Update cflinuxfs from version 3 to version 4 with optional 5 (#1104)

## Proposed Changes

* Update code and documentation `cflinuxfs3` references to `cflinuxfs4`
and `cflinuxfs5`. KF now defaults to `cflinuxfs4` instead of
`cflinuxfs3`.

## Release Notes

```release-note
`Changed` default cflinuxfs version to 4
`Added` support of `cflinuxfs5`
```

## Before updating

The new stack is based on `Ubuntu 22.04` by default, or `Ubuntu 24.04`
if you opt into `cflinuxfs5`, which is significantly newer than the
current `Ubuntu 18.04`. Before updating, ensure your application does
not depend on utilities or libraries that behave differently in newer
Ubuntu versions. Newer stack means newer buildpacks platforms, kf now
uses `CNB_PLATFORM_API=0.15` for all builds (unless running on legacy
stack). You can override this behavior during push `kf push (...) -env
CNB_PLATFORM_API=0.15`. Furthermore, newer stacks contain fewer
pre-installed packages (for example, `python` is no longer included) and
fewer default buildpacks (for example, `cflinuxfs5` does not contain the
Go buildpack).

Legacy stacks are still available but must be manually specified (via
`kf push --stack cflinuxfs3 ...`); otherwise, `cflinuxfs4` is used by
default. We recommend manually specifying the legacy stack, updating to
the latest KF release, and testing the application build and runtime in
a separate space. Once verified, migrate away from the legacy stacks
entirely.

Author: jakweg

cmd/generate-release/scripts/kfsystems-cr.yaml

@@ -88,7 +88,7 @@ spec:
         # used for CF compatible builds. The value must be a valid JSON or YAML
         # string.
         #
-        # Each entry in the list must be an object with `name` and `url` propreties
+        # Each entry in the list must be an object with `name` and `url` properties
         # indicating the human readable name of the buildpack and the URL to
         # fetch it from at runtime. An additional `disabled` property can be used
         # to disable a single buildpack.
@@ -101,13 +101,13 @@ spec:
         # builds. The value must be a valid JSON or YAML string.
         #
         # Each entry in the list must be an object with `name` and `image`
-        # propreties indicating the human readable name of the stack and the docker
+        # properties indicating the human readable name of the stack and the docker
         # image that will be used by the apps/buildpacks that run on it.
         #
         # Use images tagged with SHAs to improve build caching.
         spaceStacksV2:
-          - name:  cflinuxfs3
-            image: cloudfoundry/cflinuxfs3
+          - name:  cflinuxfs5
+            image: cloudfoundry/cflinuxfs5
 
         # spaceStacksV3 contains list of default stacks to be used for cloud native
         # buildpack builds. The value must be a valid JSON or YAML string.

config/config-defaults.yaml

@@ -94,7 +94,7 @@ data:
     # used for CF compatible builds. The value must be a valid JSON or YAML
     # string.
     #
-    # Each entry in the list must be an object with `name` and `url` propreties
+    # Each entry in the list must be an object with `name` and `url` properties
     # indicating the human readable name of the buildpack and the URL to
     # fetch it from at runtime. An additional `disabled` property can be used
     # to disable a single buildpack.
@@ -107,13 +107,13 @@ data:
     # builds. The value must be a valid JSON or YAML string.
     #
     # Each entry in the list must be an object with `name` and `image`
-    # propreties indicating the human readable name of the stack and the docker
+    # properties indicating the human readable name of the stack and the docker
     # image that will be used by the apps/buildpacks that run on it.
     #
     # Use images tagged with SHAs to improve build caching.
     spaceStacksV2: |
-      - name:  cflinuxfs3
-        image: cloudfoundry/cflinuxfs3
+      - name:  cflinuxfs5
+        image: cloudfoundry/cflinuxfs5
 
