Image support matrix
Kairos offers several pre-built images for user convenience based on popular Linux distributions such as openSUSE, Alpine Linux, and Ubuntu. The Kairos core team does its best to test these images, but those that are based on systemd (e.g. openSUSE, Ubuntu) are more thoroughly tested due to their homogenous settings. Support for other non-systemd based flavors (e.g. Alpine) may be limited due to team bandwidth. However, as Kairos is an open source community-driven project, we welcome any contributions, bug reports, and bug fixes. Check out our Contribution guidelines for more information.
In addition, tighter integration with systemd allows for several features that are only available with it, such as live layering.
These images are pushed to quay.io and are available for installation and upgrading. The installable mediums included in the releases are generated using the methods described in the automated installation reference, and the images can be used for upgrades as well.
Kairos release processes generates images based on official container images from popular Linux distributions. If you don’t see your preferred distribution, check if we are already planning support for it or create a new issue.
NoteYou can also download ISOs and other artifacts from the releases page.
Below is a list of the container repositories for each flavor:
The various images are available with different tags in the form of:
Use the search feature to find the images you are looking for. Here is one example:
More about Kairos naming conventions here.
- The Core images do not include any Kubernetes engine and can be used as a base for customizations.
- The Standard images include
k3sand the kairos provider, which enables Kubernetes deployments and optionally enables p2p.
- The -img repositories contain an img file which can be directly written to an SD card or USB drive for use with ARM devices.
The pipelines do not publish
img artifacts for the arm architecture because the files are too large for GitHub Actions (they exceed the artifact size limit). These artifacts can be extracted from the published docker images using the following command:
export IMAGE=quay.io/kairos/core-alpine -arm-rpi-img:v2.4.3 docker run -ti --rm -v $PWD:/image quay.io/luet/base util unpack "$IMAGE" /image
$IMAGE with the proper image)
The artifacts can be found in the
Kairos releases contains also the framework assets that can be used to build Kairos images from Scratch.
Framework images can be found in quay at: https://quay.io/repository/kairos/framework.
Each tag follow the convention:
Kairos follows Semantic Versioning and our releases signal changes to Kairos components, rather than changes to the underlying OS and package versions. Flavors are pinned to specific upstream OS branches (e.g.
leap 15.4) and major version bumps will be reflected through new flavors in our build matrix or through specific releases to follow upstream with regard to minor version bumps (e.g.
leap 15.3 and
Here are some key points to note:
- We only support the latest release branch with patch releases.
- Patch releases (e.g. 1.1.x) follow a weekly release cadence, unless there are exceptions for highly impactful bugs in Kairos itself or at the OS layer (e.g. high-severity CVEs).
- Minor releases follow a monthly cadence and are expected to bring enhancements through planned releases.
- Major releases signal new advanced features or significant changes to the codebase. In-place upgrades from old to new major release branches are not always guaranteed, but we strive for compatibility across versions.
In order to give users more control over the chosen base image (e.g.
Ubuntu, etc.) and reduce reliance on our CI infrastructure, we are actively working on streamlining the creation of Kairos-based distributions directly from upstream base images. You can track the development progress here.
If you need to further customize images, including changes to the base image, package updates, and CVE hotfixes, check out the customization docs.
Our changelog is published as part of the release process and contains all the changes, highlights, and release notes that are relevant to the release. We strongly recommend checking the changelog for each release before upgrading or building a customized version of Kairos.
Release changelogs are available for Kairos core and for each component. Below is a list of the components that are part of a Kairos release and their respective release pages with changelogs.
|Kairos core and standard (k3s support)||https://github.com/kairos-io/kairos/releases|
Service Billing Of Materials (SBOM)
SBOM lists are regularly pushed via the CI as part of the Github releases assets. For instance,
https://github.com/kairos-io/kairos/releases/download/v2.4.3/core-rockylinux-v2.4.3-sbom.spdx.json is the SBOM for the
Images signatures are pushed regularly for tagged releases. To verify images with
cosign (install guide) for example, you can use the following command:
cosign verify-attestation \ --type spdx quay.io/kairos/opensuse:leap-15.5-core-amd64-generic-v2.4.3 \ --certificate-identity "https://github.com/kairos-io/kairos/.github/workflows/release.yaml@refs/tags/v2.4.3" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
To see how to verify image attestation during upgrades with
kyverno, see the documentation page.
Was this page helpful?
Awesome! Glad to hear it! Please tell us how we can improve.
Oh snap! Sorry to hear that. Please tell us how we can improve.