diff --git a/.gitignore b/.gitignore
index 402d704..8aecf5b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -64,3 +64,16 @@
 /ignition-2.16.2.tar.gz
 /ignition-2.17.0.tar.gz
 /ignition-2.18.0.tar.gz
+/ignition-2.19.0.tar.gz
+/ignition-2.20.0.tar.gz
+/ignition-edge-a258749.tar.gz
+/ignition-2.21.0.tar.gz
+/ignition-2.22.0.tar.gz
+/ignition-2.23.0.tar.gz
+/ignition-2.24.0.tar.gz
+/ignition-2.25.0.tar.gz
+/ignition-2.25.1.tar.gz
+/ignition-2.26.0.tar.gz
+/ignition-2.27.0.tar.gz
+/ignition-edge-6be7c94.tar.gz
+/ignition-edge-b6c8245.tar.gz
diff --git a/91-ignition-authorized-keys-file.conf b/91-ignition-authorized-keys-file.conf
new file mode 100644
index 0000000..e63b6aa
--- /dev/null
+++ b/91-ignition-authorized-keys-file.conf
@@ -0,0 +1 @@
+AuthorizedKeysFile=.ssh/authorized_keys .ssh/authorized_keys.d/*
diff --git a/ignition.rpmlintrc b/ignition.rpmlintrc
index 8dc3988..4db3dce 100644
--- a/ignition.rpmlintrc
+++ b/ignition.rpmlintrc
@@ -10,3 +10,11 @@ addFilter("ignition-validate-redistributable.noarch: W: no-documentation")
 # This is documented as optional
 # https://fedoraproject.org/wiki/Upgrade_paths_%E2%80%94_renaming_or_splitting_packages#Do_I_need_to_Provide_my_old_package_names.3F
 addFilter("ignition-validate-redistributable.noarch: W: obsolete-not-provided ignition-validate-nonlinux")
+
+# "transpiler" is the correct term for what butane does
+addFilter("butane.*: E: spelling-error.*transpiler")
+
+# -redistributable packages have binaries but are noarch by design,
+# and don't need docs since they aren't user-facing
+addFilter("butane-redistributable.noarch: E: arch-independent-package-contains-binary-or-object")
+addFilter("butane-redistributable.noarch: W: no-documentation")
diff --git a/ignition.spec b/ignition.spec
index d24888e..a7ef237 100644
--- a/ignition.spec
+++ b/ignition.spec
@@ -7,13 +7,13 @@
 %bcond_with check
 %endif
 
-%global ignedgecommit a3a8f0abb2a1c7fc1c9e5d0e7a3e8830b2e2d766
+%global ignedgecommit b6c8245e59b5b0cd6ead6448cd283a73d507fa63
 %global ignedgeshortcommit %(c=%{ignedgecommit}; echo ${c:0:7})
 
 # https://github.com/coreos/ignition
 %global goipath         github.com/coreos/ignition
 %global gomodulesmode   GO111MODULE=on
-Version:                2.18.0
+Version:                2.27.0
 
 %gometa
 
@@ -22,7 +22,7 @@ Version:                2.18.0
 %global dracutlibdir %{_prefix}/lib/dracut
 
 Name:           ignition
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        First boot installer and configuration tool
 
 # Upstream license specification: Apache-2.0
@@ -30,10 +30,12 @@ License:        Apache-2.0
 URL:            %{gourl}
 Source0:        %{gosource}
 Source1:        https://github.com/fedora-iot/ignition-edge/archive/%{ignedgecommit}/ignition-edge-%{ignedgeshortcommit}.tar.gz
+Source2:        91-ignition-authorized-keys-file.conf
 
 BuildRequires: libblkid-devel
 BuildRequires: systemd-rpm-macros
-ExcludeArch: %{ix86} 
+
+ExcludeArch: %{ix86}
 
