1352 Commits

Author SHA1 Message Date
Andrey Smirnov
72bd570f09
feat: update Linux to 6.18.18
Also update runc to 1.3.5 via pkgs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-19 16:24:30 +04:00
Andrey Smirnov
9d5638f4ca
fix: accept image cache volume encryption config
Fixes #12945

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 3d059754c2e859d2f8ac3ed25d88c8874a253d0e)
2026-03-18 21:16:59 +04:00
Andrey Smirnov
4f978a7474
fix: correctly calculate end ranges for nftables sets
If the end range reaches "max value", we need to drop it instead of
overflowing.

Fixes #12890

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 720a2148ab023d19f3653625d785d3568f983035)
2026-03-06 22:07:38 +04:00
Andrey Smirnov
2b4037935b
feat: update etcd to v3.6.8
See https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.6.md

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 0048464be854d94fb607e38daa83e00767fe8cbc)
2026-03-06 19:17:33 +04:00
Andrey Smirnov
40ba6e3ec9
feat: update Linux 6.18.15, Go 1.25.8
Also update default Kubernetes to 1.35.2.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-03-06 18:58:04 +04:00
Daniil Kivenko
14dde14eb0
feat: add filter for KubeSpan advertised networks
Add advertisedNetworks filter to KubeSpan configuration that allows
filtering which additional networks (e.g., pod CIDRs) are advertised
over KubeSpan when advertiseKubernetesNetworks is enabled.

Signed-off-by: Daniil Kivenko <daniil.kivenko@p2p.org>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 70c6c2154e87d4a6748aebdfa2c50cbc97a0dd89)
2026-02-12 18:46:02 +04:00
Andrey Smirnov
a025ea46c5
feat: add IPv6 GRE support
Pulls in https://github.com/siderolabs/pkgs/pull/1458

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 52e8727d0112967a62a3d9ae6bf26d713db242e1)
2026-02-12 17:31:13 +04:00
Andrey Smirnov
19354ab585
feat: update Linux to 6.18.9
Sync pkgs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-02-12 17:25:43 +04:00
Mateusz Urbanek
6d6471f692
release(v1.12.3): prepare release
This is the official v1.12.3 release.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-02-07 09:50:50 +01:00
Andrey Smirnov
65782007ed
feat: update Linux kernel with dm-integrity
Update pkgs with Linux 6.18.6 and dm-integrity module added.

Drops some crc kmods, as they are now compiled in.

See https://github.com/siderolabs/pkgs/pull/1447

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit b9e27ebe72c4302c416fd8efb007c3966004ddd6)
2026-02-06 16:06:36 +01:00
Mateusz Urbanek
624f9b52ab
chore: update deps
Updated the following dependencies:

tools v1.12.0-6-gdc37e09
pkgs v1.12.0-35-g15d5d78

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-02-06 16:05:52 +01:00
Andrey Smirnov
cca4cd269b
feat: add it87 hwmon module
See https://github.com/siderolabs/pkgs/pull/1437

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit e36863470b14496c3d84417e63fef45e6060603b)
2026-01-21 16:21:28 +04:00
Mateusz Urbanek
9f8d938db6
fix: print talosctl images to release notes
After changing `talsoctl images k8s-bundle and talos-bundle`
we stopped printing some of the images to release notes.
This fixes that issue.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 7416dca59378dc282e42ea30107cf40326cc593c)
2026-01-21 16:19:15 +04:00
Andrey Smirnov
919394fee8
feat: update Go to 1.25.6
Also update Linux to 6.18.5

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2026-01-21 16:17:53 +04:00
Mateusz Urbanek
7ea2ef7cf4
release(v1.12.1): prepare release
This is the official v1.12.1 release.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-05 12:50:33 +01:00
Mateusz Urbanek
78a785604a
chore: run rekres and update dependencies
Run rekres to update dependencies managed by kres.

