Breaking Changes

2026-08-30: we have rotated our keys

Current and future Secureboot users must follow our key-rotation guide. Everyone else only needs to re-enroll the TPM.

2026-08-26: the steam-gaming extension is now simply called gaming

Your system will fail to update until you disable the Steam-Gaming extension. So, run updatectl disable --now steam-gaming && updatectl update, and then re-enable the gaming extension after rebooting into the newly installed version.

2026-07-21: switch from tmpfiles to confext for /etc

Action required before you reboot

Applies to every system updating from build 20260721000055 or earlier.

If you boot the new image without completing those steps, the new image will start without your user account and will re-run first-boot setup. Nothing is lost permanently as the account is still present after a rollback.

1. Persist /etc before updating

Copy the current /etc into the mutable extensions directory and drop the symlinks that point back into the factory tree:

sudo mkdir -p /var/lib/extensions.mutable
sudo cp --archive --no-target-directory /etc /var/lib/extensions.mutable/etc
sudo find /var/lib/extensions.mutable/etc -lname '*share/factory*' -delete

2. Update and reboot

updatectl update
sudo systemctl reboot

Log in to confirm your user account is intact before continuing.

3. Remove the stale /etc

The old /etc is still on disk and could cause problems in the future.

• Roll back to build 20260721000055 or earlier.
• Confirm which build you booted:

   cat /etc/os-release

Do not continue unless this reports 20260721000055 or older.

• Delete the stale configuration:

   sudo rm -rf /etc/*

• Reboot back into the new image.