 # Requires for 'disks' stage
 %if 0%{?fedora}
@@ -45,125 +47,117 @@ Requires: dracut
 Requires: dracut-network
 
 # Generated by `go-mods-to-bundled-provides.py | sort`
-Provides: bundled(golang(cloud.google.com/go/compute/metadata)) = 0.2.3
-Provides: bundled(golang(cloud.google.com/go/storage)) = 1.38.0
-Provides: bundled(golang(cloud.google.com/go/storage/internal)) = 1.38.0
-Provides: bundled(golang(cloud.google.com/go/storage/internal/apiv2)) = 1.38.0
-Provides: bundled(golang(cloud.google.com/go/storage/internal/apiv2/storagepb)) = 1.38.0
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/arn)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/auth/bearer)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/awserr)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/awsutil)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/client)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/client/metadata)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/corehandlers)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/endpointcreds)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/processcreds)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/ssocreds)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/credentials/stscreds)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/csm)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/defaults)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/ec2metadata)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/endpoints)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/request)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/session)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/aws/signer/v4)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/context)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/ini)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/s3shared)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/s3shared/arn)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/s3shared/s3err)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkio)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkmath)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkrand)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sdkuri)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/shareddefaults)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/strings)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/internal/sync/singleflight)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/checksum)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/eventstream)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/eventstream/eventstreamapi)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/json/jsonutil)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/jsonrpc)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/query)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/query/queryutil)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/rest)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/restjson)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/restxml)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3/s3iface)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/s3/s3manager)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sso)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/ssooidc)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sso/ssoiface)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sts)) = 1.50.25
-Provides: bundled(golang(github.com/aws/aws-sdk-go/service/sts/stsiface)) = 1.50.25
-Provides: bundled(golang(github.com/beevik/etree)) = 1.3.0
-Provides: bundled(golang(github.com/containers/libhvee/pkg/kvp)) = 0.6.0
+
+Provides: bundled(golang(cloud.google.com/go/compute/metadata)) = 0.9.0
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/arn)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/defaults)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/middleware)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream/eventstreamapi)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/protocol/xml)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/ratelimit)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/retry)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/signer/internal/v4)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/signer/v4)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/aws/transport/http)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/credentials/ec2rolecreds)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/feature/ec2/imds)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/feature/ec2/imds/internal/config)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/feature/s3/manager)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/auth)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/auth/smithy)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/awsutil)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/configsources)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/context)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/endpoints)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/endpoints/awsrulesfn)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/endpoints/v2)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/rand)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/sdk)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/sdkio)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/strings)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/sync/singleflight)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/timeconv)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/v4a)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/v4a/internal/crypto)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/internal/v4a/internal/v4)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/checksum)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/presigned-url)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/s3shared)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/s3shared/arn)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/internal/s3shared/config)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/s3)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/s3/internal/arn)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/s3/internal/customizations)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/s3/internal/endpoints)) = 1.43.4
+Provides: bundled(golang(github.com/aws/aws-sdk-go-v2/service/s3/types)) = 1.43.4
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/azidentity)) = 1.14.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal)) = 1.14.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/azidentity/internal/customtokenproxy)) = 1.14.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/appendblob)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blob)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/bloberror)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blockblob)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/container)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/base)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/exported)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/shared)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/pageblob)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/sas)) = 1.8.0
