33 Commits

Author SHA1 Message Date
Andrey Smirnov
263f699ea4
chore: annotate extensions with tiers
Fixes #10940

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-26 20:58:30 +04:00
Mateusz Urbanek
c66e678b2b
docs: add SBOM for container-runtimes
Partial for #10940

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-07-23 16:16:54 +02:00
Dmitrii Sharshakov
da519cf25a
feat: update various extensions
Updated Gvisor, Kata-containers, crun, Glib, Glibc, libseccomp, Open-iSCSI, mdadm, ecr-credential-provider, qemu-guest-agent, tailscale, as well as pkgs and wolfi-base base images
Move all hashes to vars for easier updates
Use tools instead of base
Remove dependency on packages which are in tools

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-03-10 21:23:04 +01:00
Dmitry Sharshakov
5cd226e3ea
chore: build with new toolchain
Move modules, firmware and libraries to accommodate usrmerged rootfs

Only use network where needed via new bldr, pre-download Go dependencies in prepare step, improve Go cache

Bump xen-guest-agent to make it build with current Alpine Rust

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-02-10 16:00:19 +01:00
Noel Georgi
9c92bda95b
fix: unable to override runtime defaults
This fixes the issue when `.machine.files` using
`/etc/cri/conf.d/20-customization.part` is sometimes unable to merge the
values.

The fix is to prefix the the files with `10-` prefix so the
customization with `20-` takes precedence when merging.

`gvisor-debug` is prefixed with `11-` since it should overwrite the
gvisor defaults. This also fixes where the order of gvisor extensions
mattered previously.

Fixes: #578

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-10 19:10:22 +05:30
Andrey Smirnov
c5fa260bd8
feat: bump dependencies
```
| Package | Update | Change |
|---|---|---|
| [containerd/stargz-snapshotter](https://redirect.github.com/containerd/stargz-snapshotter) | minor | `v0.15.1` -> `v0.16.2` |
| [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.17` -> `1.18.2` |
| git://git.kernel.org/pub/scm/libs/libcap/libcap.git | minor | `2.70` -> `2.72` |
| git://sourceware.org/git/elfutils.git | minor | `0.191` -> `0.192` |
| [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20241007.0` -> `20241118.0` |
| [https://github.com/qemu/qemu.git](https://redirect.github.com/qemu/qemu) | patch | `9.1.0` -> `9.1.2` |
| [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.16.0` -> `v0.17.0` |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | patch | `1.76.0` -> `1.76.6` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-28 17:52:13 +04:00
Andrey Smirnov
862d0ac63d
feat: update dependencies
```
| Package | Update | Change |
|---|---|---|
| [containers/crun](https://redirect.github.com/containers/crun) | minor | `1.16.1` -> `1.17` |
| [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20240826.0` -> `20241007.0` |
| [https://github.com/spinkube/containerd-shim-spin.git](https://redirect.github.com/spinkube/containerd-shim-spin) | minor | `v0.15.1` -> `v0.16.0` |
| [kubernetes/cloud-provider-aws](https://redirect.github.com/kubernetes/cloud-provider-aws) | patch | `v1.31.0` -> `v1.31.1` |
| [tailscale/tailscale](https://redirect.github.com/tailscale/tailscale) | minor | `1.72.1` -> `1.76.0` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-10-18 15:32:24 +04:00
Andrey Smirnov
11f48c567f
fix: image reproducibility with finalize
See https://github.com/tonistiigi/fsutil/issues/207

The result of this issue is that we can't use `finalize` steps where
destination is a directory, so refactor things to pull in such steps
into the `install` step.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-09-16 21:03:24 +04:00
Andrey Smirnov
bf3c9d2db1
feat: update depenendencies
Update `pkgs` to Talos 1.8.0 version.

ZFS to 2.2.6 via pkgs.

```
| Package | Update | Change |
|---|---|---|
| [google/gvisor](https://redirect.github.com/google/gvisor) | minor | `20240729.0` -> `20240826.0` |
| [https://github.com/qemu/qemu.git](https://redirect.github.com/qemu/qemu) | minor | `9.0.2` -> `9.1.0` |
| [https://gitlab.gnome.org/GNOME/glib.git](https://gitlab.gnome.org/GNOME/glib) | minor | `2.81.1` -> `2.82.0` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-09-06 15:14:48 +04:00
Tobias Bradtke
5f4947e28a
docs: fix link to kspp page
Update README.

Signed-off-by: Tobias Bradtke <webwurst@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-08-14 14:58:25 +04:00
Dmitriy Matrenichev
d6c324dc1f
chore: bump deps
- run rekres
- siderolabs/pkgs to v1.8.0-alpha.0-41-ga97d58f
- golang.org/x/sys to v0.23.0
- linux firmware to 20240709
- google/gvisor to 20240729.0
- cloud-provider-aws to v1.30.3
- containerd-shim-spin to v0.15.1
- qemu to 9.0.2
- glib to 2.81.1
- siderolabs/talos-vmtoolsd to v0.6.0
- tailscale/tailscale to 1.70.0
- util-linux to 2.40.2

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-08-06 22:34:19 +03:00
Andrey Smirnov
ab77645a00
fix: update CRI config parts for containerd config v3
The CRI plugin name got changed.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-07-31 18:40:22 +04:00
Sheogorath
c536209ef8
feat(gvisor): add new runtime class with kvm support
This patch adds a new runtime class to the gvisor extension allowing to
use the KVM platform feature. This is done by selecting `runsc-kvm` as
runtime.

References:
https://gvisor.dev/docs/user_guide/platforms/
https://gvisor.dev/docs/user_guide/production/

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-07-25 18:13:52 +05:30
Noel Georgi
d6773dd25a
chore: bump deps
Bump dependencies

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-07-05 16:07:09 +05:30
Noel Georgi
5904e12cec
chore: add cache paths for go builds
Add cache paths for go based builds.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-06-14 18:55:05 +08:00
Noel Georgi
d07caf7eed
chore: add extensions validator
Add validation for extensions rootfs and names.

Fixes: #379

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-05-23 21:29:10 +05:30
Noel Georgi
eb79cf81c2
chore: bump dependencies
Bump dependencies and bring in stable pkgs.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-04-02 19:17:14 +05:30
Andrey Smirnov
1459bc7727
feat: update dependencies
Update pkgs, brings in new Linux firmware.

```
| Package | Update | Change |
|---|---|---|
| [google/gvisor](https://togithub.com/google/gvisor) | minor | `20240212.0` -> `20240305.0` |
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-03-14 14:39:12 +04:00
Andrey Smirnov
0cf50cdf42
feat: update gvisor to 20240212.0
Latest release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-03-01 13:25:52 +04:00
Andrey Smirnov
4a93d56ec7
chore: adjust extension versions (tags) to drop Talos version
Drop Talos version when the extension doesn't have a hard dependency
(i.e. doesn't import kernel modules).

Fixes #288

```diff
9c9
< ghcr.io/siderolabs/fuse3:3.16.1-v1.6.0-alpha.2-15-g66a1265
---
> ghcr.io/siderolabs/fuse3:3.16.1
11,12c11,12
< ghcr.io/siderolabs/gvisor:20240109.0-v1.6.0-alpha.2-15-g66a1265
< ghcr.io/siderolabs/hello-world-service:v1.6.0-alpha.2-15-g66a1265
---
> ghcr.io/siderolabs/gvisor:20240109.0
> ghcr.io/siderolabs/hello-world-service:v1.0.0
17,18c17,18
< ghcr.io/siderolabs/mdadm:v4.2-v1.6.0-alpha.2-15-g66a1265
< ghcr.io/siderolabs/nut-client:2.8.1-v1.6.0-alpha.2-15-g66a1265
---
> ghcr.io/siderolabs/mdadm:v4.2
> ghcr.io/siderolabs/nut-client:2.8.1
24c24
< ghcr.io/siderolabs/stargz-snapshotter:v0.15.1-v1.6.0-alpha.2-15-g66a1265
---
> ghcr.io/siderolabs/stargz-snapshotter:v0.15.1
28c28
< ghcr.io/siderolabs/util-linux-tools:v1.6.0-alpha.2-15-g66a1265
---
> ghcr.io/siderolabs/util-linux-tools:2.39.3
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-01-31 17:05:13 +04:00
Andrey Smirnov
056e5a831a
chore: bump dependencies
* Linux Firmware: 20240115
* DRBD: 9.2.7
* gvisor: 20240109.0
* QEMU: 8.2.0
* Tailscale: 1.56.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-01-17 19:21:05 +04:00
Andrey Smirnov
0ba9f81043
docs: update documentation on installing extensions
Remove deprecated `.machine.install.extensions`, point to Talos
documentation.

Once Image Factory is live, we can point to it.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2023-09-29 22:49:23 +04:00
Noel Georgi
be107808f4
chore: re-enable gvisor cgroup support
Gvisor now works on Talos with cgroup support enabled.

Fixes: #4

Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-02-23 21:10:30 +05:30
Noel Georgi
8cb8014ce2
chore: bump deps
Bump dependencies and reduce renovate noise

Signed-off-by: Noel Georgi <git@frezbo.dev>
2023-02-17 16:08:17 +05:30
Utku Ozdemir
f5eefa721e
chore: bump dependencies
Bump pkgs version and the dependencies.

Add a workaround for nvidia-container-cli build on Debian Bullseye.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2023-01-13 15:13:16 +01:00
Andrey Smirnov
932a49e120
feat: update releases
gvisor: 20221212.0
Linux firmware: 20221214
NVIDIA: 525.60.13

DRBD disabled, as it doesn't build with Linux 6.1.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-12-23 14:34:09 +04:00
Andrey Smirnov
b35af1df63
chore: bump dependencies
* gvisor: 20221107.0
* Linux firmware: 20221109
* Intel ucode: 20221108

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-11-22 19:42:07 +04:00
Andrey Smirnov
eff6a5d048
feat: update releases
* minor Go bumps
* gvisor: 20221010.0
* open-iscsi: 2.1.8

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-10-13 14:47:26 +04:00
Noel Georgi
b4edb73cd4
chore: bump deps
Bump deps

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-09-22 12:03:40 +05:30
Andrey Smirnov
ed63195910
refactor: clean up extensions versioning
Use new `bldr` variables and `eval` support to produce versions for each
extension which makes sense:

* `gvisor`: upstream version + extensions version (as it depends on
Talos)
* `hello-world-service`: extensions version
* `amd-ucode`, `bnx2-bnx2x`: linux firmware version
* `intel-ucode`: upstream version
* `nvidia-container-toolkit`: combination of upstream versions

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-13 20:08:59 +03:00
Andrey Smirnov
5b1a5d7573
refactor: use base image, bump bldr, update versions
Update metadata for Talos 1.0.0.

Bump `bldr` to the latest version with `Merge` support, workaround issue
with `/tmp` losing sticky bit.

Use `base` image from pkgs to drop dependency on `tools`.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 22:31:10 +03:00
Andrew Rynhard
215aa82134
feat: add nvidia-container-runtime
Signed-off-by: Andrew Rynhard <andrew@rynhard.io>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-25 16:33:43 +05:30
Andrey Smirnov
119fab1ddd
chore: provider better folder structure
Fixes #8

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-10 20:39:39 +03:00