20260622

General Changes

• chore: update debian/ubuntu kernel versions (#420) @mwennrich
• Almalinux 10 (#412) @majst01
• Update firewall-controller and tools (#419) @majst01
• Ubuntu 26.04 (#411) @majst01

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/10	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/13	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/13	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/26.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260616

General Changes

• Fix for CVE-2026-23111 (#417) @majst01
• Remove trailing comma to make release happen (#416) @majst01
• Update README (#405) @simcod
• Update CI part 2 (#414) @majst01
• Update docs and github actions (#413) @majst01
• Debian 13 (#370) @majst01

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/13	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/13	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260529

General Changes

• update kernels (#410) @mwennrich

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260522

General Changes

• update ubuntu kernel to v6.12.89 (#409) @mwennrich
• Update debian kernel (#408) @majst01
• update kernels (dirtyfrag, CVE-2026-43284, CVE-2026-43500) (#407) @mwennrich
• fix: update kernel versions for debian and ubuntu targets (copyfail fix) (#406) @mwennrich

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260413

General Changes

• switch from proprietary NVIDIA driver to open kernel module (#401) @mwennrich
• update kernel to include latest apparmor fixes (#400) @mwennrich

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260313

General Changes

• Increase LimitNOFILE for container 2.1 to previous value from containerd 1.7 (#394) @mwennrich
• downgrade debian kernel to 6.1.0-42 (#393) @mwennrich
• update firewall-controller to v2.4.2 (#391) @mwennrich
• Upgrade to go-1.26, run go fix (#390) @majst01
• Fix log output formatting and download url links in release pipeline (#389) @mac641

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260210

General Changes

• Fix gcs authentication, gcs object paths and rework tests for release pipeline (#388) @mac641

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/stable/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/stable/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20260205

General Changes

• Implement gcp auth and remove unused actions in release pipeline (#387) @mac641
• docs: fix outdated links to metal-stack.io (#383) @vknabel
• fix typo in release pipeline (#386) @mac641
• fix container image retag in release pipeline (#385) @mac641
• fix typo in release pipeline (#384) @mac641
• Pin firewall to frr-10.4.1 (#382) @majst01
• add missing copy destination for gcs on master branch (#381) @mac641
• implement tagging release images and copying them to google bucket in go (#365) @mac641
• fix: pin containerd version to 2.1.5 to ensure compatibility with gardener-node-agent (#380) @mwennrich
• ci: fix issue where SEMVER_PATCH was assigned an empty string (#379) @mac641
• Merge pr.yaml and master.yaml into docker.yaml (#376) @mac641
• fix cloud-hypervisor download url (#378) @mac641

20251119

General Changes

• Downgrade debian 12 kernel because of eBPF bug preventing calico to work (#374) @majst01
• Update debian kernel to 6.1.0-41 (#373) @majst01
• use docker-bake tar exporter as default output (#358) @mac641
• Stay with frr-10.4.x for now (#372) @majst01
• Remove unused Dockerfile and docker-bake.hcl args (#357) @majst01
• Firewall: update node_exporter, tailscale and kernel (#369) @majst01
• fix capms-ubuntu release location (#368) @mac641

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/20251119/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251119/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251119/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251119/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251119/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251119/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt

20251028

General Changes

• publish capms images as part of release as well (#363) @mac641
• CAPMS images (#352) @mac641
• Update debian and ubuntu kernel (#362) @majst01
• generate unique files in /etc/nvme/ (#360) @mwennrich
• Remove periodic vulnerability scans, we have sboms now (#356) @majst01
• Switch from ignite to cloud-hypervisor (#348) @mwindower
• fix build pipeline by ensuring tarball output directory is created properly (#353) @mac641
• Migrate to docker bake and include sboms in generated images (#341) @mac641

Downloads

IMAGE	URL	CHECKSUM	PACKAGES
metal-os/20251028/almalinux/9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251028/capms-ubuntu/1.32.9	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251028/debian-nvidia/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251028/debian/12	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251028/firewall/3.0-ubuntu	img.tar.lz4	img.tar.lz4.md5	packages.txt
metal-os/20251028/ubuntu/24.04	img.tar.lz4	img.tar.lz4.md5	packages.txt