+Provides: bundled(golang(github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/service)) = 1.8.0
+Provides: bundled(golang(github.com/beevik/etree)) = 1.7.0
+Provides: bundled(golang(github.com/clarketm/json)) = 1.17.1
+Provides: bundled(golang(github.com/containers/libhvee/pkg/kvp)) = 0.11.0
 Provides: bundled(golang(github.com/coreos/go-semver/semver)) = 0.3.1
-Provides: bundled(golang(github.com/coreos/go-systemd/v22/dbus)) = 22.5.0
-Provides: bundled(golang(github.com/coreos/go-systemd/v22/journal)) = 22.5.0
-Provides: bundled(golang(github.com/coreos/go-systemd/v22/unit)) = 22.5.0
+Provides: bundled(golang(github.com/coreos/go-systemd/v22/dbus)) = 22.7.0
+Provides: bundled(golang(github.com/coreos/go-systemd/v22/journal)) = 22.7.0
+Provides: bundled(golang(github.com/coreos/go-systemd/v22/unit)) = 22.7.0
 Provides: bundled(golang(github.com/coreos/vcontext/json)) = 0.0.0-20230201181013.gitd72178a18687
 Provides: bundled(golang(github.com/coreos/vcontext/path)) = 0.0.0-20230201181013.gitd72178a18687
 Provides: bundled(golang(github.com/coreos/vcontext/report)) = 0.0.0-20230201181013.gitd72178a18687
 Provides: bundled(golang(github.com/coreos/vcontext/tree)) = 0.0.0-20230201181013.gitd72178a18687
 Provides: bundled(golang(github.com/coreos/vcontext/validate)) = 0.0.0-20230201181013.gitd72178a18687
-Provides: bundled(golang(github.com/google/renameio/v2)) = 2.0.0
+Provides: bundled(golang(github.com/coreos/vcontext/yaml)) = 0.0.0-20230201181013.gitd72178a18687
+Provides: bundled(golang(github.com/google/renameio/v2)) = 2.0.2
 Provides: bundled(golang(github.com/google/uuid)) = 1.6.0
-Provides: bundled(golang(github.com/mdlayher/vsock)) = 1.2.1
+Provides: bundled(golang(github.com/mdlayher/vsock)) = 1.3.0
 Provides: bundled(golang(github.com/mitchellh/copystructure)) = 1.2.0
 Provides: bundled(golang(github.com/pin/tftp)) = 2.1.0
 Provides: bundled(golang(github.com/pin/tftp/netascii)) = 2.1.0
-Provides: bundled(golang(github.com/spf13/pflag)) = 1.0.6-0.20210604193023.gitd5e0c0615ace
-Provides: bundled(golang(github.com/stretchr/testify/assert)) = 1.8.4
+Provides: bundled(golang(github.com/spf13/pflag)) = 1.0.10
+Provides: bundled(golang(github.com/stretchr/testify/assert)) = 1.11.1
+Provides: bundled(golang(github.com/stretchr/testify/assert/yaml)) = 1.11.1
 Provides: bundled(golang(github.com/vincent-petithory/dataurl)) = 1.0.0
 Provides: bundled(golang(github.com/vmware/vmw-guestinfo/bdoor)) = 0.0.0-20220317130741.git510905f0efa3
 Provides: bundled(golang(github.com/vmware/vmw-guestinfo/message)) = 0.0.0-20220317130741.git510905f0efa3
 Provides: bundled(golang(github.com/vmware/vmw-guestinfo/rpcout)) = 0.0.0-20220317130741.git510905f0efa3
 Provides: bundled(golang(github.com/vmware/vmw-guestinfo/rpcvmx)) = 0.0.0-20220317130741.git510905f0efa3
 Provides: bundled(golang(github.com/vmware/vmw-guestinfo/vmcheck)) = 0.0.0-20220317130741.git510905f0efa3
-Provides: bundled(golang(golang.org/x/net/bpf)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/http2)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/http2/hpack)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/http/httpguts)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/http/httpproxy)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/idna)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/internal/timeseries)) = 0.21.0
-Provides: bundled(golang(golang.org/x/net/trace)) = 0.21.0
-Provides: bundled(golang(golang.org/x/oauth2)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/authhandler)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/google)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/google/internal/externalaccount)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/google/internal/externalaccountauthorizeduser)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/google/internal/stsexchange)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/internal)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/jws)) = 0.17.0
-Provides: bundled(golang(golang.org/x/oauth2/jwt)) = 0.17.0
-Provides: bundled(golang(golang.org/x/sys/cpu)) = 0.17.0
-Provides: bundled(golang(golang.org/x/sys/unix)) = 0.17.0
-Provides: bundled(golang(golang.org/x/sys/windows)) = 0.17.0
-Provides: bundled(golang(google.golang.org/api/googleapi)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/googleapi/transport)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/iamcredentials/v1)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/internal)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/internal/cert)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/internal/gensupport)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/internal/impersonate)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/internal/third_party/uritemplates)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/iterator)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/option)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/option/internaloption)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/storage/v1)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/transport)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/transport/grpc)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/transport/http)) = 0.167.0
-Provides: bundled(golang(google.golang.org/api/transport/http/internal/propagation)) = 0.167.0
+Provides: bundled(golang(golang.org/x/net/bpf)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/http2)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/http2/hpack)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/http/httpguts)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/http/httpproxy)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/idna)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/internal/httpcommon)) = 0.57.0
+Provides: bundled(golang(golang.org/x/net/internal/httpsfv)) = 0.57.0
+Provides: bundled(golang(golang.org/x/oauth2)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/authhandler)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/google)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/google/externalaccount)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/google/internal/externalaccountauthorizeduser)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/google/internal/impersonate)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/google/internal/stsexchange)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/internal)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/jws)) = 0.36.0
+Provides: bundled(golang(golang.org/x/oauth2/jwt)) = 0.36.0
+Provides: bundled(golang(golang.org/x/sys/unix)) = 0.47.0
+Provides: bundled(golang(golang.org/x/sys/windows)) = 0.47.0
+Provides: bundled(golang(golang.org/x/sys/windows/registry)) = 0.47.0
 Provides: bundled(golang(gopkg.in/yaml.v3)) = 3.0.1
 
