Container-Optimized OS Release Notes

The following table provides a summary of Container-Optimized OS releases available on Compute Engine:

Active Milestones

OS version Image project x86 image family Arm image family Built by End of support Release notes
COS 138 DEV cos-cloud cos-dev cos-arm64-dev Google To Be Defined dev
COS 133 BETA cos-cloud cos-beta cos-arm64-beta Google To Be Defined milestone 133
COS 129 LTS cos-cloud cos-129-lts cos-arm64-129-lts Google July 2028 milestone 129
COS 125 LTS cos-cloud cos-125-lts cos-arm64-125-lts Google Feb 2028 milestone 125
COS 121 LTS cos-cloud cos-121-lts cos-arm64-121-lts Google March 2027 milestone 121
COS 117 LTS cos-cloud cos-117-lts cos-arm64-117-lts Google Sept 2026 milestone 117

Deprecated Milestones

OS version Image project x86 image family Arm image family Built by Deprecation date Release notes
COS 113 LTS cos-cloud cos-113-lts cos-arm64-113-lts Google March 2026 milestone 113
COS 109 LTS cos-cloud cos-109-lts cos-arm64-109-lts Google Sept 2025 milestone 109
COS 105 LTS cos-cloud cos-105-lts cos-arm64-105-lts Google March 2025 milestone 105
COS 101 LTS cos-cloud cos-101-lts N/A Google Oct 2024 milestone 101
COS 97 LTS cos-cloud cos-97-lts N/A Google April 2024 milestone 97
COS 93 LTS cos-cloud cos-93-lts N/A Google October 2023 milestone 93
COS 89 LTS cos-cloud cos-89-lts N/A Google March 2023 milestone 89
COS 85 LTS cos-cloud cos-85-lts N/A Google September 2022 milestone 85
COS 81 LTS cos-cloud cos-81-lts N/A Google September 20211 milestone 81
COS 77 LTS cos-cloud cos-77-lts N/A Google April 20211 milestone 77
COS 73 LTS cos-cloud cos-73-lts N/A Google June 2020 milestone 73
COS 69 LTS cos-cloud cos-69-lts N/A Google December 2019 milestone 69

Development Release Notes

For release notes related to the milestone under development, see the Development Release Notes page.
For release notes related to cos-dev before M93, see the Legacy Release Notes page.

Changelog

cos-89-16108-470-1

Date:               Jun 24, 2021
Kernel:             COS-5.4.120
Kubernetes:         v1.20.5
Docker:             v20.10.3
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-51):
    * LTS Refresh Release.
    * Upgraded dev-db/sqlite to v3.34.1. This resolves CVE-2021-20227.
    * Upgraded app-arch/tar to v1.34. This resolves CVE-2021-20193.
    * Upgraded dev-vcs/git to v2.29.3. This resolves CVE-2021-21300.
    * Updated the Linux kernel to v5.4.120. This resolves CVE-2021-31916 and
      CVE-2021-31829.
    * Updated kubernetes to v1.20.5.
    * Updated containerd to v1.4.4. This resolves CVE-2021-21334.
    * Upgraded Google OS Config Agent(aka VMManager) to version 20210607.00.
    * Fixed CVE-2021-3537 and CVE-2020-24977 in dev-libs/libxml2.
    * Automatically mount OEM partition if it is sealed.

cos-dev-93-16509-0-0

Date:               Jun 21, 2021
Kernel:             COS-5.10.44
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16482-0-0):
    * Updated the Linux kernel to v5.10.44.
    * Set kernel config flag to enable dump capture kernel for ARM64.
    * Runtime sysctl:
    *   Changed: fs.epoll.max_user_watches: 1668321 -> 1668341
    *   Changed: fs.file-max: 814309 -> 814308

cos-89-16108-403-51

Date:               Jun 21, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-47):
    * Fixed a memory leak in the GVE kernel driver.

cos-85-13310-1260-26

Date:               Jun 21, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-23):
    * Fixed a memory leak in the GVE kernel driver.
    * Fixed a low network bandwidth issue in the Linux kernel.

cos-89-16108-403-47

Date:               Jun 14, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-46):
    * Fixed a network regression on single-core systems when using the
      GVE network interface.

cos-85-13310-1260-23

Date:               Jun 14, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-22):
    * Fixed a network regression on single-core systems when using the
      GVE network interface.

