777 Commits

Author SHA1 Message Date
Noel Georgi
0dc4ad58e5
chore: bump kernel to 5.15.43
Bump kernel to [5.15.43](https://github.com/siderolabs/pkgs/pull/490)

Also pulls in:

- [Azure disks udev rules](https://github.com/siderolabs/pkgs/pull/488)
- [pkgs stable build time](https://github.com/siderolabs/pkgs/pull/489)
- [extras stable build time](https://github.com/siderolabs/extras/pull/49)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-26 18:16:28 +05:30
Andrey Smirnov
a1b6f21a82
chore: bump dependencies
dependabot-based, go-mod-outdated is broken due to sum issue with Azure
SDK package :(

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-05-23 21:25:04 +04:00
Noel Georgi
f477eb8820
chore: bump kernel to 5.15.41
Bump kernel to [5.15.41](https://github.com/siderolabs/pkgs/pull/483)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-18 18:55:04 +05:30
Artem Chernyshev
396e1386cf
feat: implement network device selector
Fixes: https://github.com/siderolabs/talos/issues/4203

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-05-18 13:46:52 +03:00
Noel Georgi
5ec4e9096e
chore: bump kernel to 5.15.40
Bump kernel to [5.15.40](https://github.com/siderolabs/pkgs/pull/481)

Also bumps u-boot to [v2022.04](https://github.com/siderolabs/pkgs/pull/479)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-16 19:28:09 +05:30
Andrey Smirnov
554edd3e89
chore: bump dependencies
dependabot + go-mod-outdated

`arp` library is now using Go stdlib `netip.Addr`, so we need an ugly
way to convert `netaddr.IP` to `netip.Addr`. We should soon refactor to
use `netip.Addr` everywhere (starting with `siderolabs/net` package).

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-05-16 16:11:54 +03:00
Noel Georgi
166d2585c6
chore: bump kernel and runc
Bump kernel to [5.15.39](https://github.com/siderolabs/pkgs/pull/476)
Bump runc to [v1.1.2](https://github.com/siderolabs/pkgs/pull/473)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-12 22:32:18 +05:30
Dmitriy Matrenichev
8d9b0cde0a
chore: update deps to go 1.18.2
Update tools, pkgs and extras

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-05-12 22:11:18 +08:00
Andrey Smirnov
b52962c440
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-05-11 20:30:03 +03:00
Noel Georgi
da7b24ba57
chore: bump kernel to 5.15.38
Bump kernel to 5.15.38 LTS

Ref: https://github.com/siderolabs/pkgs/pull/468

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-11 01:00:11 +05:30
Noel Georgi
bc88de729c
chore: bump coredns to v1.9.2
Bump CoreDNS to v1.9.2

Ref:
 - https://github.com/coredns/coredns/releases/tag/v1.9.2
 - https://github.com/coredns/coredns/blob/master/notes/coredns-1.9.2.md

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-10 21:45:02 +05:30
Noel Georgi
89cab200b8
chore: bump kubernetes to v1.24.0
Bump kubernetes to v1.24.0

Ref: https://github.com/siderolabs/kubelet/pull/45

Also update coredns [manifests](https://github.com/coredns/deployment/blob/master/kubernetes/coredns.yaml.sed)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-05 00:34:35 +05:30
Noel Georgi
bb932c2970
chore: bump containerd to v1.6.4
Bump containerd to v1.6.4

Ref: https://github.com/siderolabs/pkgs/pull/466

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-04 00:41:30 +05:30
Noel Georgi
4eaaa2d597
chore: bump kernel to 5.15.37
Bump kernel to 5.15.37

Ref: https://github.com/siderolabs/pkgs/pull/463

Also bump [pkgs](https://github.com/siderolabs/pkgs/pull/465) and [tools](https://github.com/siderolabs/tools/pull/193)

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-05-03 21:36:59 +05:30
Andrey Smirnov
bd089e702d
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-05-03 16:30:59 +03:00
Noel Georgi
f06e6acf2f
chore: bump kernel to 5.15.36
Bump kernel to 5.15.36 LTS

Ref:
 - https://github.com/siderolabs/pkgs/pull/458
 - https://github.com/siderolabs/pkgs/pull/460

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-28 01:09:54 +05:30
Andrey Smirnov
45464412e0
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-25 16:26:41 +03:00
Artem Chernyshev
2b03057b91
feat: implement a new mode try in the config manipulation commands
The new mode allows changing the config for a period of time, which
allows trying the configuration and automatically rolling it back in case
if it doesn't work for example.

The mode can only be used with changes that can be applied without a
reboot.

When changed it doesn't write the configuration to disk, only changes it
in memory.
`--timeout` parameter can be used to customize the rollback delay.
The default timeout is 1 minute.

Any consequent configuration change will abort try mode and the last
applied configuration will be used.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-04-21 20:31:45 +03:00
Noel Georgi
1d5c08e74f
chore: bump kernel to 5.15.35
Bump kernel to 5.15.35 LTS

Ref: https://github.com/siderolabs/pkgs/pull/454

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-20 20:33:10 +05:30
Andrey Smirnov
9bf23e5162
feat: update Kubernetes to 1.24.0-rc.0
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-rc.0

Go modules are not updated due to missing tags:
https://github.com/kubernetes/kubernetes/issues/109565

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-20 16:53:51 +03:00
Andrey Smirnov
39721ee939
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-18 21:20:14 +03:00
Noel Georgi
8ff8fc77f3
chore: enable rpi4 poe hat fan control
Enable the Rpi4 PoE hat fan control by pulling in the overlay
compatible with the upstream kernel driver.

Ref: https://github.com/siderolabs/pkgs/pull/450

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-15 00:17:40 +05:30
Artem Chernyshev
2b9722d1f5
feat: add dry-run flag in apply-config and edit commands
Dry run prints out config diff, selected application mode without
changing the configuration.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-04-14 19:12:57 +03:00
Noel Georgi
13f41baddf
chore: bump kernel to 5.15.34
Bump kernel to 5.15.34

Ref: https://github.com/siderolabs/pkgs/pull/448

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-14 12:19:05 +05:30
Noel Georgi
a91eb9358d
chore: bump deps
Ref:
- https://github.com/siderolabs/tools/pull/185
- https://github.com/siderolabs/pkgs/pull/447
- https://github.com/siderolabs/extras/pull/44

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-13 22:22:11 +05:30
Andrey Smirnov
a4060513c6
feat: build Talos with support for x86-64-v2 microarchitecture
See https://github.com/golang/go/wiki/MinimumRequirements#microarchitecture-support

This relies on new Go 1.18 feature to use more efficient x86-64
instructions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 21:12:59 +03:00
Noel Georgi
8faebd410b
chore: bump tools and pkgs
Bump tools and pkgs to get kernel 5.15.33

5.15.33 has a bunch of fixes for some CVE's,
it was too hard to track those and reference

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-11 19:56:42 +05:30
Andrey Smirnov
8499b7e7dc
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 16:53:39 +03:00
Dmitriy Matrenichev
a7ba7ea679
feat: migrate to go 1.18
Increase go.mod version from 1.17 to 1.18 in all projects. Update Makefile
to use latest tooling. Fix golangci by disable nolintlint for now.

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-04-11 17:17:54 +04:00
Andrey Smirnov
9dace93b59
feat: enable Pod Security Admission by default
As Talos 1.1 supports Kubernetes 1.22-1.24, we can finally enable Pod
Security Admission by default:

```yaml
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
    apiVersion: pod-security.admission.config.k8s.io/v1alpha1
    defaults:
      audit: restricted
      audit-version: latest
      enforce: baseline
      enforce-version: latest
      warn: restricted
      warn-version: latest
    exemptions:
      namespaces:
      - kube-system
      runtimeClasses: []
      usernames: []
    kind: PodSecurityConfiguration
  name: PodSecurity
  path: ""
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 15:36:04 +03:00
Noel Georgi
a6eebee36f
chore: update eudev
Update eudev

Ref: https://github.com/siderolabs/pkgs/pull/443

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-08 00:05:48 +05:30
Noel Georgi
1e4320b64e
chore: add support for rockpi 4A and 4B
Add support for RockPi 4A and 4B

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-06 23:35:16 +05:30
Andrey Smirnov
8619f95c5c
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 17:29:49 +03:00
Andrey Smirnov
19bf12af07
fix: enable IPv6 in Docker-based Talos clusters
Docker by default disable IPv6 completely in the containers which breaks
SideroLink on Docker-based clusters, as SideroLink is using IPv6
addresses for the Wiregurard tunnel.

This change might break `talosctl cluster create` on host systems which
have IPv6 disabled completely, so provide a flag to revert this
behavior.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-01 20:28:12 +03:00
Andrey Smirnov
1ed1f73e51
test: bump CAPI to 1.1.3
This probably fixes the incompatibility with 1.24.0-beta.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 22:50:16 +03:00
Andrey Smirnov
2ee1d2c720
feat: update Kuberentes to 1.24.0-beta.0
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-beta.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 18:06:56 +03:00
Andrey Smirnov
ca8b9c0a3a
feat: update Kubernetes to 1.24.0-alpha.4
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-alpha.4

Fix some incompatibilities around dropped flags/API versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 22:59:07 +03:00
Andrey Smirnov
4bfe686105
feat: update runc to 1.1.1
Also drop kernel sound/PCMCIA, enable random trust CPU, update
for Jetson Nano u-boot.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 18:17:26 +03:00
Andrey Smirnov
a5d64fc814
feat: update Flannel to 0.17.0
See https://github.com/flannel-io/flannel/releases/tag/v0.17.0

Flannel image was copied without any changes to `ghcr.io` to avoid
Docker Hub download limits.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 16:42:44 +03:00
Noel Georgi
bd0035f6a2
docs: add NVIDIA docs
Add NVIDIA docs

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-29 00:21:48 +05:30
Andrey Smirnov
efa3f28985
fix: correctly find partitions with config data (metal-iso)
Update `go-blockdevice` library:

- https://github.com/siderolabs/go-blockdevice/pull/56

Also add a note on the org rename to the release notes.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 20:34:30 +03:00
Noel Georgi
e2666f58f5
chore: bump kernel to 5.15.32
Bump kernel to 5.15.32

Ref: https://github.com/siderolabs/pkgs/pull/432

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-28 18:26:31 +05:30
Andrey Smirnov
957b2f233c
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 15:02:50 +03:00
Andrey Smirnov
a254254835
feat: update containerd to 1.6.2, Linux to 5.15.31
See:

* https://github.com/siderolabs/pkgs/pull/426
* https://github.com/siderolabs/pkgs/pull/430

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 17:36:19 +03:00
Andrey Smirnov
9b6422fcc3
feat: update CoreDNS to 1.9.1
See https://github.com/coredns/coredns/releases/tag/v1.9.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 16:43:07 +03:00
Andrey Smirnov
e0eee7fcc6
test: use clusterctl.yaml overrides after org rename
`clusterctl init` can't follow redirects.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 14:13:22 +03:00
Andrey Smirnov
883d401f9f
chore: rename github organization to siderolabs
Go module import paths still use talos-systems, packages use new
siderolabs name.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-23 21:07:46 +03:00
Tim Jones
d1294d014f
chore: add day-two tests for e2e-qemu
Uses Sidero Labs d2ctl to install a small sample of
common cluster services to ensure the Talos cluster
is capable.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-03-22 20:53:07 +01:00
Andrey Smirnov
a6240e4b67
feat: update Linux to 5.15.30
Also updates linux-firmware, OpenSSL to 1.1.1n.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-22 20:52:32 +03:00
Andrey Smirnov
b6691b3508
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-21 18:24:00 +03:00