Arch's 2026.10.01 ISO bundles kernel 7.2.7 and a month of rolling updates into 1.5 GB — but the official download page itself tells existing users to ignore it. Here's how to read a monthly snapshot like an operator, and what September's package storm means for your next pacman -Syu.

Every month, like clockwork, Arch Linux publishes a fresh install ISO. On October 1 it was 2026.10.01: a 1.5 GB snapshot carrying Linux 7.2.7 and everything that landed in the repositories during September. And right there on the official download page, under the download buttons, sits the most honest sentence in distribution marketing: "It is intended for new installations only; an existing Arch Linux system can always be updated with pacman -Syu."

That's the whole philosophy of a rolling release in one line. The ISO is not a release. It's a photograph. But photographs can still tell you a lot — about what changed, what's coming, and what you should do before your next full upgrade. Let's decode this one.

A rolling release, decoded

Most distributions ship versions: 24.04, 26.10, whatever. Arch ships time. Each monthly ISO is simply the repository contents on the first of the month, frozen long enough to burn. Nothing in the ISO is newer than what pacman -Syu already gave you — which is why the download page waves existing users off.

So who is it for? Three groups: people installing Arch for the first time (the ISO is the starting line), people building automated or offline install media, and the curious who want a quick read on the month's momentum. This article is for the second and third groups — and for anyone whose next -Syu will pull in September's leftovers.

September's package storm, translated

The ISO's bill of materials reads like a month of Arch in miniature. The core system stack moved in lockstep: systemd 262, GRUB 2.16, mkinitcpio 42.1, Bash 5.3.20, curl 8.22, OpenSSL 3.6.5, util-linux 2.42.4, and cryptsetup 2.8.8. Graphics followed with Mesa 26.2.3 and the NVIDIA 615.71 driver series, plus the September 16 firmware bundle covering AMD, Intel, NVIDIA, Realtek, Qualcomm, Broadcom, and MediaTek hardware. The desktops kept pace — Plasma 6.7.5, GNOME Shell and Mutter 50.5 (with GNOME 51 expected in the repos soon), and COSMIC 1.9.

Two items deserve more than a version bump:

mkinitcpio 42.1 and the TPM2 fallout. If you unlock LUKS with TPM2, you already lived through this one — the September 22 announcement about mkinitcpio 42's measured-boot change broke unattended unlocks until re-enrollment. The October ISO bakes in 42.1, which means fresh encrypted installs start from the new behavior. If you're installing with TPM2-bound LUKS now, enroll against the current measurements from the start and you'll never notice the drama.

Kernel 7.2.7, partially machine-written. The kernel in this snapshot was released September 21 by Greg Kroah-Hartman, carrying around 737 backported commits — roughly a third of them networking fixes, plus a stack of security backports including a remotely exploitable SMB client heap overflow, an SMB1 out-of-bounds read, and an IPv6 use-after-free. Here's the striking part: roughly one in five of those commits carries an "Assisted-by" line crediting tools like Claude, GPT-5/Codex, DeepSeek, Gemini, and Copilot, and Google's AI reviewer "Sashiko" appears in dozens of Reported-by tags. The kernel you boot in October was, in a measurable sense, co-written by machines. Whether that comforts or concerns you, it's the direction of travel — and a reason to keep testing release candidates, since human review is the bottleneck that matters now.

archinstall 4.5: the quiet headline

The installer itself got a meaningful bump. Archinstall 4.5 arrived late in September with aarch64 bootloader support and fixes for several long-standing installer annoyances, and archiso — the tooling that builds the live media — moved to version 91. If you've been holding off an install because archinstall did something rude last time, this is a reasonable moment to retry. And if you're scripting installs, pin your expectations: the installer is the fastest-moving part of the ISO, and its behavior between monthly snapshots is not frozen.

The operator's checklist

  • Existing install? Don't touch the ISO. Run pacman -Syu, read the news feed first (the mkinitcpio 42 item is the template for why), and verify your backups before any kernel/systemd/GRUB triple update.
  • Fresh install? Grab 2026.10.01, verify the checksum and PGP signature — the commands are on the download page, actually run them — and prefer archinstall 4.5 over the manual route unless you're doing something exotic.
  • TPM2 + LUKS? On an existing system with the systemd hook, make sure your enrollment postdates mkinitcpio 42. Fresh installs enroll cleanly against the new measurements.
  • Offline or automated installs? This ISO is your new baseline. Rebuild your custom images from it rather than layering months of updates.

The ISO you don't need is still worth reading. A rolling release never stops; the monthly snapshot is just the one moment it stands still long enough to be photographed.

Sources: Arch Linux download page (release 2026.10.01, kernel 7.2.7) · Arch Linux news — "Mkinitcpio >=42 requires manual intervention for TPM2-based unlocking of LUKS devices" (2026-09-22) · Linuxiac — "Arch Linux October 2026 ISO Is Out with Linux Kernel 7.2.7, Systemd 262" · LinuxCompatible — "Arch Linux 2026.10.01 Ships With Linux 7.2.7 in 1.5 GB ISO"