     # spaceStacksV3 contains list of default stacks to be used for cloud native
     # buildpack builds. The value must be a valid JSON or YAML string.
@@ -225,8 +225,12 @@ data:
     - name: nginx_buildpack
       url: https://github.com/cloudfoundry/nginx-buildpack
   spaceStacksV2: |
-    - name: cflinuxfs3
-      image: cloudfoundry/cflinuxfs3@sha256:5219e9e30000e43e5da17906581127b38fa6417f297f522e332a801e737928f5
+    - name: cflinuxfs4
+      image: cloudfoundry/cflinuxfs4
+    - name: cflinuxfs5
+      image: cloudfoundry/cflinuxfs5
+    - name:  cflinuxfs3
+      image: cloudfoundry/cflinuxfs3
   spaceStacksV3: |
     - name: kf-v2-to-v3-shim
       description: A V3 stack that wraps the V2 buildpacks.
@@ -236,8 +240,16 @@ data:
       description: Google buildpacks (https://github.com/GoogleCloudPlatform/buildpacks)
       buildImage: gcr.io/buildpacks/builder:v1
       runImage: gcr.io/buildpacks/gcp/run:v1
+    - name: org.cloudfoundry.stacks.cflinuxfs4
+      description: A large Cloud Foundry stack based on Ubuntu 22.04 (Jammy Jellyfish)
+      buildImage: paketobuildpacks/builder-jammy-full@sha256:25efe93f3afa866e058f1bf6f72b5734dbd270a4b60e344a0df2d613bc19074c
+      runImage: paketobuildpacks/run-jammy-full@sha256:43f13c88b7ed100a34520e907fba396c2879605efd14012aa9a696caeff43f9d
+    - name: org.cloudfoundry.stacks.cflinuxfs5
+      description: A large Cloud Foundry stack based on Ubuntu 24.04 (Noble)
+      buildImage: paketobuildpacks/ubuntu-noble-builder@sha256:fc86fdc15593f47178073b682c75c4991f27b4a2a62d78417fdf505307bb92ae
+      runImage: paketobuildpacks/ubuntu-noble-run@sha256:013d949ebb61d4771a77f44511eb0de723d092ef4904a83ffa1fee0bdb703275
     - name: org.cloudfoundry.stacks.cflinuxfs3
-      description: A large Cloud Foundry stack based on Ubuntu 18.04
+      description: (Legacy) A large Cloud Foundry stack based on Ubuntu 18.04
       buildImage: cloudfoundry/cnb:cflinuxfs3@sha256:f96b6e3528185368dd6af1d9657527437cefdaa5fa135338462f68f9c9db3022
       runImage: cloudfoundry/run:full-cnb@sha256:dbe17be507b1cc6ffae1e9edf02806fe0e28ffbbb89a6c7ef41f37b69156c3c2
   spaceDefaultToV3Stack: "false"

docs/content/en/docs/v2.11/cli/generated/kf-push.md

@@ -17,7 +17,7 @@ description: "Create a new App or apply updates to an existing one."
 kf push myapp
 kf push myapp --buildpack my.special.buildpack # Discover via kf buildpacks
 kf push myapp --env FOO=bar --env BAZ=foo
-kf push myapp --stack cloudfoundry/cflinuxfs3 # Use a cflinuxfs3 runtime
+kf push myapp --stack cloudfoundry/cflinuxfs5 # Use a cflinuxfs5 runtime
 kf push myapp --health-check-http-endpoint /myhealthcheck # Specify a healthCheck for the app
 </pre>
 

docs/content/en/docs/v2.11/developer/build-and-deploy/buildpacks-getting-started.md

@@ -31,7 +31,7 @@ kf push java-v2 --path target/helloworld-0.0.1-SNAPSHOT.jar
 Use [spring initializr](https://start.spring.io/) to create a Java 8 maven project with a spring web dependency and JAR packaging. Download it, extract it, and once extracted, push to Kf with the cloud native buildpack.
 
 ```sh
-kf push java-v3 --stack org.cloudfoundry.stacks.cflinuxfs3
+kf push java-v3 --stack org.cloudfoundry.stacks.cflinuxfs5
 ```
 
 ## Python (v2) buildpack
@@ -85,7 +85,7 @@ kf push python --buildpack python\_buildpack
 Push the Python flask app using cloud native buildpacks.
 
 ```sh
-kf push pythonv3 --stack org.cloudfoundry.stacks.cflinuxfs3
+kf push pythonv3 --stack org.cloudfoundry.stacks.cflinuxfs5
 ```
 
