github.com/siderolabs/talos

Welcome to the v1.4.0-alpha.4 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

Bond Device Selectors

Bond links can now be described using device selectors instead of explicit device names:

machine:
  network:
    interfaces:
      - interface: bond0
        bond:
          deviceSelectors:
            - hardwareAddr: '00:50:56:*'
            - hardwareAddr: '00:50:57:9c:2c:2d'

talosctl containers

talosctl logs -k and talosctl containers -k now support and output container display names with their ids. This allows to distinguish between containers with the same name.

Registry Mirror Catch-All Option

Talos now supports a catch-all option for registry mirrors:

machine:
    registries:
        mirrors:
            docker.io:
                - https://registry-1.docker.io/
            "*":
                - https://my-registry.example.com/

Talos Dashboard on TTY2

Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot. Kernel logs remain available on /dev/tty1.

To switch TTYs, use the Alt+F1 through Alt+F2 keys.

You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.

This behavior is disabled by default on SBCs.

Kernel Argument talos.environment

Talos now supports passing environment variables via talos.environment kernel argument.

Example:

talos.environment=http_proxy=http://proxy.example.com:8080 talos.environment=https_proxy=http://proxy.example.com:8080

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Kernel Modules

Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.

Kernel Modules Tree

Talos now supports re-building the kernel modules dependency tree information on upgrades. This allows modules of same name to co-exist as in-tree and external modules. System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.

Kernel Reset Argument

Talos now supports talos.experimental.wipe=system:EPHEMERAL,STATE kernel argument. Talos now also supports the new GRUB boot option - "Reset Talos installation and return to maintenance mode". Both of this options will reset EPHEMERAL and STATE partitions and will return Talos into maintenance mode after the reboot.

Machine Configuration

Strategic merge config patches correctly support merging .vlans sections of the network interface.

talosctl netstat

Talos API was extended to support retrieving a list of network connections (sockets) from the node and pods. talosctl netstat command was added to retrieve the list of network connections.

Reset API Enhancements

Talos now supports resetting user disks through the Reset API, the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl. Additionally, the Reset API can now function in maintenance mode and has the capability to wipe the node's system disk (partial wipe is not supported).

New Talos API os:operator role

Talos now supports a new os:operator role for the Talos API. This role allows everything os:reader role allows plus access to maintenance APIs: rebooting, shutting down a node, accessing packet capture, etcd alarm APIs, etcd backup, etc.

Component Updates

• Linux: 6.1.22
• containerd: v1.6.20
• runc: v1.1.5
• Kubernetes: v1.27.0-rc.0
• etcd: v3.5.7
• CoreDNS: v1.10.1
• Flannel: v0.21.4

Talos is built with Go 1.20.2.

VMware Platform

Talos now supports loading network configuration on VMWare platform from the metadata key. See CAPV IPAM Support and Talos issue 6708 for details.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Spencer Smith
• Artem Chernyshev
• Serge Logvinov
• Steve Francis
• Nico Berlee
• Tim Jones
• Seán C McCord
• Steffen Windoffer
• Andrey Smirnov
• Cees-Jan Kiewiet
• Chris van de Sande
• Dennis Marttinen
• Dzerom Dzenkins
• Erik Lund
• Jori Huisman
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Sander Maijers
• Thomas Way
• Tim van Druenen
• Victor Seva
• budimanjojo
• xyhhx

Changes

<details><summary>200 commits</summary> <p>

• 7ffabe0f1 feat: support network bond device selectors
• cbab12e3a refactor: rename outbound to connectivity on dashboard
• 07c3c5d59 feat: return disk subsystem in the Disks API
• b8497b99e feat: update containerd to 1.6.20
• aa1499353 feat: introduce network probes
• 9dc1150e3 docs: update nvidia instructions
• 7967ccfc1 feat: add config code entry screen to dashboard
• ddb014cfd fix: udevd rules trigger
• 0af8fe2fb feat: netstat pod support
• 52e857f55 feat: linux 6.1.22, runc 1.1.5
• aa662ff63 fix: apply small fixes on dashboard
• 188560a33 fix: add a link-scope route if the cmdline gateway is not reachable
• 45c5b47a5 feat: dhcpv4: send current hostname, fix spec compliance of renewals
• 289b41fe4 fix: output of talosctl logs might be corruped
• 02f0a4526 feat: allow writing initial META values into the image
• ea0e9bdbe feat: environment variables via the kernel arguments
• 94c24ca64 chore: add machine config version contract for v1.4
• cefa9c3ec feat: update Kubernetes to 1.27.0-rc.0
• 9e8603f53 feat: implement new download URL variable ${code}
• d30cf9c86 test: fix misprint in e2e scripts
• 0d0bb31cf fix: use stripped kernel modules
• 3583eea98 release(v1.4.0-alpha.3): prepare release
• a7b79ef1b feat: add network config screen to dashboard
• cf2ccc521 fix: always shutdown maintenance API service
• a0a5db590 feat: update Flannel to 0.21.4
• d1a61fd34 chore: bump golangci-lint
• 36a9a208e chore: bump deps
• c63cf90e3 feat: update k8s to v1.27.0-beta.0
• b246c90ab fix: add uint32 to Magic1 and Magic2
• 777c8d6f6 chore: update COSI to watch aggregated version
• bec89bf6e fix: use 'no block' etcd dial with multiple endpoints
• 28713c2c4 feat: update Kubernetes to 1.26.3
• a3cf41647 docs: add InstallConfig ignored notice to doc
• df9b851fb chore: load all external artifacts earlier
• 2dd0964c5 refactor: use resource watches on dashboard
• 9933ebb6a chore: fix loaded artifacts file permission
• a14a0aba0 fix: nil pointer exception in syncLink
• cf101e56f fix: add --force flag for talosctl gen
• ea2aa0611 fix: fix data race on network config read
• 64e3d24c6 feat: provide platform network config for 'metal' in META
• 442cb9c1b feat: implement APIs to write to META
• 9e07832db feat: implement summary dashboard
• 1df841bb5 refactor: change the interface of META
• e9962bc3e chore: update CI to tag azure buckets
• 9f5f5cf9b feat: update Flannel to v0.21.3
• 02b0ff35e feat: generate Flannel CNI manifest from upstream
• 6656d35ec docs: fix Talos version to use template
• 72a6d1d70 docs: update nocloud
• 9948a646d feat: coredns node uninitialized toleration
• e03902b54 feat: update Go to 1.20.2
• c8f8579f2 fix: upgrade-k8s to flag should not be required since there is a default
• 230cfaf80 feat: use network information from guestinfo.metadata
• 97048f7c3 feat: netstat in API and client
• fda6da692 fix: successful ACPI shutdown in maintenance mode
• b97e1abaa feat: set default image, validate empty image
• 121220a3b chore: bump dependencies via renovate bot
• ebc92f3c1 chore: add container id to talosctl -k containers and talosctl -k logs
• 22ef81c1e feat: add grub option to drop to maintenance mode
• 642fe0c90 feat: update pkgs with framebuffer console
• 69cb414f0 docs: update cilium install instructions
• e71cc6619 fix: redo assertHostnames in HostnameMergeSuite.TestMerge
• 8ea4bfad8 refactor: improve the kubernetes upgrade flow
• 81879fc0c docs: add how tos for workloads on control planes, and scaling up
• 05b0b721c chore: move blob storage to azure for builds
• a78281214 feat: add cilium e2e tests
• 061640ccc feat: add pod ip to kube-proxy spec
• dea17d723 feat: update Kubernetes to v1.26.2
• 337aaba7a feat: add 'os:operator' role
• 40e69af22 fix: improve etcd leave on reset process
• 638dc9128 fix: fix "defer" leak in ResetUserDisks
• bfba3677b chore: handle grub option - "wipe"
• 594f27d87 release(v1.4.0-alpha.2): prepare release
• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs
• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2 </p> </details>

