Go modules · #311 by repository stars

github.com/siderolabs/talos

v1.14.2siderolabs/talos ↗New releases in your daily digest, changelog included.

Last release today
08 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Some releases are documented
notes for 17 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
3097 releases · first in 2018

Release timeline

3097 releases since 2018

2018202020222024

Releases

v1.7.0-alpha.0.0.20240202145736-d7d4154d5dc82 Feb 2024pre-release
Nothing published for this version
v1.7.0-alpha.01 Feb 2024pre-releaseDeprecated2 sources agree
`9d8cd4d05` chore: drop deprecated method EtcdRemoveMember
Welcome to the v1.7.0-alpha.0 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

Device Selectors

Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).

DNS Caching

Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:

machine: features: localDNS: false

Known Problems

ZFS and DRBD extensions are disabled in this release due to incompatibility with the latest Linux kernel.

Kubernetes API Server Service Account Key

Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.

Component Updates

Linux: 6.6.14 etcd: 3.5.11 Kubernetes: 1.29.1 containerd: 1.7.13 runc: 1.1.12 Flannel: 0.24.1

Talos is built with Go 1.21.6.

Contributors

Andrey Smirnov

Dmitriy Matrenichev

Utku Ozdemir

Noel Georgi

Andrey Smirnov

Radosław Piliszek

Artem Chernyshev

Spencer Smith

Steve Francis

Anthony ARNAUD

Cas de Reuver

Christian Mohn

Drew Hess

ExtraClock

Hervé Werner

JJGadgets

Jacob McSwain

Jonomir

Sebastian Gaiser

Serge Logvinov

Tim Jones

edwinavalos

stereobutter

Changes

<details><summary>81 commits</summary> 

2ff81c06b feat: update runc 1.1.12, containerd 1.7.13

9d8cd4d05 chore: drop deprecated method EtcdRemoveMember

17567f19b fix: take into account the moment seen when cleaning up CRI images

aa03204b8 docs: document the process of building custom kernel packages

7af48bd55 feat: use RSA key for kube-apiserver service account key

a5e13c696 fix: retry blockdevice open in the installer

593afeea3 fix: run the interactive installer loop to report errors

87be76b87 fix: be more tolerant to error handling in Mounts API

03add7503 docs: add section on using imager with extensions from tarball

ee0fb5eff docs: consolidate certificate management articles

9c14dea20 chore: bump coredns

ebeef2852 feat: implement local caching dns server

4a3691a27 docs: fix broken links in metal-network-configuration.md

c4ed189a6 docs: provide sane defaults for each release series in vmware script

8138d54c6 docs: clarify node taints/labels for worker nodes

b44551ccd feat: update Linux to 6.6.13

385707c5f docs: update vmware.sh

d1a79b845 docs: fix small typo in etcd maintenance guide

cf0603330 docs: copy generated JSON schema to host

f11139c22 docs: document local path provisioner install

e0dfbb8fb fix: allow META encoded values to be compressed

d677901b6 feat: implement device selector for 'physical'

7d1117289 docs: add missing talosconfig flag

8a1732bcb fix: pull in mptspi driver

c1e45071f refactor: use etcd configuration from the EtcdSpec resource

4e9b688d3 fix: use correct TTL for talosconfig in talosctl config new

fb5ad0555 feat: update Kubernetes default to 1.29.1

fe24139f3 docs: fork docs for v1.7

1c2d10ccc chore: bump dependencies

a599e3867 chore: allow custom registry to build installer/imager

3911ddf7b docs: add how-to for cert management

b0ee0bfba fix: strategic patch merging for audit policy

474eccdc4 fix: watch bufer overrun for RouteStatus

cc06b5d7a fix: fix .der output in talosctl gen secureboot

1dbb4abf4 fix: update discovery service client to v0.1.6

9782319c3 fix: support KubePrism settings in Kubernetes Discovery

6c5a0c281 feat: generate a single JSON schema for multidoc config

f70b47ddd fix: force KubePrism to connect using IPv4

d5321e085 fix: update kmsg with utf-8 fix

7fa7362dd fix: fix nodes on dashboard footer when node names are used in --nodes

ba88678f1 fix: merge ports and ingress configs correctly in NetworkRuleConfig

dea9bda2d fix: disk UUID & WWID always empty in talosctl disks

8dc112f36 chore: pull in NBD modules

f6926faab fix: default priority for ipv6

e8758dcba chore: support http downloads for assets in talosctl cluster create

265f21be0 fix: replace the filemap implementation to not buffer in memory

8db3c5b3c fix: pick correctly base installer image layers

0a30ef784 fix: imager should support different Talos versions

d6342cda5 docs: update latest version to v1.6.1

e6e422b92 chore: bump dependencies

5a19d078a fix: properly overwrite files on install

9eb6cea78 docs: secureboot sd-boot menu clarification

01f0cbe61 feat: support iPXE direct booting in talosctl cluster create

3ba84701d feat: pull in kernel modules for mlx Infiniband and VFIO

ba993e0ed docs: announce that SecureBoot is available

241bc9312 fix: update the way secureboot signer fetches certificate (azure)

