1141 Commits

Author SHA1 Message Date
Andrey Smirnov
b726e2f9f7
feat: update Flannel to 0.26.4
See https://github.com/flannel-io/flannel/releases/tag/v0.26.4

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-02-04 17:25:57 +04:00
Andrey Smirnov
c5fb62e2e3
feat: update Linux to 6.2.11
Update to the latest LTS.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-27 20:48:37 +04:00
Andrey Smirnov
83d007c161
feat: update etcd to 3.5.18
See https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-27 18:58:56 +04:00
Noel Georgi
cd5e549039
feat: generate iso's with both UKI and grub
Starting with Talos 1.10, the default generated ISO's will use GRUB for
BIOS boot and sd-boot for EFI boot.

Fixes: #10192

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-24 22:32:02 +05:30
Noel Georgi
82c9ec158e
chore(ci): add tests with longhorn v2 engine
Add tests with longhorn v2 engine.

Fixes: #9669

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-22 23:10:48 +05:30
Andrey Smirnov
7a712fad2a
fix: disks with 4k sector size and systemd-boot
The previous fix was completely wrong.

See #10097

The core part of the problem was that `dosfstools` was not installed in
the `installer`, so this causes a busybox version of it to be used which
is totally broken for 4k disks.

Adds an integration test.

go-blockdevice updates revert first partition alignment for 4k disks and
allow `talosctl cluster create` to detect properly installation status.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-22 19:21:29 +04:00
Andrey Smirnov
d62a34aaf4
feat: update tools/pkgs/extras
This brings in Linux 6.12.10 and many updates in
pkgs/extras/extensions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-22 14:45:34 +04:00
Dmitriy Matrenichev
b9a8ad6aca
chore: de-hardcode list of extra images for image-cache test
Get the image list using `registry.k8s.io/conformance` image instead of hardcoding it.
Add new command `talosctl image integration` to create a proper list of k8s integration images for
`talosctl images cache-create` command.

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2025-01-21 20:27:57 +03:00
Noel Georgi
79987c05dc
feat: generate iqn and nqn files
Generate deterministic IQN and NQN files based on `machine-id`.

Fixes: #10009

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-20 17:44:07 +05:30
Andrey Smirnov
921e10254d
chore: update Go to 1.23.5
Via pkgs/tools.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-20 14:19:24 +04:00
Andrey Smirnov
e06b14112d
feat: update Kubernetes to 1.32.1
See https://github.com/kubernetes/kubernetes/releases/tag/v1.32.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-16 18:10:43 +04:00
Noel Georgi
01c86832cb
chore(ci): add test for OpenEBS MayaStor
Add a test in CI for OpenEBS MayaStor.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-16 09:47:17 +05:30
Andrey Smirnov
ddd695d933
feat: update containerd to 2.0.2
See https://github.com/containerd/containerd/releases/tag/v2.0.2

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-15 15:41:05 +04:00
Noel Georgi
9b957df646
chore: uki code restructure
UKI code re-structure, no-op.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-14 18:01:53 +05:30
Noel Georgi
e41a995253
fix: kube-apiserver authorizers order
Fixes handling of `kube-apiserver` authorization config authorizers.
order.

Fixes: #10110

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-14 16:49:25 +05:30
Andrey Smirnov
db4ca5668a
feat: add a kernel parameter to disable built-in auditd
Fixes #9907

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-14 14:24:50 +04:00
Andrey Smirnov
faa1490033
feat: update Linux to 6.12.9
Update to the latest 6.12.x.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-13 20:28:33 +04:00
Andrey Smirnov
edf5c5e29b
fix: extfs repair and resize
Fixes #10103

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-13 13:04:33 +04:00
Andrey Smirnov
1be5f8ff25
feat: update Linux to 6.12.8
Also update runc to 1.2.4.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-10 20:18:43 +04:00
Andrey Smirnov
6d605fc859
fix: disable NRI plugin in a different way
This way it's easy to re-enable NRI plugins with a simple change.

See https://github.com/siderolabs/talos/discussions/10068

I tested that it works e2e with NRI plugins repository.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-09 15:19:10 +04:00
Noel Georgi
fa5300d910
chore: revert: drop deprecated allowSchedulingOnMasters
This reverts commit 32c67c27c393c989f9d70ccb8506c4735f70d494.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-08 16:10:53 +05:30
Noel Georgi
32c67c27c3
chore: drop deprecated allowSchedulingOnMasters
Drop deprecated `.cluster.allowSchedulingOnMasters` machine config
field.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-06 18:20:25 +05:30
Andrey Smirnov
650eb3a4f2
refactor: rewrite cloud uploader to use AWS SDK Go v2
The v1 SDK was deprecated and archived.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-27 20:28:12 +04:00
Noel Georgi
e79c9e1277
chore(ci): drop equinix metal e2e-test
Drop Equinix Metal e2e tests, due to EM machines mostly not booting
properly over PXE, drop the test as it adds no value.

Fixes: #10034

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-26 22:41:01 +05:30
Andrey Smirnov
4761a9e6aa
chore: update dependencies
Go modules, tools, pkgs, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-26 14:48:31 +04:00
Andrey Smirnov
0664807229
test: fix apparmor tests
Remove selinux more actively.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-24 20:10:59 +04:00
Andrey Smirnov
82ea44a6b2
fix: reduce installer image
This still allows running install on 1 GiB hardware.

