1156 Commits

Author SHA1 Message Date
Andrey Smirnov
db4ca5668a
feat: add a kernel parameter to disable built-in auditd
Fixes #9907

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-14 14:24:50 +04:00
Noel Georgi
e6a4583ba8
feat: support generating unsigned UKIs
Support generating unsigned UKI's.

Also plumb in support to `talosctl cluster create` to boot off UKI's.
This doesn't work yet as installer needs more work.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-01-10 18:39:57 +05:30
Andrey Smirnov
bbd6067d42
fix: partition alignment on disks with 4k sectors
Fixes #10097

See https://github.com/siderolabs/go-blockdevice/pull/121

I added an option to QEMU provisioner to create disks with custom block
sizes (supported for some disk types).

Unfortunately, this case can't be built as a regression as QEMU's
firmware boots fine with ESP partition at 256/1024/2048 LBA.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-09 19:54:43 +04:00
Andrey Smirnov
6d605fc859
fix: disable NRI plugin in a different way
This way it's easy to re-enable NRI plugins with a simple change.

See https://github.com/siderolabs/talos/discussions/10068

I tested that it works e2e with NRI plugins repository.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-09 15:19:10 +04:00
Ganawa Juanah
cc84caf8c0
docs: update Cilium documentation
Update version references, add Gateway API.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Signed-off-by: Ganawa Juanah <ganawa@juanah.com>
2025-01-08 16:04:44 +04:00
Tim Olson
0abb3dabf6
docs: fix command to wait for ceph-rook HEALTH_OK
Fixed command to wait for ceph-rook HEALTH_OK

Signed-off-by: Tim Olson <shamme@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-01-08 13:54:13 +04:00
Noel Georgi
7e5d36d469
fix: pci driver rebind config validation
We need a field named `name` to distinguish between named documents, as
decoder expects a `name` yaml key.

Fixes: https://github.com/siderolabs/talos/discussions/10025

Fixes by using standard `name` field instead of `pciID`.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-25 10:36:31 +05:30
Andrey Smirnov
675854aa03
docs: fix two typos
Fixes #10014

Fixes #10007

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-23 20:09:45 +04:00
Andrey Smirnov
b4aa5189d4
release(v1.10.0-alpha.0): prepare release
This is the official v1.10.0-alpha.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-23 15:15:56 +04:00
Andrey Smirnov
c12b524914
docs: document Kubernetes service registry incompat with K8s 1.32
Fixes #9980

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-20 17:50:00 +04:00
Noel Georgi
a5660ed778
feat: pcirebind controller
Add a controller to support rebinding drivers for PCI devices.

Fixes: https://github.com/siderolabs/extensions/pull/488

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-20 17:35:37 +05:30
Andrey Smirnov
4c3261626f
docs: fix several typos
Fixes #10000

Fixes #10001

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-20 14:53:54 +04:00
PRIHLOP
6ef2596da7
docs: improve Hetzner documentation
Add another way to upload an image.

Signed-off-by: PRIHLOP <ilya.prihlop@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-18 22:32:31 +04:00
Andrey Smirnov
7d39b9ec2b
feat: remove cgroupsv1 in non-container mode
Following up on deprecation in Talos 1.9, remove it completely for Talos
1.10.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-18 18:48:11 +04:00
Andrey Smirnov
03116ef9bd
chore: prepare for Talos 1.10
Fork docs, update tests, trim release notes, etc.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 19:54:11 +04:00
Andrey Smirnov
00682fdd6e
docs: activate 1.9 docs as default
Make Talos 1.9 documentation the default one.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 18:16:03 +04:00
Tine Jozelj
bea05f5c9b
docs: update deploying-cilium.md
Adding note about this issue: https://github.com/siderolabs/talos/pull/9200#issuecomment-2463361375

Signed-off-by: Tine Jozelj <tine@tjo.space>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 14:45:08 +04:00
Andrey Smirnov
284ab11794
feat: support link altnames/aliases
At the moment, we don't use/support aliases, but we might in the future.

Altnames are filled out by `systemd-udevd`.

This PR has two parts:

* show aliases & altnames in `LinkStatus`
* match links by aliases/altnames when we configure
  addresses/routes/links

This should make a transition to `systemd-udevd` less painful if the
previous link name is in `altNames`.

Forked rtnetlink for https://github.com/jsimonetti/rtnetlink/pull/241

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 14:09:26 +04:00
KillianCdP
5bfd829bf9
docs: fix 'containter' typo
Update talosctl docs.

Signed-off-by: KillianCdP <castillon.killian@protonmail.ch>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-17 13:38:08 +04:00
sflotat2607
8d151b771d
docs: clarify TALOSCONFIG for AWS
Make it an explicit section in the docs.

Signed-off-by: sflotat2607 <flotat.stephane@free.fr>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 23:03:02 +04:00
Andrey Smirnov
a49bb9ee45
feat: update Linux to 6.12.5
Latest 6.12.x for Talos 1.9.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 19:50:31 +04:00
Andrey Smirnov
2b1b326f08
docs: mention different paths for OpenEBS
Closes #9880

We get a PR a week to change the path one way or another, it turns out
it's different for different OpenEBS version in their docs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 18:28:46 +04:00
Andrey Smirnov
590c016571
feat: update containerd to v2.0.1
See https://github.com/containerd/containerd/releases/tag/v2.0.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 15:03:11 +04:00
Justin Garrison
18fa5a2587
docs: update image-cache doc for iso
Clarifying information from #9892

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-16 13:42:02 +04:00
Andrey Smirnov
d45e8d1d1d
feat: update Kubernetes to 1.32.0
Final Kubernetes release for Talos 1.9.0.

Also update COSI to pull in a fix for watch restarts:
https://github.com/cosi-project/runtime/pull/512

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-12 22:51:33 +04:00
Andrey Smirnov
3e9e027efb
test: add an option to boot from an USB stick
Emulates a boot from a USB stick.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-12 19:59:19 +04:00
Alexis La Goutte
ef8c3e3b3b
docs: fix typo in multus.md
Typo fix.

Signed-off-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-12 19:00:50 +04:00
Marcel Hamer
cce72cfe86
docs: replace deprecated Hetzner server plans
cx11 and cx21 are deprecated Hetzner server plans. Replace them with the cx22
server type.

Signed-off-by: Marcel Hamer <marcel@solidxs.se>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-12 16:05:40 +04:00
Andrew Symington
e1b824ebad
docs: update ceph-with-rook.md
Fixed a typo in the disk-wipe instructions.

Signed-off-by: Andrew Symington <andrew.c.symington@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-11 20:38:10 +04:00
Andrey Smirnov
10da553ef0
docs: build what's new for 1.9
Also contains various small fixes to the documentation.

Fixes #9853

Fixes #9901

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-10 18:00:21 +04:00
Andrey Smirnov
7d6507189f
feat: implement new address sorting algorithm
Fixes #9725

See #9749

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-05 14:38:46 +04:00
Andrey Smirnov
5a4bdf62a9
feat: update Kubernetes to 1.32.0-rc.1
See https://github.com/kubernetes/kubernetes/releases/tag/v1.32.0-rc.1

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-04 15:59:16 +04:00
Nico Berlee
0cde08d8be
docs: add Turing RK1 docs to Single Board Computer section
This add documentation on how to setup the Turing RK1 with Talos the
first time.

Booting can be done with eMMC or NVMe (using a U-Boot SPI image on
eMMC)

This commit also add Turing RK1 to the SBC support matrix.

Signed-off-by: Nico Berlee <nico.berlee@on2it.net>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-03 00:26:36 +05:30
egrosdou01
ff13ccc5b2
docs: update the Cilium CNI deployment
Upate the job method.

Signed-off-by: egrosdou01 <eimaigr@hotmail.gr>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-02 15:23:34 +04:00
Mohammad Amin Mokhtari
191825a441
docs: update install-kubevirt.md
Fix some 404 link errors and typo.

