Elect new IC/GuestOS revision (commit a2a3e3d)

Release Notes for release-2026-08-27_05-01-all-in-one (a2a3e3dc570a82bf3d194a5ce896b4db2ec400cb) This release is based on changes since release-2026-08-27_05-01-base (e9fd136f3fed6cb44625379e056ad63789d52d2c).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

• 1e0153ec3 Core Protocol(orchestrator): harden the cloud engine config fetch and always launch ic-gateway
• 4aabdca4a Core Protocol(orchestrator): run ic-gateway with the config from the engine operator
• 50b433c34 Core Protocol(orchestrator): read the cloud engine ic-gateway config from its operator

Refactoring:

• a2a3e3dc5 Core Protocol(orchestrator): leave the ACME cache dir permissions to setup-permissions.sh

IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/a2a3e3dc570a82bf3d194a5ce896b4db2ec400cb/ci/scripts/repro-check | python3 - -c a2a3e3dc570a82bf3d194a5ce896b4db2ec400cb --guestos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing --hostos to the script above instead of --guestos, or the SetupOS by passing --setupos.