Fixes #10024

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-24 19:03:42 +04:00
Dmitry Sharshakov
bd85bd5b73
fix: fix Failed to initialize SELinux labeling handle udev error
Create a dummy SELinux file_contexts file to mitigate the warning. We do not rely on libselinux for labeling, so empty file suffices.

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2024-12-20 18:38:46 +01:00
Andrey Smirnov
73c82e3e56
feat: bring Linux 6.12.6, CNI plugins 1.6.1
To be backported to Talos 1.9.1.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-20 18:25:57 +04:00
Noel Georgi
a5660ed778
feat: pcirebind controller
Add a controller to support rebinding drivers for PCI devices.

Fixes: https://github.com/siderolabs/extensions/pull/488

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-20 17:35:37 +05:30
Andrey Smirnov
7d39b9ec2b
feat: remove cgroupsv1 in non-container mode
Following up on deprecation in Talos 1.9, remove it completely for Talos
1.10.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-18 18:48:11 +04:00
Andrey Smirnov
03116ef9bd
chore: prepare for Talos 1.10
Fork docs, update tests, trim release notes, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 19:54:11 +04:00
Andrey Smirnov
a49bb9ee45
feat: update Linux to 6.12.5
Latest 6.12.x for Talos 1.9.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 19:50:31 +04:00
Andrey Smirnov
590c016571
feat: update containerd to v2.0.1
See https://github.com/containerd/containerd/releases/tag/v2.0.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 15:03:11 +04:00
Andrey Smirnov
d45e8d1d1d
feat: update Kubernetes to 1.32.0
Final Kubernetes release for Talos 1.9.0.

Also update COSI to pull in a fix for watch restarts:
https://github.com/cosi-project/runtime/pull/512

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-12 22:51:33 +04:00
Andrey Smirnov
61b1489a0f
fix: order volume config by the requested size
This fixes an issue like that:

* the system disk is say 10GiB
* STATE is fixed 100 MiB always
* EPHEMERAL is configured to be min 6 GiB, max 100 GiB

As the EPHEMERAL/STATE provisioning order was not defined, EPHEMERAL
might be created first, occupying whole disk and leaving no space left
for STATE.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-11 18:35:11 +04:00
Andrey Smirnov
bc3039acdb
feat: update runc to 1.2.3
See https://github.com/opencontainers/runc/releases/tag/v1.2.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-11 17:55:19 +04:00
Andrey Smirnov
10da553ef0
docs: build what's new for 1.9
Also contains various small fixes to the documentation.

Fixes #9853

Fixes #9901

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-10 18:00:21 +04:00
Andrey Smirnov
d946ccae31
feat: update Linux to 6.12.4
Update to the latest 6.12.x, fixes kexec reboot in QEMU.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-10 14:10:35 +04:00
Andrey Smirnov
c3537b2f54
feat: update Linux to 6.12.3
Latest 6.12.x release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-09 12:24:33 +04:00
Utku Ozdemir
cb4d9d6734
docs: fix a few mistakes in release notes
Couple of syntax and grammar corrections.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>
2024-12-08 23:29:52 +01:00
Dmitriy Matrenichev
c4724fc975
chore: add integration tests for image-cache
Provide separate `integration/image-cache` tag.

Closes #9860

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-12-06 20:28:34 +03:00
Andrey Smirnov
d0773ff09d
chore: update Go to 1.23.4
Via pkgs/tools.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-05 15:37:00 +04:00
Andrey Smirnov
7d6507189f
feat: implement new address sorting algorithm
Fixes #9725

See #9749

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-05 14:38:46 +04:00
Andrey Smirnov
77e9db4abf
test: use two workers in qemu tests by default
Fixes #9870

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-04 16:34:42 +04:00
Andrey Smirnov
5a4bdf62a9
feat: update Kubernetes to 1.32.0-rc.1
See https://github.com/kubernetes/kubernetes/releases/tag/v1.32.0-rc.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-04 15:59:16 +04:00
Andrey Smirnov
770be16425
feat: support image cache copying
Fixes #9615

The are no integration tests, this is to be addressed later.
I did manual tests so far.

Also includes first draft of the documentation.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-02 13:50:56 +04:00
Dmitriy Matrenichev
60e4561b4d
feat: add support for custom search domains
New config field `machine.network.searchDomains` supports specifying custom search domains.

For the node it will look something like this:
```
nameserver 127.0.0.53

search my-custom-search-name.com my-custom-search-name2.com
```

For the pods it will look something like this:

```
search default.svc.cluster.local svc.cluster.local cluster.local my-custom-search-name.com my-custom-search-name2.com
nameserver 10.96.0.10
options ndots:5
```

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-11-29 19:18:15 +03:00
Andrey Smirnov
e33d2f581f
feat: support overriding base OCI spec for CRI
Fixes #9827

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-29 16:22:25 +04:00
Noel Georgi
347b758465
chore: support saving cluster logs on destroy
Support saving cluster logs on destroy

Fixes: #9808

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-11-29 14:39:15 +05:30