SUSE updates SLES 16.1, Rancher Prime and VM-aware Liz AI

By Rebecca Stone

SUSE announced SUSE Linux Enterprise Server (SLES) 16.1 and a beta hosted control plane for Rancher Prime at this week’s KubeCon in Salt Lake City, Utah.

The announcements covered one commercial platform spanning traditional and immutable Linux, Kubernetes clusters, virtual machines, security tooling and AI-assisted operations. AI continued to dominate enterprise IT vendor conversations, but SUSE said virtual machines and containers remained central enterprise workloads.

What changed in SLES 16.1?

SLES is the vendor’s flagship commercial operating system. Version 16.1 combines the package-based SLES release with SLE Micro, SUSE’s immutable edition, so both modes share one codebase, one operating-system lifecycle and one support model.

Peter Smails, senior vice president and general manager of cloud native at SUSE, said: "People want unification, people want consolidation." Administrators choose standard or immutable operation during installation. Package management applies conventional updates. Immutable mode applies transactions as complete changes and lets users roll back unwanted updates.

SUSE positions the combined product for edge and distributed deployments. SUSE now covers real-time workloads under the common lifecycle and support model. The release expands live patching (applying fixes without rebooting), adds post-quantum cryptography readiness (security for quantum computing threats) and introduces software supply chain verification (checking software provenance).

What changed in Rancher Prime?

Rancher Prime gained a hosted control plane for Virtual Clusters, a Kubernetes feature designed for multi-tenancy (separate tenant environments). One control plane can manage all tenants, including clusters running RKE2, SUSE’s Kubernetes distribution. Smails described the design as a density play. The capability remains in beta.

Smails said Rancher Prime aims to let organizations compute anywhere with security and scalability. SUSE’s Longhorn V2 data engine reached general availability. SUSE claims it delivers higher performance than earlier versions.

SUSE also added network microsegmentation (isolating workload traffic) through the Kube-OVN project for SUSE Virtualization. Native Cluster API support (a standard for managing clusters through providers) now covers RKE2.

Operators building a neocloud (a provider-operated cloud) can attach their own infrastructure provisioning engines and manage resulting clusters through the Rancher interface. Smails said the native, open design expands infrastructure and ecosystem flexibility.

SUSE Security added a vulnerability scanner that checks container images for problems and notifies teams so they can repair them. A runtime enforcer (controls applied during execution) addresses what the scanner misses. SUSE contributes both tools to the Cloud Native Computing Foundation through the Kubewarden project.

What does Liz AI add?

Liz can dispatch sub-agents for fleet provisioning (deploying groups of systems), security and observability (system monitoring) tasks. Integration with SUSE Virtualization extends the assistant to virtual machines. Administrators can select a model for each sub-agent, including public, sovereign or custom models.

Mitch Ashley, vice president and practice lead for CIO and technology buyers at The Futurum Group, said an AI agent is now a baseline requirement for a platform vendor. He identified model selection as Liz’s differentiator: "The part that matters is letting each sub-agent run its own model, whether public, sovereign or custom." The per-sub-agent choice gives buyers control over token spending and where their data goes as platform teams deploy AI systems in production.

Larry Carvalho, principal consultant at RobustCloud, said Liz exceeds common vendor capability through