הערות מוצר של מערכת הפעלה שמותאמת לקונטיינרים

בטבלה הבאה מופיע סיכום של מהדורות מערכת ההפעלה שמותאמת לקונטיינרים שזמינות ב-Compute Engine:

ציוני דרך פעילים

גרסת OS פרויקט תמונות משפחת תמונות x86 משפחת תמונות של זרועות נוצר על ידי סיום התמיכה נתוני גרסה
COS 138 DEV cos-cloud cos-dev cos-arm64-dev Google עדיין לא הוגדר dev
COS 133 BETA cos-cloud cos-beta cos-arm64-beta Google עדיין לא הוגדר milestone 133
COS 129 LTS cos-cloud cos-129-lts cos-arm64-129-lts Google יולי 2028 milestone 129
COS 125 LTS cos-cloud cos-125-lts cos-arm64-125-lts Google פברואר 2028 milestone 125
COS 121 LTS cos-cloud cos-121-lts cos-arm64-121-lts Google מרץ 2027 milestone 121
COS 117 LTS cos-cloud cos-117-lts cos-arm64-117-lts Google ספטמבר 2026 milestone 117

אבני דרך שהוצאו משימוש

גרסת OS פרויקט תמונות משפחת תמונות x86 משפחת תמונות של זרועות נוצר על ידי תאריך הפסקת התמיכה נתוני גרסה
COS 113 LTS cos-cloud cos-113-lts cos-arm64-113-lts Google מרץ 2026 milestone 113
COS 109 LTS cos-cloud cos-109-lts cos-arm64-109-lts Google ספטמבר 2025 milestone 109
COS 105 LTS cos-cloud cos-105-lts cos-arm64-105-lts Google מרץ 2025 milestone 105
COS 101 LTS cos-cloud cos-101-lts N/A Google אוקטובר 2024 milestone 101
COS 97 LTS cos-cloud cos-97-lts N/A Google אפריל 2024 milestone 97
COS 93 LTS cos-cloud cos-93-lts N/A Google אוקטובר 2023 milestone 93
COS 89 LTS cos-cloud cos-89-lts N/A Google מרץ 2023 milestone 89
COS 85 LTS cos-cloud cos-85-lts N/A Google ספטמבר 2022 milestone 85
COS 81 LTS cos-cloud cos-81-lts N/A Google ספטמבר 20211 milestone 81
COS 77 LTS cos-cloud cos-77-lts N/A Google אפריל 20211 milestone 77
COS 73 LTS cos-cloud cos-73-lts N/A Google יוני 2020 milestone 73
COS 69 LTS cos-cloud cos-69-lts N/A Google דצמבר 2019 milestone 69

הערות מוצר של גרסת פיתוח

הערות לגבי גרסאות שקשורות לאבן הדרך שנמצאת בפיתוח מופיעות בדף הערות לגבי גרסאות פיתוח.
נתוני גרסה שקשורים ל-cos-dev לפני M93 מופיעים בדף נתוני גרסה של גרסאות קודמות.

יומן שינויים

cos-89-16108-470-1

Date:               Jun 24, 2021
Kernel:             COS-5.4.120
Kubernetes:         v1.20.5
Docker:             v20.10.3
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-51):
    * LTS Refresh Release.
    * Upgraded dev-db/sqlite to v3.34.1. This resolves CVE-2021-20227.
    * Upgraded app-arch/tar to v1.34. This resolves CVE-2021-20193.
    * Upgraded dev-vcs/git to v2.29.3. This resolves CVE-2021-21300.
    * Updated the Linux kernel to v5.4.120. This resolves CVE-2021-31916 and
      CVE-2021-31829.
    * Updated kubernetes to v1.20.5.
    * Updated containerd to v1.4.4. This resolves CVE-2021-21334.
    * Upgraded Google OS Config Agent(aka VMManager) to version 20210607.00.
    * Fixed CVE-2021-3537 and CVE-2020-24977 in dev-libs/libxml2.
    * Automatically mount OEM partition if it is sealed.

cos-dev-93-16509-0-0

Date:               Jun 21, 2021
Kernel:             COS-5.10.44
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16482-0-0):
    * Updated the Linux kernel to v5.10.44.
    * Set kernel config flag to enable dump capture kernel for ARM64.
    * Runtime sysctl:
    *   Changed: fs.epoll.max_user_watches: 1668321 -> 1668341
    *   Changed: fs.file-max: 814309 -> 814308

cos-89-16108-403-51

Date:               Jun 21, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-47):
    * Fixed a memory leak in the GVE kernel driver.

cos-85-13310-1260-26

Date:               Jun 21, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-23):
    * Fixed a memory leak in the GVE kernel driver.
    * Fixed a low network bandwidth issue in the Linux kernel.

cos-89-16108-403-47

Date:               Jun 14, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-46):
    * Fixed a network regression on single-core systems when using the
      GVE network interface.

cos-85-13310-1260-23

Date:               Jun 14, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-22):
    * Fixed a network regression on single-core systems when using the
      GVE network interface.

cos-dev-93-16482-0-0

Date:               Jun 09, 2021
Kernel:             COS-5.10.42
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16442-0-0):
    * Upgraded Google OS Config Agent (VMManager) to version 20210607.00.
    * Upgraded cloud-init to v21.2.
    * Upgraded the Linux kernel to v5.10.42.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.
    * Stackdriver logs now record Docker container names by default.
    * As a result of the kernel upgrade, the following sysctl changes occurred:
    *   Added:   kernel.hung_task_all_cpu_backtrace: 0
    *   Added:   kernel.oops_all_cpu_backtrace: 0
    *   Added:   kernel.sched_deadline_period_max_us: 4194304
    *   Added:   kernel.sched_deadline_period_min_us: 100
    *   Added:   net.ipv4.ip_autobind_reuse: 0
    *   Added:   net.ipv4.nexthop_compat_mode: 1
    *   Added:   net.ipv4.tcp_comp_sack_slack_ns: 100000
    *   Added:   net.ipv4.tcp_no_ssthresh_metrics_save: 1
    *   Added:   net.ipv4.tcp_reflect_tos: 0
    *   Added:   net.ipv6.conf.all.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.default.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.docker0.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.eth0.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.lo.rpl_seg_enabled: 0
    *   Added:   user.max_time_namespaces: 31820
    *   Added:   vm.compaction_proactiveness: 20
    *   Added:   vm.page_lock_unfairness: 5
    *   Changed: fs.epoll.max_user_watches: 1668751 -> 1668321
    *   Changed: fs.file-max: 814576 -> 814309
    *   Changed: kernel.cap_last_cap: 37 -> 40
    *   Changed: kernel.threads-max: 63658 -> 63641
    *   Changed: kernel.usermodehelper.bset: 4294967295 63 -> 4294967295    511
    *   Changed: kernel.usermodehelper.inheritable: 4294967295  63 -> 4294967295    511
    *   Changed: net.core.bpf_jit_kallsyms: 0 -> 1
    *   Changed: net.ipv4.tcp_mem: 94299    125733  188598 -> 94275 125700  188550
    *   Changed: net.ipv4.udp_mem: 188598   251466  377196 -> 188550    251401  377100
    *   Changed: user.max_cgroup_namespaces: 31829 -> 31820
    *   Changed: user.max_ipc_namespaces: 31829 -> 31820
    *   Changed: user.max_mnt_namespaces: 31829 -> 31820
    *   Changed: user.max_net_namespaces: 31829 -> 31820
    *   Changed: user.max_pid_namespaces: 31829 -> 31820
    *   Changed: user.max_user_namespaces: 31829 -> 31820
    *   Changed: user.max_uts_namespaces: 31829 -> 31820
    *   Deleted: kernel.random.read_wakeup_threshold: 64

cos-85-13310-1260-22

Date:               Jun 09, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-17):
    * Fixed a network regression on multi-core systems when using the
      GVE network interface.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-89-16108-403-46

Date:               Jun 08, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-42):
    * Fixed a low network bandwidth issue in the Linux kernel.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-81-12871-1290-12

Date:               Jun 08, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-11):
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-89-16108-403-42

Date:               Jun 07, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-26):
    * Upgraded the default GPU drver version to 450.119.04.
    * Fixed a network regression on multi-core systems when using the
      GVE network interface.
    * Fixed CPU usage for workloads with heavy page cache usage.