Changes since v1.4.0-alpha.3

<details><summary>21 commits</summary> <p>

• 7ffabe0f1 feat: support network bond device selectors
• cbab12e3a refactor: rename outbound to connectivity on dashboard
• 07c3c5d59 feat: return disk subsystem in the Disks API
• b8497b99e feat: update containerd to 1.6.20
• aa1499353 feat: introduce network probes
• 9dc1150e3 docs: update nvidia instructions
• 7967ccfc1 feat: add config code entry screen to dashboard
• ddb014cfd fix: udevd rules trigger
• 0af8fe2fb feat: netstat pod support
• 52e857f55 feat: linux 6.1.22, runc 1.1.5
• aa662ff63 fix: apply small fixes on dashboard
• 188560a33 fix: add a link-scope route if the cmdline gateway is not reachable
• 45c5b47a5 feat: dhcpv4: send current hostname, fix spec compliance of renewals
• 289b41fe4 fix: output of talosctl logs might be corruped
• 02f0a4526 feat: allow writing initial META values into the image
• ea0e9bdbe feat: environment variables via the kernel arguments
• 94c24ca64 chore: add machine config version contract for v1.4
• cefa9c3ec feat: update Kubernetes to 1.27.0-rc.0
• 9e8603f53 feat: implement new download URL variable ${code}
• d30cf9c86 test: fix misprint in e2e scripts
• 0d0bb31cf fix: use stripped kernel modules </p> </details>

Changes from siderolabs/discovery-api

<details><summary>1 commit</summary> <p>

• ac75538 chore: regen the proto definitions with vtprotobuf v0.4.0 </p> </details>

Changes from siderolabs/discovery-client

<details><summary>1 commit</summary> <p>

• 269a832 chore: rekres, update discovery api </p> </details>

Changes from siderolabs/extras

<details><summary>9 commits</summary> <p>

• 7faf14a chore: bump pkgs to v1.4.0
• 343956e feat: update Go to 1.20.2
• 6209d87 chore: bump tc-redirect-tap
• 8b28b6b chore: bump deps
• 5ab4f59 chore: disable renovate builds
• ddeddbd chore: update packages, tc_redirect_tap
• 8cb4792 chore: update Go to 1.19.5
• 3ca2df3 chore: disable provenance in buildx
• 55d8452 feat: update releases </p> </details>

Changes from siderolabs/gen

<details><summary>2 commits</summary> <p>

• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods </p> </details>

Changes from siderolabs/go-blockdevice

<details><summary>2 commits</summary> <p>

• b4386f3 feat: make disk utils read subsystem information from the /sys/block
• 8c7ea19 fix: blockdevice size is reported by Linux in 512 blocks always </p> </details>

Changes from siderolabs/go-kmsg

<details><summary>1 commit</summary> <p>

• 7a51094 fix: exit properly on context cancel </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>4 commits</summary> <p>

• 81887dc feat: add kubelet flag checks
• fe473c0 refactor: make sync easier to consume without CLI
• 570819b feat: initial version of the library
• fb79215 Initial commit </p> </details>

