v4.0.0

OS Changes

• Disable BPF preload and bpfilter helpers for kernel (#261)
• Allow overriding max-pods file with one from variant (#279)
• Update libdbus and libexpat (#270)
• Remove acpid package (#280)
• Prevent io_uring calls from hanging (#284)

Orchestrator Changes

Kubernetes

• Update EKS 1.28-1.31 versions to latest (#281)

Build Changes

• Use upstream sources for packages sourced from Amazon Linux (#265)
• Update twoliter to v0.5.1 (#259)
• Drop "dependencies" table for all packages (#262)

v3.3.2

OS Changes

• Add kernel-5.15 patch to fix IPv6 typo (#266)

v3.3.1

OS Changes

• Update kernel 5.10.228 and kernel 6.1.115 (#263)

v3.3.0

Orchestrator Changes

Kubernetes

• Add latest instance types to eni-max-pods mapping (#250)

OS Changes

• Include rdma-core in AWS variants (#252)
• Add libstdc++ subpackage to libgcc (#253)
• Update third-party packages (#254)

v3.2.0

Orchestrator Changes

Kubernetes

• Match the EKS Optimized AMIs secure TLS ciphers (#230, #245)

OS Changes

• Provide FIPS binaries for first-party rust programs (#173)
• Support ECR FIPS endpoints for host containers (#204)
• Adjust SELinux Policy to allow execute programs in NFS filesystems (#205)
• Mount binfmt_mics filesystem at boot (#206)
• Add proxy support for pluto FIPS binary (#213)
• Generate default AWS config file (#218)
• Adjust SELinux Policy for first-party FIPS rust programs (#222)
• Update third-party packages (#210, #212, #214, #219, #220, #246)
• Add rdma-core to packages (#223)
• Use Amazon Linux 2023 as upstream for libkcapi (#224)
• Set AWS_SDK_LOAD_CONFIG for system services (#243)
• Add proxy support for cfsignal (#234)

Build Changes

• Build Neuron kernel module in kernel packages (#207)
• Update Bottlerocket SDK to v0.47.0 (#241)

Tools

• Add insertFinalNewline for VSCode Workspaces (#242)

v3.1.5

OS Changes

• Wait for kubelet device-manager socket before starting nvidia-k8s-device-plugin (#228)

v3.1.4

OS Changes

• Update kernel 5.10.227 and kernel 5.15.168 (#235)

v3.1.3

OS Changes

• Update kernel 6.1.112-124 (#231)

v3.1.2

OS Changes

• Add kernel-6.1 patch to fix io statistics for cgroup v1 (#225)

v3.1.1

OS Changes

• Revert system-wide configuration to block writeable/executable memory in systemd services (#215)