A stemcell is a versioned Operating System image wrapped with IaaS specific packaging.

Typical stemcell contains bare minimum OS skeleton with few common utilities pre-installed, a BOSH Agent and few configuration files to make OS be securely configured by default.

Learn more about stemcells.

Ubuntu Lucid, CentOS 6.x, and Ruby agent based stemcells are deprecated.

Windows instance types will have additional costs associated with Microsoft licensing. Windows stemcell do not include actual Windows OS.

Upload latest version to your BOSH Director:

# Upload latest version, currently 3468.11
$ bosh upload-stemcell https://bosh.io/d/stemcells/bosh-openstack-kvm-centos-7-go_agent

# Upload specific version
$ bosh upload-stemcell https://bosh.io/d/stemcells/bosh-openstack-kvm-centos-7-go_agent?v=3468.11

Alternatively, download stemcell tarball locally:

# ...or download it directly using curl
$ curl -L -J -O https://bosh.io/d/stemcells/bosh-openstack-kvm-centos-7-go_agent?v=3468.11

# or with wget...
$ wget --content-disposition https://bosh.io/d/stemcells/bosh-openstack-kvm-centos-7-go_agent?v=3468.11
  • CentOS 7.x

    • OpenStack KVM 620 MB
      5d71329e010a502d4996641cbbf6a5df7b6a9356 [SHA1]
    • OpenStack KVM 619 MB
      a791f31d394511c394055570b90be78149b3c0c4 [SHA1]
    • OpenStack KVM 610 MB
      2c1fa654ab54ec7f4031a9e817da920f520013ae [SHA1]
    • OpenStack KVM 610 MB
      76501e0e5e06e08d9f2972a5e3ed4ed94b4d61b2 [SHA1]
    • OpenStack KVM 610 MB
      2017-09-19T21:52:10.000Z a3f46e4169ecbfed8ed5cf52a069663dc2b9c7d9 [SHA1]
    • OpenStack KVM 610 MB
      2017-08-31T22:44:12.000Z 90f19cca59d2fd90eac9c08f99d78b6ba57fb0aa [SHA1]
      • Logrotate /var/log/wtmp and utmp more aggressively
      • Updated BOSH agent to include aggressive 5 minute timeout on NATS connection failure
      • Set auditd rules to be mutable by default
        • Please use auditd job from os-conf-release to make rules immutable
    • OpenStack KVM 606 MB
      2017-08-04T21:28:35.000Z c612cf0d4f06d7e349899d4bb474d932c59a21de [SHA1]
      • Bump version (no change)
    • OpenStack KVM 606 MB
      2017-07-31T22:04:09.000Z fe7e7f6d4d327323a11f872a6673bd6ab8093729 [SHA1]
      • Periodic Ubuntu stemcells update
    • OpenStack KVM 606 MB
      2017-09-19T21:52:10.000Z 2f3cf19d5631a9af565f47baa0f005d52885d652 [SHA1]
    • OpenStack KVM 606 MB
      2017-09-07T23:23:54.000Z 419db602b00d41ed82e44a65b2a95a48324b2d69 [SHA1]
    • OpenStack KVM 606 MB
      2017-08-01T21:04:13.000Z 14144fe005d32a0de862c1336b838ff42d6f9eba [SHA1]
    • OpenStack KVM 603 MB
      2017-06-30T00:28:32.000Z 723603e36b39e297cd3cca2598808d15abd14063 [SHA1]
      • Bump Ubuntu stemcells for USN-3344-2: Linux kernel (Xenial HWE) vulnerabilities
    • OpenStack KVM 603 MB
      2017-06-21T03:32:11.000Z 41cccf7c1228c0eddc368a88d3c904a7d2b07c7a [SHA1]
      • Bump Ubuntu stemcells for USN-3334-1: Linux kernel (Xenial HWE) vulnerabilities
    • OpenStack KVM 602 MB
      2017-06-12T16:51:24.000Z 3839595294d70d1b9ffd072540d52d8f65132816 [SHA1]
      • Bump Ubuntu stemcells for USN-3312-2 - Linux kernel vulnerabilities
    • OpenStack KVM 602 MB
      2017-06-05T17:36:27.000Z 757899c5223d1e6c749abe76368c36c129750e65 [SHA1]
      • Bump CentOS stemcells for CESA-2017:1382 - sudo vulnerability
    • OpenStack KVM 601 MB
      2017-05-23T00:35:45.000Z 2701eb6fb97314d1f993a1ee1be32c2114234500 [SHA1]


      • Added env.bosh.remove_static_libraries (bool) to remove static libraries
        • Useful to enable this option when exporting compiled releases
      • Added env.bosh.ipv6.enable (bool) to remove ipv6.disable kernel functionality at bootup time