Changes from siderolabs/go-smbios

<details><summary>1 commit</summary> <p>

• c526764 feat: fix reading "broken" Hyper-V DMI data </p> </details>

Changes from siderolabs/pkgs

<details><summary>39 commits</summary> <p>

• aadb943 feat: update containerd to 1.6.20
• 5a7b33e chore: bump deps
• 5d77814 fix: strip kernel modules when installing
• c26b0b5 chore: bump deps
• 7d8f5bd feat: enable Hyper-V dynamic memory driver
• ea40205 chore: bump deps
• 21e5a68 feat: update Go 1.20.2, Linux 6.1.15 and other
• 1d7e60c feat: enable framebuffer drivers and console fonts
• 0e63e95 chore: bump deps
• 5dbce6b fix: xz url
• 0097233 chore: re-enable drbd
• 7493721 fix: sourcefourge url shasums
• 185f482 feat: update containerd to 1.6.18
• e3cab6c chore: bump deps
• 18661b0 chore: bump deps
• 885a68b chore: bump deps
• c3a6e18 chore: bump dependencies
• 1fae0b2 feat: virtio drivers as modules
• 61d8ff4 chore: bump deps and disable un-needed kconfig
• 15fe6d8 fix: kernel module tree files missing
• 987d24a feat: mellanox drivers are modules
• b82a015 feat: mellanox oped
• 057d4f9 chore: bump deps
• 4ac4138 feat: enable nvme support for raspberrypi cm4
• ccb9d39 fix: disable magic sysrq
• d33202d chore: bump u-boot to 2023.01
• cb83e16 chore: bump dependencies
• e561dcb feat: bump Go to 1.19.5
• c7797c7 feat: update Linux to 6.1.4, restore RPi support
• 5e8ebb0 feat: add AMD K10 sensor support
• 73ac37d chore: disable provenance in buildx
• 8965bee chore: use default symlinks to /bin in base
• 325c9bf feat: bump dependencies
• 165dff6 fix: patch ipmitool IANA URL
• c542f39 feat: add kernel support for usb setrial console
• f564f45 chore: bump tools, containerd
• 268ea7c chore: bump deps
• dcf3ceb feat: add nitro enclave support in kernel
• 17ea5e6 chore: bump kernel to 5.15.81 </p> </details>

Changes from siderolabs/tools

<details><summary>31 commits</summary> <p>

• 95f814a feat: cmake 3.26.2
• a3d5bac chore: bump deps
• 2d710f9 chore: bump deps
• 9bea7d0 chore: skip rc versions for util-linux
• a94850e chore: bump deps
• e6b2956 fix: protoc install
• 601e347 feat: go 1.20.2 + other bumps
• ca67d0b chore: bump deps
• 662a906 feat: add libnl
• a8440a9 fix: partially revert e6c98fdf54425e6382f226e33bccca6f3875aad3a
• e6c98fd chore: remove swig
• cd9687b fix: renovate config
• 977e3fc chore: bump go to 1.20.1
• 15748aa chore: bump deps
• d4b719a chore: bump deps
• 8c36dbd chore: bump toolchain, bump protoc-gen-go-grpc
• a62e365 feat: update Go to 1.20
• 28d4a57 chore: reduce renovate noise
• e130fd5 chore: bump deps
• 37612fe fix: revert enabling provenance
• e0b01e3 chore: bump deps
• d0e6bd0 feat: add gnutls
• 3d34b5d chore: bump dependencies
• 763c1d9 feat: update Go to 1.19.5
• 136958f chore: disable provenance in buildx
• e2a8692 feat: update releases
• 0e48f37 chore: bump protobuf
• a21aa1c chore: bump toolchain and mpc versions
• 1a75d0f chore: bump deps
• 55bd185 feat: update Go to 1.19.4
• f291f46 chore: bump tools </p> </details>

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.232
• github.com/benbjohnson/clock v1.1.0 new
• github.com/containerd/cgroups v1.0.4 -> v1.1.0
• github.com/containerd/containerd v1.6.12 -> v1.6.19
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0
• github.com/docker/docker v20.10.21 -> v23.0.2
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/emicklei/dot v1.2.0 -> v1.4.2
• github.com/fatih/color v1.13.0 -> v1.15.0
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
• github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 -> v1.4.0
• github.com/hashicorp/go-getter v1.6.2 -> v1.7.1
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.41.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> 74ae03f2425e
• github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
• github.com/mattn/go-isatty v0.0.16 -> v0.0.18
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/nberlee/go-netstat v0.1.1 new
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 281d14d896d7
• github.com/safchain/ethtool v0.2.0 -> v0.3.0
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.15
• github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
• github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.4
• github.com/siderolabs/go-kmsg v0.1.2 -> v0.1.3
• github.com/siderolabs/go-kubernetes v0.2.0 new
• github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-1-gaadb943
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.3
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0
• github.com/stretchr/testify v1.8.1 -> v1.8.2
• github.com/u-root/u-root v0.10.0 -> v0.11.0
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.16
• github.com/vmware/govmomi v0.29.0 -> v0.30.4
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> f1b76eb4bb35
• golang.org/x/net v0.4.0 -> v0.8.0
• golang.org/x/sys v0.3.0 -> v0.6.0
• golang.org/x/term v0.3.0 -> v0.6.0
• golang.org/x/time v0.2.0 -> v0.3.0
• golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
• google.golang.org/grpc v1.51.0 -> v1.54.0
• google.golang.org/protobuf v1.28.1 -> v1.30.0
• k8s.io/api v0.26.0 -> v0.27.0-rc.0
• k8s.io/apimachinery v0.26.0 -> v0.27.0-rc.0
• k8s.io/apiserver v0.26.0 -> v0.27.0-rc.0
• k8s.io/client-go v0.26.0 -> v0.27.0-rc.0
• k8s.io/component-base v0.26.0 -> v0.27.0-rc.0
• k8s.io/cri-api v0.26.0 -> v0.27.0-rc.0
• k8s.io/klog/v2 v2.80.1 -> v2.90.1
• k8s.io/kubectl v0.26.0 -> v0.27.0-rc.0
• k8s.io/kubelet v0.26.0 -> v0.27.0-rc.0
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.68

Previous release can be found at v1.3.0

Welcome to the v1.4.0-alpha.3 release of Talos! This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

talosctl containers

talosctl logs -k and talosctl containers -k now support and output container display names with their ids. This allows to distinguish between containers with the same name.

Registry Mirror Catch-All Option

Talos now supports a catch-all option for registry mirrors:

machine:
    registries:
        mirrors:
            docker.io:
                - https://registry-1.docker.io/
            "*":
                - https://my-registry.example.com/

Talos Dashboard on TTY2

Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot. Kernel logs remain available on /dev/tty1.

To switch TTYs, use the Alt+F1 through Alt+F2 keys.

You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.

This behavior is disabled by default on SBCs.

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Kernel Modules

Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.

Kernel Modules Tree

Talos now supports re-building the kernel modules dependency tree information on upgrades. This allows modules of same name to co-exist as in-tree and external modules. System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.

Kernel Reset Argument

Talos now supports talos.experimental.wipe=system:EPHEMERAL,STATE kernel argument. Talos now also supports the new GRUB boot option - "Reset Talos installation and return to maintenance mode". Both of this options will reset EPHEMERAL and STATE partitions and will return Talos into maintenance mode after the reboot.

Machine Configuration

Strategic merge config patches correctly support merging .vlans sections of the network interface.

talosctl netstat

Talos API was extended to support retrieving a list of network connections (sockets) from the node. talosctl netstat command was added to retrieve the list of network connections.

Reset API Enhancements

Talos now supports resetting user disks through the Reset API, the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl. Additionally, the Reset API can now function in maintenance mode and has the capability to wipe the node's system disk (partial wipe is not supported).

New Talos API os:operator role

Talos now supports a new os:operator role for the Talos API. This role allows everything os:reader role allows plus access to maintenance APIs: rebooting, shutting down a node, accessing packet capture, etcd alarm APIs, etcd backup, etc.

Component Updates

• Linux: 6.1.20
• containerd: v1.6.19
• Kubernetes: v1.27.0-beta.0
• etcd: v3.5.7
• CoreDNS: v1.10.1
• Flannel: v0.21.4

Talos is built with Go 1.20.2.

VMware Platform

Talos now supports loading network configuration on VMWare platform from the metadata key. See CAPV IPAM Support and Talos issue 6708 for details.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Spencer Smith
• Serge Logvinov
• Artem Chernyshev
• Steve Francis
• Tim Jones
• Nico Berlee
• Seán C McCord
• Steffen Windoffer
• Andrey Smirnov
• Cees-Jan Kiewiet
• Chris van de Sande
• Dzerom Dzenkins
• Erik Lund
• Jori Huisman
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Sander Maijers
• Tim van Druenen
• Victor Seva
• budimanjojo
• xyhhx

Changes

<details><summary>178 commits</summary> <p>

• a7b79ef1b feat: add network config screen to dashboard
• cf2ccc521 fix: always shutdown maintenance API service
• a0a5db590 feat: update Flannel to 0.21.4
• d1a61fd34 chore: bump golangci-lint
• 36a9a208e chore: bump deps
• c63cf90e3 feat: update k8s to v1.27.0-beta.0
• b246c90ab fix: add uint32 to Magic1 and Magic2
• 777c8d6f6 chore: update COSI to watch aggregated version
• bec89bf6e fix: use 'no block' etcd dial with multiple endpoints
• 28713c2c4 feat: update Kubernetes to 1.26.3
• a3cf41647 docs: add InstallConfig ignored notice to doc
• df9b851fb chore: load all external artifacts earlier
• 2dd0964c5 refactor: use resource watches on dashboard
• 9933ebb6a chore: fix loaded artifacts file permission
• a14a0aba0 fix: nil pointer exception in syncLink
• cf101e56f fix: add --force flag for talosctl gen
• ea2aa0611 fix: fix data race on network config read
• 64e3d24c6 feat: provide platform network config for 'metal' in META
• 442cb9c1b feat: implement APIs to write to META
• 9e07832db feat: implement summary dashboard
• 1df841bb5 refactor: change the interface of META
• e9962bc3e chore: update CI to tag azure buckets
• 9f5f5cf9b feat: update Flannel to v0.21.3
• 02b0ff35e feat: generate Flannel CNI manifest from upstream
• 6656d35ec docs: fix Talos version to use template
• 72a6d1d70 docs: update nocloud
• 9948a646d feat: coredns node uninitialized toleration
• e03902b54 feat: update Go to 1.20.2
• c8f8579f2 fix: upgrade-k8s to flag should not be required since there is a default
• 230cfaf80 feat: use network information from guestinfo.metadata
• 97048f7c3 feat: netstat in API and client
• fda6da692 fix: successful ACPI shutdown in maintenance mode
• b97e1abaa feat: set default image, validate empty image
• 121220a3b chore: bump dependencies via renovate bot
• ebc92f3c1 chore: add container id to talosctl -k containers and talosctl -k logs
• 22ef81c1e feat: add grub option to drop to maintenance mode
• 642fe0c90 feat: update pkgs with framebuffer console
• 69cb414f0 docs: update cilium install instructions
• e71cc6619 fix: redo assertHostnames in HostnameMergeSuite.TestMerge
• 8ea4bfad8 refactor: improve the kubernetes upgrade flow
• 81879fc0c docs: add how tos for workloads on control planes, and scaling up
• 05b0b721c chore: move blob storage to azure for builds
• a78281214 feat: add cilium e2e tests
• 061640ccc feat: add pod ip to kube-proxy spec
• dea17d723 feat: update Kubernetes to v1.26.2
• 337aaba7a feat: add 'os:operator' role
• 40e69af22 fix: improve etcd leave on reset process
• 638dc9128 fix: fix "defer" leak in ResetUserDisks
• bfba3677b chore: handle grub option - "wipe"
• 594f27d87 release(v1.4.0-alpha.2): prepare release
• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs
• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2 </p> </details>

Changes since v1.4.0-alpha.2

<details><summary>50 commits</summary> <p>

• a7b79ef1b feat: add network config screen to dashboard
• cf2ccc521 fix: always shutdown maintenance API service
• a0a5db590 feat: update Flannel to 0.21.4
• d1a61fd34 chore: bump golangci-lint
• 36a9a208e chore: bump deps
• c63cf90e3 feat: update k8s to v1.27.0-beta.0
• b246c90ab fix: add uint32 to Magic1 and Magic2
• 777c8d6f6 chore: update COSI to watch aggregated version
• bec89bf6e fix: use 'no block' etcd dial with multiple endpoints
• 28713c2c4 feat: update Kubernetes to 1.26.3
• a3cf41647 docs: add InstallConfig ignored notice to doc
• df9b851fb chore: load all external artifacts earlier
• 2dd0964c5 refactor: use resource watches on dashboard
• 9933ebb6a chore: fix loaded artifacts file permission
• a14a0aba0 fix: nil pointer exception in syncLink
• cf101e56f fix: add --force flag for talosctl gen
• ea2aa0611 fix: fix data race on network config read
• 64e3d24c6 feat: provide platform network config for 'metal' in META
• 442cb9c1b feat: implement APIs to write to META
• 9e07832db feat: implement summary dashboard
• 1df841bb5 refactor: change the interface of META
• e9962bc3e chore: update CI to tag azure buckets
• 9f5f5cf9b feat: update Flannel to v0.21.3
• 02b0ff35e feat: generate Flannel CNI manifest from upstream
• 6656d35ec docs: fix Talos version to use template
• 72a6d1d70 docs: update nocloud
• 9948a646d feat: coredns node uninitialized toleration
• e03902b54 feat: update Go to 1.20.2
• c8f8579f2 fix: upgrade-k8s to flag should not be required since there is a default
• 230cfaf80 feat: use network information from guestinfo.metadata
• 97048f7c3 feat: netstat in API and client
• fda6da692 fix: successful ACPI shutdown in maintenance mode
• b97e1abaa feat: set default image, validate empty image
• 121220a3b chore: bump dependencies via renovate bot
• ebc92f3c1 chore: add container id to talosctl -k containers and talosctl -k logs
• 22ef81c1e feat: add grub option to drop to maintenance mode
• 642fe0c90 feat: update pkgs with framebuffer console
• 69cb414f0 docs: update cilium install instructions
• e71cc6619 fix: redo assertHostnames in HostnameMergeSuite.TestMerge
• 8ea4bfad8 refactor: improve the kubernetes upgrade flow
• 81879fc0c docs: add how tos for workloads on control planes, and scaling up
• 05b0b721c chore: move blob storage to azure for builds
• a78281214 feat: add cilium e2e tests
• 061640ccc feat: add pod ip to kube-proxy spec
• dea17d723 feat: update Kubernetes to v1.26.2
• 337aaba7a feat: add 'os:operator' role
• 40e69af22 fix: improve etcd leave on reset process
• 638dc9128 fix: fix "defer" leak in ResetUserDisks
• bfba3677b chore: handle grub option - "wipe"
• 594f27d87 release(v1.4.0-alpha.2): prepare release </p> </details>

Changes from siderolabs/discovery-api

<details><summary>1 commit</summary> <p>

• ac75538 chore: regen the proto definitions with vtprotobuf v0.4.0 </p> </details>

Changes from siderolabs/discovery-client

<details><summary>1 commit</summary> <p>

• 269a832 chore: rekres, update discovery api </p> </details>

Changes from siderolabs/extras

<details><summary>8 commits</summary> <p>

• 343956e feat: update Go to 1.20.2
• 6209d87 chore: bump tc-redirect-tap
• 8b28b6b chore: bump deps
• 5ab4f59 chore: disable renovate builds
• ddeddbd chore: update packages, tc_redirect_tap
• 8cb4792 chore: update Go to 1.19.5
• 3ca2df3 chore: disable provenance in buildx
• 55d8452 feat: update releases </p> </details>

Changes from siderolabs/gen

<details><summary>2 commits</summary> <p>

• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods </p> </details>

Changes from siderolabs/go-blockdevice

<details><summary>1 commit</summary> <p>

• 8c7ea19 fix: blockdevice size is reported by Linux in 512 blocks always </p> </details>

Changes from siderolabs/go-kmsg

<details><summary>1 commit</summary> <p>

• 7a51094 fix: exit properly on context cancel </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>4 commits</summary> <p>

• 81887dc feat: add kubelet flag checks
• fe473c0 refactor: make sync easier to consume without CLI
• 570819b feat: initial version of the library
• fb79215 Initial commit </p> </details>

Changes from siderolabs/go-smbios

<details><summary>1 commit</summary> <p>

• c526764 feat: fix reading "broken" Hyper-V DMI data </p> </details>

Changes from siderolabs/pkgs

<details><summary>36 commits</summary> <p>

• c26b0b5 chore: bump deps
• 7d8f5bd feat: enable Hyper-V dynamic memory driver
• ea40205 chore: bump deps
• 21e5a68 feat: update Go 1.20.2, Linux 6.1.15 and other
• 1d7e60c feat: enable framebuffer drivers and console fonts
• 0e63e95 chore: bump deps
• 5dbce6b fix: xz url
• 0097233 chore: re-enable drbd
• 7493721 fix: sourcefourge url shasums
• 185f482 feat: update containerd to 1.6.18
• e3cab6c chore: bump deps
• 18661b0 chore: bump deps
• 885a68b chore: bump deps
• c3a6e18 chore: bump dependencies
• 1fae0b2 feat: virtio drivers as modules
• 61d8ff4 chore: bump deps and disable un-needed kconfig
• 15fe6d8 fix: kernel module tree files missing
• 987d24a feat: mellanox drivers are modules
• b82a015 feat: mellanox oped
• 057d4f9 chore: bump deps
• 4ac4138 feat: enable nvme support for raspberrypi cm4
• ccb9d39 fix: disable magic sysrq
• d33202d chore: bump u-boot to 2023.01
• cb83e16 chore: bump dependencies
• e561dcb feat: bump Go to 1.19.5
• c7797c7 feat: update Linux to 6.1.4, restore RPi support
• 5e8ebb0 feat: add AMD K10 sensor support
• 73ac37d chore: disable provenance in buildx
• 8965bee chore: use default symlinks to /bin in base
• 325c9bf feat: bump dependencies
• 165dff6 fix: patch ipmitool IANA URL
• c542f39 feat: add kernel support for usb setrial console
• f564f45 chore: bump tools, containerd
• 268ea7c chore: bump deps
• dcf3ceb feat: add nitro enclave support in kernel
• 17ea5e6 chore: bump kernel to 5.15.81 </p> </details>

Changes from siderolabs/tools

<details><summary>29 commits</summary> <p>

• 2d710f9 chore: bump deps
• 9bea7d0 chore: skip rc versions for util-linux
• a94850e chore: bump deps
• e6b2956 fix: protoc install
• 601e347 feat: go 1.20.2 + other bumps
• ca67d0b chore: bump deps
• 662a906 feat: add libnl
• a8440a9 fix: partially revert e6c98fdf54425e6382f226e33bccca6f3875aad3a
• e6c98fd chore: remove swig
• cd9687b fix: renovate config
• 977e3fc chore: bump go to 1.20.1
• 15748aa chore: bump deps
• d4b719a chore: bump deps
• 8c36dbd chore: bump toolchain, bump protoc-gen-go-grpc
• a62e365 feat: update Go to 1.20
• 28d4a57 chore: reduce renovate noise
• e130fd5 chore: bump deps
• 37612fe fix: revert enabling provenance
• e0b01e3 chore: bump deps
• d0e6bd0 feat: add gnutls
• 3d34b5d chore: bump dependencies
• 763c1d9 feat: update Go to 1.19.5
• 136958f chore: disable provenance in buildx
• e2a8692 feat: update releases
• 0e48f37 chore: bump protobuf
• a21aa1c chore: bump toolchain and mpc versions
• 1a75d0f chore: bump deps
• 55bd185 feat: update Go to 1.19.4
• f291f46 chore: bump tools </p> </details>

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.226
• github.com/containerd/cgroups v1.0.4 -> v1.1.0
• github.com/containerd/containerd v1.6.12 -> v1.6.19
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.10
• github.com/docker/docker v20.10.21 -> v23.0.1
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/emicklei/dot v1.2.0 -> v1.3.1
• github.com/fatih/color v1.13.0 -> v1.15.0
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
• github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 -> v1.4.0
• github.com/hashicorp/go-getter v1.6.2 -> v1.7.1
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.41.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> e252950ab961
• github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
• github.com/mattn/go-isatty v0.0.16 -> v0.0.17
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/nberlee/go-netstat 19cc338ee40a new
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 84f9c0ff9de8
• github.com/safchain/ethtool v0.2.0 -> v0.3.0
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.15
• github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
• github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-7-g343956e
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.3
• github.com/siderolabs/go-kmsg v0.1.2 -> v0.1.3
• github.com/siderolabs/go-kubernetes v0.2.0 new
• github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-35-gc26b0b5
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.2
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-26-g2d710f9
• github.com/stretchr/testify v1.8.1 -> v1.8.2
• github.com/u-root/u-root v0.10.0 -> v0.11.0
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.16
• github.com/vmware/govmomi v0.29.0 -> v0.30.4
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> f1b76eb4bb35
• golang.org/x/net v0.4.0 -> v0.8.0
• golang.org/x/sys v0.3.0 -> v0.6.0
• golang.org/x/term v0.3.0 -> v0.6.0
• golang.org/x/time v0.2.0 -> v0.3.0
• golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
• google.golang.org/grpc v1.51.0 -> v1.54.0
• google.golang.org/protobuf v1.28.1 -> v1.30.0
• k8s.io/api v0.26.0 -> v0.27.0-beta.0
• k8s.io/apimachinery v0.26.0 -> v0.27.0-beta.0
• k8s.io/apiserver v0.26.0 -> v0.27.0-beta.0
• k8s.io/client-go v0.26.0 -> v0.27.0-beta.0
• k8s.io/component-base v0.26.0 -> v0.27.0-beta.0
• k8s.io/cri-api v0.26.0 -> v0.27.0-beta.0
• k8s.io/klog/v2 v2.80.1 -> v2.90.1
• k8s.io/kubectl v0.26.0 -> v0.27.0-beta.0
• k8s.io/kubelet v0.26.0 -> v0.27.0-beta.0
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.67

Previous release can be found at v1.3.0

Welcome to the v1.4.0-alpha.2 release of Talos! This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

Registry Mirror Catch-All Option

Talos now supports a catch-all option for registry mirrors:

machine:
    registries:
        mirrors:
            docker.io:
                - https://registry-1.docker.io/
            "*":
                - https://my-registry.example.com/

Talos Dashboard on TTY2

Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot. Kernel logs remain available on /dev/tty1.

To switch TTYs, use the Alt+F1 through Alt+F2 keys.

You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.

This behavior is disabled by default on SBCs.

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Kernel Modules

Talos now supports automatically loading kernel drivers built as modules. If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically. Modules can still be loaded explicitly by defining it in machine configuration.

Kernel Modules Tree

Talos now supports re-building the kernel modules dependency tree information on upgrades. This allows modules of same name to co-exist as in-tree and external modules. System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.

Machine Configuration

Strategic merge config patches correctly support merging .vlans sections of the network interface.

Reset API Enhancements

Talos now supports resetting user disks through the Reset API, the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl. Additionally, the Reset API can now function in maintenance mode and has the capability to wipe the node's system disk (partial wipe is not supported).

Component Updates

• Linux: 6.1.12
• containerd: v1.6.18
• Kubernetes: v1.26.1
• etcd: v3.5.7
• CoreDNS: v1.10.1

Talos is built with Go 1.20.1.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Spencer Smith
• Serge Logvinov
• Steve Francis
• Artem Chernyshev
• Tim Jones
• Andrey Smirnov
• Cees-Jan Kiewiet
• Chris van de Sande
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Nico Berlee
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Sander Maijers
• Seán C McCord
• Steffen Windoffer
• Tim van Druenen
• Victor Seva
• budimanjojo

Changes

<details><summary>128 commits</summary> <p>

• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs
• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2 </p> </details>

Changes since v1.4.0-alpha.1

<details><summary>46 commits</summary> <p>

• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs </p> </details>

Changes from siderolabs/discovery-api

<details><summary>1 commit</summary> <p>

• ac75538 chore: regen the proto definitions with vtprotobuf v0.4.0 </p> </details>

Changes from siderolabs/discovery-client

<details><summary>1 commit</summary> <p>

• 269a832 chore: rekres, update discovery api </p> </details>

Changes from siderolabs/extras

<details><summary>6 commits</summary> <p>

• 8b28b6b chore: bump deps
• 5ab4f59 chore: disable renovate builds
• ddeddbd chore: update packages, tc_redirect_tap
• 8cb4792 chore: update Go to 1.19.5
• 3ca2df3 chore: disable provenance in buildx
• 55d8452 feat: update releases </p> </details>

Changes from siderolabs/gen

<details><summary>2 commits</summary> <p>

• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods </p> </details>

Changes from siderolabs/go-blockdevice

<details><summary>1 commit</summary> <p>

• 8c7ea19 fix: blockdevice size is reported by Linux in 512 blocks always </p> </details>

Changes from siderolabs/go-kubernetes

<details><summary>2 commits</summary> <p>

• 570819b feat: initial version of the library
• fb79215 Initial commit </p> </details>

Changes from siderolabs/go-smbios

<details><summary>1 commit</summary> <p>

• c526764 feat: fix reading "broken" Hyper-V DMI data </p> </details>

Changes from siderolabs/pkgs

<details><summary>30 commits</summary> <p>

• 5dbce6b fix: xz url
• 0097233 chore: re-enable drbd
• 7493721 fix: sourcefourge url shasums
• 185f482 feat: update containerd to 1.6.18
• e3cab6c chore: bump deps
• 18661b0 chore: bump deps
• 885a68b chore: bump deps
• c3a6e18 chore: bump dependencies
• 1fae0b2 feat: virtio drivers as modules
• 61d8ff4 chore: bump deps and disable un-needed kconfig
• 15fe6d8 fix: kernel module tree files missing
• 987d24a feat: mellanox drivers are modules
• b82a015 feat: mellanox oped
• 057d4f9 chore: bump deps
• 4ac4138 feat: enable nvme support for raspberrypi cm4
• ccb9d39 fix: disable magic sysrq
• d33202d chore: bump u-boot to 2023.01
• cb83e16 chore: bump dependencies
• e561dcb feat: bump Go to 1.19.5
• c7797c7 feat: update Linux to 6.1.4, restore RPi support
• 5e8ebb0 feat: add AMD K10 sensor support
• 73ac37d chore: disable provenance in buildx
• 8965bee chore: use default symlinks to /bin in base
• 325c9bf feat: bump dependencies
• 165dff6 fix: patch ipmitool IANA URL
• c542f39 feat: add kernel support for usb setrial console
• f564f45 chore: bump tools, containerd
• 268ea7c chore: bump deps
• dcf3ceb feat: add nitro enclave support in kernel
• 17ea5e6 chore: bump kernel to 5.15.81 </p> </details>

Changes from siderolabs/tools

<details><summary>20 commits</summary> <p>

• cd9687b fix: renovate config
• 977e3fc chore: bump go to 1.20.1
• 15748aa chore: bump deps
• d4b719a chore: bump deps
• 8c36dbd chore: bump toolchain, bump protoc-gen-go-grpc
• a62e365 feat: update Go to 1.20
• 28d4a57 chore: reduce renovate noise
• e130fd5 chore: bump deps
• 37612fe fix: revert enabling provenance
• e0b01e3 chore: bump deps
• d0e6bd0 feat: add gnutls
• 3d34b5d chore: bump dependencies
• 763c1d9 feat: update Go to 1.19.5
• 136958f chore: disable provenance in buildx
• e2a8692 feat: update releases
• 0e48f37 chore: bump protobuf
• a21aa1c chore: bump toolchain and mpc versions
• 1a75d0f chore: bump deps
• 55bd185 feat: update Go to 1.19.4
• f291f46 chore: bump tools </p> </details>

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.209
• github.com/containerd/cgroups v1.0.4 -> v1.1.0
• github.com/containerd/containerd v1.6.12 -> v1.6.18
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.7
• github.com/docker/docker v20.10.21 -> v23.0.1
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/emicklei/dot v1.2.0 -> v1.3.1
• github.com/fatih/color v1.13.0 -> v1.14.1
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
• github.com/hashicorp/go-getter v1.6.2 -> v1.7.0
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.40.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> 5369909a5de7
• github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
• github.com/mattn/go-isatty v0.0.16 -> v0.0.17
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 47e7db7885b4
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.13
• github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
• github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-5-g8b28b6b
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.3
• github.com/siderolabs/go-kubernetes v0.1.0 new
• github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-29-g5dbce6b
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.1
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-17-gcd9687b
• github.com/stretchr/testify v1.8.1 -> v1.8.2
• github.com/u-root/u-root v0.10.0 -> v0.11.0
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.15
• github.com/vmware/govmomi v0.29.0 -> v0.30.2
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> 8449b0a6169f
• golang.org/x/net v0.4.0 -> v0.7.0
• golang.org/x/sys v0.3.0 -> v0.5.0
• golang.org/x/term v0.3.0 -> v0.5.0
• golang.org/x/time v0.2.0 -> v0.3.0
• golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
• google.golang.org/grpc v1.51.0 -> v1.53.0
• k8s.io/api v0.26.0 -> v0.26.1
• k8s.io/apimachinery v0.26.0 -> v0.26.1
• k8s.io/apiserver v0.26.0 -> v0.26.1
• k8s.io/client-go v0.26.0 -> v0.26.1
• k8s.io/component-base v0.26.0 -> v0.26.1
• k8s.io/klog/v2 v2.80.1 -> v2.90.0
• k8s.io/kubectl v0.26.0 -> v0.26.1
• k8s.io/kubelet v0.26.0 -> v0.26.1
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.67

Previous release can be found at v1.3.0

Welcome to the v1.4.0-alpha.1 release of Talos! This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Component Updates

• Linux: 6.1.7
• containerd: v1.6.15
• Kubernetes: v1.26.1
• etcd: v3.5.7

Talos is built with Go 1.19.5.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Serge Logvinov
• Spencer Smith
• Steve Francis
• Cees-Jan Kiewiet
• Chris van de Sande
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Nico Berlee
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Seán C McCord
• Tim Jones
• Tim van Druenen
• Victor Seva

