561 Commits

Author SHA1 Message Date
Andrey Smirnov
45464412e0
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-25 16:26:41 +03:00
Artem Chernyshev
2b03057b91
feat: implement a new mode try in the config manipulation commands
The new mode allows changing the config for a period of time, which
allows trying the configuration and automatically rolling it back in case
if it doesn't work for example.

The mode can only be used with changes that can be applied without a
reboot.

When changed it doesn't write the configuration to disk, only changes it
in memory.
`--timeout` parameter can be used to customize the rollback delay.
The default timeout is 1 minute.

Any consequent configuration change will abort try mode and the last
applied configuration will be used.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-04-21 20:31:45 +03:00
Noel Georgi
1d5c08e74f
chore: bump kernel to 5.15.35
Bump kernel to 5.15.35 LTS

Ref: https://github.com/siderolabs/pkgs/pull/454

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-20 20:33:10 +05:30
Andrey Smirnov
9bf23e5162
feat: update Kubernetes to 1.24.0-rc.0
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-rc.0

Go modules are not updated due to missing tags:
https://github.com/kubernetes/kubernetes/issues/109565

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-20 16:53:51 +03:00
Andrey Smirnov
39721ee939
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-18 21:20:14 +03:00
Noel Georgi
8ff8fc77f3
chore: enable rpi4 poe hat fan control
Enable the Rpi4 PoE hat fan control by pulling in the overlay
compatible with the upstream kernel driver.

Ref: https://github.com/siderolabs/pkgs/pull/450

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-15 00:17:40 +05:30
Artem Chernyshev
2b9722d1f5
feat: add dry-run flag in apply-config and edit commands
Dry run prints out config diff, selected application mode without
changing the configuration.

Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-04-14 19:12:57 +03:00
Noel Georgi
13f41baddf
chore: bump kernel to 5.15.34
Bump kernel to 5.15.34

Ref: https://github.com/siderolabs/pkgs/pull/448

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-14 12:19:05 +05:30
Noel Georgi
a91eb9358d
chore: bump deps
Ref:
- https://github.com/siderolabs/tools/pull/185
- https://github.com/siderolabs/pkgs/pull/447
- https://github.com/siderolabs/extras/pull/44

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-13 22:22:11 +05:30
Andrey Smirnov
a4060513c6
feat: build Talos with support for x86-64-v2 microarchitecture
See https://github.com/golang/go/wiki/MinimumRequirements#microarchitecture-support

This relies on new Go 1.18 feature to use more efficient x86-64
instructions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 21:12:59 +03:00
Noel Georgi
8faebd410b
chore: bump tools and pkgs
Bump tools and pkgs to get kernel 5.15.33

5.15.33 has a bunch of fixes for some CVE's,
it was too hard to track those and reference

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-11 19:56:42 +05:30
Andrey Smirnov
8499b7e7dc
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 16:53:39 +03:00
Dmitriy Matrenichev
a7ba7ea679
feat: migrate to go 1.18
Increase go.mod version from 1.17 to 1.18 in all projects. Update Makefile
to use latest tooling. Fix golangci by disable nolintlint for now.

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2022-04-11 17:17:54 +04:00
Andrey Smirnov
9dace93b59
feat: enable Pod Security Admission by default
As Talos 1.1 supports Kubernetes 1.22-1.24, we can finally enable Pod
Security Admission by default:

```yaml
apiVersion: apiserver.config.k8s.io/v1
kind: AdmissionConfiguration
plugins:
- configuration:
    apiVersion: pod-security.admission.config.k8s.io/v1alpha1
    defaults:
      audit: restricted
      audit-version: latest
      enforce: baseline
      enforce-version: latest
      warn: restricted
      warn-version: latest
    exemptions:
      namespaces:
      - kube-system
      runtimeClasses: []
      usernames: []
    kind: PodSecurityConfiguration
  name: PodSecurity
  path: ""
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-11 15:36:04 +03:00
Noel Georgi
a6eebee36f
chore: update eudev
Update eudev

Ref: https://github.com/siderolabs/pkgs/pull/443

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-08 00:05:48 +05:30
Noel Georgi
1e4320b64e
chore: add support for rockpi 4A and 4B
Add support for RockPi 4A and 4B

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-04-06 23:35:16 +05:30
Andrey Smirnov
8619f95c5c
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-04 17:29:49 +03:00
Andrey Smirnov
19bf12af07
fix: enable IPv6 in Docker-based Talos clusters
Docker by default disable IPv6 completely in the containers which breaks
SideroLink on Docker-based clusters, as SideroLink is using IPv6
addresses for the Wiregurard tunnel.

This change might break `talosctl cluster create` on host systems which
have IPv6 disabled completely, so provide a flag to revert this
behavior.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-04-01 20:28:12 +03:00
Andrey Smirnov
1ed1f73e51
test: bump CAPI to 1.1.3
This probably fixes the incompatibility with 1.24.0-beta.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 22:50:16 +03:00
Andrey Smirnov
2ee1d2c720
feat: update Kuberentes to 1.24.0-beta.0
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-beta.0

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-31 18:06:56 +03:00
Andrey Smirnov
ca8b9c0a3a
feat: update Kubernetes to 1.24.0-alpha.4
See https://github.com/kubernetes/kubernetes/releases/tag/v1.24.0-alpha.4

Fix some incompatibilities around dropped flags/API versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 22:59:07 +03:00
Andrey Smirnov
4bfe686105
feat: update runc to 1.1.1
Also drop kernel sound/PCMCIA, enable random trust CPU, update
for Jetson Nano u-boot.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 18:17:26 +03:00
Andrey Smirnov
a5d64fc814
feat: update Flannel to 0.17.0
See https://github.com/flannel-io/flannel/releases/tag/v0.17.0

Flannel image was copied without any changes to `ghcr.io` to avoid
Docker Hub download limits.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-30 16:42:44 +03:00
Noel Georgi
bd0035f6a2
docs: add NVIDIA docs
Add NVIDIA docs

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-29 00:21:48 +05:30
Andrey Smirnov
efa3f28985
fix: correctly find partitions with config data (metal-iso)
Update `go-blockdevice` library:

- https://github.com/siderolabs/go-blockdevice/pull/56

Also add a note on the org rename to the release notes.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 20:34:30 +03:00
Noel Georgi
e2666f58f5
chore: bump kernel to 5.15.32
Bump kernel to 5.15.32

Ref: https://github.com/siderolabs/pkgs/pull/432

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-28 18:26:31 +05:30
Andrey Smirnov
957b2f233c
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-28 15:02:50 +03:00
Andrey Smirnov
a254254835
feat: update containerd to 1.6.2, Linux to 5.15.31
See:

* https://github.com/siderolabs/pkgs/pull/426
* https://github.com/siderolabs/pkgs/pull/430

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 17:36:19 +03:00
Andrey Smirnov
9b6422fcc3
feat: update CoreDNS to 1.9.1
See https://github.com/coredns/coredns/releases/tag/v1.9.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 16:43:07 +03:00
Andrey Smirnov
e0eee7fcc6
test: use clusterctl.yaml overrides after org rename
`clusterctl init` can't follow redirects.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-24 14:13:22 +03:00
Andrey Smirnov
883d401f9f
chore: rename github organization to siderolabs
Go module import paths still use talos-systems, packages use new
siderolabs name.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-23 21:07:46 +03:00
Tim Jones
d1294d014f
chore: add day-two tests for e2e-qemu
Uses Sidero Labs d2ctl to install a small sample of
common cluster services to ensure the Talos cluster
is capable.

Signed-off-by: Tim Jones <tim.jones@siderolabs.com>
2022-03-22 20:53:07 +01:00
Andrey Smirnov
a6240e4b67
feat: update Linux to 5.15.30
Also updates linux-firmware, OpenSSL to 1.1.1n.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-22 20:52:32 +03:00
Andrey Smirnov
b6691b3508
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-21 18:24:00 +03:00
Andrey Smirnov
9d69fb6b40
feat: update Kubernetes to 1.23.5
Note: some Go modules are not tagged yet, see https://github.com/kubernetes/kubernetes/issues/108763

See https://github.com/kubernetes/kubernetes/releases/tag/v1.23.5

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-17 14:45:46 +03:00
Andrey Smirnov
caf800fe84
feat: implement D-Bus systemd-compatible shutdown for kubelet
Add a mock D-Bus daemon and a mock logind implementation over D-Bus.

Kubelet gets a handle to the D-Bus socket, connects over it to our
logind mock and negotiates shutdown activities.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-16 13:57:46 +03:00
Caleb Woodbine
d256b5c5e4
docs: fix spelling mistakes
Resolve spelling with `misspell -w .`

Signed-off-by: Caleb Woodbine <calebwoodbine.public@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-15 15:38:25 +03:00
Noel Georgi
5fdedae208
chore: bump kernel to 5.15.28
Bump kernel to 5.15.28

ref: https://github.com/talos-systems/pkgs/pull/417

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-14 23:53:42 +05:30
Andrey Smirnov
714e5eca63
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-14 16:48:37 +03:00
Andrey Smirnov
0aa23cb327
feat: update pkgs to 1.0 versions, Go 1.17.8
Fixes #5080

This updates all package dependencies to 1.0 versions.

Add a GPL note to README.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-04 19:18:59 +03:00
Noel Georgi
dc8e9ed4a5
feat: bond interfaces from kernel cmdline
Support bond interfaces from kernel cmdline using `bond=` format

Fixes: #4765

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-03 23:54:53 +05:30
Andrey Smirnov
77158a61fd
chore: rename v0.15 to v1.0
Next release of Talos will be v1.0 🎉

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-03 00:25:43 +03:00
Andrey Smirnov
22a4d6b3e6
feat: update containerd to 1.6.1
Also update Linux to 5.15.26.

See https://github.com/talos-systems/pkgs/pull/410

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-02 22:48:30 +03:00
Andrey Smirnov
09efa62f68
chore: re-enable kexec and default to UEFI booting in tests
Fixes #4947

It turns out there's something related to boot process in BIOS mode
which leads to initramfs corruption on later `kexec`.

Booting via GRUB is always successful.

Problem with kexec was confirmed with:

* direct boot via QEMU
* QEMU boot via iPXE (bundled with QEMU)

The root cause is not known, but the only visible difference is the
placement of RAMDISK with UEFI and BIOS boots:

```
[    0.005508] RAMDISK: [mem 0x312dd000-0x34965fff]
```

or:

```
[    0.003821] RAMDISK: [mem 0x711aa000-0x747a7fff]
```

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-03-02 21:52:18 +03:00
Noel Georgi
8975a56eb2
docs: fix typo in release notes
Fix typo in release notes

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-03-03 00:03:57 +05:30
Andrey Smirnov
7b33ffbd85
chore: update pkgs and extras
This brings in the following changes:

* https://github.com/talos-systems/pkgs/pull/404
* https://github.com/talos-systems/pkgs/pull/405
* https://github.com/talos-systems/pkgs/pull/406
* https://github.com/talos-systems/pkgs/pull/407

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-28 23:19:24 +03:00
Andrey Smirnov
c5992c2bf8
chore: bump dependencies
dependabot + go-mod-outdated

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-28 22:51:53 +03:00
Andrey Smirnov
f81fb9f7cf
feat: implement sysfs
Fixes: https://github.com/talos-systems/talos/issues/4703

Co-authored-by: Dmitriy Matrenichev <lepage+gh@protonmail.com>
Co-authored-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
2022-02-28 17:51:02 +03:00
Andrey Smirnov
eb40b9254f
feat: add a way to override kubelet configuration via machine config
Fixes #4629

Note: some fields are enforced by Talos and are not overridable.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2022-02-25 17:39:01 +03:00
Noel Georgi
dc23715478
chore: update packet to equinix
Update `packet` to `equinix` for `talos.platform` kernel argument

Fixes: #5010

Signed-off-by: Noel Georgi <git@frezbo.dev>
2022-02-25 00:50:02 +05:30