed-by labels for csi driver operators #627
• OCPBUGS-62669: Move metrics to vsphere driver #625
• Full changelog

configmap-reloader

• OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
• Full changelog

console

• CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
• OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
• CONSOLE-4820: Migrate olmv0 to dynamic #15566
• OCPBUGS-33879: use tenancy path for project scoped status card #15585
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-59939: Bumped to latest console-operator version #1055
• OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• no-jira: Update OWNERS #204
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
• OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
• NO-JIRA: Update OWNERS #90
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
• Full changelog

hypershift

• NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
• OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
• OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
• OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
• OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
• CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
• OCPBUGS-63148: bump Konflux build images #7055
• CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
• CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
• OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
• NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
• NO-JIRA: migrate renovate config #7029
• CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
• CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
• OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
• OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
• NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
• CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
• Full changelog

insights-operator

• CCXDEV-15577: retry mechanism for network error #1161
• NO-JIRA: remove CRD manifests #1156
• Full changelog

ironic-agent

• OKD-295: Fix broken OKD ironic-agent-image #199
• Full changelog

machine-api-operator

• OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
• Full changelog

machine-config-operator

• OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
• OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
• Full changelog

monitoring-plugin

• OU-1033: close the first dropdown when deselecting incident #599
• OU-1032: resolve stale Redux state bug in incidents time range calculation #598
• OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
• OU-1030: revert most of my previous changes & avoid flickering when chang… #596
• OU-995: automation monitoring testing namespace level #594
• OU-1024: Add translations for all strings in Incidents page #570
• OU-1022: recalculate incident x values when filtering #589
• Full changelog

network-tools

• OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
• Full changelog

networking-console-plugin

• CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
• CNV-62168: Typos in Networking Pages #277
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
• Full changelog

nutanix-machine-controllers

• OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
• Full changelog

oauth-apiserver

• OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
• Full changelog

oc-mirror

• CLID-460: Adds a column with the actual implemented logic #1288
• CLID-443: add mandatory –v1/–v2 flag #1284
• OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
• CLID-430: migration to containers/container-libs #1255
• OCPBUGS-55489: removes unintended exec permissions #1285
• Full changelog

olm-catalogd, olm-operator-controller

• OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
• NO-ISSUE: Synchronize From Upstream Repositories #526
• OPRUN-4194: Update OCP catalogs to v4.21 #518
• NO-ISSUE: Synchronize From Upstream Repositories #523
• OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
• OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
• OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
• OCPBUGS-62517: Synchronize from upstream #519
• OPRUN-4176: Consolidate build API #514
• Full changelog

openshift-apiserver

• OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
• Full changelog

openstack-machine-api-provider

• OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
• NO-JIRA: shiftstack: Update OWNERS #139
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPQE-30741: support opm cases #1121
• Full changelog

operator-marketplace

• OPRUN-4198: Upgrade deps to have compatible k8s version #676
• OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
• NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
• OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
• CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
• Full changelog

powervs-machine-controllers

• OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
• Full changelog

prometheus

• NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
• Full changelog

service-ca-operator

• OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
• OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
• Full changelog

tests

• MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
• OCPBUGS-62359: Check more operatorsProgressing #30367
• TRT-2275: some enhancement for e2e-analysis #30276
• OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
• NO-JIRA: Combine global and command args in BackgroundRC #30382
• NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
• NO-JIRA: enhance-waitnodeready-util #30377
• OCPBUGS-63040: Add imagestream update dryrun test #30357
• OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
• NO-JIRA: implement WithoutKubeconf method to clear config path #30371
• NO-JIRA: oc adm upgrade status: Record err and outputs #30151
• NO-JIRA:I Fixing race condtion #30360
• OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
• NO-JIRA: init lease-checker namespaces #30373
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-62571: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 #100
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.34.0-1.el10s
• kernel-6.12.0-136.el10
• openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
• systemd-257-13.el10

Full list (575 packages)