 %description
@@ -216,22 +210,63 @@ engineering and uploaded to the Ignition GitHub releases page.
 %package edge
 
 Summary:  Enablement glue for Ignition on IoT/Edge systems
-License:  Apache-2.0
+License:  MIT
+
+Requires: %{name} = %{version}-%{release}
 
 %description edge
 This package contains dracut modules, services and binaries needed to enable
 Ignition on IoT/Edge systems.
 
-############## ignition-grub subpackage ##############
+############## grub subpackage ##############
 
-%package ignition-grub
-
-Summary:  Enablement glue for bootupd's grub2 config 
+%package grub
+Summary:  Enablement glue for bootupd's grub2 config
 License:  Apache-2.0
 
-%description ignition-grub
+# `ignition-grub` is a rename `ignition-ignition-grub` so let's obsolete `ignition-ignition-grub`
+Obsoletes: ignition-ignition-grub
+
+%description grub
 This package contains the grub2 config which is compatable with bootupd.
 
+############## butane subpackage ##############
+
+%package -n butane
+
+Summary:   Butane config transpiler
+License:   Apache-2.0
+
+# Upgrade path from standalone butane package
+Obsoletes: butane < %{version}
+Provides:  butane = %{version}-%{release}
+
+%description -n butane
+Butane translates human-readable Butane Configs into machine-readable Ignition
+configs for provisioning operating systems that use Ignition.
+
+############## butane-redistributable subpackage ##############
+
+%if 0%{?fedora}
+%package -n butane-redistributable
+
+Summary:   Statically built Butane for Linux, macOS and Windows
+License:   Apache-2.0
+BuildArch: noarch
+
+# Upgrade path from standalone butane package
+Obsoletes: butane-redistributable < %{version}
+
+%description -n butane-redistributable
+Butane translates human-readable Butane Configs into machine-readable Ignition
+configs for provisioning operating systems that use Ignition.
+
+This package contains statically linked Linux, macOS and Windows Butane
+binaries built through cross-compilation. Do not install it. It is only
+used for building release binaries to be signed by Fedora release
+engineering and uploaded to the Ignition GitHub releases page.
+%endif
+
 %prep
 %if 0%{?fedora}
 %goprep -k
@@ -255,26 +290,48 @@ LDFLAGS+=' -compressdwarf=false '
 export GOFLAGS="-mod=vendor"
 
 echo "Building ignition..."
-%gobuild -o ./ignition internal/main.go
+GOEXPERIMENT=strictfipsruntime %gobuild -o ./ignition internal/main.go
 
 echo "Building ignition-validate..."
 %gobuild -o ./ignition-validate validate/main.go
 