59b62398f chore: modernize machined/pkg/controllers/k8s

760f793d5 fix: use correct prefix when installing SBC files

0b94550c4 chore: fix the gvisor test

3a787c1d6 docs: update 1.6 docs with Noel's feedback

d803e40ef docs: provide documentation for Talos 1.6

9a185a30f feat: update Kubernetes to v1.29.0

5934815d2 chore: split more kernel modules on amd64

10c59a6b9 fix: leave discovery service later in the reset sequence

0c86ca1cc chore: enable kubespan+firewall for cilium tests

98fd722d5 feat: provide compatibility for future Talos 1.7

131a1b167 fix: add a KubeSpan option to disable extra endpoint harvesting

4547ad9af feat: send actor id to the SideroLink events sink

04e774547 docs: cap max heading level

6bb1e99aa chore: optimize pcap dump

4f9d3b975 feat: update Kubernetes to v1.29.0-rc.2

46121c9fe docs: rework machine config documentation generation

e128d3c82 fix: talosctl cluster create not to enforce kubeprism always

320064c5a feat: update Go 1.21.5, Linux 6.1.65, etcd 3.5.11

270604bea fix: support user disks via symlinks

4f195dd27 chore: fix the release.toml

474fa0480 fix: store and execute desired action on emergency action

515ae2a18 docs: extend hetzner-cloud docs for arm64

eecc4dbd5 fix: trim leading spaces\newlines in inline manifest contents

dbf274ddf fix: skip writing the file if the contents haven't changed

6329222bd fix: do not panic in merge.Merge if map value is nil </details>

Changes from siderolabs/discovery-client

<details><summary>1 commit</summary> 

ff8f4be fix: enable gRPC keepalives </details>

Changes from siderolabs/extras

<details><summary>1 commit</summary> 

8909d6f chore: update Go to 1.21.5 </details>

Changes from siderolabs/go-api-signature

<details><summary>20 commits</summary> 

370cebf fix: always print the login URL on key renew flow

d28609a feat: move in the cli grpc interceptor logic, support service account in env

