1498 Commits

Author SHA1 Message Date
Mateusz Urbanek
aebbbaf274
feat: support relative voume size
Include percent-based maxSize, e.g. use 50% of available space.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 83f2bdb9ce6c9466716a6ac9c94dc2222e569ee8)
2025-11-14 16:55:51 +01:00
Andrey Smirnov
3d997d7421
release(v1.12.0-beta.0): prepare release
This is the official v1.12.0-beta.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 15:23:39 +04:00
Andrey Smirnov
6919d232ab
docs: update kernel args size
Fixes #12162

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 14:49:47 +04:00
Andrey Smirnov
6063fbf912
feat: update dependencies
Many small changes, linting fixes, migration to moby/moby client
package.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 14:49:44 +04:00
Andrey Smirnov
68560b53ab
fix: split volume/disk locators
Don't guess based on the volume type, but use explicit fields for
different locators.

IMAGECACHE-ISO is a disk volume, but uses full volume locator (by
filesystem type, etc.)

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 12:18:22 +04:00
Mateusz Urbanek
2c3d30e94f
docs: fix image-cache-path flag description
Fix invalid description of flag, spotted during reviewing docs.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-11-14 08:33:52 +01:00
Adrian L Lange
93f2e87c2d
feat: shorthand for generating secrets to stdout
Fixes #12190

Signed-off-by: Adrian L Lange <git@p3lim.net>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-13 19:50:28 +04:00
Andrey Smirnov
5e1de00359
feat: implement time and resolvers multi-doc configuration
Fixes #10954

Fixes #10955

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-13 19:27:14 +04:00
Mateusz Urbanek
308c6bc414
feat: add full disk volumes
When set to `disk`, a full block device is used for the volume.

When `volumeType = "disk"`:
- Size specific settings are not allowed in the provisioning block (`minSize`, `maxSize`, `grow`).

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-11-12 14:50:56 +01:00
Andrey Smirnov
82ac1119ec
feat: implement new registry configuration
Move to using multi-doc registry configuration.

Fixes #12120

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-12 17:25:01 +04:00
Laura Brehm
66c01a706f
chore: deprecate interactive installer mode
Removes `interactive` from `talosctl apply-config --mode interactive`,
and deprecates related APIs.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2025-11-11 18:22:38 +01:00
Laura Brehm
957770f65a
feat(machined): add panic/force mode reboot
In certain situations, Talos's shutdown/reboot sequence hangs while
waiting for services/mounts to be gracefully stopped (see:
https://github.com/siderolabs/talos/issues/11775).

This patch adds a forceful mode to the reboot sequence (`talosctl reboot
--mode force`) that bypasses graceful userspace teardown and hard
reboots the machine.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2025-11-11 12:08:34 +01:00
Andrey Smirnov
60be0daf84
feat: implement multi-doc Wireguard config
Fixes #10963

Also hides/deprecated `.machine.network.interfaces`, as every piece of
it is now available as proper multi-doc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-10 19:05:58 +04:00
Andrey Smirnov
fafab391b4
feat: update Kubernetes to 1.35.0-alpha.3
See https://github.com/kubernetes/kubernetes/releases/tag/v1.35.0-alpha.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-07 17:58:11 +04:00
Andrey Smirnov
c8561ee2d0
feat: implement bridge multi-document config
Fixes #10962

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-07 13:59:25 +04:00
Andrey Smirnov
f4ad3077b0
feat: implement bond multi-doc configuration
Also expand internal bond configuration to cover missing fields.
They are not going to be exposed in legacy configuration.

Fixes #10960

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-07 13:45:09 +04:00
Dmitrii Sharshakov
c93a9c6b41
fix: improve OOM controller stability and make test strict on false positives
- Add d_* PSI derivative values to the trigger expression context
- Only trigger OOM action while PSI is rising
- Make OOM test fail if controller kills a cgroup without stress-ng
- Wait for stress-mem to terminate before proceeding with the next tests
- Skip OOM test when running with race detector

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-11-06 19:52:46 +01:00
Justin Garrison
335f917615
feat: add short -c flag for --cluster
Prevents needing to use --cluster and stays consistent with omnictl.

