24 Commits

Author SHA1 Message Date
Andrey Smirnov
6063fbf912
feat: update dependencies
Many small changes, linting fixes, migration to moby/moby client
package.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 14:49:44 +04:00
Andrey Smirnov
82ac1119ec
feat: implement new registry configuration
Move to using multi-doc registry configuration.

Fixes #12120

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-12 17:25:01 +04:00
Andrey Smirnov
92eeaa4826
fix: update YAML library
Update COSI, and stop using a fork of `gopkg.in/yaml.v3`, now we use new
supported for of this library.

Drop `MarshalYAMLBytes` for the machine config, as we actually marshal
config as a string, and we don't need this at all.

Make `talosctl` stop doing hacks on machine config for newer Talos, keep
hacks for backwards compatibility.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-04 15:21:57 +04:00
Andrey Smirnov
39eeae9631
feat: update dependencies
CoreDNS 1.13.0
Linux 6.17.4

Other go.mod dependencies, tools, Helm charts used in tests, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-23 19:10:48 +04:00
Andrey Smirnov
825622d90a
fix: resource proto definitions
There was a mismatch between how Talos encodes resource specs to
protobuf on the wire, and `.proto` files generated by `structprotogen`
for the same specs.

This only affected `LinkStatus`/`LinkSpec` resources, and it doesn't
affect Talos/Omni as they go via `protoenc`, bypassing `.proto` files.

Also if default proto library is used, it also works correctly.

The only place where it fails is a strict `vtprotobuf` encoding.

Also imports `protoenc` 0.2.4 skipping encoding of zero fields, which
should make COSI responses smaller for resources with lots of zero
fields.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-06 22:28:18 +04:00
Andrey Smirnov
7f048e962e
feat: update dependencies
Bump PKGS (Linux 6.16.9), tools, other go.mod dependencies.

Fix the linting issues.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-30 20:55:29 +04:00
Andrey Smirnov
7bae5b40b4
feat: implement link configuration
New multi-doc way to apply static configuration to network links.

Fixes #10957

Also implements related changes:

* new-style auto-DHCP mode - run DHCP as long as there is no new-style
  config document
* refactoring of controllers/tests which were touched in this PR
* implemented embedded config structs handling in docgen -> Markdown and
  docgen -> JSON schema

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-25 18:28:06 +04:00
Mateusz Urbanek
9db6dc06c3
feat: stop mounting state partition
Fixes #11608

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-09-18 15:34:28 +02:00
Andrey Smirnov
6a389cad35
chore: update dependencies
Update Go modules, some test dependencies, bump tools, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-02 14:14:53 +04:00
Andrey Smirnov
50824599a4
chore: update some tools
golangci-lint, buf.build.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-28 21:24:46 +04:00
Andrey Smirnov
70612c1f9f
refactor: split the PlatformConfigController
Fixes #10992

The plan is detailed in the issue, but tl;dr is to get one big
controller into 4 smaller controllers, each doing its own part of the
work.

Each controller has its own set of tests.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-20 14:11:35 +04:00
Andrey Smirnov
c079119337
chore: refactor how tools are being installed
Move stuff into `tools/go.mod`.

Also fix linting issues on the way (updating golangci-lint).

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-14 17:45:39 +04:00
Andrey Smirnov
721595a000
chore: add deadcode elimination linter
Assert that `machined` build does deadcode elimination.

Fixes #11296

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-08-07 19:51:43 +04:00
Dmitrii Sharshakov
023a24cd4d
test: use Grype to scan SBOM for vulnerabilities
Add a CI job to build the current VEX file and scan SBOM.

This should enable automatic detection of new vulnerabilities once
information on them becomes available.

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-07-21 18:11:41 +02:00
Dmitrii Sharshakov
2d89bcc71f
feat: bump Linux, Go and other packages
Include all core packages into SBOM, make sure Talos is built with the
same Go versions as pkgs.

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-07-11 11:21:04 +02:00
Dmitrii Sharshakov
93bcd3b562
docs: create SBOM for Go dependencies
Use modified Syft to create reproducible SBOMs

Fixes #10936

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-06-13 17:45:51 +02:00
Andrew Rynhard
80edd4852c
refactor(*): move source code into src directory (#118) 2018-07-05 20:18:10 -07:00
Andrew Rynhard
9f12441337
chore(*): use https wherever possible in source URLs (#109) 2018-06-09 08:21:48 -07:00
Andrew Rynhard
1115c86456
refactor(*): address linter errors and warnings (#69) 2018-05-08 17:40:43 -07:00
Andrew Rynhard
4c9a810a8f
feat(kernel): use LTS kernel v4.14.34 (#48) 2018-04-19 16:28:50 -07:00
Andrew Rynhard
e418d29a9a
feat(*): update to linux 4.15.13 (#30) 2018-03-27 20:53:10 -07:00
Andrew Rynhard
7785d6fc8b
feat(*): use CRI-O as the container runtime (#12) 2018-03-17 21:36:35 -07:00
Andrew Rynhard
29bdd6d6ee
feat(*): mount ROOT partition as RO (#11) 2018-03-15 21:56:57 -07:00
Andrew Rynhard
aba4615d33
feat(*): initial implementation (#2) 2018-03-11 21:39:06 -07:00