-%global gocrossbuild go build -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n')" -a -v -x
+# Build butane
+BUTANE_LDFLAGS="-X github.com/coreos/ignition/v2/butane/internal/version.Raw=%{version} "
+
+echo "Building butane..."
+LDFLAGS="${BUTANE_LDFLAGS}" %gobuild -o ./butane-bin butane/internal/main.go
+
+%global gocrossbuild go build -ldflags "${LDFLAGS:-} -B 0x$(cat /dev/urandom | tr -d -c '0-9a-f' | head -c16)" -a -v -x
 
 %if 0%{?fedora}
 echo "Building statically-linked Linux ignition-validate..."
-CGO_ENABLED=0 GOARCH=arm64 GOOS=linux %gocrossbuild -o ./ignition-validate-aarch64-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=ppc64le GOOS=linux %gocrossbuild -o ./ignition-validate-ppc64le-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=s390x GOOS=linux %gocrossbuild -o ./ignition-validate-s390x-unknown-linux-gnu-static validate/main.go
-CGO_ENABLED=0 GOARCH=amd64 GOOS=linux %gocrossbuild -o ./ignition-validate-x86_64-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=arm64 GOOS=linux %gocrossbuild -o ./ignition-validate-aarch64-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=ppc64le GOOS=linux %gocrossbuild -o ./ignition-validate-ppc64le-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=s390x GOOS=linux %gocrossbuild -o ./ignition-validate-s390x-unknown-linux-gnu-static validate/main.go
+GOEXPERIMENT= CGO_ENABLED=0 GOARCH=amd64 GOOS=linux %gocrossbuild -o ./ignition-validate-x86_64-unknown-linux-gnu-static validate/main.go
 
 echo "Building macOS ignition-validate..."
-GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./ignition-validate-x86_64-apple-darwin validate/main.go
-GOARCH=arm64 GOOS=darwin %gocrossbuild -o ./ignition-validate-aarch64-apple-darwin validate/main.go
+GOEXPERIMENT= GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./ignition-validate-x86_64-apple-darwin validate/main.go
+GOEXPERIMENT= GOARCH=arm64 GOOS=darwin %gocrossbuild -o ./ignition-validate-aarch64-apple-darwin validate/main.go
 
 echo "Building Windows ignition-validate..."
-GOARCH=amd64 GOOS=windows %gocrossbuild -o ./ignition-validate-x86_64-pc-windows-gnu.exe validate/main.go
+GOEXPERIMENT= GOARCH=amd64 GOOS=windows %gocrossbuild -o ./ignition-validate-x86_64-pc-windows-gnu.exe validate/main.go
+
+# butane cross-compilation
+export LDFLAGS="${BUTANE_LDFLAGS}"
+
+echo "Building statically-linked Linux butane..."
+CGO_ENABLED=0 GOARCH=arm64 GOOS=linux %gocrossbuild -o ./butane-aarch64-unknown-linux-gnu-static butane/internal/main.go
+CGO_ENABLED=0 GOARCH=ppc64le GOOS=linux %gocrossbuild -o ./butane-ppc64le-unknown-linux-gnu-static butane/internal/main.go
+CGO_ENABLED=0 GOARCH=s390x GOOS=linux %gocrossbuild -o ./butane-s390x-unknown-linux-gnu-static butane/internal/main.go
+CGO_ENABLED=0 GOARCH=amd64 GOOS=linux %gocrossbuild -o ./butane-x86_64-unknown-linux-gnu-static butane/internal/main.go
+
+echo "Building macOS butane..."
+GOARCH=amd64 GOOS=darwin %gocrossbuild -o ./butane-x86_64-apple-darwin butane/internal/main.go
+GOARCH=arm64 GOOS=darwin %gocrossbuild -o ./butane-aarch64-apple-darwin butane/internal/main.go
+
+echo "Building Windows butane..."
+GOARCH=amd64 GOOS=windows %gocrossbuild -o ./butane-x86_64-pc-windows-gnu.exe butane/internal/main.go
 %endif
 