fixes #12127

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-04 13:41:53 +04:00
Andrey Smirnov
be028b67a0
feat: add support for multi-doc VLAN config
Fixes #10961

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-29 17:20:24 +04:00
Mateusz Urbanek
f3df0f80b9
feat: add directory backed UserVolumes
Resolves #11848

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-29 12:00:24 +01:00
Pranav
0327e77902
feat: add support for dashboard custom console parameter
Fixes #12070

Signed-off-by: Pranav <pranavppatil767@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-29 14:42:56 +04:00
Noel Georgi
fed948b8ae
release(v1.12.0-alpha.2): prepare release
This is the official v1.12.0-alpha.2 release.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-28 20:32:01 +05:30
Utku Ozdemir
b66482c529
feat: allow disabling injection of extra cmdline in cluster create
The command `talosctl cluster create` injects some extra cmdline though SMBIOS OEM variable `io.systemd.stub.kernel-cmdline-extra` when systemd-boot is used (e.g., when UEFI is enabled).

Introduce a new flag to optionally disable this behavior. This allows getting more consistent behavior when testing with a mixed set of UKI and non-UKI machines.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2025-10-27 12:01:36 +01:00
Andrey Smirnov
704b5f99e6
feat: update Kubernetes to 1.35.0-alpha.2
Start getting on K8s 1.35 for Talos 1.12.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-27 12:49:48 +04:00
Andrey Smirnov
1dffa5d996
feat: implement virtual IP operator config
Fixes #10959

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-24 17:37:03 +04:00
Orzelius
43b1d75375
fix: validate provisioner when destroying local clusters
Return an error when attempting to destroy a cluster that was created
with a different provisioner.

This fixes a bug where the qemu cluster state is removed without any actual
cleanup being done when running `talosctl cluster destroy` (provisioner defaults to docker).

* move the the `vm.State` logic into -> `provision.State` as it's now reused by the docker provisioner as well.
* move "cluster create" command -> "cluster create dev"
* hide the "cluster create" command from docs
* fix omni api url validation
* fix machineconfig.yaml being unnecessarily written to disk on the qemu command

Signed-off-by: Orzelius <33936483+Orzelius@users.noreply.github.com>
2025-10-24 20:55:35 +09:00
Andrey Smirnov
d110727263
fix: provide offset for partitions in discovered volumes
This was missing in the resource which makes rendering partitions
in the GUI hard.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-23 21:25:42 +04:00
Andrey Smirnov
39eeae9631
feat: update dependencies
CoreDNS 1.13.0
Linux 6.17.4

Other go.mod dependencies, tools, Helm charts used in tests, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-23 19:10:48 +04:00
Mateusz Urbanek
c0772b8eda
feat: add airgapped mode to QEMU backed talos
Add new `--airgapped` flag to talos cluster create (qemu)
to disable NAT in the VMs to effectively become airgapped.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-22 18:10:27 +02:00
Andrey Smirnov
6c98f4cdb0
feat: implement new DHCP network configuration
Fixes #11661

Fixes #10958

This also implement proper client identifier handling.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-21 20:51:58 +04:00
Dmitrii Sharshakov
4e12df8c5c
test: integration test for OOM controller
- Improve docs
- Disable OOM controller in container mode
- Log OOM events
- Add an integration test verifying the system can sustain an OOM event

Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
2025-10-20 17:50:59 +02:00
Orzelius
eccb21dd3b
feat: add presets to the 'cluster create qemu' command
* add 'iso', 'pxe', 'disk-image', 'maintenance' and 'secureboot' presets
* swith the image-factory e2e test to use the create qemu command with presets
* add a '--omni-api-endpoint' to simplify connecting machines to omni

Signed-off-by: Orzelius <33936483+Orzelius@users.noreply.github.com>
2025-10-18 14:02:32 +09:00
Andrey Smirnov
ec0a813fac
feat: unify cmdline handling GRUB/systemd-boot
Use cmdline from the UKI in Talos 1.12+ by default for new installs.

This brings GRUB in line with systemd-boot vs. cmdline behavior.

Fixes #12019

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-17 16:00:46 +04:00
Noel Georgi
ced57b047a
feat: support optionally disabling module sig verification
Support disabling kernel module signature verification.
Note that this does not work when SecureBoot is enabled.

Fixes: #11989

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-16 20:18:46 +05:30
Mateusz Urbanek
dbdd2b237e
feat: add static registry to talosctl
Fixes #11928
Fixes #11929

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-16 14:08:17 +02:00
Mateusz Urbanek
bf6ad51710
feat: add back install script
Install script needs to be present here until we update the docs website

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-16 08:21:55 +02:00
Andrey Smirnov
da451c5ba4
chore: drop documentation except for fresh reference
As the documentation got moved to
https://github.com/siderolabs/docs/tree/main/public/talos, drop the
documentation from Talos repository to avoid confusion.

Leave only generated reference docs for now.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-15 22:13:25 +04:00
Grzegorz Rozniecki
4ca58aeb81
fix: make Akamai platform usable
Addresses #10440

Configuration method now properly handles empty user data by returning
errors.ErrNoConfigSource instead of failing with "config not found" errors.
This aligns with other platform implementations and allows the system to
handle missing configuration gracefully.

Documentation:

- Explicitly document that switching to Direct Disk is required.
- Align Linode VM profile with other platforms (2 CPU, 4GB RAM).
- Fix typo.

Signed-off-by: Grzegorz Rozniecki <grozniec@akamai.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-14 19:16:51 +04:00
Andrey Smirnov
9a42b05bda
feat: implement link aliasing
Fixes #10956

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-08 16:27:27 +04:00
Andrey Smirnov
825622d90a
fix: resource proto definitions
There was a mismatch between how Talos encodes resource specs to
protobuf on the wire, and `.proto` files generated by `structprotogen`
for the same specs.

This only affected `LinkStatus`/`LinkSpec` resources, and it doesn't
affect Talos/Omni as they go via `protoenc`, bypassing `.proto` files.

Also if default proto library is used, it also works correctly.

The only place where it fails is a strict `vtprotobuf` encoding.

Also imports `protoenc` 0.2.4 skipping encoding of zero fields, which
should make COSI responses smaller for resources with lots of zero
fields.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-06 22:28:18 +04:00
frozensprocess
2c6003e790
docs: add Project Calico installation in two mode
+ Added instructions for Calico NFTables dataplane since Talos default networking mode is NFTables.
+ Added instructions for Calico eBPF dataplane for users who wish to have higher performance.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-06 21:04:11 +04:00
SuitDeer
34e107e1bd
docs: fix broken link
Update link to resources.

Signed-off-by: SuitDeer <114341346+SuitDeer@users.noreply.github.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-06 16:50:26 +04:00
Amarachi Iheanacho
dfbece56bd
docs: update the kubespan docs
add info on kubespan's relationship with discovery service, when unavailable

Signed-off-by: Amarachi Iheanacho <amarachi.iheanacho@siderolabs.com>
2025-10-06 13:10:07 +01:00
Florian Grignon
8b041a72ca
docs: update scaleway.md
Typo double `v` on the release name inside the URL for Scaleway Talos images.

Signed-off-by: Florian Grignon <5289998+FlogFr@users.noreply.github.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-06 13:56:27 +04:00
Andrey Smirnov
5dfb7e1fe7
feat: serve etcd image from registry.k8s.io
Less upstream registries to manage now, and faster pulls (hopefully).

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-02 18:58:40 +04:00
Mateusz Urbanek
a940e45a7f
feat: generate list of images required to build talos
Add new command that takes Talos version (semver) and generates a list
of images that are used in Image Factory for building talos.

Fixes #11927

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-02 16:15:32 +02:00
Mateusz Urbanek
42c0bdbf32
feat: add provisioner flag to images default command
Fixes #11925

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-02 10:54:25 +02:00
Andrey Smirnov
6bc0b1bcf7
feat: drop and lock deprecated features
These features don't make any sense right now, so remove them from the
machine config to reduce clutter.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-01 20:47:48 +04:00
Andrey Smirnov
3165a2b84c
release(v1.12.0-alpha.1): prepare release
This is the official v1.12.0-alpha.1 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-01 14:34:15 +04:00
Andrey Smirnov
d5197effb0
feat: update etcd 3.6.5, CoreDNS 1.12.4
Backportable to release-1.11.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-09-30 15:11:39 +04:00