4602acc chore: add a dummy workflow

cfd21b6 fix: support validating signatures generated with the time in the future

74dd3dc chore: bump deps

d78bedb chore: bump deps

a034e9f feat: replace scopes with roles

5b4f3bb chore: run rekres

9dba116 chore: remove time.Sleep hack

e84e686 chore: bump dependencies

8baaf8a chore: bump deps

5f27e1e chore: add renovate bot and bump deps

69886dc feat: allow custom validations on PGP key

63d4da3 fix: limit clock skew for short-lived keys

cdb9722 feat: add support for +-5 min clock skew

7b80a50 refactor: use options pattern in RegisterPGPPublicKey

c647861 feat: add scopes to RegisterPublicKeyRequest

5d3647e feat: provide more client PGP functions

2b682ec feat: initial version

a4c2943 chore: initial commit </details>

Changes from siderolabs/go-kmsg

<details><summary>2 commits</summary> 

e358d13 fix: decode escape sequences while reading from kmsg

4297bd5 feat: add BSD support </details>

Changes from siderolabs/pkgs

<details><summary>21 commits</summary> 

96cc841 chore: bump deps

064fd58 feat: update Linux to 6.6.14, enable XDP

efbbd23 feat: update Linux to 6.6.13

dfb5026 chore: switch to git ref for raspberrypi firmware

4af2d0f feat: update Linux to 6.1.74

2358efe fix: enable FUSION_SPI driver

f376a53 chore: bump dependencies

583e519 feat: add v4l usb video class (webcam) drivers

2d3ca68 feat: enable NBD

f647edd feat: update Linux to 6.1.69

6af1691 feat: enable VFIO also on amd64

d633cd6 feat: enable modules for mlx infiniband

4c59641 fix: zfs module build

e325097 feat: enable nct6683 sensors as module

d6185ec feat: enable IRQ remapping on amd64

814dc60 feat: update containerd to 1.7.11

dd71790 chore: rekres to fix 'failed' build on main

a36dec4 feat: split more device drivers into modules

97270a2 feat: update Linux to 6.1.67

8a73907 feat: update Go to 1.21.5

8f0ffb9 feat: update zfs to v2.2.2 </details>

Changes from siderolabs/tools

<details><summary>6 commits</summary> 

f4b41d1 fix: rust toolchain

8cc79e6 feat: update dependencies

c7076eb chore: bump dependencies

a80a2aa feat: update Go to 1.21.6

b677a2b feat: add rust build stage

1659d82 feat: update Go to 1.21.5 </details>

Dependency Changes

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 -> v1.9.1

github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 -> v1.5.1

github.com/aws/aws-sdk-go-v2/config v1.25.6 -> v1.26.6

github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5 -> v1.14.11

github.com/aws/smithy-go v1.17.0 -> v1.19.0

github.com/beevik/ntp v1.3.0 -> v1.3.1

github.com/containerd/cgroups/v3 v3.0.2 -> v3.0.3

github.com/containerd/containerd v1.7.9 -> v1.7.13

github.com/containernetworking/plugins v1.3.0 -> v1.4.0

github.com/coredns/coredns v1.11.1 new

github.com/cosi-project/runtime v0.3.19 -> v0.3.20

github.com/docker/docker v24.0.7 -> v25.0.2

github.com/docker/go-connections v0.4.0 -> v0.5.0

github.com/emicklei/dot v1.6.0 -> v1.6.1

github.com/foxboron/go-uefi 18b9ba9cd4c3 -> 48be911532c2

github.com/gdamore/tcell/v2 v2.6.0 -> v2.7.0

github.com/google/go-containerregistry v0.16.1 -> v0.19.0

github.com/google/go-tpm v0.9.0 -> ee6cbcd136f8

github.com/google/uuid v1.4.0 -> v1.6.0

github.com/hetznercloud/hcloud-go/v2 v2.4.0 -> v2.6.0

github.com/insomniacslk/dhcp b0416c0f187a -> 15c9b8791914

github.com/jsimonetti/rtnetlink v1.4.0 -> v1.4.1

github.com/miekg/dns v1.1.58 new

github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.0-rc6

github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.1.0

github.com/packethost/packngo v0.30.0 -> v0.31.0

github.com/pin/tftp 2f79be2dba4e new

github.com/pmorjan/kmod v1.1.0 -> v1.1.1

github.com/rivo/tview 33a1d271f2b6 -> 8526c9fe1b54

github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 -> v1.0.0-beta.22

github.com/siderolabs/discovery-client v0.1.5 -> v0.1.6

github.com/siderolabs/extras v1.6.0-1-g113887a -> v1.7.0-alpha.0

github.com/siderolabs/go-api-signature v0.3.1 new

github.com/siderolabs/go-kmsg v0.1.3 -> v0.1.4

github.com/siderolabs/pkgs v1.6.0-5-g3ae2450 -> v1.7.0-alpha.0-19-g96cc841

github.com/siderolabs/talos/pkg/machinery v1.6.0 -> v1.6.0-alpha.2

github.com/siderolabs/tools v1.6.0-1-g336d248 -> v1.7.0-alpha.0-5-gf4b41d1

github.com/u-root/u-root v0.11.0 -> v0.12.0

go.etcd.io/etcd/api/v3 v3.5.11 -> v3.5.12

go.etcd.io/etcd/client/pkg/v3 v3.5.11 -> v3.5.12

go.etcd.io/etcd/client/v3 v3.5.11 -> v3.5.12

go.etcd.io/etcd/etcdutl/v3 v3.5.11 -> v3.5.12

go4.org/netipx 6213f710f925 -> fdeea329fbba

golang.org/x/net v0.19.0 -> v0.20.0

golang.org/x/oauth2 v0.15.0 -> v0.16.0

golang.org/x/sync v0.5.0 -> v0.6.0

golang.org/x/sys v0.15.0 -> v0.16.0

golang.org/x/term v0.15.0 -> v0.16.0

google.golang.org/grpc v1.59.0 -> v1.61.0

google.golang.org/protobuf v1.31.0 -> v1.32.0

k8s.io/api v0.29.0 -> v0.29.1

k8s.io/apimachinery v0.29.0 -> v0.29.1

k8s.io/apiserver v0.29.0 -> v0.29.1

k8s.io/client-go v0.29.0 -> v0.29.1

k8s.io/component-base v0.29.0 -> v0.29.1

k8s.io/cri-api v0.29.0 -> v0.29.1

k8s.io/klog/v2 v2.110.1 -> v2.120.1

k8s.io/kube-scheduler v0.29.0 -> v0.29.1

k8s.io/kubectl v0.29.0 -> v0.29.1

k8s.io/kubelet v0.29.0 -> v0.29.1

Previous release can be found at v1.6.0

v1.6.0-alpha.221 Nov 2023pre-releaseDeprecated2 sources agree

The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.

Welcome to the v1.6.0-alpha.2 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

Kubelet Credential Provider Configuration

Talos now supports specifying the kubelet credential provider configuration in the Talos configuration file. It can be set under machine.kubelet.credentialProviderConfig and kubelet will be automatically configured to with the correct flags. The credential binaries are expected to be present under /usr/local/lib/kubelet/credentialproviders. Talos System Extensions can be used to install the credential binaries.

Network Device Selectors

Previously, network device selectors only matched the first link, now the configuration is applied to all matching links.

Linux Firmware

Starting with Talos 1.6, there is no Linux firmware included in the initramfs. Customers who need Linux firmware can pull them as extension during install time using the image factory service. If the initial boot requires firmware, a custom iso can be built with the firmware included using the image factory service. This also ensures that the linux-firmware is not tied to a specific Talos version.