 %install
@@ -286,13 +343,17 @@ install -m 0755 -d %{buildroot}/%{_libexecdir}
 ln -sf ../lib/dracut/modules.d/30ignition/ignition %{buildroot}/%{_libexecdir}/ignition-apply
 ln -sf ../lib/dracut/modules.d/30ignition/ignition %{buildroot}/%{_libexecdir}/ignition-rmcfg
 
-# ignition-grub
-install -d -p %{buildroot}%{_libdir}/bootupd/grub2-static/configs.d
-install -p -m 0644 grub2/ignition.cfg  %{buildroot}%{_libdir}/bootupd/grub2-static/configs.d/
+# grub
+install -d -p %{buildroot}%{_prefix}/lib/bootupd/grub2-static/configs.d
+install -p -m 0644 grub2/05_ignition.cfg  %{buildroot}%{_prefix}/lib/bootupd/grub2-static/configs.d/
 
 # ignition
 install -d -p %{buildroot}%{_bindir}
 install -p -m 0755 ./ignition-validate %{buildroot}%{_bindir}
+%if 0%{?fedora} && 0%{?fedora} > 43
+install -d -p %{buildroot}%{_sysconfdir}/ssh/sshd_config.d/
+install -p -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/ssh/sshd_config.d/91-ignition-authorized-keys-file.conf
+%endif
 
 %if 0%{?fedora}
 install -d -p %{buildroot}%{_datadir}/ignition
@@ -305,6 +366,21 @@ install -p -m 0644 ./ignition-validate-x86_64-pc-windows-gnu.exe %{buildroot}%{_
 install -p -m 0644 ./ignition-validate-x86_64-unknown-linux-gnu-static %{buildroot}%{_datadir}/ignition
 %endif
 
+# butane
+install -p -m 0755 ./butane-bin %{buildroot}%{_bindir}/butane
+ln -s butane %{buildroot}%{_bindir}/fcct
+
+%if 0%{?fedora}
+install -d -p %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-aarch64-apple-darwin %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-aarch64-unknown-linux-gnu-static %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-ppc64le-unknown-linux-gnu-static %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-s390x-unknown-linux-gnu-static %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-x86_64-apple-darwin %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-x86_64-pc-windows-gnu.exe %{buildroot}%{_datadir}/butane
+install -p -m 0644 ./butane-x86_64-unknown-linux-gnu-static %{buildroot}%{_datadir}/butane
+%endif
+
 # The ignition binary is only for dracut, and is dangerous to run from
 # the command line.  Install directly into the dracut module dir.
 install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
@@ -324,6 +400,9 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %{_unitdir}/ignition-delete-config.service
 %{_libexecdir}/ignition-apply
 %{_libexecdir}/ignition-rmcfg
+%if 0%{?fedora} && 0%{?fedora} > 43
+%{_sysconfdir}/ssh/sshd_config.d/91-ignition-authorized-keys-file.conf
+%endif
 
 %files validate
 %doc README.md
@@ -344,7 +423,7 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %endif
 
 %files edge
-%license %{golicenses}
+%license ignition-edge-%{ignedgecommit}/LICENSE
 %doc %{godocs}
 %{dracutlibdir}/modules.d/35ignition-edge/*
 %{dracutlibdir}/modules.d/10coreos-sysctl/*
@@ -356,12 +435,127 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 %{_libexecdir}/coreos-ignition-write-issues
 %{_libexecdir}/coreos-check-ssh-keys
 