      • Fixed sysstat logging
      • Fixed anacron’s RANDOM_DELAY configuration


      • Bumped s3cli v0.0.60
        • Updated aws-sdk-go to solve network timeout edge case
      • Bumped davcli v0.0.19
        • Use TCP keep alive to solve network timeout edge case
      • Bumped bosh-agent v0.0.35
        • Add -v to the Agent binary
        • Prepared sync_dns action to work with future Director’s DNS integration
    • OpenStack KVM 602 MB
      2017-05-30T23:01:47.000Z 0159b921ad83a919ddb1c04b83ba1036a404d201 [SHA1]
    • OpenStack KVM 602 MB
      2017-05-19T23:41:36.000Z c41180fabae611dd9349d07a6be990025a552878 [SHA1]
      • Periodic Ubuntu stemcells update
    • OpenStack KVM 602 MB
      2017-05-12T19:27:50.000Z 60c1677833e0179a9d6739c1fc10abb9e2e54bb5 [SHA1]
      • Periodic Ubuntu stemcells update
      • Run cron in BOSH Lite stemcells so that logrotation is performed
    • OpenStack KVM 602 MB
      2017-04-25T23:13:57.000Z 58be290cf8dbc87207ec494ffd03f9e65e2d3913 [SHA1]
      • Bump Ubuntu stemcells for USN-3265-2: Linux kernel (Xenial HWE) vulnerabilities
    • OpenStack KVM 602 MB
      2017-04-17T22:48:40.000Z 6c11de286f8bc47c5711be05f6ade390c98301a2 [SHA1]
      • Periodic bump for CentOS stemcells to include CESA-2017:0933
      • Disable IPv6 through /proc/cmdline to eliminate possibilty of listening on tcp6/udp6
    • OpenStack KVM 581 MB
      2017-04-05T21:54:59.000Z 54a7c1ed35339a8c3a33c7caf80607f584f19d27 [SHA1]
      • Bump Ubuntu stemcells for USN-3256-2: Linux kernel (HWE) vulnerability


      • Made AWS AMI backing snapshot public to support encryption of boot disks
    • OpenStack KVM 581 MB
      2017-03-30T21:27:56.000Z 71bfbff29f17778ef138f11547c1e901c1685df8 [SHA1]
      • Bump Ubuntu stemcells for USN-3249-2: Linux kernel (Xenial HWE) vulnerability
    • OpenStack KVM 580 MB
      2017-03-10T00:56:10.000Z c8a80c335563a29b07de13d84fe3f950330e4987 [SHA1]
    • OpenStack KVM 578 MB
      2017-03-08T23:49:19.000Z fbba7459f5e543c81467b410df4391e50f97dfe1 [SHA1]
      • Bumps Ubuntu stemcells for USN-3220-2: Linux kernel (Xenial HWE) vulnerability
    • OpenStack KVM 578 MB
      2017-02-23T02:26:37.000Z cd612b16e11361ad42135e650c8c7f7a3ba76a1a [SHA1]

      Changes: - Bumps Ubuntu stemcells for USN-3208-2: Linux kernel (Xenial HWE) vulnerabilities - Fixes excessive “out of memory” errors in kernel - https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1655842 - Fixes regression to rsyslog by locking it down again to rsyslog 8.22.0

      Agent: - Fixes Azure stemcell persistent disk formatting - Fixes Warden stemcells SSH access

    • OpenStack KVM 578 MB
      2017-02-17T21:15:41.000Z 7580ab411fa6211dec7b6e98c4be05f7f62ad2b8 [SHA1]

      Reported Problems: - DO NOT USE azure stemcell as it may cause data loss. - rsyslog version updated to 8.24.0, regressing on issue #1537 - Out of memory errors still exists in Kernel - will be fixed around Feb 20.

      Changes: - Fixes double -hvm- suffix problem for AWS Light stemcells

    • OpenStack KVM 578 MB
      2017-02-16T02:17:21.000Z c7130811964b8a8f87cb08df6dcae12118585236 [SHA1]

      Reported Problems: - DO NOT USE azure stemcell as it may cause data loss. - Out of memory errors still exists in Kernel - will be fixed around Feb 20. - rsyslog version updated to 8.24.0, regressing on issue #1537 - AWS Light stemcell has incorrect name once imported - BOSH SSH does not work on BOSH Lite

      Changes: - Add more auditd rules - Fix CentOS initramfs to load necessary kernel modules - Disable boot loader login - Increasing tcp_max_sync_backlog - Disabling any DSA host keys - Add bosh_sshers group and assign it to vcap user - Only allow users in bosh_sshers group to SSH

      Agent: - Log Agent API access events in CEF format to syslog (vcap.agent topic) - Allow configuring swap size through env.bosh.swap_size (example: env.bosh.swap_size: 0) - Prepare for SHA2 releases - Allow setting fetching to work with base64 encoded user data - Do not delaycompress in logrotate

    • OpenStack KVM 578 MB
      2016-12-05T17:31:13.000Z 8c6cef55a11a0deae8db05cfba57da71a8df41fa [SHA1]
      • Periodic stemcell update
    • OpenStack KVM 578 MB
      2016-12-02T16:31:19.000Z a741f21784d18226c4fb54986b96fab2431215d8 [SHA1]
    • OpenStack KVM 578 MB
      2016-11-30T04:51:12.000Z bc26593e8f80f747d26b95ca6d089df8efdd84d0 [SHA1]
      • Periodic stemcell update
        • Includes USN-3134-1 as requested by a community member
    • OpenStack KVM 578 MB
      2016-11-16T22:13:25.000Z c668ff3c0c5e73028e10e96616aa6b1e3c062de2 [SHA1]
      • Properly includes libpam_cracklib.so to avoid errors in /var/log/auth.log
    • OpenStack KVM 578 MB
      2016-11-10T23:55:16.000Z d701c5f9b92779be4e1e4411184ee4880eb97bc7 [SHA1]
      • Fixes persistent disk mounting on OpenStack described in Stemcell 3308