cos-85-13310-1260-17

Date:               Jun 07, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-8):
    * Fixed CPU usage for workloads with heavy page cache usage.

cos-81-12871-1290-11

Date:               Jun 07, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-8):
    * Fixed CVE-2019-25044 in the Linux kernel.

cos-dev-93-16442-0-0

Date:               Jun 01, 2021
Kernel:             COS-5.4.120
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16379-0-0):
    * Fixed CPU usage for workloads with heavy page cache usage.
    * Fixed 32 x truesize under-estimation for tiny skbs in the Linux kernel.
    * Fixed CVE-2021-3537 in libxml2.
    * Automatically mount OEM partition if it is sealed.
    * Upgraded the default GPU drver version to 450.119.04.
    * Upgraded Google OS Config Agent to v20210506.00.
    * Updated docker to v20.10.6.
    * Updated the Linux kernel to v5.4.120.
    * Updated makedumpfile package to v1.6.9.

cos-81-12871-1290-8

Date:               Jun 01, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-2):
    * Updated docker to v19.03.15. This fixed CVE-2021-21285.

cos-dev-93-16379-0-0

Date:           May 03, 2021
Kernel:         COS-5.4.114
Kubernetes:     v1.20.5
Docker:         v20.10.3
Containerd:     v1.4.4
Changelog (vs 93-16351-0-0):
    * Fixed CVE-2020-24977 in libxml2.
    * Updated the Linux kernel to v5.4.114.
    * Updated google-guest-agent to v20210408.00.
    * Updated sshd.service to not drop active ssh sessions when sshd is
      restarted.

cos-89-16108-403-26

Date:           May 03, 2021
Kernel:         COS-5.4.104
Kubernetes:     v1.20.2
Docker:         v20.10.3
Containerd:     v1.4.3
Changelog (vs 89-16108-403-22):
    * Updated google-guest-agent to v20210408.00.
    * Updated sshd.service to not drop active ssh sessions when sshd is
      restarted.

cos-85-13310-1260-8

Date:           May 03, 2021
Kernel:         COS-5.4.109
Kubernetes:     v1.18.15
Docker:         v19.03.15
Containerd:     v1.4.3
Changelog (vs 85-13310-1260-5):
    * Upgraded dev-vcs/git to version 2.26.3. This resolves CVE-2021-21300.

cos-81-12871-1290-2

Date:           Apr 27, 2021
Kernel:         COS-4.19.188
Kubernetes:     v1.17.17
Docker:         v19.03.14
Containerd:     v1.3.9
Changelog (vs 81-12871-1245-24):
    * LTS Refresh Release.
    * Fixed an authentication error when using go-dbus to connect systemd.
    * Addressed CVE-2020-12049 in dbus.
    * Updated the Linux kernel to v4.19.188.
    * Fixed CVE-2021-23840 and CVE-2021-23841 in openssl.
    * Updated the built-in kubectl/kubelet to 1.17.17.
    * Updated glib to v2.66.7. This resolved CVE-2021-27218 and CVE-2021-27219.
    * Updated curl to v7.74.0. This resolved CVE-2020-8177, CVE-2020-8169,
      CVE-2020-8285, CVE-2020-8284 and CVE-2020-8286.
    * Upgraded tar to 1.34.
    * Upgraded libgcrypt to v1.9.1. This addresses CVE-2021-3345.

cos-dev-93-16351-0-0

Date:           Apr 22, 2021
Kernel:         COS-5.4.113
Kubernetes:     v1.20.5
Docker:         v20.10.3
Containerd:     v1.4.4
Changelog (vs 93-16340-0-0):
    * Updated the Linux kernel to v5.4.113.
    * Upgraded dev-vcs/git to version 2.31.0. This resolves CVE-2021-21300.
    * Fixed an out-of-bounds write issue in the Linux kernel.

cos-89-16108-403-22

Date:           Apr 22, 2021
Kernel:         COS-5.4.104
Kubernetes:     v1.20.2
Docker:         v20.10.3
Containerd:     v1.4.3
Changelog (vs 89-16108-403-15):
    * Fixed an out-of-bounds write issue in the Linux kernel.

cos-85-13310-1260-5

Date:           Apr 22, 2021
Kernel: