536 Commits

Author SHA1 Message Date
Andrey Smirnov
3698471739
fix: install iptables correctly into tailscale extension
See https://github.com/siderolabs/extensions/issues/1061

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-05-04 16:09:33 +04:00
Andrey Smirnov
dade5d9a4e
feat: promote multitpath-tools to extra, bump version
Fixes #1059

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-04-30 14:40:33 +04:00
Mateusz Urbanek
d64b3c1998
release(v1.14.0-alpha.0): prepare release
This is the official v1.14.0-alpha.0 release.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
v1.14.0-alpha.0
2026-04-29 13:53:58 +02:00
Mateusz Urbanek
7aabff30a3
chore: update tools and pkgs version
Tools: v1.14.0-alpha.0-4-g4ac4449 -> v1.14.0-alpha.0-6-g44ad18c
Pkgs: v1.14.0-alpha.0-13-g6ea49c7 -> v1.14.0-alpha.0-20-g6a53a93

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-04-29 12:33:29 +02:00
Edward Sammut Alessi
74431c05c9
chore: bump metal-agent to 0.1.5
Bump metal-agent to 0.1.5

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2026-04-28 12:40:44 +02:00
Edward Sammut Alessi
fe0a99c004
chore: rekres
Rekres

Signed-off-by: Edward Sammut Alessi <edward.sammutalessi@siderolabs.com>
2026-04-28 12:40:33 +02:00
Vassil Iordanov
2f45d7ccb0
docs: fix setup key variable name in README
NB_SETUP_KEY seems to be the correct name

Signed-off-by: Vassil Iordanov <vassil.iordanov@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-04-20 13:55:52 +04:00
Andrey Smirnov
66f49bbb57
chore: sync pkgs & tools
Bump to latest pkgs & tools, and no-op bump of systemd.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-04-16 15:09:41 +04:00
Noel Georgi
7871fc2f46
fix: grype scans
Grype scan was broken due to it not being able to build with Go 1.26
Fix by updating the dependency.

Also add missing packages that ship sbom.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-16 11:53:15 +05:30
Andrey Smirnov
07b43374f6
fix: enable for real joydev & uinput extensions
This is a fix for PR #1038, without it the extensions are never built.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-04-15 14:25:15 +04:00
Ansgar Dahlen
c5ef7eb00e
feat: add uhid and joydev extensions
Add uhid and joydev extensions.

Signed-off-by: Ansgar Dahlen <adahlen@evoila.de>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-15 00:02:38 +05:30
Andrey Smirnov
36706070f7
feat: update pkgs to pull in Linux firmware 20260410
Update and regen docs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-04-14 17:46:53 +04:00
Noel Georgi
26dae82e38
feat(ci): add extensions duplicate finder
Make sure we don't ship duplictate extension files.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-14 14:02:12 +05:30
Mateusz Urbanek
a9a1e7dd9e
chore: update dependencies
Update various dependencies:
- gvisor: 20260309.0 -> 20260406.0
- soci-snapshotter: v0.12.1 -> v0.13.0
- kata-containers: 3.27.0 -> 3.28.0
- crun: 1.26 -> 1.27
- qemu-guest-agent: 10.2.1 -> 10.2.2
- tailscale: 1.94.2 -> 1.96.4
- newt: 1.10.2 -> 1.11.0
- netbird: 0.67.2 -> 0.67.4
- nut: 2.8.4 -> 2.8.5
- fuse3: 3.18.1 -> 3.18.2
- util-linux: 2.41.3 -> 2.41.4
- pkgs/tools update

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-04-10 14:39:52 +02:00
Noel Georgi
f52533829c
chore: rekres
Rekres to avoid downloading bldr everytime.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-07 21:54:06 +08:00
Noel Georgi
fdd02585f8
feat: nvidia extension rework
Rework and cleanup the NVIDIA extensions so that it uses standard paths and is easier to maintain.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-07 12:40:30 +08:00
Noel Georgi
5a0db5378c
feat: allow more nvidia and nvme files from extensions
Allow more NVIDIA and NVME files from extensions,
this helps keep Talos rootfs clean and only extensions bring in the required files/symlinks.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-05 09:13:36 +03:00
Noel Georgi
77208fd162
feat: allow glibc ld files in etc
Allow both `/etc/ld.so.conf` and `/etc/ld.so.cache` files in `/etc`
since tools expect these to be standard.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-04 18:57:32 +03:00
Noel Georgi
ddd47209fb
feat: reenable netbird
Netbird failed to build with Go 1.26 previously, bump version to fix and reenable.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-04-02 11:12:27 +02:00
sam
62d2176758
fix: netbird config to a persistent location
Save Netbird config to persistent location.

Signed-off-by: sam <67697492+shyam0904a@users.noreply.github.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-31 11:44:42 +02:00
Galen Abell
5aeaf4e774
fix: export zpools on zfs shutdown
Fixes cases where later tasks fail because the disks are still in use
(e.g. closing encrypted volumes).

Signed-off-by: Galen Abell <galen@galenabell.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-31 11:30:48 +02:00
Andrey Smirnov
b28a70da13
fix: disable NVIDIA GPU check while building the driver
E.g. my build machine has ancient NVIDIA GPU, and has nouveau loaded,
which aborts the build, but it doesn't make any sense as I'm not
building it for my machine.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-26 12:35:12 +04:00
Andrey Smirnov
faa5ccd7eb
feat: update musl to 1.2.6
Update via tools/pkgs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-26 11:17:46 +04:00
Andrey Smirnov
a6b6bb9155
feat: update NVIDIA production to 595.58.03
See https://github.com/siderolabs/pkgs/pull/1496

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-24 21:58:10 +04:00
Andrey Smirnov
20f2cac4fd
fix: rework image digests one more time
For some reason buildx in the CI doesn't want to export full metadata,
only the digest is exposed.

Use a mixed solution by building the image tag via bldr as previously,
while attaching the digest from buildx.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-17 22:43:50 +04:00
Andrey Smirnov
432828752d
fix: calculate correctly image digests for the catalog
Use buldkit's metadata file to find what went into the build instead of
trying to resolve the digests on the fly.

Depends on kres change: https://github.com/siderolabs/kres/pull/627

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-17 18:00:35 +04:00
Mateusz Urbanek
03ed43c876
chore: update pkgs and tools
Update dependencies:
```
pkgs: v1.13.0-beta.0
tools: v1.13.0-beta.0
```

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-03-17 12:01:47 +01:00
Noel Georgi
279ee3adad
feat: bump deps
Bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-17 11:19:34 +09:00
Noel Georgi
e4afe22133
fix: iscsi-tools and multipath-tools
iscsi binaries needs to be present on the host.
Multipathd seems not to work when self-contained.

Fixes: https://github.com/siderolabs/talos/issues/12951
Fixes: https://github.com/siderolabs/extensions/issues/1006

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-15 19:11:18 +05:30
Andrey Smirnov
a22602ff88
feat: update pkgs with containerd 2.2.2
Bump ctr to 2.2.2.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-11 21:46:13 +04:00
Andrey Smirnov
2644125216
chore: sync pkgs and tools
This pulls in LLVM 22.1 and latest kernel, no functional changes here.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-11 12:14:43 +04:00
Noel Georgi
59dbb6573b
fix: nvidia production pkg firmware path
Production pkgs should use prod version.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-11 11:58:45 +05:30
Noel Georgi
c5480f9075
feat(nvidia): switch to CDI
Switch to CDI for NVIDIA.

Fixes: #940
Fixes: https://github.com/siderolabs/talos/issues/12103

Needs: https://github.com/siderolabs/talos/pull/12909

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-03-10 15:19:18 +05:30
Andrey Smirnov
74580ee730
feat: update dependencies
Pull in new pkgs, and bump:

* ZFS 2.4.1
* NVIDIA LTS 580.126.20

Bumps in extensions:

* netbird 0.66.2
* newt 1.9.0
* tailscale 1.94.2
* spin 0.23.0
* youki 0.6.0
* Intel ucode 20260227

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-09 14:23:33 +04:00
Andrey Smirnov
d347c27859
feat: update Go to 1.26.1
Sync pkgs/tools.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-06 22:53:42 +04:00
Andreas Lüdeke
5eb92a9db8
feat: add ipheth to usb-modem-drivers extension
Add the Apple iPhone USB Ethernet driver (ipheth) to the usb-modem
extension for both x86_64 and aarch64. This completes the USB network
driver coverage by including the standard Linux driver for iPhone USB
tethering.

The ipheth module is an in-tree driver in drivers/net/usb/ alongside
the other USB network drivers already bundled in this extension.

Depends on the corresponding kernel config change enabling
CONFIG_USB_IPHETH=m in siderolabs/pkgs.

Signed-off-by: Andreas Lüdeke <aluedeke@users.noreply.github.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-27 21:06:16 +04:00
Mateusz Urbanek
c538dab9c9
release(v1.13.0-alpha.2): prepare release
This is the official v1.13.0-alpha.2 release.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
v1.13.0-alpha.2
2026-02-24 12:52:30 +01:00
Mateusz Urbanek
8b3058b1f0
chore: update deps
Updated dependencies:

zlib: 1.3.2 (was 1.3.1)
kata-containers: 3.27.0 (was 3.26.0)
qemu: 10.2.1 (was 10.2.0)
netbird: 0.65.3 (was 0.64.5)
newt: 1.10.0 (was 1.9.0)
wolfi-base: sha256:9925d3017788558fa8f27e8bb160b791e56202b60c91fbcc5c867de3175986c8 (was sha256:1c56f3ceb1c9929611a1cc7ab7a5fde1ec5df87add282029cd1596b8eae5af67)

Updated PKGS to v1.13.0-alpha.0-61-g3c982f8

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-02-24 10:32:44 +01:00
Andrey Smirnov
42cc8888d0
feat: update Linux firmware to 20260221
Using the latest.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-24 12:40:10 +04:00
Noel Georgi
c2bff8e8d7
fix: iscsi and rpcbind extensions
SideroLabs kubelet image expects `iscsiadm` at `/usr/local/sbin`, easier to fix here than updating kubelet image.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-23 14:43:09 +05:30
Noel Georgi
95fe5cbeb6
fix: iscsi extension
This was an oversight and was missed while doing #962
See also #988

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-20 16:04:09 +05:30
lmacka
8f958d7de5
feat: add intel-npu extension for IVPU module and firmware
New drm/intel-npu extension following the same pattern as drm/i915.
Copies intel_vpu.ko and VPU firmware from linux-firmware. amd64 only.
Covers Meteor Lake (37xx), Arrow Lake/Lunar Lake (40xx), and
Panther Lake (50xx).

Signed-off-by: lmacka <lmacka@gmail.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-19 20:27:19 +05:30
Noel Georgi
b8da034616
fix: iscsi extension
Refactoring in #962 missed copying the iscsi extension manifest.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-19 19:03:48 +05:30
Noel Georgi
b626ae0064
feat: bring in go1.26
bring in go1.26

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-19 18:10:32 +05:30
Noel Georgi
fb4eb042d7
feat: consolidate extension services
Consolidate extension services to be self contained, don't pollute rootfs or mount up libraries from host unless absolutely needed.

Fixes: #876
Fixes: https://github.com/siderolabs/talos/issues/12667

Signed-off-by: Noel Georgi <git@frezbo.dev>
2026-02-18 21:47:18 +05:30
Andrey Smirnov
7ea3858784
feat: update extensions versions for pkgs deps
Some extensions are straight copies of stuff built in pkgs, so we need
to sync versions properly.

Import https://github.com/siderolabs/pkgs/pull/1461

And update many other variables which were outdated.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-11 17:12:08 +04:00
Andrey Smirnov
d2960cd02d
feat: update Intel ucode to 20260210
See https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260210-rev1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-11 14:54:06 +04:00
Andrey Smirnov
4299bc8d81
feat: update backportable dependencies
netbird: 0.64.5
gvisor: 20260202.0
Kata containers: 3.26.0
cloudflared: 2026.2.0
nebula: 1.10.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-10 21:16:32 +04:00
Andrey Smirnov
49bf5e494f
feat: update NVIDIA LTS to 580.126.16
This matches pkgs update.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-10 19:22:11 +04:00
Max Makarov
bdbd278d61
feat: update bird2 to 2.18
Switch source URL from bird.network.cz to GitLab archive as the
release tarball for 2.18 is not published on the project website.
Add autoreconf step since the GitLab archive doesn't include a
pre-generated configure script.

Signed-off-by: Max Makarov <maxpain@linux.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-09 14:50:53 +04:00