Kube-Scheduler Configuration

Talos now supports specifying the kube-scheduler configuration in the Talos configuration file. It can be set under cluster.scheduler.config and kube-scheduler will be automatically configured to with the correct flags.

KubePrism

KubePrism is enabled by default on port 7445.

Sysctl

Talos now handles sysctl/sysfs key names in line with sysctl.conf(5):

if the first separator is '/', no conversion is done
if the first separator is '.', dots and slashes are remapped

Example (both sysctls are equivalent):

machine:
  sysctls:
    net/ipv6/conf/eth0.100/disable_ipv6: "1"
    net.ipv6.conf.eth0/100.disable_ipv6: "1"

talosctl CLI

The command images deprecated in Talos 1.5 was removed, please use talosctl images default instead.

Component Updates

Linux: 6.1.63 containerd: 1.7.9 CoreDNS: 1.11.1 Kubernetes: 1.29.0-alpha.3 Flannel: 0.22.3 etcd: 3.5.10 runc: 1.1.10

Talos is built with Go 1.21.4.

Contributors

Andrey Smirnov
Noel Georgi
Dmitriy Matrenichev
Andrey Smirnov
Oscar Utbult
Serge Logvinov
Utku Ozdemir
Artem Chernyshev
Nico Berlee
Radosław Piliszek
Steve Francis
Thomas Way
ndbrew
Andrei Kvapil
Christian Rolland
Drew Hess
Enno Boland
Florian Berchtold
Henry Sachs
Jacob McSwain
Jacob McSwain
Jared Davenport
Mans Matulewicz
Nebula
Sascha Desch
Spencer Smith
Thomas Lemarchand
Tim Jones
Zachary Milonas
budimanjojo
guoguangwu
mikucat0309

Changes

<details><summary>177 commits</summary>

514e514ba feat: update Linux 6.1.63, containerd 1.7.9
aca8b5e17 fix: ignore kernel command line in container mode
020a0eb63 docs: fix table formatting for bootstraprequest
0eb245e04 docs: fix talosctl pcap example indentation
de6caf534 docs: fix table formatting for machineservice api
27d208c26 feat: implement OAuth2 device flow for machine config
5c8fa2a80 chore: start containerd early in boot
95a252cfc docs: fix link in what is new page
0d3c3ed71 feat: support kube scheduler config
06941b7e5 fix: allow rootfs propagation configuration for extension services
57dc796f3 docs: update lastRelease to v1.5.5 in _index.md
21d944a64 docs: add timezone information
4f1ad16c7 feat: support kubelet credentialprovider config
71a3bf0e3 fix: allow extra kernel args for secureboot installer
f38eaaab8 feat: rework secureboot and PCR signing key
6eade3d5e chore: add ability to rewrite uuids and set unique tokens for Talos
e9c7ac17a fix: set max msg recv size when proxying
e22ab440d feat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.10
8245361f9 feat: show first 32 bytes of response body on download error
75d3987c0 chore: drop sha1 from genereated pcr json
6f32d2990 feat: add .der output talosctl gen secureboot pcr
87c40da6c fix: proper logging in machined on startup
a54da5f64 fix: image build for nanopi_4s
6f3cd0593 refactor: update packet capture to use 'afpacket' interface
813442dd7 fix: don't validate machine.install if installed
dff60069c feat: update Kubernetes to 1.29.0-alpha.3
c97db5dfe chore: bump Go dependencies
807a9950a fix: use custom Talos/kernel version when generating UKI
eb94468a6 docs: add documentation for Image Factory
2e78513e1 refactor: drop the dependency link platform -> network ctrl
6dc776b8a fix: when writing to META in the installer/imager, use fixed name
3703041e9 chore: remove uneeded code
cbe6e7622 fix: generate images for SBCs using imager
5dff164f1 fix: fix error output of cli action tracker
ef5056122 feat: update etcd to 3.5.10
45ae80873 chore: bump go-api-signature dependency to v0.3.1
ffa5e05cb fix: make Talos work on Rockpi 4c boards again
8eba4c599 feat: generate secrets bundle from the machine config
c7de745f6 chore: drop deprecated code
cc0c3ab69 docs: update rpi_generic.md
a009f5c60 fix: accept sysctl paths with dots
4919f6ee2 feat: add GOMEMLIMIT to shipped manifests with memory limits
73ee576ea chore: update sonobuouy library, drop the fork
c23bc2f4a chore: support OCI layout as a source for profile input
154bbd70f docs: fix talos version in guide for docker
11d1f6163 release(v1.6.0-alpha.1): prepare release
9dfae8467 chore: update dependencies
38ce3c827 feat: nocloud prefer mac address
401e89411 feat: customize image size
865f08f86 docs: kubeadm migration guide improvements
c3e418200 refactor: use COSI runtime with new controller runtime DB
c1ee24465 feat: update Kubernetes to v1.29.0-alpha.2
0ff7350ab fix: oracle integration fixes
675bada45 test: add config generation stability tests
f9639fb53 test: fix 'talosctl gen' tests
6142d87a0 feat: hostname configuration improvements on the NoCloud platform
7bb205ebe fix: don't use runtime-specs Mount struct in machine config
d1b27926c feat: update Go to 1.21.3
b87092ab6 fix: handle secure boot state policy pcr digest error
498aeb8c3 docs: fix incorrect image suffix
c14a5d4f7 feat: support service account auth in cli
336aee0fd fix: use tpm2 hash algorithm constants and allow non-SHA-256 PCRs
69d8054c9 chore: drop UpdateEndpointSuite
ef7be16c8 fix: clear the encryption config in META when STATE is reset
5fc60d2ca feat: add Solarflare SFC9000 support
9b5cfdd0b chore: add tests for iscsi
b897764f8 docs: update proxmox.md
159f45bde docs: fix typos in CLI calls to endpoints
0bd1bdd74 chore: allow insecure access to installer base image (imager)
10ed13067 fix: the node IP for kubelet shouldn't change if nothing matches
e7575ecaa feat: support n-5 latest Kubernetes versions
e71508ec1 chore: update dependencies
6d7fa4668 docs: add metal network configuration guide
2b548ad0d feat: update containerd to 1.7.x
62dcfe81e fix: update kubernetes library to support 1.29 upgrades
52caf0763 feat: update Kubernetes to 1.29.0-alpha.1
390137447 feat: enable KubePrism by default
1beb5e86e docs: add KubePrism video
a52d3cda3 chore: update gen and COSI runtime
29b201d61 feat: enable common h/w sensors
9c2ba7c6f chore: add tests for chelsio drivers
5ca4d58dc fix: generate of modules.dep when on the machine
5efcccb6b chore: bump kernel to 6.1.54
29c767a02 docs: add control plane nodes as users of apid also for control plane nodes
4874cfb95 chore: fix typo
96f2a62ea test: update upgrade tests versions
f3a370acb feat: update Flannel to 0.22.3
efdee6965 feat: update Kubernetes to 1.28.2
e3b494058 fix: build CPU ucode correctly for early loader
c5bd0ac5c refactor: reimplement the depmod extension rebuilder
0b883f52a docs: add notes about stable addressing
3ef670a9e chore: pull in dm modules
8f4a36b0d docs: update aws to add command to allow KubeSpan wireguard port
a7edd0523 fix: set default route priority for hcloud platform
87c1b3ddd fix: calculate UKI ISO size dynamically
9698e4547 fix: handle correctly change of listen address for maintenance service
a096f05a5 chore: update gRPC library and enable shared write buffers
9e78fecca chore: improve image signing process
f00567e20 chore: add PKG_KERNEL arg to customize used kernel
2960f93ba feat: add readonly information to the disks API response
735bf9ed0 feat: bring in Google vNIC driver
3f5232075 feat: upgrade-k8s without comments
e44875106 docs: update deploying-cilium.md
7046cae43 chore: update gopacket to reduce init memory allocs
da73b563d chore: update Go to 1.21.1
5e11f08a6 fix: trim file path in the container image
3d2dad4e6 chore: show securtiystate on dashboard
b48510874 chore: e2e-aws cleanup
1eebbce35 chore: add output flag for talosctl config info
3fbed806c chore: add tests for util-linux extensions
7c514a1a6 docs: update header links
6058c3602 fix: shorten VLAN link names to fit into the limit of 15 characters
9c2f765c8 fix: allow network device selector to match multiple links
a04b98637 fix: update kubernetes library for 1.28 upgrade pre-checks
f7473e477 feat: update default Kubernetes to 1.28.1
d693604a1 chore: fix default image list in the release notes
d91b5b3a3 feat: set environment variables early in the boot
c918c0855 fix: set correct (1 year) talosconfig expiration
79bbdf454 fix: set proper timeouts for KubePrism loadbalancer
b8fb55d5c fix: use a mount prefix when installing a bootloader
44f59a804 feat: improve imager APIs
2d3ac925e refactor: update NTP spike detector
af0cc70e3 test: update e2e-aws to use worker groups
d03dc7a8a chore: validate new system extensions
bbeb489aa chore: drop firmware from initramfs
3c9f7a7de chore: re-enable nolintlint and typecheck linters
c51e2c9b4 feat: update CoreDNS to 1.11.1
8670450d2 release(v1.6.0-alpha.0): prepare release
6778ded29 feat: add e2e-aws for nvidia extensions
74c07ed71 chore: update Go to 1.21
a28d72e9c fix: ova contents to be named disk.*
c0ea4d7ba fix: properly calculate overal of node address with subnet filters
d6b2719e2 chore: drone: move extensions step to a function
9608ef56d chore: allow bridge traffic with DHCP broadcast traffic
c99316457 docs: fix the installing system extensions doc
833895940 chore: add tests for zfs extension
cb468c41c fix: copy proper modules to arm64 squashfs
ea0d6e8c6 fix: prevent dashboard crashes when process info is not available
e9077a6fb feat: filter the hostname to produce nodename
dc8361c1d fix: properly GC images supplied with both tag and digest
ccfa8de11 fix: automatically change rpi_4 board on upgrade
b56e8b7d9 fix: support 'List' type manifests
574d48e54 fix: use image digest when starting a container
175747cea fix: ntp query error with bare IPv6 address
c8b507fb2 docs: fix kubeprism typo
0cdcb2e0e docs: restructure docs for nvidia drivers for v1.4
676db9768 docs: fork docs for Talos 1.6
92ad18c18 fix: write correct capacity to the ovf
6b0373ebe chore: move bash tests to integration
52b3d8d37 docs: make Talos 1.5 documentation the default one
dc873df9b chore: fix the filenames of openstack images
b5c0e7b24 docs: update nvidia docs
9606e871e docs: update Jiva Pod Security Policy
a86ed4362 chore: update Kubernetes Go modules to 0.28.0
97b4e3e91 feat: update Kubernetes to 1.28.0
79ca1a3df feat: e2e-aws using tf code
bf3a5e011 chore: add version compatibility for Talos 1.6
969e8097c feat: update Kubernetes to 1.28.0-rc.1
ca41b611e chore: drone jsonnet cleanup
bc198e98e docs: retain cilium autoMount pending upstream hostPath fix
86c94eff8 refactor: docgen and config examples
ee6d639f6 fix: match routes on the priority properly
bff0d8f32 chore: fix dependencies in the release pipeline
e1b288679 refactor: compile regex in validation method on the first use
daa4c185a docs: add what's new and documentation for Talos 1.5
c4a1ca8d6 chore: remove <-errCh where possible in grpc methods
e0f383598 chore: clean up the output of the imager
fb536af4d chore: optimize memory usage of tcell library on init
7c86a365e chore: publish systemd-boot and systemd-stub assets
7d688ccfe fix: make encryption config provider default to luks2 if not set
80238a05a chore: unify semver under github.com/blang/semver/v4
0f1920bdd chore: provide a resource to peek into Linux clock adjustments
4eab3017b fix: calculate log2i properly
bcf284530 fix: update providerid prefix for aws
ac2aff5cc fix: fix azure portion of cloud uploader
793dcedc9 fix: fast-wipe the system disk on talosctl reset
76fa45afb docs: update cilium instructions </details>

