so root is locked and the update seems to uninstall container-selinux and consecutively rke2-selinux. I added both manually into my toolchain and now im up and running again. So to sum up the workaround is: - deploy deploy user with cloud-init - install selinux packages separatetly I guess pulling container selinux is fair when using the "Base System" image. Also i have seen that there has been a new iso provided on the 4th so i will check that now too. If anything this shows that we need a dedicated changelog for MicroOS and need to stop treating it as a component of tumbleweed.