Signed-off-by: Mohammad Amin Mokhtari <41728922+aminmokhtari94@users.noreply.github.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-02 14:38:53 +04:00
Andrey Smirnov
770be16425
feat: support image cache copying
Fixes #9615

The are no integration tests, this is to be addressed later.
I did manual tests so far.

Also includes first draft of the documentation.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-12-02 13:50:56 +04:00
Jasmin
8fb567dd13
docs: fix typo in virtualbox docs
Fix typo in VirtualBox docs.

Signed-off-by: Jasmin <nachtjasmin@posteo.de>
Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-12-01 15:20:29 +05:30
Dmitriy Matrenichev
60e4561b4d
feat: add support for custom search domains
New config field `machine.network.searchDomains` supports specifying custom search domains.

For the node it will look something like this:
```
nameserver 127.0.0.53

search my-custom-search-name.com my-custom-search-name2.com
```

For the pods it will look something like this:

```
search default.svc.cluster.local svc.cluster.local cluster.local my-custom-search-name.com my-custom-search-name2.com
nameserver 10.96.0.10
options ndots:5
```

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-11-29 19:18:15 +03:00
Andrey Smirnov
e33d2f581f
feat: support overriding base OCI spec for CRI
Fixes #9827

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-29 16:22:25 +04:00
Noel Georgi
347b758465
chore: support saving cluster logs on destroy
Support saving cluster logs on destroy

Fixes: #9808

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-11-29 14:39:15 +05:30
Andrey Smirnov
fc3b31575c
fix: multiple issues with opening encrypted volumes
Fixes #9820

This only affects volumes with multiple key slots configured.

Make sync issues non-fatal, so that if some keys fail to sync, proceed
with normal boot, but record an error in the `VolumeStatus` resource.

When opening, correctly try all key slots.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-28 21:34:41 +04:00
Dmitry Sharshakov
145b02642e
chore: deprecate cgroupsv1 in non-container mode
Fixes #9729.

Signed-off-by: Dmitry Sharshakov <dmitry.sharshakov@siderolabs.com>
2024-11-28 18:08:47 +01:00
Andrey Smirnov
581c0851d8
feat: update dependencies
Kubernetes: 1.32.0-rc.0
Flannel: 0.26.1
Coredns: 1.12.0

Plus some small bumps.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-28 19:51:02 +04:00
Noel Georgi
e9058461e4
feat: add api-server authorization config
Add support for configuring KubeAPIServer authorization config.

Fixes: #9791

Signed-off-by: Noel Georgi <git@frezbo.dev>
2024-11-28 16:27:50 +05:30
Dmitriy Matrenichev
ccc5a8d34c
chore: split config.Registry into the separate resource
Required for #9614

Closes #9766

Signed-off-by: Dmitriy Matrenichev <dmitry.matrenichev@siderolabs.com>
2024-11-27 19:58:08 +03:00
Andrey Smirnov
bef4d51508
fix: make system_disk condition work properly before install
The problem was with specific disk selector `!system_disk` - in previous
implementation, as `system_disk` defaulted to false even if the system
disk is not known yet, this might result in picking up a disk which is
going to be system disk before system disk is picked.

In new implementation, as `system_disk` is not set before it is
detected, the condition containing `system_disk` (in either way) would
fail to execute and volume provision will be delayed until system disk
is detected.

Also:

Fixes #9809

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-27 19:39:39 +04:00
Andrey Smirnov
af91c99ba1
chore: update image cache config
Make it nested, so that we can expand easily to support e.g. distributed
cache.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-27 18:18:36 +04:00
Rémi Paulmier
9adaf7f012
docs: update local-storage.md
Add an explicit example of kubelet config.

Signed-off-by: Rémi Paulmier <remi.paulmier@gmail.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-27 14:22:27 +04:00
Justin Garrison
7e19d5c4c7
docs: add kubevirt install
from PR #9522

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
2024-11-26 13:55:32 -08:00
Andrey Smirnov
84459d9025
fix: make immage cache config apply immediately
Allow to change image cache config without a reboot.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2024-11-25 18:50:21 +04:00