diff --git a/Documentation/api.md b/Documentation/api.md
index 0db3e108..82eaaecc 100644
--- a/Documentation/api.md
+++ b/Documentation/api.md
@@ -39,8 +39,8 @@ GET http://matchbox.foo/ipxe?label=value
 
 ```
 #!ipxe
-kernel /assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp} coreos.first_boot=1 coreos.autologin
-initrd  /assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz
+kernel /assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp} coreos.first_boot=1 coreos.autologin
+initrd  /assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz
 boot
 ```
 
@@ -67,9 +67,9 @@ default=0
 timeout=1
 menuentry "CoreOS" {
 echo "Loading kernel"
-linuxefi "(http;matchbox.foo:8080)/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz" "coreos.autologin" "coreos.config.url=http://matchbox.foo:8080/ignition" "coreos.first_boot"
+linuxefi "(http;matchbox.foo:8080)/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz" "coreos.autologin" "coreos.config.url=http://matchbox.foo:8080/ignition" "coreos.first_boot"
 echo "Loading initrd"
-initrdefi "(http;matchbox.foo:8080)/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"
+initrdefi "(http;matchbox.foo:8080)/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"
 }
 ```
 
@@ -231,7 +231,7 @@ If you need to serve static assets (e.g. kernel, initrd), `matchbox` can serve a
 ```
 matchbox.foo/assets/
 └── coreos
-    └── 1353.7.0
+    └── 1409.7.0
         ├── coreos_production_pxe.vmlinuz
         └── coreos_production_pxe_image.cpio.gz
     └── 1153.0.0
diff --git a/Documentation/bootkube.md b/Documentation/bootkube.md
index 93d36efe..0fc33f87 100644
--- a/Documentation/bootkube.md
+++ b/Documentation/bootkube.md
@@ -30,7 +30,7 @@ The [examples](../examples) statically assign IP addresses to libvirt client VMs
 Download the CoreOS Container Linux image assets referenced in the target [profile](../examples/profiles).
 
 ```sh
-$ ./scripts/get-coreos stable 1353.7.0 ./examples/assets
+$ ./scripts/get-coreos stable 1409.7.0 ./examples/assets
 ```
 
 Add your SSH public key to each machine group definition [as shown](../examples/README.md#ssh-keys).
diff --git a/Documentation/deployment.md b/Documentation/deployment.md
index 55231dc8..cf1dec48 100644
--- a/Documentation/deployment.md
+++ b/Documentation/deployment.md
@@ -213,7 +213,7 @@ Certificate chain
 Download a recent Container Linux [release](https://coreos.com/releases/) with signatures.
 
 ```sh
-$ ./scripts/get-coreos stable 1353.7.0 .     # note the "." 3rd argument
+$ ./scripts/get-coreos stable 1409.7.0 .     # note the "." 3rd argument
 ```
 
 Move the images to `/var/lib/matchbox/assets`,
@@ -225,7 +225,7 @@ $ sudo cp -r coreos /var/lib/matchbox/assets
 ```
 /var/lib/matchbox/assets/
 ├── coreos
-│   └── 1353.7.0
+│   └── 1409.7.0
 │       ├── CoreOS_Image_Signing_Key.asc
 │       ├── coreos_production_image.bin.bz2
 │       ├── coreos_production_image.bin.bz2.sig
@@ -238,7 +238,7 @@ $ sudo cp -r coreos /var/lib/matchbox/assets
 and verify the images are acessible.
 
 ```sh
-$ curl http://matchbox.example.com:8080/assets/coreos/1353.7.0/
+$ curl http://matchbox.example.com:8080/assets/coreos/1409.7.0/
 <pre>...
 ```
 
diff --git a/Documentation/getting-started-docker.md b/Documentation/getting-started-docker.md
index 60134830..832300c8 100644
--- a/Documentation/getting-started-docker.md
+++ b/Documentation/getting-started-docker.md
@@ -28,7 +28,7 @@ $ cd matchbox
 Download CoreOS Container Linux image assets referenced by the `etcd3` [example](../examples) to `examples/assets`.
 