cos-dev-93-16482-0-0

Date:               Jun 09, 2021
Kernel:             COS-5.10.42
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16442-0-0):
    * Upgraded Google OS Config Agent (VMManager) to version 20210607.00.
    * Upgraded cloud-init to v21.2.
    * Upgraded the Linux kernel to v5.10.42.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.
    * Stackdriver logs now record Docker container names by default.
    * As a result of the kernel upgrade, the following sysctl changes occurred:
    *   Added:   kernel.hung_task_all_cpu_backtrace: 0
    *   Added:   kernel.oops_all_cpu_backtrace: 0
    *   Added:   kernel.sched_deadline_period_max_us: 4194304
    *   Added:   kernel.sched_deadline_period_min_us: 100
    *   Added:   net.ipv4.ip_autobind_reuse: 0
    *   Added:   net.ipv4.nexthop_compat_mode: 1
    *   Added:   net.ipv4.tcp_comp_sack_slack_ns: 100000
    *   Added:   net.ipv4.tcp_no_ssthresh_metrics_save: 1
    *   Added:   net.ipv4.tcp_reflect_tos: 0
    *   Added:   net.ipv6.conf.all.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.default.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.docker0.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.eth0.rpl_seg_enabled: 0
    *   Added:   net.ipv6.conf.lo.rpl_seg_enabled: 0
    *   Added:   user.max_time_namespaces: 31820
    *   Added:   vm.compaction_proactiveness: 20
    *   Added:   vm.page_lock_unfairness: 5
    *   Changed: fs.epoll.max_user_watches: 1668751 -> 1668321
    *   Changed: fs.file-max: 814576 -> 814309
    *   Changed: kernel.cap_last_cap: 37 -> 40
    *   Changed: kernel.threads-max: 63658 -> 63641
    *   Changed: kernel.usermodehelper.bset: 4294967295 63 -> 4294967295    511
    *   Changed: kernel.usermodehelper.inheritable: 4294967295  63 -> 4294967295    511
    *   Changed: net.core.bpf_jit_kallsyms: 0 -> 1
    *   Changed: net.ipv4.tcp_mem: 94299    125733  188598 -> 94275 125700  188550
    *   Changed: net.ipv4.udp_mem: 188598   251466  377196 -> 188550    251401  377100
    *   Changed: user.max_cgroup_namespaces: 31829 -> 31820
    *   Changed: user.max_ipc_namespaces: 31829 -> 31820
    *   Changed: user.max_mnt_namespaces: 31829 -> 31820
    *   Changed: user.max_net_namespaces: 31829 -> 31820
    *   Changed: user.max_pid_namespaces: 31829 -> 31820
    *   Changed: user.max_user_namespaces: 31829 -> 31820
    *   Changed: user.max_uts_namespaces: 31829 -> 31820
    *   Deleted: kernel.random.read_wakeup_threshold: 64

cos-85-13310-1260-22

Date:               Jun 09, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-17):
    * Fixed a network regression on multi-core systems when using the
      GVE network interface.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-89-16108-403-46

Date:               Jun 08, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-42):
    * Fixed a low network bandwidth issue in the Linux kernel.
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-81-12871-1290-12

Date:               Jun 08, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-11):
    * Updated runc to v1.0.0_rc95. This resolves CVE-2021-30465.

cos-89-16108-403-42

Date:               Jun 07, 2021
Kernel:             COS-5.4.104
Kubernetes:         v1.20.2
Docker:             v20.10.3
Containerd:         v1.4.3
Default GPU Driver: v450.119.04
Changelog (vs 89-16108-403-26):
    * Upgraded the default GPU drver version to 450.119.04.
    * Fixed a network regression on multi-core systems when using the
      GVE network interface.
    * Fixed CPU usage for workloads with heavy page cache usage.

cos-85-13310-1260-17

Date:               Jun 07, 2021
Kernel:             COS-5.4.109
Kubernetes:         v1.18.15
Docker:             v19.03.15
Containerd:         v1.4.3
Default GPU Driver: v450.51.06
Changelog (vs 85-13310-1260-8):
    * Fixed CPU usage for workloads with heavy page cache usage.

cos-81-12871-1290-11

Date:               Jun 07, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-8):
    * Fixed CVE-2019-25044 in the Linux kernel.

cos-dev-93-16442-0-0

Date:               Jun 01, 2021
Kernel:             COS-5.4.120
Kubernetes:         v1.20.5
Docker:             v20.10.6
Containerd:         v1.4.4
Default GPU Driver: v450.119.04
Changelog (vs 93-16379-0-0):
    * Fixed CPU usage for workloads with heavy page cache usage.
    * Fixed 32 x truesize under-estimation for tiny skbs in the Linux kernel.
    * Fixed CVE-2021-3537 in libxml2.
    * Automatically mount OEM partition if it is sealed.
    * Upgraded the default GPU drver version to 450.119.04.
    * Upgraded Google OS Config Agent to v20210506.00.
    * Updated docker to v20.10.6.
    * Updated the Linux kernel to v5.4.120.
    * Updated makedumpfile package to v1.6.9.

cos-81-12871-1290-8

Date:               Jun 01, 2021
Kernel:             COS-4.19.188
Kubernetes:         v1.17.17
Docker:             v19.03.15
Containerd:         v1.3.9
Changelog (vs 81-12871-1290-2):
    * Updated docker to v19.03.15. This fixed CVE-2021-21285.

cos-dev-93-16379-0-0

Date:           May 03, 2021
Kernel: