Releases: siderolabs/talos
v1.8.0-alpha.1
smira
Andrey Smirnov
Talos 1.8.0-alpha.1 (2024-07-08)
Welcome to the v1.8.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Workload Apparmor Profile
Talos Linux can now apply the default AppArmor profiles to all workloads started via containerd, if the machine is installed with the AppArmor LSM enforced via the extraKernelArgs.
Eg:
machine:
install:
extraKernelArgs:
- security=apparmorBridge Interface
Talos Linux now support configuring 'vlan_filtering' for bridge interfaces.
Diagnostics
Talos Linux now shows diagnostics information for common problems related to misconfiguration via talosctl health and Talos dashboard.
DNS Forwarding for CoreDNS pods
Usage of the host DNS resolver as upstream for Kubernetes CoreDNS pods is now enabled by default. You can disable it
with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: falsePlease note that on running cluster you will have to kill CoreDNS pods for this change to apply.
PCI Devices
A list of PCI devices can now be obtained via PCIDevices resource, e.g. talosctl get pcidevices.
Component Updates
Kubernetes: 1.30.2
Linux: 6.6.36
containerd: 2.0.0-rc.3
runc: 1.2.0-rc.2
etcd: 3.5.14
Flannel: 0.25.3
Flannel CNI plugin: 1.5.1
Talos is built with Go 1.22.5.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD.
Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Noel Georgi
- Utku Ozdemir
- Artem Chernyshev
- Dmitry Sharshakov
- Spencer Smith
- Justin Garrison
- Steve Francis
- Bernard Gütermann
- Konrad Eriksson
- Andrew Rynhard
- Attila Oláh
- Birger J. Nordølum
- Dennis Marttinen
- Enrique Hernández Bello
- Evan Johnson
- Fabian Topfstedt
- Grzegorz Rozniecki
- Grzegorz Rożniecki
- Igor Rzegocki
- Jean-Francois Roy
- Marcel Richter
- Marco Franssen
- Michael Trip
- Ron Olson
- Serge Logvinov
- Simon-Boyer
- Steve Fan
- USBAkimbo
- Will Bush
- darox
- dhaines-quera
- leppeK
- looklose
Changes
166 commits
- 31af6b3f8 chore: fix the release step to include CNI bundle
- d7cd46643 chore: fix the push/tag steps
- c9aeeca3d chore: fix the Makefile
- 48cdbe0de release(v1.8.0-alpha.1): prepare release
- 2512ef435 test: fix the integrtion tests for apply-config
- 076f3c4f2 chore: improve link spec controller code
- 0454130ad feat: suppress controller runtime first N failures on the console
- 3d35e5468 chore: update hydrophone library
- 1f28726d4 chore: support version with and without
vprefix - 9a56b8527 chore(ci): fix parallel runs of tf pipelines
- be35f380c chore: update pkgs/tools/extras
- 93df23444 docs: update opengraph image for main landing pages
- d9d62d4da feat: update Linux to 6.6.36
- 6b0fe5b8c docs: update deploying cilium docs for v1.7 and v1.8
- 52611a90d feat: update Kubernetes to v1.30.2
- c19cc4ccb docs: clarify direct access needed to nodes in insecure mode
- b4c871e4b chore: bump dependencies
- cc345c8c9 feat: add support for configuring vlan filtering on the bridge
- 2d054ad35 chore: handle documents diff in
apply-configdry run - bd34f71f3 feat: add apparmor pkg
- 71857fd4d docs: fix typo:
messure->measure - f75f16b0a chore(ci): fix cluster name generation
- c603d2bf9 chore: output more info when
ExecuteCommandInPodfails - 4b5a7445e docs: fix missing Akamai platform in supported matrix
- 4701498a1 chore(ci): run e2e-aws-nvidia with zfs extension enabled
- 86a3222ae chore: use new disks api for iscsi tests
- 5ffc3f14b feat: show siderolink status on dashboard
- 6f6a5d105 chore: upgrade to rtnetlink/v2 library
- 1fb8453c2 chore: update Go modules
- 8e15621e8 chore(ci): add conformance pipelines
- 7fcb521a6 feat: use hydrophone instead of sonobuoy
- d1a0c1f98 test: fix the integration test for no META name
- 535006334 chore: fix our dns server implementation
- c6f90d014 chore: replace sync.Map with concurrent.HashTrieMap
- e8ced2c2d chore: drop k8s timeout in the default kubeconfig
- 7cbdce73f fix: detect CD devices, fix user disks wipe test
- aca475c66 chore: small usability fixes
- 26cf566dc chore: bump our coredns fork
- 5e66e117e fix: initial assignment of Hetzner Cloud Alias IP
- f07b79f4a feat: provide disk detection based on new blockdevices
- 8ee087268 chore(ci): drop crashdump, save logs as artifacts
- 7c9a14383 fix: volume discovery improvements
- 80ca8ff71 fix: update the cgroups for Talos core services
- fe317f1e1 docs: fix typo in QEMU guest agent support on Proxmox
- 8dbe2128a feat: implement Talos diagnostics
- 357d7754f fix: clean up VM runners on cluster destroy
- 41f92e0ba chore: update Go to 1.22.4, other updates
- 4621e9bb7 chore: add stale and lock issue workflows
- 82d9cd322 fix: add upgrade errata for arm64/zboot kernels
- 9a23d846c fix: downgrade Azure IMDS required version
- 30860210c test: fix hardware test not to require PCI devices
- 9fcc9b841 feat: update Flannel to v0.25.3
- 9d395b9de chore: use bun instead of npm
- a1684bdf8 chore: speed up go generate for enumer
- 4dd0aa712 feat: implement PCI device bus enumeration
- b0466e0ab fix: disable kexec on GCP/Azure
- 911c25574 chore: fix go.work resolution
- 2f088ede0 docs: add another example for installing cilium
- 3967e0777 feat: update etcd to 3.5.14
- 3367ded9f fix: correct time adjustment in
time.SyncController - 893e64fcb fix: replace
nslookupwithdigin integration tests - 0359c8537 chore: unify toml packages being used
- 4feb94ca0 feat: add multidoc check to the Talos quirks module
- 0b4a9777f docs: update talosctl install instructions for 1.8
- da8305ffb test: add a test for watchdog timers
- da7f27640 fix: mount
tracefsfilesystem - 7b37e5b63 chore(ci): fix integration extensions
- de7553d77 fix(ci): cron jobs
- eb510d9fd chore: require enabled bootloader for docker provisioner
- a9cf9b789 fix: correctly handle dns messages in our dns implementation
- c2b19dcb9 chore: move to containerd 2.0 API
- 92a274e9a fix: workaround problems with udevd races
- 31b24ea3d chore(ci): split integration misc
- 8a1371337 fix: produce stable order of bonds with equinix
- 6406193f4 test: add Equnix Metal sample metadata with two bonds
- 01ea82053 fix: time sync over NTP from future era
- 5aea42427 fix(ci): fix crons by setting up buildx always
- 84706c3e2 docs: default to brew docs for talosctl
- fcd65ff65 feat: enable forwardKubeDNSToHost by default
- 2e64e9e4e fix: require accepted CAs on worker nodes
- 23c1c4560 fix(ci): fix crons fby rekres
- 2d50392c5 feat: update containerd to 2.0.0-rc.2, runc to 1.2.0-rc.1
- a12e4bb24 chore(ci): fix github action crons
- e7bd9cd2b fix: decrease maximum negative ttl for dns responses
- 9c3ebad9f chore(ci): kresify gh actions
- ff60f6fde refactor: make some of the extensions package public
- ce8c86d64 fix: panic in osroot controller
- e1711cd3c chore: stop using containerd package for cri namespace
- d4307043f fix: update go-tail library to fix 'short read' error
- 7cd13ef4a docs: add documentation on using Multus with Talos
- 4784da3ef feat: use new circular buffer compressed chunks feature
- 78b48eb3a feat: include EDAC drivers
- 0bf2d69fb feat: update Kubernetes to 1.30.1
- 53f548913 fix: increase host dns packet ttl for pods
- dedb6d360 fix: update github.com/siderolabs/siderolink to v0.3.7
- 43939f1a6 docs: fix typos, add docker socket info
- 6663068bb chore: update project in GCP testing
- b86edc677 chore: update office hours in talos repo
- cfa25d22d chore: remove docs prior to 1.0 from website navigation
- 120705459 chore: handle I/O error for xfs_repair
- b7afe2669 feat: update Linux 6.6.30
- 26519ceed docs: update proxmox.md
- 851b91a0e fix: don't enable hostDNS for versions of Talos which do not have it
- 42ac5cd0c fix...
v1.7.5
Talos 1.7.5 (2024-06-21)
Welcome to the v1.7.5 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.33
Flannel: 0.25.3
Containerd: 1.7.18
Talos is built with Go 1.22.4.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Marcel Richter
Changes
7 commits
- 47731624e release(v1.7.5): prepare release
- 6d6751f6a feat: update Linux to 6.6.33, Go to 1.22.4
- 2c4aa7342 chore: fix our dns server implementation
- 8ad20a6c1 fix: initial assignment of Hetzner Cloud Alias IP
- 90c3a0244 feat: update Flannel to v0.25.3
- b14fe3973 fix: downgrade Azure IMDS required version
- fa6c85259 fix: decrease maximum negative ttl for dns responses
Changes from siderolabs/extras
Changes from siderolabs/pkgs
4 commits
- siderolabs/pkgs@c58ed7f feat: bump Go to 1.22.4
- siderolabs/pkgs@ab5d66b feat: update Linux to 6.6.33
- siderolabs/pkgs@0e1002e feat: enable SCTP support
- siderolabs/pkgs@e04adee feat: update containerd to 1.7.18
Changes from siderolabs/tools
Dependency Changes
- github.com/docker/docker v26.0.0 -> v26.0.2
- github.com/miekg/dns v1.1.58 -> v1.1.59
- github.com/siderolabs/extras v1.7.0-1-gbb76755 -> v1.7.0-2-g7c627a8
- github.com/siderolabs/pkgs v1.7.0-17-ga201d27 -> v1.7.0-21-gc58ed7f
- github.com/siderolabs/talos/pkg/machinery v1.7.4 -> v1.7.5
- github.com/siderolabs/tools v1.7.0-2-g345db93 -> v1.7.0-3-g6c94771
- google.golang.org/grpc v1.62.1 -> v1.63.2
Previous release can be found at v1.7.4
Images
ghcr.io/siderolabs/flannel:v0.25.3
ghcr.io/siderolabs/install-cni:v1.7.0-2-g7c627a8
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.1
registry.k8s.io/kube-controller-manager:v1.30.1
registry.k8s.io/kube-scheduler:v1.30.1
registry.k8s.io/kube-proxy:v1.30.1
ghcr.io/siderolabs/kubelet:v1.30.1
ghcr.io/siderolabs/installer:v1.7.5
registry.k8s.io/pause:3.8
v1.7.4
Talos 1.7.4 (2024-05-30)
Welcome to the v1.7.4 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Talos is built with Go 1.22.3.
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
Changes
2 commits
Dependency Changes
- github.com/beevik/ntp v1.4.2 -> v1.4.3
- github.com/siderolabs/talos/pkg/machinery v1.7.3 -> v1.7.4
- golang.org/x/net v0.24.0 -> v0.25.0
- golang.org/x/sys v0.19.0 -> v0.20.0
- golang.org/x/term v0.19.0 -> v0.20.0
- golang.org/x/text v0.14.0 -> v0.15.0
Previous release can be found at v1.7.3
Images
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.1
registry.k8s.io/kube-controller-manager:v1.30.1
registry.k8s.io/kube-scheduler:v1.30.1
registry.k8s.io/kube-proxy:v1.30.1
ghcr.io/siderolabs/kubelet:v1.30.1
ghcr.io/siderolabs/installer:v1.7.4
registry.k8s.io/pause:3.8
v1.7.3
Talos 1.7.3 (2024-05-29)
Welcome to the v1.7.3 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.32
Talos is built with Go 1.22.3.
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Dmitry Sharshakov
Changes
9 commits
- b4e09d39d release(v1.7.3): prepare release
- 92ec41c22 fix: mount
tracefsfilesystem - 1b3ac2ca6 fix: workaround problems with udevd races
- 1f2a870a7 fix: time sync over NTP from future era
- 4e9aa3007 fix: correctly handle dns messages in our dns implementation
- 8159a0057 fix: panic in osroot controller
- b78fb4fea fix: update go-tail library to fix 'short read' error
- 2df5319ce test: add a test for watchdog timers
- e529fccb2 feat: update Linux to 6.6.32
Changes from siderolabs/go-tail
Changes from siderolabs/pkgs
3 commits
- siderolabs/pkgs@a201d27 feat: bump Linux to 6.6.32
- siderolabs/pkgs@ce9b072 feat: update Linux firmware to 20240513
- siderolabs/pkgs@82b048a feat: update ipxe to the latest
Dependency Changes
- github.com/beevik/ntp v1.3.1 -> v1.4.2
- github.com/siderolabs/go-tail v0.1.0 -> v0.1.1
- github.com/siderolabs/pkgs v1.7.0-14-g9caa8be -> v1.7.0-17-ga201d27
- github.com/siderolabs/talos/pkg/machinery v1.7.2 -> v1.7.3
- golang.org/x/net v0.23.0 -> v0.24.0
- golang.org/x/sys v0.18.0 -> v0.19.0
- golang.org/x/term v0.18.0 -> v0.19.0
Previous release can be found at v1.7.2
Images
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.1
registry.k8s.io/kube-controller-manager:v1.30.1
registry.k8s.io/kube-scheduler:v1.30.1
registry.k8s.io/kube-proxy:v1.30.1
ghcr.io/siderolabs/kubelet:v1.30.1
ghcr.io/siderolabs/installer:v1.7.3
registry.k8s.io/pause:3.8
v1.7.2
Talos 1.7.2 (2024-05-17)
Welcome to the v1.7.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Kubernetes: 1.30.1
Linux: 6.6.30
Talos is built with Go 1.22.3.
Contributors
- Andrey Smirnov
- Artem Chernyshev
- Bernard Gütermann
- Dmitriy Matrenichev
- Noel Georgi
- Spencer Smith
- Utku Ozdemir
Changes
11 commits
- f876025b3 release(v1.7.2): prepare release
- 53eff982f feat: update Kubernetes to 1.30.1
- 5bc446e85 chore: update project in GCP testing
- abaff6084 fix: increase host dns packet ttl for pods
- 9189fdf4a chore: handle I/O error for xfs_repair
- 172569f56 fix: don't enable hostDNS for versions of Talos which do not have it
- a91527ef7 chore: extract
pkg/imager/quirkstopkg/machinery - 5e1544432 fix: check for
nilmachine config during installation - 44853ba0f feat: update Go to 1.22.3, Linux to 6.6.30
- 24c353235 fix: do not fail cli action tracker when boot id cannot be read
- 4aeb22f76 fix: use a fresh context for etcd unlock
Changes from siderolabs/pkgs
5 commits
- siderolabs/pkgs@9caa8be fix: disable CONFIG_EFI_DISABLE_PCI_DMA option
- siderolabs/pkgs@4af5dcd feat: update Linux to 6.6.30
- siderolabs/pkgs@996f95d feat: update zfs package to v2.2.4
- siderolabs/pkgs@5e3978f feat: enable NFT FIB lookups
- siderolabs/pkgs@a3c7fbf feat: update Go to 1.22.3
Changes from siderolabs/tools
Dependency Changes
- github.com/siderolabs/pkgs v1.7.0-9-g76bd73c -> v1.7.0-14-g9caa8be
- github.com/siderolabs/talos/pkg/machinery v1.7.1 -> v1.7.2
- github.com/siderolabs/tools v1.7.0-1-g10b2a69 -> v1.7.0-2-g345db93
- k8s.io/api v0.30.0 -> v0.30.1
- k8s.io/apiserver v0.30.0 -> v0.30.1
- k8s.io/client-go v0.30.0 -> v0.30.1
- k8s.io/component-base v0.30.0 -> v0.30.1
- k8s.io/kube-scheduler v0.30.0 -> v0.30.1
- k8s.io/kubectl v0.30.0 -> v0.30.1
- k8s.io/kubelet v0.30.0 -> v0.30.1
- k8s.io/pod-security-admission v0.30.0 -> v0.30.1
Previous release can be found at v1.7.1
Images
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.1
registry.k8s.io/kube-controller-manager:v1.30.1
registry.k8s.io/kube-scheduler:v1.30.1
registry.k8s.io/kube-proxy:v1.30.1
ghcr.io/siderolabs/kubelet:v1.30.1
ghcr.io/siderolabs/installer:v1.7.2
registry.k8s.io/pause:3.8
v1.8.0-alpha.0
smira
Andrey Smirnov
Talos 1.8.0-alpha.0 (2024-05-02)
Welcome to the v1.8.0-alpha.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.29
containerd: 1.7.16
Talos is built with Go 1.22.2.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD.
Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Utku Ozdemir
- Dmitry Sharshakov
- Artem Chernyshev
- Bernard Gütermann
- Birger J. Nordølum
- Dennis Marttinen
- Evan Johnson
- Grzegorz Rożniecki
- Igor Rzegocki
- Noel Georgi
- Spencer Smith
- darox
- looklose
Changes
52 commits
- 8df5b85ec release(v1.8.0-alpha.0): prepare release
- 07f78182c fix: use a fresh context for etcd unlock
- 84cd7dbec feat: update Linux to 6.6.29
- 70fdca6a4 chore: update minimum hardware requirement for vmware ova
- b690ffeb8 test: improve DNS resolver test stability
- 5aa0299b6 style: use correct capitalization for openstack
- 4c0c626b7 feat: use zstd compression in place of xz
- 98906ed6e fix: use reboot delay only in case of error
- 05fd042bb test: improve the reset integration tests
- 8cdf0f7cb docs: fix typo in Cilium instructions
- dd1d279da fix: allow more flags in
talosctl cluster create --input-dir - ef4394e58 chore: update kernel and other packages
- ccdb4c8b1 chore: update google.golang.org/grpc to 1.63.2
- c5b59df69 fix: wait for devices to be discovered before probing filesystems
- 0821b9c50 feat: add
--non-masquerade-cidrsflag totalosctl cluster create - 2bf613ad3 fix: add endpoints for "virtual"
host-dnsservice - f4163aefe fix: bump priority of OpenStack routes if IPv6 and default gateway
- 6fbd1263c feat: report process MAC labels
- d46032821 fix: return proper value from Bridge.STP instead of plain nil
- bac1d00c3 chore: prepare for Talos 1.8
- d6c8067e1 docs: make 1.7 docs the default
- d7c3a0735 docs: add what's new for v1.7
- 908f67fa1 feat: add host dns support for resolving member addrs
- 0d20b637d feat: update Kubernetes to 1.30.0
- ec69d7a78 chore: replace math/rand with math/rand/v2
- 89040ce43 chore: update go-blockdevice/v2 library to the latest version
- 0a785802e fix: overlay installer operations
- b1b63f658 fix: mark overlay installer executable
- 3433fa13b feat: use container DNS when in container mode
- 5d07ac5a7 fix: close apid inter-backend connections gracefully for real
- 7ba18555b docs: fix typos in Akamai and AWS platform docs
- 3dd1f4e88 chore: extract
pkg/imager/quirkstopkg/machinery - 78bc3a433 docs: update Cilium docs
- 831f3d39e feat: update Flannel to v0.25.1
- ea5b3ff0c feat: update Kubernetes to v1.30.0-rc.2
- 54dac5ed4 feat: update Linux 6.6.24, containerd 1.7.15
- c51f146da docs: update Akamai platform docs
- 9550f5ff7 docs: fix getAuthenticationMethod and completePathFromNode docs
- bfbd02abf fix: assign different priority to IPv6 default gateway on OpenStack
- c8f674bd3 test: add a test for 'spin' container runtime
- 5390ccd48 chore: replace []byte with string and use go:embed for templates
- ba7cdc8c8 chore: optimize DNSResolveCacheController
- 145f24063 fix: don't modify a global map of profiles
- 6fe91ad9c feat: provide Kubernets/Talos version compatibility for 1.8
- 909a5800e fix: generate secureboot ISO .der certificate correctly
- b0fdc3c8c fix: make static pods check output consistent
- c6ad0fcce fix: validate that workers don't get cluster CA key
- 3735add87 fix: reconnect to the logs stream in dashboard after reboot
- 9aa1e1b79 fix: present all accepted CAs to the kube-apiserver
- 336e61174 fix: close the apid connection to other machines gracefully
- ff2c427b0 fix: pre-create nftables chain to make kubelet use nftables
- 5622f0e45 docs: change localDNS to hostDNS in release notes yaml section
Changes from siderolabs/discovery-client
2 commits
- siderolabs/discovery-client@ca662d2 feat: export default GRPC dial options for the client
- siderolabs/discovery-client@7a767fa chore: bump Go, deps and rekres
Changes from siderolabs/extras
Changes from siderolabs/pkgs
12 commits
- siderolabs/pkgs@28c5696 feat: update Linux to 6.6.29
- siderolabs/pkgs@9c8a02c feat: update containerd to 1.7.16
- siderolabs/pkgs@ca6249b feat: compress amd64 Linux kernel using zstd
- siderolabs/pkgs@718a7da feat: enable SELinux
- siderolabs/pkgs@207481f feat(intel): add support for power management and ACPI options for Intel CPUs
- siderolabs/pkgs@dfa7dce feat: update Linux to 6.6.28
- siderolabs/pkgs@7b30b61 fix: use proper EFI zBoot image
- siderolabs/pkgs@010913b feat: update Linux 6.6.26, containerd 1.7.15
- siderolabs/pkgs@da397fa feat: enable BFQ IO scheduler
- siderolabs/pkgs@c839801 feat: enable zboot on arm64 with zstd compression
- siderolabs/pkgs@1b28e2c feat: go 1.22.2, Linux 6.6.24
- siderolabs/pkgs@05db2a8 fix: revert musl to 1.2.4
Changes from siderolabs/tools
Dependency Changes
- cloud.google.com/go/compute/metadata v0.2.3 -> v0.3.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.5.1 -> v1.5.2
- github.com/aws/aws-sdk-go-v2/config v1.27.10 -> v1.27.11
- github.com/aws/aws-sdk-go-v2/service/kms v1.30.1 -> v1.31.0
- github.com/containerd/containerd v1.7.14 -> v1.7.16
- github.com/containernetworking/cni v1.1.2 -> v1.2.0
- github.com/docker/docker v26.0.0 -> v26.0.2
- github.com/google/go-tpm ee6cbcd136f8 -> 1fb84445f623
- github.com/hetznercloud/hcloud-go/v2 v2.7.0 -> v2.7.2
- github.com/insomniacslk/dhcp c728f5dd21c8 -> f1cffa2c0c49
- github.com/klauspost/compress v1.17.7 new
- github.com/miekg/dns v1.1.58 -> v1.1.59
- github.com/prometheus/procfs v0.13.0 -> v0.14.0
- github.com/rivo/tview a22293bda944 -> e119d15762fe
- github.com/scaleway/scaleway-sdk-go v1.0.0-beta.25 -> v1.0.0-beta.26
- github.com/siderolabs/discovery-client v0.1.8 -> v0.1.9
- github.com/siderolabs/extras v1.7.0-1-gbb76755 -> v1.8.0-alpha.0
- github.com/siderolabs/pkgs v1.7.0-6-g29106c0 -> v1.8.0-alpha.0-10-g28c5696
- github.com/siderolabs/talos/pkg/machinery v1.7.0 -> v1.8.0-alpha.0
- github.com/siderolabs/tools v1.7.0-1-g10b2a69 -> v1.8.0-alpha.0
- golang.org/x/net v0.23.0 -> v0.24.0
- golang.org/x/oauth2 v0.18.0 -> v0.19.0
- golang.org/x/sync v0.6.0 -> v0.7.0
- golang.org/x/sys v0.18.0 -> v0.19.0
- golang.org/x/term v0.18.0 -> v0.19.0
- google.golang.org/grpc v1.62.1 -> v1.63.2
Previous release can be found at v1.7.0
Images
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.8.0-alpha.0
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0
registry.k8s.io/kube-controller-manager:v1.30.0
registry.k8s.io/kube-scheduler:v1.30.0
registry.k8s.io/kube-proxy:v1.30.0
ghcr.io/siderolabs/kubelet:v1.30.0
ghcr.io/siderolabs/installer:v1.8.0-alpha.0
registry.k8s.io/pause:3.8
v1.7.1
Talos 1.7.1 (2024-05-01)
Welcome to the v1.7.1 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.6.29
containerd: 1.7.16
Talos is built with Go 1.22.2.
Contributors
- Andrey Smirnov
- Dmitriy Matrenichev
- Igor Rzegocki
- Spencer Smith
Changes
9 commits
- e9cb904e6 release(v1.7.1): prepare release
- 5614934c4 feat: update Linux to 6.6.29
- 1d9705af8 chore: update minimum hardware requirement for vmware ova
- 22e5753c3 test: improve DNS resolver test stability
- 498b68193 test: improve the reset integration tests
- 50023bc4e fix: wait for devices to be discovered before probing filesystems
- 41024e17a fix: bump priority of OpenStack routes if IPv6 and default gateway
- bd41fee8c fix: add endpoints for "virtual"
host-dnsservice - 2db54c779 fix: return proper value from Bridge.STP instead of plain nil
Changes from siderolabs/pkgs
3 commits
- siderolabs/pkgs@76bd73c feat: update Linux to 6.6.29
- siderolabs/pkgs@6d1f537 feat: update containerd to 1.7.16
- siderolabs/pkgs@bedd1de feat(intel): add support for power management and ACPI options for Intel CPUs
Dependency Changes
- github.com/containerd/containerd v1.7.14 -> v1.7.16
- github.com/siderolabs/pkgs v1.7.0-6-g29106c0 -> v1.7.0-9-g76bd73c
- github.com/siderolabs/talos/pkg/machinery v1.7.0 -> v1.7.1
Previous release can be found at v1.7.0
Images
ghcr.io/siderolabs/flannel:v0.25.1
ghcr.io/siderolabs/install-cni:v1.7.0-1-gbb76755
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.13
registry.k8s.io/kube-apiserver:v1.30.0
registry.k8s.io/kube-controller-manager:v1.30.0
registry.k8s.io/kube-scheduler:v1.30.0
registry.k8s.io/kube-proxy:v1.30.0
ghcr.io/siderolabs/kubelet:v1.30.0
ghcr.io/siderolabs/installer:v1.7.1
registry.k8s.io/pause:3.8
v1.7.0
Talos 1.7.0 (2024-04-19)
Welcome to the v1.7.0 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Documentation on What's New in Talos 1.7.0
CA Rotation
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Device Selectors
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
DNS Caching
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: falseYou can also enable dns caching for k8s pods with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: truePlease note that on running cluster you will have to kill CoreDNS pods for this change to apply.
If you want to can also enable the resolving of member addresses through their host and node names:
machine:
features:
hostDNS:
enabled: true
resolveMemberNames: trueExtension Services Config
Talos now supports supplying configuration files and environment variables for extension services.
The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=upsFor documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
IPTables
Talos Linux now forces kubelet and kube-proxy to use iptables-nft instead of iptables-legacy (xtables) which was the default
before Talos 1.7.0.
Container images based on iptables-wrapper should work without changes, but if there was a direct call to legacy mode of iptables, make sure
to update to use iptables-nft.
Kubernetes Upgrade
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
KubeSpan
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members.
This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: trueLogging
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp:https://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07Time Sync
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0OpenNebula
Talos Linux now supports OpenNebula platform.
Platforms
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Kubernetes API Server Service Account Key
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
SBC
Talos has split the SBC's (Single Board Computers) into separate repositories.
There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images.
The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Secure Boot Image
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: rawSyslog
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Component Updates
Linux: 6.6.28
etcd: 3.5.11
Kubernetes: 1.30.0
containerd: 1.7.15
runc: 1.1.12
Flannel: 0.25.1
Talos is built with Go 1.22.2.
Hardware Watchdog Timers
Talos Linux now supports hardware watchdog timers configuration.
If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0sContributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Andrey Smirnov
- Artem Chernyshev
- Dmitry Sharshakov
- Justin Garrison
- Radosław Piliszek
- Spencer Smith
- Anthony ARNAUD
- Steve Francis
- Anastasios Papagiannis
- Andrei Kvapil
- Andrian Zubovic
- AvnarJakob
- Cas de Reuver
- Christian Mohn
- Christian WALDBILLIG
- Dennis Marttinen
- Dmitry Sharshakov
- Drew Hess
- Evan Johnson
- ExtraClock
- Fabiano Fidêncio
- Henno Schooljan
- Hervé Werner
- JJGadgets
- Jacob McSwain
- Jean-Tiare Le Bigot
- Jonomir
- Kai Hanssen
- Konrad Eriksson
- Louis SCHNEIDER
- Matthieu S
- Michael Stephenson
- Nico Berlee
- Niklas Wik
- Pip Oomen
- Saiyam Pathak
- Sebastiaan Gerritsen
- Sebastian Gaiser
- Serge Logvinov
- Tim Jones
- bri
- ebcrypto
- edwinavalos
- fazledyn-or
- goodmost
- james-dreebot
- pardomue
- shurkys
- stereobutter
Changes
239 commits
- 70fb41fff release(v1.7.0): prepare release
- 27e8455d7 chore: update extension filter for xen-guest-agent
- 3a2612df5 feat: update Linux to 6.6.28
- d9760fc9b docs: add what's new for v1.7
- 83ad8d65c feat: add host dns support for resolving member addrs
- 24141f078 feat: update Kubernetes to 1.30.0
- 865239188 chore: update go-blockdevice/v2 library to the latest version
- b72f0d7f9 fix: overlay installer operations
- 81cd2b16e fix: mark overlay installer executable
- a690e30ef feat: update Flannel to v0.25.1
- fa5c7ee70 fix: close apid inter-backend connections gracefully for real
- d821322c7 feat: use container DNS when in container mode
- 77581447c release(v1.7.0-beta.1): prepare release
- 1c0a91728 chore: disable max of one commit
- 50d475b41 feat: update Kubernetes to v1.30.0-rc.2
- a5b4a8a91 feat: update Linux 6.6.24, containerd 1.7.15
- eea41cdae fix: assign different priority to IPv6 default gateway on OpenStack
- d5932a390 chore: optimize DNSResolveCacheController
- eca03b03c fix: don't modify a global map of profiles
- 4da63d1dd test: add a test for 'spin' container runtime
- fb84efce3 feat: provide Kubernets/Talos version compatibility for 1.8
- 7d24ddd73 fix: generate secureboot ISO .der certificate correctly
- 028a5b4b1 fix: reconnect to the logs stream in dashboard after reboot
- 5019c9fa7 fix: present all accepted CAs to the kube-apiserver
- 09ef5b3c9 fix: validate that workers don't get cluster CA key
- 4f7cb9c3a fix: make static pods check output consistent
- dd7d8d3aa fix: close the apid connection to other machines gracefully
- 41a54e8a0 fix: pre-create nftables chain to make kubelet use nftables
- abf302fb5 docs: change localDNS to hostDNS in release notes yaml section
- 78f971370 release(v1.7.0-beta.0): prepare release
- 01d8b897c fix: make safeReset truly safe to call multiple times
- 653f838b0 feat: support multiple Docker cluster in talosctl cluster create
- 951904554 chore: bump dependencies (go 1.22.2)
- 862c76001 feat: add support for CoreDNS forwarding to host DNS
- e8ae5ef63 feat: add akamai platform support
- 5c0f74b37 fix: don't announce the VIP on acquire failure
- 2f0fe10d5 chore: update sbc docs
- 1b17008e9 fix:...
v1.7.0-beta.1
smira
Andrey Smirnov
Talos 1.7.0-beta.1 (2024-04-12)
Welcome to the v1.7.0-beta.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
CA Rotation
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Device Selectors
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
DNS Caching
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: falseYou can also enable dns caching for k8s pods with:
machine:
features:
hostDNS:
enabled: true
forwardKubeDNSToHost: truePlease note that on running cluster you will have to kill CoreDNS pods for this change to apply.
Extension Services Config
Talos now supports supplying configuration files and environment variables for extension services.
The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=upsFor documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
IPTables
Talos Linux now forces kubelet and kube-proxy to use iptables-nft instead of iptables-legacy (xtables) which was the default
before Talos 1.7.0.
Container images based on iptables-wrapper should work without changes, but if there was a direct call to legacy mode of iptables, make sure
to update to use iptables-nft.
Kubernetes Upgrade
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
KubeSpan
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members.
This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: trueLogging
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp:https://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07Time Sync
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0OpenNebula
Talos Linux now supports OpenNebula platform.
Platforms
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Kubernetes API Server Service Account Key
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
SBC
Talos has split the SBC's (Single Board Computers) into separate repositories.
There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images.
The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Secure Boot Image
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: rawSyslog
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Component Updates
Linux: 6.6.26
etcd: 3.5.11
Kubernetes: 1.30.0-rc.2
containerd: 1.7.15
runc: 1.1.12
Flannel: 0.24.4
Talos is built with Go 1.22.2.
Hardware Watchdog Timers
Talos Linux now supports hardware watchdog timers configuration.
If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0sContributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Andrey Smirnov
- Artem Chernyshev
- Dmitry Sharshakov
- Justin Garrison
- Radosław Piliszek
- Spencer Smith
- Anthony ARNAUD
- Steve Francis
- Anastasios Papagiannis
- Andrei Kvapil
- Andrian Zubovic
- AvnarJakob
- Cas de Reuver
- Christian Mohn
- Christian WALDBILLIG
- Dennis Marttinen
- Dmitry Sharshakov
- Drew Hess
- Evan Johnson
- ExtraClock
- Fabiano Fidêncio
- Henno Schooljan
- Hervé Werner
- JJGadgets
- Jacob McSwain
- Jean-Tiare Le Bigot
- Jonomir
- Kai Hanssen
- Konrad Eriksson
- Louis SCHNEIDER
- Matthieu S
- Michael Stephenson
- Nico Berlee
- Niklas Wik
- Pip Oomen
- Saiyam Pathak
- Sebastiaan Gerritsen
- Sebastian Gaiser
- Serge Logvinov
- Tim Jones
- bri
- ebcrypto
- edwinavalos
- fazledyn-or
- goodmost
- james-dreebot
- pardomue
- shurkys
- stereobutter
Changes
227 commits
- 77581447c release(v1.7.0-beta.1): prepare release
- 1c0a91728 chore: disable max of one commit
- 50d475b41 feat: update Kubernetes to v1.30.0-rc.2
- a5b4a8a91 feat: update Linux 6.6.24, containerd 1.7.15
- eea41cdae fix: assign different priority to IPv6 default gateway on OpenStack
- d5932a390 chore: optimize DNSResolveCacheController
- eca03b03c fix: don't modify a global map of profiles
- 4da63d1dd test: add a test for 'spin' container runtime
- fb84efce3 feat: provide Kubernets/Talos version compatibility for 1.8
- 7d24ddd73 fix: generate secureboot ISO .der certificate correctly
- 028a5b4b1 fix: reconnect to the logs stream in dashboard after reboot
- 5019c9fa7 fix: present all accepted CAs to the kube-apiserver
- 09ef5b3c9 fix: validate that workers don't get cluster CA key
- 4f7cb9c3a fix: make static pods check output consistent
- dd7d8d3aa fix: close the apid connection to other machines gracefully
- 41a54e8a0 fix: pre-create nftables chain to make kubelet use nftables
- abf302fb5 docs: change localDNS to hostDNS in release notes yaml section
- 78f971370 release(v1.7.0-beta.0): prepare release
- 01d8b897c fix: make safeReset truly safe to call multiple times
- 653f838b0 feat: support multiple Docker cluster in talosctl cluster create
- 951904554 chore: bump dependencies (go 1.22.2)
- 862c76001 feat: add support for CoreDNS forwarding to host DNS
- e8ae5ef63 feat: add akamai platform support
- 5c0f74b37 fix: don't announce the VIP on acquire failure
- 2f0fe10d5 chore: update sbc docs
- 1b17008e9 fix: handle more OpenStack link types
- e7d804140 fix: always update firewall rules (kubespan)
- 78b9bd927 fix: report unsupported x86_64 microarchitecture level
- 71d90ba5f fix: retry in the fixed amount of time if grpc relay failed
- d320498a4 chore: bump dependencies
- 3195e5d15 fix: force Flannel CNI to use KubePrism Kubernetes API endpoint
- 917043fb5 chore: bump tools, pkgs and extra to stable
- f515741b5 chore: add equinix e2e-tests
- 117e60583 feat: add support for static extra fields for JSON logs
- 090143b03 fix: allow platform cmdline args to be platform-specific
- 7a68504b6 feat: support rotating Kubernetes CA
- fac3dd043 fix: don't set default endpoints on gen config
- 8dc4910c4 chore: enable "WG over GRPC" testing in siderolink agent tests
- bac366e43 chore: add
ExtraInfofield for extensions - 0fc24eeb0 feat: provide insecure flag to image...
v1.7.0-beta.0
smira
Andrey Smirnov
Talos 1.7.0-beta.0 (2024-04-05)
Welcome to the v1.7.0-beta.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
CA Rotation
Talos Linux now supports rotating the root CA certificate and key for Talos API and Kubernetes API.
Device Selectors
Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).
DNS Caching
Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:
machine:
features:
hostDNS:
enabled: falseExtension Services Config
Talos now supports supplying configuration files and environment variables for extension services.
The extension service configuration is a separate config document. An example is shown below:
---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
- content: MONITOR ${upsmonHost} 1 remote pass password
mountPath: /usr/local/etc/nut/upsmon.conf
environment:
- UPS_NAME=upsFor documentation, see Extension Services Config Files.
Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.
Kubernetes Upgrade
The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.
KubeSpan
Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members.
This feature turned out to be less helpful than expected and caused unnecessary performance issues.
Previous behavior can be restored with:
machine:
network:
kubespan:
harvestExtraEndpoints: trueLogging
Talos Linux now supports setting extra tags when sending logs in JSON format:
machine:
logging:
destinations:
- endpoint: "udp:https://127.0.0.1:12345/"
format: "json_lines"
extraTags:
server: s03-rack07Time Sync
Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.
Talos Linux can now sync to PTP devices (e.g. provided by the hypervisor) skipping the network time servers.
In order to activate PTP sync, set machine.time.servers to the PTP device name (e.g. /dev/ptp0):
machine:
time:
servers:
- /dev/ptp0OpenNebula
Talos Linux now supports OpenNebula platform.
Platforms
Talos Linux now supports Akamai Connected Cloud provider (platform akamai).
Kubernetes API Server Service Account Key
Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.
SBC
Talos has split the SBC's (Single Board Computers) into separate repositories.