• NetworkManager-1:1.55.4-1.el10
• NetworkManager-cloud-setup-1:1.55.4-1.el10
• NetworkManager-libnm-1:1.55.4-1.el10
• NetworkManager-ovs-1:1.55.4-1.el10
• NetworkManager-tui-1:1.55.4-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.9.0-1.el10
• afterburn-dracut-5.9.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.8.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-11.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-11.el10
• centos-stream-repos-10.0-11.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.241.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.34.0-1.el10s
• cri-tools-1.34.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.24-1.el10
• crypto-policies-20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
• cryptsetup-2.8.1-1.el10
• cryptsetup-libs-2.8.1-1.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-12.el10
• device-mapper-multipath-libs-0.9.9-12.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-69.el10
• glibc-common-2.39-69.el10
• glibc-gconv-extra-2.39-69.el10
• glibc-minimal-langpack-2.39-69.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-29.el10
• grub2-efi-x64-1:2.12-29.el10
• grub2-pc-1:2.12-29.el10
• grub2-pc-modules-1:2.12-29.el10
• grub2-tools-1:2.12-29.el10
• grub2-tools-minimal-1:2.12-29.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.23.0-1.el10
• ignition-grub-2.23.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-4.el10
• irqbalance-2:1.9.4-5.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-7.el10
• kernel-6.12.0-136.el10
• kernel-core-6.12.0-136.el10
• kernel-modules-6.12.0-136.el10
• kernel-modules-core-6.12.0-136.el10
• kernel-modules-extra-6.12.0-136.el10
• kernel-modules-extra-matched-6.12.0-136.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-12.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.0-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-2.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.23.0-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-3.el10
• libsss_idmap-2.11.1-3.el10
• libsss_nss_idmap-2.11.1-3.el10
• libsss_sudo-2.11.1-3.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.0-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.23-1.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-2.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.52-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-1.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.21.0-202510070153.p2.g229ead6.assembly.stream.el9
• openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
• openssh-9.9p1-14.el10
• openssh-clients-9.9p1-14.el10
• openssh-server-9.9p1-14.el10
• openssl-1:3.5.1-5.el10
• openssl-fips-provider-1:3.5.1-5.el10
• openssl-libs-1:3.5.1-5.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.21.0-202509221503.p2.gfa4e6bb.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
• ostree-2025.6-1.el10
• ostree-grub2-2025.6-1.el10
• ostree-libs-2025.6-1.el10
• p11-kit-0.25.10-1.el10
• p11-kit-server-0.25.10-1.el10
• p11-kit-trust-0.25.10-1.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.6.0-2.el10
• policycoreutils-3.9-1.el10
• policycoreutils-python-utils-3.9-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-1.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-20.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-2.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-20.el10
• rpm-build-libs-4.19.1.1-20.el10
• rpm-libs-4.19.1.1-20.el10
• rpm-ostree-2025.11-1.el10
• rpm-ostree-libs-2025.11-1.el10
• rpm-plugin-audit-4.19.1.1-20.el10
• rpm-plugin-selinux-4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
• rpm-sequoia-1.9.0.3-1.el10
• rpm-sign-libs-4.19.1.1-20.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.23.0-101.el10
• samba-common-4.23.0-101.el10
• samba-common-libs-4.23.0-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-8.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-3.el10
• sssd-ad-2.11.1-3.el10
• sssd-client-2.11.1-3.el10
• sssd-common-2.11.1-3.el10
• sssd-common-pac-2.11.1-3.el10
• sssd-ipa-2.11.1-3.el10
• sssd-krb5-2.11.1-3.el10
• sssd-krb5-common-2.11.1-3.el10
• sssd-ldap-2.11.1-3.el10
• sssd-nfs-idmap-2.11.1-3.el10
• sssd-proxy-2.11.1-3.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-13.el10
• systemd-journal-remote-257-13.el10
• systemd-libs-257-13.el10
• systemd-pam-257-13.el10
• systemd-udev-257-13.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.27-1.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-69.el10.x86_64
• kernel-6.12.0-136.el10.x86_64
• kernel-core-6.12.0-136.el10.x86_64
• kernel-devel-6.12.0-136.el10.x86_64
• kernel-headers-6.12.0-136.el10.x86_64
• kernel-modules-6.12.0-136.el10.x86_64
• kernel-modules-extra-6.12.0-136.el10.x86_64
• kernel-rt-core-6.12.0-136.el10.x86_64
• kernel-rt-devel-6.12.0-136.el10.x86_64
• kernel-rt-modules-6.12.0-136.el10.x86_64
• kernel-rt-modules-core-6.12.0-136.el10.x86_64
• kernel-rt-modules-extra-6.12.0-136.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-5.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251003-0