Changes since v1.6.0-alpha.1

<details><summary>45 commits</summary>

514e514ba feat: update Linux 6.1.63, containerd 1.7.9
aca8b5e17 fix: ignore kernel command line in container mode
020a0eb63 docs: fix table formatting for bootstraprequest
0eb245e04 docs: fix talosctl pcap example indentation
de6caf534 docs: fix table formatting for machineservice api
27d208c26 feat: implement OAuth2 device flow for machine config
5c8fa2a80 chore: start containerd early in boot
95a252cfc docs: fix link in what is new page
0d3c3ed71 feat: support kube scheduler config
06941b7e5 fix: allow rootfs propagation configuration for extension services
57dc796f3 docs: update lastRelease to v1.5.5 in _index.md
21d944a64 docs: add timezone information
4f1ad16c7 feat: support kubelet credentialprovider config
71a3bf0e3 fix: allow extra kernel args for secureboot installer
f38eaaab8 feat: rework secureboot and PCR signing key
6eade3d5e chore: add ability to rewrite uuids and set unique tokens for Talos
e9c7ac17a fix: set max msg recv size when proxying
e22ab440d feat: update Linux 6.1.61, containerd 1.7.8, runc 1.1.10
8245361f9 feat: show first 32 bytes of response body on download error
75d3987c0 chore: drop sha1 from genereated pcr json
6f32d2990 feat: add .der output talosctl gen secureboot pcr
87c40da6c fix: proper logging in machined on startup
a54da5f64 fix: image build for nanopi_4s
6f3cd0593 refactor: update packet capture to use 'afpacket' interface
813442dd7 fix: don't validate machine.install if installed
dff60069c feat: update Kubernetes to 1.29.0-alpha.3
c97db5dfe chore: bump Go dependencies
807a9950a fix: use custom Talos/kernel version when generating UKI
eb94468a6 docs: add documentation for Image Factory
2e78513e1 refactor: drop the dependency link platform -> network ctrl
6dc776b8a fix: when writing to META in the installer/imager, use fixed name
3703041e9 chore: remove uneeded code
cbe6e7622 fix: generate images for SBCs using imager
5dff164f1 fix: fix error output of cli action tracker
ef5056122 feat: update etcd to 3.5.10
45ae80873 chore: bump go-api-signature dependency to v0.3.1
ffa5e05cb fix: make Talos work on Rockpi 4c boards again
8eba4c599 feat: generate secrets bundle from the machine config
c7de745f6 chore: drop deprecated code
cc0c3ab69 docs: update rpi_generic.md
a009f5c60 fix: accept sysctl paths with dots
4919f6ee2 feat: add GOMEMLIMIT to shipped manifests with memory limits
73ee576ea chore: update sonobuouy library, drop the fork
c23bc2f4a chore: support OCI layout as a source for profile input
154bbd70f docs: fix talos version in guide for docker </details>

Changes from siderolabs/extras

<details><summary>7 commits</summary>

e8e801b feat: update Go to 1.21.4
d816a02 chore: move project to using kres
3893789 chore: move to github workflows
6d48418 feat: update Go to 1.21.3
09d7c3e chore: update releases
a011245 feat: update Go to 1.21.1
d3f54c7 feat: update Go to 1.20.8 </details>

Changes from siderolabs/gen

<details><summary>2 commits</summary>

efca710 chore: add FilterInPlace method to maps and update module
36a3ae3 feat: update module </details>

Changes from siderolabs/go-kubernetes

<details><summary>7 commits</summary>

fa05430 chore: support kube-scheduler config version
68bf392 feat: add dropped API resource for 1.29
09fa006 fix: retry Windows connection errors
3aa47a4 feat: support Kubernetes 1.29 upgrades
ae33a4a feat: introduce support for Kubernetes version compatibility checks
cf2754e chore: update to use GHA
44e26b3 feat: update removed feature gates for 1.28 </details>

Changes from siderolabs/go-retry

<details><summary>1 commit</summary>

23b6fc2 fix: provider modern error unwrapping </details>

Changes from siderolabs/pkgs

<details><summary>32 commits</summary>

3aea711 feat: bump dependencies
d59cb3e feat(lvm2): configure thin support
252a59f feat: bump dependencies
0bb2a79 feat: update Go to 1.21.4
f57b0a9 chore: fix kernel target to honor PLATFORM
5f84302 chore: move to using kres
d7509f1 chore: bump deps
3a66437 chore: add gh workflows
2e892fd feat: update versions
37348d6 feat: update Go to 1.21.3
34f3c41 feat: add Solarflare SFC9000 support
0c84090 feat: update releases
19cdf71 feat: enable common sensors
acee18e chore: bump kernel to 6.1.54
1d16fd2 feat: add Chelsio support
4504f83 chore: rename kconfig-hardened-check
847a9c3 chore: enable dm thin provisioning
1401505 chore: drop -pkgs for upstream kernel modules
a62471d feat: add binfmt_misc support
518c441 feat: add gVNIC support
7d9e60e feat: update Go to 1.21.1
d3d7d29 chore: bump deps
3b70656 chore: fix cacert perms
cca80b7 feat: update Linux to 6.1.46
2e1c0b9 fix: nonfree kmod pkg name
cff5beb feat: add btrfs support
7717b7e chore: bump deps
2f19f18 feat: update containerd to 1.6.23
30d4b74 feat: update Go to 1.21
eda123d feat: update runc to 1.1.9
30cd584 chore: enable pushing of non-free packages
fb247b5 chore: update kernel and microcode </details>

Changes from siderolabs/siderolink

<details><summary>5 commits</summary>

5ab8f9d feat: allow persistent keepalive to be set for the peer
71dd308 chore: provide unique_token and Talos version in ProvisionRequest
0ee5425 chore: revert sys moduel to 0.13.0
6be9ba7 chore: bump deps
448cbe1 chore: bump golang.org/x/net to 0.8.0 </details>

Changes from siderolabs/tools

<details><summary>13 commits</summary>

ff7fe96 feat: update Go to 1.21.4
6216d64 fix: org name
4334b92 chore: move to using kres
024ef25 chore: bump deps
5a22409 chore: refactor github actions
9a05d12 feat: move to gh workflow
a4a52e2 chore: add dummy gh workflow
9c09b00 feat: update dependencies
35948af feat: update Go to 1.21.3
09023c1 feat: update OpenSSL to 3.1.3
7fa8bb5 feat: update releases
fa388de feat: update Go to 1.21.1
33fb4b3 feat: update Go to 1.21 </details>

