Skip to content

add Ubuntu Resolute Raccoon RFC#1498

Open
mkocher wants to merge 1 commit into
cloudfoundry:mainfrom
mkocher:resolute-rfc
Open

add Ubuntu Resolute Raccoon RFC#1498
mkocher wants to merge 1 commit into
cloudfoundry:mainfrom
mkocher:resolute-rfc

Conversation

@mkocher
Copy link
Copy Markdown
Member

@mkocher mkocher commented May 11, 2026

See this RFC in Rendered Markdown

Summary

The CF community should add support for Ubuntu Resolute Raccoon (26.04 LTS) as the next CF Linux operating system. This RFC proposes producing a Resolute-based BOSH stemcell, validating it across the CF component ecosystem, and providing a clear migration path for release authors and operators—particularly for the removal of the runit package, which is likely the most impactful change the stemcell itself introduces.

@beyhan beyhan requested review from a team, Gerg, beyhan, cweibel, rkoster and stephanme and removed request for a team May 12, 2026 06:29
@beyhan beyhan added toc rfc CFF community RFC labels May 12, 2026

## Summary

The CF community should add support for Ubuntu Resolute Raccoon (26.04 LTS) as the next CF Linux operating system. This RFC proposes producing a Resolute-based BOSH stemcell, validating it across the CF component ecosystem, and providing a clear migration path for release authors and operators—particularly for the removal of the `runit` package, which is likely the most impactful change the stemcell itself introduces.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I though runit was already removed in noble: cloudfoundry/bosh-linux-stemcell-builder#397

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We stopped using it, but the package is still there and releases depend on it.

- Deliver post-quantum cryptography capabilities (ML-KEM, ML-DSA, SLH-DSA via OpenSSL and OpenSSH) that are available in Resolute but not in Noble.
- Allow release authors to address breaking changes in an orderly fashion.

The CF community skipped Ubuntu Focal in favour of Jammy ([rfc-0001](rfc-0001-jammy-os.md)), which created significant time pressure and made it nearly impossible to introduce backward-incompatible cleanups. While Noble Numbat (24.04) stemcells exist ([rfc-0026](rfc-0026-noble-os.md)), adoption across the CF ecosystem has been slow, just recently becoming the default in cf-deployment. Adopting a Resolute stemcell now will allow platform engineers to migrate directly from Jammy to Resolute while staying under support.
Copy link
Copy Markdown
Contributor

@rkoster rkoster May 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Slow adoption was because of blockers on the garden and bosh side, not because a lack of interest in the community. How will Resolute be available quicker?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're getting strong signals that the post quantum cryptograph is going to drive demand. We also expect the desire to jump upgrade from Jammy to Resolute to drive demand as well.

On the supply side we won't have anything nearly as disruptive as the cgroupsv2 changes in Noble. I've compiled and deployed cf-release with my PoC and only a few releases needed minor changes.

@beyhan beyhan moved this from Inbox to In Progress in CF Community May 12, 2026

### What the Resolute Stemcell Is NOT Changing

- **`monit` remains supported**: All BOSH jobs currently managed by monit will continue to work on the Resolute stemcell. Introducing a `monit` alternative is a worthy goal and something the RFC author plans to write an RFC for. However it does not need to be coupled with the release of the Resolute stemcell as it will be an additive change. At that point `monit` deprecation should be announced and it should be removed in the next stemcell line.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was announced as an intention for noble, so by this logic it should be removed in Resolute.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Somebody's got to do the work to ship a replacement, then there then needs to be a transition period for releases, and then we can remove monit.

I've started exploring this with a PoC and am working on an RFC for it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

rfc CFF community RFC toc

Projects

Status: In Progress

Development

Successfully merging this pull request may close these issues.

3 participants