Update dependencies:
```
tools: v1.12.0-3-g5df8bae
pkgs: v1.12.0-25-g90ff196
```

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2026-01-02 16:43:38 +01:00
Andrey Smirnov
ac91ade2c7
release(v1.12.0): prepare release
This is the official v1.12.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-22 14:11:18 +04:00
Andrey Smirnov
70d3ab9ac0
feat: update Kubernetes to 1.35.0
Update to the final version for v1.12.0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 8d6a7a8677a5d1d61432fa94ca030351fd9852f2)
2025-12-19 18:48:50 +04:00
Andrey Smirnov
101814d889
feat: update etcd 3.6.7, CoreDNS 1.13.2
Update to the latest version.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 845a0d09cd770a15db762ddda4d3d27f58656cfe)
2025-12-19 18:44:33 +04:00
Andrey Smirnov
96f724adcc
feat: enable Powercap and Intel RAPL
Fixes siderolabs/pkgs#1405

See https://github.com/siderolabs/pkgs/pull/1409

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 6d17c18bf908d3cd69ff920d0cff67b653a385f3)
2025-12-19 18:42:37 +04:00
Andrey Smirnov
6dd0558a31
feat: sync pkgs
Updates Linux to 6.18.1.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-19 18:39:34 +04:00
Andrey Smirnov
c931847cca
feat: update containerd to v2.1.6
See

* https://github.com/siderolabs/pkgs/pull/1413
* https://github.com/siderolabs/pkgs/pull/1414

Also drops the cgroup patch.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-12-18 20:48:16 +04:00
Justin Garrison
bce04084d6
feat: rename image default and source bundle
s/default/k8s-bundle
s/source-bundle/talos-bundle

for UX consistency when generating lists of images used by talos.

Remove non-k8s images from k8s-bundle list.

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
(cherry picked from commit 51bcfb567915d2b27e4b5321e080220bc618086b)
2025-12-15 09:55:37 +01:00
Mateusz Urbanek
d1abc0f847
chore: update pkgs
Update pkgs to v1.12.0-16-g34f3186

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-12-15 09:54:39 +01:00
Noel Georgi
bc4de5b792
fix: constants file
Fix constants file and fixup release.toml

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-12-08 20:52:01 +05:30
Andrey Smirnov
4a15763a96
docs: update release notes
Fix a typo and add a link to network configuration docs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit cd04c3dde70f604603fd7996c62adf5a17cfbd41)
2025-12-08 20:35:22 +05:30
Andrey Smirnov
184a45c405
test: bird2 extension
Add a dummy config to make extension start successfully.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit cf087c1e01bc1226049a57186f48b2e6b5739c5c)
2025-12-08 20:34:01 +05:30
Andrey Smirnov
2e6fe4684b
feat: update Linux to 6.18.0
Using the next LTS Linux for Talos 1.12.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit dd6c1089c8f30d815c80ab10544a0fef27ddd14c)
2025-12-08 20:30:44 +05:30
Andrey Smirnov
473bc17c19
feat: update Kubernetes to 1.35.0-rc.0
Latest 1.35.0 release.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 0f9f4c05ffad9413e1f1533c68eae38dc91c9716)
2025-12-08 20:25:24 +05:30
Andrey Smirnov
aa286d3f6e
feat: update Kubernetes to 1.35.0-beta.0
Use the latest 1.35.0 version.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 18f8ac369ba52f2640508134d3983f006f698129)
2025-12-08 20:20:08 +05:30
Andrey Smirnov
f4891eebb1
feat: implement logs persistence
Implement a log persistence controller, rotate logs and bufferize writes.

Fixes #11461

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
Co-authored-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
Signed-off-by: Dmitrii Sharshakov <dmitry.sharshakov@siderolabs.com>
(cherry picked from commit a0cfc3527481c4784edf87c3d7823b10a21d1e4d)
2025-12-08 20:18:24 +05:30
Laura Brehm
d321d7da04
chore: correct condition for running k8s integration tests
74d35900af0f6451426b70eec3b6db4b72eb993c was supposed to disable the k8s
tests on memory-restricted workers, but instead made the tests only run
on memory-restricted workers.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
(cherry picked from commit f489299b603a2aff0f292fa941ae8925fdda3492)
2025-12-01 08:36:00 +01:00
Laura Brehm
736f32a807
chore: disable k8s integration tests for 1GiB worker nodes
Kubernetes E2E tests have had a bump in memory usage, making running
these on 1GiB worker nodes unreliable.

Disable `talosctl health --run-e2e` in this case.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
(cherry picked from commit 74d35900af0f6451426b70eec3b6db4b72eb993c)
2025-11-28 14:26:52 +01:00
Mateusz Urbanek
57d6683cde
chore: update pkgs and tools version
Update pkgs and tools version

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 561cfb60c313a9bdc70ed2ff2729549bc8c50fcb)
2025-11-28 10:21:31 +01:00
Andrey Smirnov
949323ab51
feat: present kernel log as talosctl logs kernel
Extracted from #12115

The idea is that kernel log can be delivered/persisted along with any
other service logs.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit e715f387137fa566a4824c051b624e013a93c49f)
2025-11-28 09:54:31 +01:00
Andrey Smirnov
16aa6ac471
feat: update etcd to 3.6.6
See https://github.com/etcd-io/etcd/releases/tag/v3.6.6

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit eba96141e0afc147af9a8f1969e207501232b1de)
2025-11-27 10:15:01 +01:00
Mateusz Urbanek
4396f09c8c
docs: add API Server Cipher Suites changelog
Add a changelog entry for the API Server Cipher Suites.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
(cherry picked from commit 9945ceef37b13bc6e93637dcf395a8c9019e60ed)
2025-11-27 10:15:01 +01:00
Andrey Smirnov
6063fbf912
feat: update dependencies
Many small changes, linting fixes, migration to moby/moby client
package.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-14 14:49:44 +04:00
Andrey Smirnov
5e1de00359
feat: implement time and resolvers multi-doc configuration
Fixes #10954

Fixes #10955

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-13 19:27:14 +04:00
Noel Georgi
00fe50d868
fix: uefi bootorder setting
Drop setting UEFI bootorder.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-11-13 16:30:52 +05:30
Mateusz Urbanek
308c6bc414
feat: add full disk volumes
When set to `disk`, a full block device is used for the volume.

When `volumeType = "disk"`:
- Size specific settings are not allowed in the provisioning block (`minSize`, `maxSize`, `grow`).

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-11-12 14:50:56 +01:00
Andrey Smirnov
82ac1119ec
feat: implement new registry configuration
Move to using multi-doc registry configuration.

Fixes #12120

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-12 17:25:01 +04:00
Andrey Smirnov
106f45799d
feat: update Linux kernel with userfaultfd/VDPA
See:

* https://github.com/siderolabs/pkgs/issues/1360
* https://github.com/siderolabs/pkgs/issues/1314

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-12 17:02:18 +04:00
Laura Brehm
957770f65a
feat(machined): add panic/force mode reboot
In certain situations, Talos's shutdown/reboot sequence hangs while
waiting for services/mounts to be gracefully stopped (see:
https://github.com/siderolabs/talos/issues/11775).

This patch adds a forceful mode to the reboot sequence (`talosctl reboot
--mode force`) that bypasses graceful userspace teardown and hard
reboots the machine.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
2025-11-11 12:08:34 +01:00
Andrey Smirnov
fafab391b4
feat: update Kubernetes to 1.35.0-alpha.3
See https://github.com/kubernetes/kubernetes/releases/tag/v1.35.0-alpha.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-07 17:58:11 +04:00
Andrey Smirnov
021bbfefbe
feat: update Go 1.25.4, containerd 2.1.5
See https://github.com/containerd/containerd/releases/tag/v2.1.5

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-06 17:04:43 +04:00
Andrey Smirnov
54b93aff0c
feat: update Linux 6.17.7, runc 1.3.3
See https://github.com/opencontainers/runc/releases/tag/v1.3.3

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-11-05 19:15:39 +04:00
Justin Garrison
e3cbc92c05
fix: add video kernel module to arm
Allows for NVIDIA kernel modules to load on arm arch

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
2025-10-31 15:10:44 +04:00
Mateusz Urbanek
f3df0f80b9
feat: add directory backed UserVolumes
Resolves #11848

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
2025-10-29 12:00:24 +01:00
Noel Georgi
288f638726
feat: bump deps
Bump dependencies.

Signed-off-by: Noel Georgi <git@frezbo.dev>
2025-10-27 19:51:37 +05:30