-%files ignition-grub
+%files grub
 %doc README.md
 %license %{golicenses}
-%{_libdir}/bootupd/grub2-static/configs.d/ignition.cfg
+%{_prefix}/lib/bootupd/grub2-static/configs.d/05_ignition.cfg
+
+%files -n butane
+%license %{golicenses}
+%doc butane/README.md butane/docs
+%{_bindir}/butane
+%{_bindir}/fcct
+
+%if 0%{?fedora}
+%files -n butane-redistributable
+%license %{golicenses}
+%dir %{_datadir}/butane
+%{_datadir}/butane/butane-aarch64-apple-darwin
+%{_datadir}/butane/butane-aarch64-unknown-linux-gnu-static
+%{_datadir}/butane/butane-ppc64le-unknown-linux-gnu-static
+%{_datadir}/butane/butane-s390x-unknown-linux-gnu-static
+%{_datadir}/butane/butane-x86_64-apple-darwin
+%{_datadir}/butane/butane-x86_64-pc-windows-gnu.exe
+%{_datadir}/butane/butane-x86_64-unknown-linux-gnu-static
+%endif
 
 %changelog
+* Wed Sep 02 2026 Klara Necasova <knecasov@redhat.com> - 2.27.0-2
+- Update ignition-edge commit to include https://github.com/fedora-iot/ignition-edge/pull/12
+
+* Wed Aug 26 2026 Steven Presti <spresti@redhat.com> - 2.27.0-1
+- New Release
+- Butane config transpiler merged into Ignition repository
+- Butane now follows Ignition version numbering
+- Drop Patch0 (fix merged upstream)
+- Drop legacy fcct/fedora-coreos-config-transpiler provides
+
+* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.26.0-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
+* Mon Mar 30 2026 Timothée Ravier <tim@siosm.fr> - 2.26.0-4
+- F44+: Ship OpenSSH config file specifying AuthorizedKeysFile
+- Have ignition-edge require the matching main ignition package
+
+* Tue Mar 10 2026 Joel Capitao <jcapitao@redhat.com> - 2.26.0-3
+- Revert 'Ship the OpenSSH config file specifying AuthorizedKeysFile'
+
+* Tue Feb 24 2026 Joel Capitao <jcapitao@redhat.com> - 2.26.0-2
+- Ship OpenSSH config file specifying AuthorizedKeysFile
+
+* Thu Feb 19 2026 Steven Presti <spresti@redhat.com> - 2.26.0-1
+- New Release
+- Patch format specifier for systemd version warning (Go 1.26 compatibility)
+
+* Tue Feb 03 2026 Maxwell G <maxwell@gtmx.me> - 2.25.1-3
+- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26
+
+* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 2.25.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
+
+* Fri Dec 12 2025 Steven Presti <spresti@redhat.com> - 2.25.0-1
+- New Release
+
+* Tue Oct 14 2025 Steven Presti <spresti@redhat.com> - 2.24.0-1
+- New Release
+
+* Fri Oct 10 2025 Alejandro Sáez <asm@redhat.com> - 2.23.0-3
+- rebuild
+
+* Wed Oct 01 2025 Steven Presti <spresti@redhat.com> - 2.23.0-2
+- Build Ignition with GOEXPERIMENT=strictfipsruntime
+- Ignition-validate non-FIPS
+
+* Wed Sep 10 2025 Steven Presti <spresti@redhat.com> - 2.23.0-1
+- New Release
+
+* Fri Aug 15 2025 Maxwell G <maxwell@gtmx.me> - 2.22.0-5
+- Rebuild for golang-1.25.0
+
+* Thu Jul 24 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.22.0-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
+
+* Wed Jul 16 2025 Tiago Bueno <tiago.bueno@gmail.com> - 2.22.0-3
+- Fix rpminspect debug symbols failure
+
+* Tue Jul 15 2025 Tiago Bueno <tiago.bueno@gmail.com> - 2.22.0-2
+- Backport fix for OracleCloud do not wrap errors from FetchToBuffer
+
+* Tue Jul 8 2025 Yasmin Valim <ydesouza@redhat.com> - 2.22.0-1
+- New Release
+
+* Wed Mar 19 2025 Steven Presti <spresti@redhat.com> - 2.21.0-2
+- Rename ignition.cfg -> 05_ignition.cfg to mirror upstream
+  additionally backport rename.
+- Rename ignition-ignition-grub subpackage to ignition-grub
+- Update grub2 config to use the correct dir for bootupd static grub configs
+  https://github.com/coreos/ignition/pull/2037#issuecomment-2736300056
+
+* Fri Mar 14 2025 Steven Presti <spresti@redhat.com> - 2.21.0-1
+- New Release
+
+* Mon Jan 27 2025 David Jachimowicz <djachimo@redhat.com> - 2.20.0-5
+- Update ignition-edge commit to include https://github.com/fedora-iot/ignition-edge/pull/3
+
+* Wed Jan 22 2025 FeRD (Frank Dana) <ferdnyc@gmail.com> - 2.20.0-4
+- Apply upstream patch for Go 1.24 compatibility
+
+* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.20.0-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
+
+* Tue Nov 05 2024 Miguel Martín <mmartinv@redhat.com> - 2.20.0-2
+- Update ignition-edge commit to include
+    - https://github.com/fedora-iot/ignition-edge/pull/2
+
+* Wed Oct 23 2024 Steven Presti <spresti@redhat.com> - 2.20.0-1
+- New Release
+
+* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.19.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
+
+* Wed Jun 05 2024 Steven Presti <spresti@redhat.com> - 2.19.0-1
+- New release
+
 * Mon Mar 4 2024 Yasmin de Souza <ydesouza@redhat.com> - 2.18.0-1
 - New release
 - Discontinue support for i686
@@ -378,10 +572,10 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 * Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.17.0-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
 