 ## Staticfile (v2) buildpack

docs/content/en/docs/v2.11/developer/build-and-deploy/v2-vs-v3-buildpacks.md

@@ -80,10 +80,10 @@ The output shows both V2 and V3 Stacks:
 ```
 Getting stacks in Space: myspace
 Version  Name                                Build Image                                                                                          Run Image
-V2       cflinuxfs3                          cloudfoundry/cflinuxfs3@sha256:5219e9e30000e43e5da17906581127b38fa6417f297f522e332a801e737928f5      cloudfoundry/cflinuxfs3@sha256:5219e9e30000e43e5da17906581127b38fa6417f297f522e332a801e737928f5
+V2       cflinuxfs5                          cloudfoundry/cflinuxfs5      cloudfoundry/cflinuxfs5
 V3       kf-v2-to-v3-shim                    gcr.io/kf-releases/v2-to-v3:v2.7.0                                                                   gcr.io/buildpacks/gcp/run:v1                                                                       This is a stack added by the integration tests to assert that v2->v3 shim works
 V3       google                              gcr.io/buildpacks/builder:v1                                                                         gcr.io/buildpacks/gcp/run:v1                                                                       Google buildpacks (https://github.com/GoogleCloudPlatform/buildpacks)
-V3       org.cloudfoundry.stacks.cflinuxfs3  cloudfoundry/cnb:cflinuxfs3@sha256:f96b6e3528185368dd6af1d9657527437cefdaa5fa135338462f68f9c9db3022  cloudfoundry/run:full-cnb@sha256:dbe17be507b1cc6ffae1e9edf02806fe0e28ffbbb89a6c7ef41f37b69156c3c2  A large Cloud Foundry stack based on Ubuntu 18.04
+V3       org.cloudfoundry.stacks.cflinuxfs5  cloudfoundry/cflinuxfs5  A large Cloud Foundry stack based on Ubuntu 24.04
 ```
 
 

docs/content/en/docs/v2.11/examples/spring-music/_index.md

@@ -34,7 +34,7 @@ Music](https://github.com/cloudfoundry-samples/spring-music) reference App using
     cd spring-music
     ```
 
-1. Edit `manifest.yml`, and replace `path: build/libs/spring-music-1.0.jar` with `stack: org.cloudfoundry.stacks.cflinuxfs3`. This instructs Kf to build from source using [cloud native buildpacks](https://cloud.google.com/blog/products/containers-kubernetes/google-cloud-now-supports-buildpacks) so you don't have to compile locally.
+1. Edit `manifest.yml`, and replace `path: build/libs/spring-music-1.0.jar` with `stack: org.cloudfoundry.stacks.cflinuxfs5`. This instructs Kf to build from source using [cloud native buildpacks](https://cloud.google.com/blog/products/containers-kubernetes/google-cloud-now-supports-buildpacks) so you don't have to compile locally.
 
     ```sh
     ---

docs/content/en/docs/v2.11/migrating/builds.md

@@ -23,13 +23,13 @@ Best practices for container runtimes differ from Cloud Foundry's application be
 
 In Cloud Foundry and Kf it's common to `push` in every environment which produces a separate build and image. This is a common source of errors if an application development team hasn't pinned the dependencies for their application correctly.
 
-In Cloud Foundry and Kf this pushing provides an additional purpose, a platform operations team can change buildpacks or base images in an environment to patch applications on the fly. This has always been risky, but large base images like `cflinuxfs3`, come with many security vulnerabilities.
+In Cloud Foundry and Kf this pushing provides an additional purpose, a platform operations team can change buildpacks or base images in an environment to patch applications on the fly. This has always been risky, but large base images like `cflinuxfs*`, come with many security vulnerabilities.
 
 **Things to consider:**
 
 *   Applications should be built with the dependencies they need for all environments. They shouldn't depend on the environment like the [Spring Autoreconfiguration buildpack](https://github.com/cloudfoundry/java-buildpack-auto-reconfiguration).
 *   Teams should be able to patch and promote an image quickly up through environments as the preferred method of patching.
-*   Building on smaller base images than `cflinuxfs3` may leave teams without tools they expect to use when using `ssh` to debug containers or may expose hidden dependencies.
+*   Building on smaller base images than `cflinuxfs*` may leave teams without tools they expect to use when using `ssh` to debug containers or may expose hidden dependencies.
 *   Cloud Foundry and Kf add a [launcher process](https://github.com/cloudfoundry/buildpackapplifecycle/tree/main/launcher) responsible for reading Procfiles and certain environment variables. Applications will need to stop using these, or you should create a drop-in replacement launcher.
 *   Operations teams should monitor deployed images for vulnerabilities.
 