 ```sh
-$ ./scripts/get-coreos stable 1353.7.0 ./examples/assets
+$ ./scripts/get-coreos stable 1409.7.0 ./examples/assets
 ```
 
 For development convenience, add `/etc/hosts` entries for nodes so they may be referenced by name.
diff --git a/Documentation/getting-started-rkt.md b/Documentation/getting-started-rkt.md
index 4401a224..f2dbf7fb 100644
--- a/Documentation/getting-started-rkt.md
+++ b/Documentation/getting-started-rkt.md
@@ -30,7 +30,7 @@ $ cd matchbox
 Download CoreOS Container Linux image assets referenced by the `etcd3` [example](../examples) to `examples/assets`.
 
 ```sh
-$ ./scripts/get-coreos stable 1353.7.0 ./examples/assets
+$ ./scripts/get-coreos stable 1409.7.0 ./examples/assets
 ```
 
 ## Network
diff --git a/Documentation/matchbox.md b/Documentation/matchbox.md
index 896d48e7..257e4e97 100644
--- a/Documentation/matchbox.md
+++ b/Documentation/matchbox.md
@@ -64,8 +64,8 @@ Profiles reference an Ignition config, Cloud-Config, and/or generic config by na
   "ignition_id": "etcd.yaml",
   "generic_id": "some-service.cfg",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/README.md b/examples/README.md
index a828cc9a..d0a773ca 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -22,13 +22,13 @@ These examples mount raw Matchbox objects into a Matchbox server's `/var/lib/mat
 
 | Name       | Description | CoreOS Container Linux Version | FS | Docs | 
 |------------|-------------|----------------|----|-----------|
-| simple | CoreOS Container Linux with autologin, using iPXE | stable/1353.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
-| simple-install | CoreOS Container Linux Install, using iPXE | stable/1353.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
-| grub | CoreOS Container Linux via GRUB2 Netboot | stable/1353.7.0 | RAM | NA |
-| etcd3 | PXE boot a 3 node etcd3 cluster with proxies | stable/1353.7.0 | RAM | None |
-| etcd3-install | Install a 3 node etcd3 cluster to disk | stable/1353.7.0 | Disk | None |
-| bootkube | PXE boot a self-hosted Kubernetes v1.6.7 cluster | stable/1353.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
-| bootkube-install | Install a self-hosted Kubernetes v1.6.7 cluster | stable/1353.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
+| simple | CoreOS Container Linux with autologin, using iPXE | stable/1409.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
+| simple-install | CoreOS Container Linux Install, using iPXE | stable/1409.7.0 | RAM | [reference](https://coreos.com/os/docs/latest/booting-with-ipxe.html) |
+| grub | CoreOS Container Linux via GRUB2 Netboot | stable/1409.7.0 | RAM | NA |
+| etcd3 | PXE boot a 3 node etcd3 cluster with proxies | stable/1409.7.0 | RAM | None |
+| etcd3-install | Install a 3 node etcd3 cluster to disk | stable/1409.7.0 | Disk | None |
+| bootkube | PXE boot a self-hosted Kubernetes v1.6.7 cluster | stable/1409.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
+| bootkube-install | Install a self-hosted Kubernetes v1.6.7 cluster | stable/1409.7.0 | Disk | [tutorial](../Documentation/bootkube.md) |
 
 ### Customization
 
diff --git a/examples/groups/bootkube-install/install.json b/examples/groups/bootkube-install/install.json
index e560c41b..3e0f5e03 100644
--- a/examples/groups/bootkube-install/install.json
+++ b/examples/groups/bootkube-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1353.7.0",
+    "coreos_version": "1409.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/etcd3-install/install.json b/examples/groups/etcd3-install/install.json
index e560c41b..3e0f5e03 100644
--- a/examples/groups/etcd3-install/install.json
+++ b/examples/groups/etcd3-install/install.json
@@ -4,7 +4,7 @@
   "profile": "install-reboot",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1353.7.0",
+    "coreos_version": "1409.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/groups/simple-install/install.json b/examples/groups/simple-install/install.json
index c25e7318..e0dcdcb0 100644
--- a/examples/groups/simple-install/install.json
+++ b/examples/groups/simple-install/install.json
@@ -4,7 +4,7 @@
   "profile": "simple-install",
   "metadata": {
     "coreos_channel": "stable",
-    "coreos_version": "1353.7.0",
+    "coreos_version": "1409.7.0",
     "ignition_endpoint": "http://matchbox.foo:8080/ignition",
     "baseurl": "http://matchbox.foo:8080/assets/coreos"
   }
diff --git a/examples/profiles/bootkube-controller.json b/examples/profiles/bootkube-controller.json
index 27ec4c03..d7b49880 100644
--- a/examples/profiles/bootkube-controller.json
+++ b/examples/profiles/bootkube-controller.json
@@ -2,8 +2,8 @@
   "id": "bootkube-controller",
   "name": "bootkube Ready Controller",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/bootkube-worker.json b/examples/profiles/bootkube-worker.json
index 5fc9bd4c..ac2916aa 100644
--- a/examples/profiles/bootkube-worker.json
+++ b/examples/profiles/bootkube-worker.json
@@ -2,8 +2,8 @@
   "id": "bootkube-worker",
   "name": "bootkube Ready Worker",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "root=/dev/sda1",
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
diff --git a/examples/profiles/etcd3-gateway.json b/examples/profiles/etcd3-gateway.json
index 18c0136e..a05df339 100644
--- a/examples/profiles/etcd3-gateway.json
+++ b/examples/profiles/etcd3-gateway.json
@@ -2,8 +2,8 @@
   "id": "etcd3-gateway",
   "name": "etcd3-gateway",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/etcd3.json b/examples/profiles/etcd3.json
index 185133c0..81df51bf 100644
--- a/examples/profiles/etcd3.json
+++ b/examples/profiles/etcd3.json
@@ -2,8 +2,8 @@
   "id": "etcd3",
   "name": "etcd3",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/grub.json b/examples/profiles/grub.json
index 1ef61fbe..0dc11860 100644
--- a/examples/profiles/grub.json
+++ b/examples/profiles/grub.json
@@ -2,8 +2,8 @@
   "id": "grub",
   "name": "CoreOS Container Linux via GRUB2",
   "boot": {
-    "kernel": "(http;matchbox.foo:8080)/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["(http;matchbox.foo:8080)/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "(http;matchbox.foo:8080)/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["(http;matchbox.foo:8080)/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/install-reboot.json b/examples/profiles/install-reboot.json
index 5f342b15..dc510ace 100644
--- a/examples/profiles/install-reboot.json
+++ b/examples/profiles/install-reboot.json
@@ -2,8 +2,8 @@
   "id": "install-reboot",
   "name": "Install CoreOS Container Linux and Reboot",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/simple-install.json b/examples/profiles/simple-install.json
index e434654f..7b5df284 100644
--- a/examples/profiles/simple-install.json
+++ b/examples/profiles/simple-install.json
@@ -2,8 +2,8 @@
   "id": "simple-install",
   "name": "Simple CoreOS Container Linux Alpha Install",
   "boot": {
-    "kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-    "initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+    "kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+    "initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
     "args": [
       "coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
       "coreos.first_boot=yes",
diff --git a/examples/profiles/simple.json b/examples/profiles/simple.json
index 4b0d528a..4208f0b5 100644
--- a/examples/profiles/simple.json
+++ b/examples/profiles/simple.json
@@ -2,8 +2,8 @@
 	"id": "simple",
 	"name": "Simple CoreOS Container Linux Alpha",
 	"boot": {
-		"kernel": "/assets/coreos/1353.7.0/coreos_production_pxe.vmlinuz",
-		"initrd": ["/assets/coreos/1353.7.0/coreos_production_pxe_image.cpio.gz"],
+		"kernel": "/assets/coreos/1409.7.0/coreos_production_pxe.vmlinuz",
+		"initrd": ["/assets/coreos/1409.7.0/coreos_production_pxe_image.cpio.gz"],
 		"args": [
 			"coreos.config.url=http://matchbox.foo:8080/ignition?uuid=${uuid}&mac=${mac:hexhyp}",
 			"coreos.first_boot=yes",
diff --git a/examples/terraform/bootkube-install/README.md b/examples/terraform/bootkube-install/README.md
index faa02406..dba602bf 100644
--- a/examples/terraform/bootkube-install/README.md
+++ b/examples/terraform/bootkube-install/README.md
@@ -35,7 +35,7 @@ matchbox_rpc_endpoint = "matchbox.example.com:8081"
 ssh_authorized_key = "ADD ME"
 
 cluster_name = "demo"
-container_linux_version = "1353.7.0"
+container_linux_version = "1409.7.0"
 container_linux_channel = "stable"
 ```
 
diff --git a/examples/terraform/bootkube-install/multi-controller.tfvars.example b/examples/terraform/bootkube-install/multi-controller.tfvars.example
index a125e9af..12d68ea8 100644
--- a/examples/terraform/bootkube-install/multi-controller.tfvars.example
+++ b/examples/terraform/bootkube-install/multi-controller.tfvars.example
@@ -3,7 +3,7 @@ matchbox_rpc_endpoint = "matchbox.example.com:8081"
 # ssh_authorized_key = "ADD ME"
 
 cluster_name = "example"
-container_linux_version = "1353.7.0"
+container_linux_version = "1409.7.0"
 container_linux_channel = "stable"
 
 # Machines
diff --git a/examples/terraform/bootkube-install/terraform.tfvars.example b/examples/terraform/bootkube-install/terraform.tfvars.example
index 2292ed4e..e2d85116 100644
--- a/examples/terraform/bootkube-install/terraform.tfvars.example
+++ b/examples/terraform/bootkube-install/terraform.tfvars.example
@@ -3,7 +3,7 @@ matchbox_rpc_endpoint = "matchbox.example.com:8081"
 # ssh_authorized_key = "ADD ME"
 
 cluster_name = "example"
-container_linux_version = "1353.7.0"
+container_linux_version = "1409.7.0"
 container_linux_channel = "stable"
 
 # Machines
diff --git a/examples/terraform/etcd3-install/etcd3.tf b/examples/terraform/etcd3-install/etcd3.tf
index a9b8c2c9..9c79c1f0 100644
--- a/examples/terraform/etcd3-install/etcd3.tf
+++ b/examples/terraform/etcd3-install/etcd3.tf
@@ -2,7 +2,7 @@
 module "profiles" {
   source                  = "../modules/profiles"
   matchbox_http_endpoint  = "${var.matchbox_http_endpoint}"
-  container_linux_version = "1353.7.0"
+  container_linux_version = "1409.7.0"
   container_linux_channel = "stable"
   install_disk            = "${var.install_disk}"
   container_linux_oem     = "${var.container_linux_oem}"
diff --git a/scripts/devnet b/scripts/devnet
index 51f6df32..fbaafc24 100755
--- a/scripts/devnet
+++ b/scripts/devnet
@@ -15,7 +15,7 @@ ASSETS_DIR="${ASSETS_DIR:-$PWD/examples/assets}"
 CONFIG_DIR="${CONFIG_DIR:-$PWD/examples/etc/matchbox}"
 
 COREOS_CHANNEL=stable
-COREOS_VERSION=1353.7.0
+COREOS_VERSION=1409.7.0
 MATCHBOX_ARGS=""
 
 if [ "$EUID" -ne 0 ]
diff --git a/scripts/get-coreos b/scripts/get-coreos
index df5048d0..6cb8d221 100755
--- a/scripts/get-coreos
+++ b/scripts/get-coreos
@@ -9,7 +9,7 @@ set -eou pipefail
 GPG=${GPG:-/usr/bin/gpg}
 
 CHANNEL=${1:-"stable"}
-VERSION=${2:-"1353.7.0"}
+VERSION=${2:-"1409.7.0"}
 DEST_DIR=${3:-"$PWD/examples/assets"}
 OEM_ID=${OEM_ID:-""}
 DEST=$DEST_DIR/coreos/$VERSION
diff --git a/tests/smoke/bootkube.tfvars b/tests/smoke/bootkube.tfvars
index 93ae1fbb..08e631cd 100644
--- a/tests/smoke/bootkube.tfvars
+++ b/tests/smoke/bootkube.tfvars
@@ -3,7 +3,7 @@ matchbox_rpc_endpoint = "matchbox.example.com:8081"
 ssh_authorized_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPQFdwVLr+alsWIgYRz9OdqDhnx9jjuFbkdSdpqq4gd9uZApYlivMDD4UgjFazQpezx8DiNhu9ym7i6LgAcdwi+10hE4L9yoJv9uBgbBxOAd65znqLqF91NtV4mlKP5YfJtR7Ehs+pTB+IIC+o5veDbPn+BYgDMJ2x7Osbn1/gFSDken/yoOFbYbRMGMfVEQYjJzC4r/qCKH0bl/xuVNLxf9FkWSTCcQFKGOndwuGITDkshD4r2Kk8gUddXPxoahBv33/2QH0CY5zbKYjhgN6I6WtwO+O1uJwtNeV1AGhYjurdd60qggNwx+W7623uK3nIXvJd3hzDO8u5oa53/tIL fake-test-key"
 
 cluster_name = "example"
-container_linux_version = "1353.7.0"
+container_linux_version = "1409.7.0"
 container_linux_channel = "stable"
 
 # Machines