Dependency Changes

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 new
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 new
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.0.0 new
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1 new
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.0.1 new
github.com/aws/aws-sdk-go-v2/config v1.18.32 -> v1.25.4
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 -> v1.14.5
github.com/aws/smithy-go v1.14.0 -> v1.17.0
github.com/beevik/ntp v1.2.0 -> v1.3.0
github.com/blang/semver/v4 v4.0.0 new
github.com/containerd/cgroups/v3 v3.0.2 new
github.com/containerd/containerd v1.6.23 -> v1.7.9
github.com/cosi-project/runtime v0.3.1 -> v0.3.17
github.com/distribution/reference v0.5.0 new
github.com/docker/docker v24.0.5 -> v24.0.7
github.com/fatih/color v1.15.0 -> v1.16.0
github.com/foxboron/go-uefi 32187aa193d0 -> 18b9ba9cd4c3
github.com/fsnotify/fsnotify v1.6.0 -> v1.7.0
github.com/google/go-cmp v0.5.9 -> v0.6.0
github.com/google/go-containerregistry v0.15.2 -> v0.16.1
github.com/google/uuid v1.3.0 -> v1.4.0
github.com/gopacket/gopacket v1.1.1 -> e79bddbcb4a7
github.com/hetznercloud/hcloud-go/v2 v2.0.0 -> v2.4.0
github.com/insomniacslk/dhcp 0f9eb93a696c -> 6a2c8fbdcc1c
github.com/jsimonetti/rtnetlink v1.3.4 -> v1.3.5
github.com/mattn/go-isatty v0.0.19 -> v0.0.20
github.com/mdp/qrterminal/v3 v3.2.0 new
github.com/opencontainers/runtime-spec 1c3f411f0417 -> v1.1.0-rc.1
github.com/prometheus/procfs v0.11.1 -> v0.12.0
github.com/rivo/tview 6cc0565babaf -> 7c9e464bac02
github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20 -> v1.0.0-beta.21
github.com/siderolabs/extras v1.5.0 -> v1.6.0-alpha.0-5-ge8e801b
github.com/siderolabs/gen v0.4.5 -> v0.4.7
github.com/siderolabs/go-kubernetes v0.2.2 -> v0.2.8
github.com/siderolabs/go-retry v0.3.2 -> v0.3.3
github.com/siderolabs/pkgs v1.5.0-6-g2f2c9cd -> v1.6.0-alpha.0-31-g3aea711
github.com/siderolabs/siderolink v0.3.1 -> v0.3.2
github.com/siderolabs/talos/pkg/machinery v1.5.0 -> v1.6.0-alpha.1
github.com/siderolabs/tools v1.5.0 -> v1.6.0-alpha.0-12-gff7fe96
github.com/spf13/cobra v1.7.0 -> v1.8.0
github.com/vmware-tanzu/sonobuoy v0.56.17 -> v0.57.1
go.etcd.io/etcd/api/v3 v3.5.9 -> v3.5.10
go.etcd.io/etcd/client/pkg/v3 v3.5.9 -> v3.5.10
go.etcd.io/etcd/client/v3 v3.5.9 -> v3.5.10
go.etcd.io/etcd/etcdutl/v3 v3.5.9 -> v3.5.10
go.uber.org/zap v1.25.0 -> v1.26.0
go4.org/netipx ec4c8b891b28 -> 6213f710f925
golang.org/x/net v0.13.0 -> v0.18.0
golang.org/x/oauth2 v0.14.0 new
golang.org/x/sync v0.3.0 -> v0.5.0
golang.org/x/sys v0.10.0 -> v0.14.0
golang.org/x/term v0.10.0 -> v0.14.0
golang.org/x/text v0.11.0 -> v0.14.0
golang.org/x/time v0.3.0 -> v0.4.0
google.golang.org/grpc v1.57.0 -> v1.59.0
k8s.io/api v0.28.0 -> v0.29.0-alpha.3
k8s.io/apimachinery v0.28.0 -> v0.29.0-alpha.3
k8s.io/apiserver v0.28.0 -> v0.29.0-alpha.3
k8s.io/client-go v0.28.0 -> v0.29.0-alpha.3
k8s.io/component-base v0.28.0 -> v0.29.0-alpha.3
k8s.io/cri-api v0.28.0 -> v0.29.0-alpha.3
k8s.io/klog/v2 v2.100.1 -> v2.110.1
k8s.io/kube-scheduler v0.29.0-alpha.3 new
k8s.io/kubectl v0.28.0 -> v0.29.0-alpha.3
k8s.io/kubelet v0.28.0 -> v0.29.0-alpha.3
sigs.k8s.io/yaml v1.3.0 -> v1.4.0

Previous release can be found at v1.5.0

Open source →

github.com/siderolabs/talos

Release timeline

Releases

Device Selectors

DNS Caching

Known Problems

Kubernetes API Server Service Account Key

Component Updates

Contributors

Changes

Changes from siderolabs/discovery-client

Changes from siderolabs/extras

Changes from siderolabs/go-api-signature

Changes from siderolabs/go-kmsg

Changes from siderolabs/pkgs

Changes from siderolabs/tools

Dependency Changes

Kubelet Credential Provider Configuration

Network Device Selectors

Linux Firmware

Kube-Scheduler Configuration

KubePrism

Sysctl

talosctl CLI

Component Updates

Contributors

Changes

Changes since v1.6.0-alpha.1

Changes from siderolabs/extras

Changes from siderolabs/gen

Changes from siderolabs/go-kubernetes

Changes from siderolabs/go-retry

Changes from siderolabs/pkgs

Changes from siderolabs/siderolink

Changes from siderolabs/tools

Dependency Changes