-* Fri Dec 15 2023 Steven Prestil <spresti@redhat.com> - 2.17.0-2
+* Fri Dec 15 2023 Steven Presti <spresti@redhat.com> - 2.17.0-2
 - Add ignition-grub subpackage
 
-* Wed Nov 22 2023 Steven Prestil <spresti@redhat.com> - 2.17.0-1
+* Wed Nov 22 2023 Steven Presti <spresti@redhat.com> - 2.17.0-1
 - New release
 
 * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 2.16.2-2
@@ -446,7 +640,7 @@ install -p -m 0755 ./ignition %{buildroot}/%{dracutlibdir}/modules.d/30ignition
 - New release
 
 * Wed Oct 13 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-3
-- Move Ignition report to /etc 
+- Move Ignition report to /etc
 
 * Thu Aug 26 2021 Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-2
 - Disable file fragment writing logic for SSH authorized_keys on RHEL/CentOS
diff --git a/rpminspect.yaml b/rpminspect.yaml
new file mode 100644
index 0000000..79ee3ee
--- /dev/null
+++ b/rpminspect.yaml
@@ -0,0 +1,5 @@
+---
+debuginfo:
+  ignore:
+    - /usr/share/ignition/ignition-validate-*-unknown-linux-gnu-static
+
diff --git a/sources b/sources
index 4267e78..443091c 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (ignition-2.18.0.tar.gz) = 8017d4d289b0c856805909669d05e54a044fd0fdbab88ad573ae4eee197c7cff6ec99997a356bfa138adc9597f75eba6e21e44e00d3f24b6dbf9878b71a5523c
-SHA512 (ignition-edge-a3a8f0a.tar.gz) = ef04cd411752f1b48fdb64ae8e45a2234b635a19ead82483cb33e246697e6ae639f6036030e7647913f5f589532f3d015bcc81848db50ebe8800242f6f23230a
+SHA512 (ignition-2.27.0.tar.gz) = 7f1ad2da57a196ba0d01b7f2f886f1484edb1f48b8f295f1ad9a4ef9ba2801f0d9d3e9701ec266b4a2446bbf182c50c6733b5ca069ac0c749d77ed342d6a6a9e
+SHA512 (ignition-edge-b6c8245.tar.gz) = fb823a7c87c7014fcb38566fcd41b11bd38ff27e1ca2bfe6b76111bbabab0d917bc7ba56af450eab434d1907a056b0b1a0fcd6d29e456a4ba2985ddf74efb155