There will not be any more SBC specific release assets as part of Talos release.
The default Talos Installer image will stop working for SBC's and will fail the upgrade, if used, starting from Talos v1.7.0.
The SBC's images and installers can be generated on the fly using Image Factory or using Imager for custom images.
The list of official SBC's images supported by Image Factory can be found in the Overlays repository.
Secure Boot Image
Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:
output:
kind: iso
isoOptions:
sdBootEnrollKeys: force # default is still if-safe
outFormat: rawSyslog
Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.
This is mostly implemented for extension services that log to syslog.
Component Updates
Linux: 6.6.24
etcd: 3.5.11
Kubernetes: 1.30.0-rc.1
containerd: 1.7.14
runc: 1.1.12
Flannel: 0.24.4
Talos is built with Go 1.22.2.
Hardware Watchdog Timers
Talos Linux now supports hardware watchdog timers configuration.
If enabled, and the machine becomes unresponsive, the hardware watchdog will reset the machine.
The watchdog can be enabled with the following configuration document:
apiVersion: v1alpha1
kind: WatchdogTimerConfig
device: /dev/watchdog0
timeout: 3m0sContributors
- Andrey Smirnov
- Noel Georgi
- Dmitriy Matrenichev
- Utku Ozdemir
- Andrey Smirnov
- Artem Chernyshev
- Dmitry Sharshakov
- Justin Garrison
- Radosław Piliszek
- Spencer Smith
- Anthony ARNAUD
- Steve Francis
- Anastasios Papagiannis
- Andrei Kvapil
- Andrian Zubovic
- AvnarJakob
- Cas de Reuver
- Christian Mohn
- Christian WALDBILLIG
- Dmitry Sharshakov
- Drew Hess
- Evan Johnson
- ExtraClock
- Fabiano Fidêncio
- Henno Schooljan
- Hervé Werner
- JJGadgets
- Jacob McSwain
- Jean-Tiare Le Bigot
- Jonomir
- Kai Hanssen
- Konrad Eriksson
- Louis SCHNEIDER
- Matthieu S
- Michael Stephenson
- Nico Berlee
- Niklas Wik
- Pip Oomen
- Saiyam Pathak
- Sebastiaan Gerritsen
- Sebastian Gaiser
- Serge Logvinov
- Tim Jones
- bri
- ebcrypto
- edwinavalos
- fazledyn-or
- goodmost
- james-dreebot
- pardomue
- shurkys
- stereobutter
Changes
210 commits
- 78f971370 release(v1.7.0-beta.0): prepare release
- 01d8b897c fix: make safeReset truly safe to call multiple times
- 653f838b0 feat: support multiple Docker cluster in talosctl cluster create
- 951904554 chore: bump dependencies (go 1.22.2)
- 862c76001 feat: add support for CoreDNS forwarding to host DNS
- e8ae5ef63 feat: add akamai platform support
- 5c0f74b37 fix: don't announce the VIP on acquire failure
- 2f0fe10d5 chore: update sbc docs
- 1b17008e9 fix: handle more OpenStack link types
- e7d804140 fix: always update firewall rules (kubespan)
- 78b9bd927 fix: report unsupported x86_64 microarchitecture level
- 71d90ba5f fix: retry in the fixed amount of time if grpc relay failed
- d320498a4 chore: bump dependencies
- 3195e5d15 fix: force Flannel CNI to use KubePrism Kubernetes API endpoint
- 917043fb5 chore: bump tools, pkgs and extra to stable
- f515741b5 chore: add equinix e2e-tests
- 117e60583 feat: add support for static extra fields for JSON logs
- 090143b03 fix: allow platform cmdline args to be platform-specific
- 7a68504b6 feat: support rotating Kubernetes CA
- fac3dd043 fix: don't set default endpoints on gen config
- 8dc4910c4 chore: enable "WG over GRPC" testing in siderolink agent tests
- bac366e43 chore: add
ExtraInfofield for extensions - 0fc24eeb0 feat: provide insecure flag to imager
- a6b2f5456 feat: update Kubernetes to 1.30.0-rc.0, etcd to 3.5.13
- 0361ff895 docs: quickstart video and brew install
- b752a8618 chore: talosctl: add openSUSE OVMF paths
- 945648914 feat: support hardware watchdog timers
- 949ad11a2 chore: import siderolink as
siderolink-launchsubcommand - ee51f04af chore: azure e2e
- 55dd41c0d chore: update coredns to v1.11.2 in required section
- 8eacc4ba8 feat: support rotation of Talos API CA
- 92808e3bc feat: report Docker node resources in cluster show
- 84ec8c16f feat: support syncing to PTP clocks
- 7d43c9aa6 chore: annotate installer errors
- f737e6495 fix: populate routes to BGP neighbors (Equinix Metal)
- 19f15a840 chore: bump golangci-lint to 1.57.0
- 684011963 docs: add docs for overlays
- 9b6ec5929 chore: bump kernel
- 69f0466cd docs: remove repetitive words
- 113fb646e chore: use
go-talos-supportlibrary - 89fc68b45 fix: service lifecycle issues
- ead37abf0 test: disable volume tests
- c64523a7a feat: update Flannel to v0.24.4
- 15beb1478 feat: implement blockdevice watch controller
- 06e3bc0cb feat: implement Siderolink wireguard over GRPC
- 9afa70baf fix: patch correctly config in
talosctl upgrade-k8s - 3130caf95 chore: re-enable DRBD extension
- 3ba180d07 release(v1.7.0-alpha.1): prepare release
- 403ad93c3 feat: update dependencies
- 7376f34e8 fix: remove maintenance config when maintenance service is shut down
- 952801d8b fix: handle overlay partition options
- 465b9a4e6 fix: update discovery client wi...