docs/content/en/docs/v2.11/operator/buildpacks/configure-stacks.md

@@ -38,7 +38,7 @@ spec:
       - name: ruby_buildpack
         url: https://github.com/cloudfoundry/ruby-buildpack
       spaceStacksV2:
-      - name: cflinuxfs3
-        image: cloudfoundry/cflinuxfs3@sha256:5219e9e30000e43e5da17906581127b38fa6417f297f522e332a801e737928f5
+      - name: cflinuxfs5
+        image: cloudfoundry/cflinuxfs5
 
 ```

docs/content/en/docs/v2.11/operator/security/compute-isolation.md

@@ -75,10 +75,10 @@ To configure the `nodeSelector` on a stack:
    .....
    .....
    spaceStacksV2: |
-   - name:  cflinuxfs3
-           image: cloudfoundry/cflinuxfs3
+   - name:  cflinuxfs5
+           image: cloudfoundry/cflinuxfs5
            nodeSelector:
-                 OS_KERNEL: LINUX_4.4.1 
+                 OS_KERNEL: LINUX_6.12.68
    .....
    .....
    ```

operator/cmd/manager/kodata/kf/2.11/v2.11.5_kf.yaml

@@ -7750,7 +7750,7 @@ data:
     # used for CF compatible builds. The value must be a valid JSON or YAML
     # string.
     #
-    # Each entry in the list must be an object with `name` and `url` propreties
+    # Each entry in the list must be an object with `name` and `url` properties
     # indicating the human readable name of the buildpack and the URL to
     # fetch it from at runtime. An additional `disabled` property can be used
     # to disable a single buildpack.
@@ -7763,13 +7763,13 @@ data:
     # builds. The value must be a valid JSON or YAML string.
     #
     # Each entry in the list must be an object with `name` and `image`
-    # propreties indicating the human readable name of the stack and the docker
+    # properties indicating the human readable name of the stack and the docker
     # image that will be used by the apps/buildpacks that run on it.
     #
     # Use images tagged with SHAs to improve build caching.
     spaceStacksV2: |
-      - name:  cflinuxfs3
-        image: cloudfoundry/cflinuxfs3
+      - name:  cflinuxfs5
+        image: cloudfoundry/cflinuxfs5
 
     # spaceStacksV3 contains list of default stacks to be used for cloud native
     # buildpack builds. The value must be a valid JSON or YAML string.
@@ -7849,8 +7849,12 @@ data:
     - name: nginx_buildpack
       url: https://github.com/cloudfoundry/nginx-buildpack
   spaceStacksV2: |
-    - name: cflinuxfs3
-      image: cloudfoundry/cflinuxfs3@sha256:5219e9e30000e43e5da17906581127b38fa6417f297f522e332a801e737928f5
+    - name: cflinuxfs4
+      image: cloudfoundry/cflinuxfs4
+    - name: cflinuxfs5
+      image: cloudfoundry/cflinuxfs5
+    - name:  cflinuxfs3
+      image: cloudfoundry/cflinuxfs3
   spaceStacksV3: |
     - name: kf-v2-to-v3-shim
       description: A V3 stack that wraps the V2 buildpacks.
@@ -7860,8 +7864,16 @@ data:
       description: Google buildpacks (https://github.com/GoogleCloudPlatform/buildpacks)
       buildImage: gcr.io/buildpacks/builder:v1
       runImage: gcr.io/buildpacks/gcp/run:v1
+    - name: org.cloudfoundry.stacks.cflinuxfs4
+      description: A large Cloud Foundry stack based on Ubuntu 22.04 (Jammy Jellyfish)
+      buildImage: paketobuildpacks/builder-jammy-full@sha256:25efe93f3afa866e058f1bf6f72b5734dbd270a4b60e344a0df2d613bc19074c
+      runImage: paketobuildpacks/run-jammy-full@sha256:43f13c88b7ed100a34520e907fba396c2879605efd14012aa9a696caeff43f9d
+    - name: org.cloudfoundry.stacks.cflinuxfs5
+      description: A large Cloud Foundry stack based on Ubuntu 24.04 (Noble)
+      buildImage: paketobuildpacks/ubuntu-noble-builder@sha256:fc86fdc15593f47178073b682c75c4991f27b4a2a62d78417fdf505307bb92ae
+      runImage: paketobuildpacks/ubuntu-noble-run@sha256:013d949ebb61d4771a77f44511eb0de723d092ef4904a83ffa1fee0bdb703275
     - name: org.cloudfoundry.stacks.cflinuxfs3
-      description: A large Cloud Foundry stack based on Ubuntu 18.04
+      description: (Legacy) A large Cloud Foundry stack based on Ubuntu 18.04
       buildImage: cloudfoundry/cnb:cflinuxfs3@sha256:f96b6e3528185368dd6af1d9657527437cefdaa5fa135338462f68f9c9db3022
       runImage: cloudfoundry/run:full-cnb@sha256:dbe17be507b1cc6ffae1e9edf02806fe0e28ffbbb89a6c7ef41f37b69156c3c2
   spaceDefaultToV3Stack: "false"