Changes

<details><summary>81 commits</summary> <p>

• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2 </p> </details>

Changes since v1.4.0-alpha.0

<details><summary>36 commits</summary> <p>

• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone </p> </details>

Changes from siderolabs/extras

<details><summary>3 commits</summary> <p>

• 8cb4792 chore: update Go to 1.19.5
• 3ca2df3 chore: disable provenance in buildx
• 55d8452 feat: update releases </p> </details>

Changes from siderolabs/gen

<details><summary>2 commits</summary> <p>

• 214c1ef chore: set slice.Filter result slice cap to len
• 8e89b1e feat: add GetOrCreate and GetOrCall methods </p> </details>

Changes from siderolabs/pkgs

<details><summary>19 commits</summary> <p>

• 987d24a feat: mellanox drivers are modules
• b82a015 feat: mellanox oped
• 057d4f9 chore: bump deps
• 4ac4138 feat: enable nvme support for raspberrypi cm4
• ccb9d39 fix: disable magic sysrq
• d33202d chore: bump u-boot to 2023.01
• cb83e16 chore: bump dependencies
• e561dcb feat: bump Go to 1.19.5
• c7797c7 feat: update Linux to 6.1.4, restore RPi support
• 5e8ebb0 feat: add AMD K10 sensor support
• 73ac37d chore: disable provenance in buildx
• 8965bee chore: use default symlinks to /bin in base
• 325c9bf feat: bump dependencies
• 165dff6 fix: patch ipmitool IANA URL
• c542f39 feat: add kernel support for usb setrial console
• f564f45 chore: bump tools, containerd
• 268ea7c chore: bump deps
• dcf3ceb feat: add nitro enclave support in kernel
• 17ea5e6 chore: bump kernel to 5.15.81 </p> </details>

Changes from siderolabs/tools

<details><summary>14 commits</summary> <p>

• 28d4a57 chore: reduce renovate noise
• e130fd5 chore: bump deps
• 37612fe fix: revert enabling provenance
• e0b01e3 chore: bump deps
• d0e6bd0 feat: add gnutls
• 3d34b5d chore: bump dependencies
• 763c1d9 feat: update Go to 1.19.5
• 136958f chore: disable provenance in buildx
• e2a8692 feat: update releases
• 0e48f37 chore: bump protobuf
• a21aa1c chore: bump toolchain and mpc versions
• 1a75d0f chore: bump deps
• 55bd185 feat: update Go to 1.19.4
• f291f46 chore: bump tools </p> </details>

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.184
• github.com/containerd/containerd v1.6.12 -> v1.6.15
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.4
• github.com/docker/docker v20.10.21 -> v20.10.23
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/fatih/color v1.13.0 -> v1.14.1
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.5.4
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.39.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> de60144f33f8
• github.com/mattn/go-isatty v0.0.16 -> v0.0.17
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 892d1a2eb0da
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.12
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-2-g8cb4792
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-18-g987d24a
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.0
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-11-g28d4a57
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.14
• github.com/vmware/govmomi v0.29.0 -> v0.30.0
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> 987e16ee2705
• golang.org/x/net v0.4.0 -> v0.5.0
• golang.org/x/sys v0.3.0 -> v0.4.0
• golang.org/x/term v0.3.0 -> v0.4.0
• golang.org/x/time v0.2.0 -> v0.3.0
• google.golang.org/grpc v1.51.0 -> v1.52.0
• k8s.io/api v0.26.0 -> v0.26.1
• k8s.io/apimachinery v0.26.0 -> v0.26.1
• k8s.io/apiserver v0.26.0 -> v0.26.1
• k8s.io/client-go v0.26.0 -> v0.26.1
• k8s.io/component-base v0.26.0 -> v0.26.1
• k8s.io/klog/v2 v2.80.1 -> v2.90.0
• k8s.io/kubectl v0.26.0 -> v0.26.1
• k8s.io/kubelet v0.26.0 -> v0.26.1

Previous release can be found at v1.3.0

Welcome to the v1.4.0-alpha.0 release of Talos! This is a pre-release of Talos

Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues.

Component Updates

• Linux: 6.1.1
• containerd: v1.6.14

Talos is built with Go 1.19.4.

Contributors

• Andrey Smirnov
• Noel Georgi
• Utku Ozdemir
• Dmitriy Matrenichev
• Spencer Smith
• Lance R. Vick
• Michael Vorburger
• Nico Berlee
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Steve Francis
• Victor Seva

Changes

<details><summary>44 commits</summary> <p>

• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2 </p> </details>

Changes from siderolabs/extras

<details><summary>1 commit</summary> <p>

• 55d8452 feat: update releases </p> </details>

Changes from siderolabs/gen

<details><summary>1 commit</summary> <p>

• 8e89b1e feat: add GetOrCreate and GetOrCall methods </p> </details>

Changes from siderolabs/pkgs

<details><summary>7 commits</summary> <p>

• 325c9bf feat: bump dependencies
• 165dff6 fix: patch ipmitool IANA URL
• c542f39 feat: add kernel support for usb setrial console
• f564f45 chore: bump tools, containerd
• 268ea7c chore: bump deps
• dcf3ceb feat: add nitro enclave support in kernel
• 17ea5e6 chore: bump kernel to 5.15.81 </p> </details>

Changes from siderolabs/tools

<details><summary>6 commits</summary> <p>

• e2a8692 feat: update releases
• 0e48f37 chore: bump protobuf
• a21aa1c chore: bump toolchain and mpc versions
• 1a75d0f chore: bump deps
• 55bd185 feat: update Go to 1.19.4
• f291f46 chore: bump tools </p> </details>

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.166
• github.com/containerd/containerd v1.6.12 -> v1.6.14
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.2
• github.com/docker/docker v20.10.21 -> v20.10.22
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.38.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> de60144f33f8
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 02e38ea9604c
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0
• github.com/siderolabs/gen v0.4.1 -> v0.4.2
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-6-g325c9bf
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.3.0-alpha.2
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-3-ge2a8692
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.14
• github.com/vmware/govmomi v0.29.0 -> v0.30.0
• go.uber.org/zap v1.23.0 -> v1.24.0
• golang.org/x/time v0.2.0 -> v0.3.0

Previous release can be found at v1.3.0