mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-19 13:41:13 +02:00
96513ac397
This sets the list-style-position to inside by default, and overrides the landing page to use outside. This way we only need to maintain the CSS for the landing page and not all the other potential places we would want inside in the future. Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
234 lines
7.1 KiB
Vue
234 lines
7.1 KiB
Vue
<template>
|
|
<div id="landing-page" class="c-rich-text">
|
|
<div class="w-auto lg:w-1/2 h-auto mx-auto md:mt-10 mb-16 px-4">
|
|
<div class="text-center py-8 m-0">
|
|
<h1>What is Talos?</h1>
|
|
</div>
|
|
<div class="flex flex-wrap justify-center items-center">
|
|
<div class="px-4 md:px-2 md:w-3/4 text-xl text-gray-700">
|
|
<p>
|
|
Talos is a modern OS designed to be secure, immutable, and minimal.
|
|
Its purpose is to host Kubernetes clusters, so it is tightly
|
|
integrated with Kubernetes.
|
|
</p>
|
|
<p>
|
|
Talos is based on the Linux kernel, and supports most cloud
|
|
platforms, bare metal, and most virtualization platforms. All system
|
|
management is done via an API, and there is no shell or interactive
|
|
console.
|
|
</p>
|
|
</div>
|
|
<div class="w-1/3 md:w-1/6 md:ml-8 pt-4 md:pt-0">
|
|
<a
|
|
href="https://landscape.cncf.io/category=certified-kubernetes-installer&format=card-mode&grouping=category"
|
|
target="_blank"
|
|
>
|
|
<img
|
|
src="/images/certified-kubernetes-color.png"
|
|
alt="Certified Kubernetes Logo"
|
|
/></a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="w-3/4 mx-auto">
|
|
<div class="justify-center">
|
|
<div class="text-center md:py-8">
|
|
<h1>Why Talos?</h1>
|
|
</div>
|
|
<div class="md:grid grid-columns-3 grid-gap-12 justify-center">
|
|
<div class="px-4">
|
|
<h2 class="text-center">Security</h2>
|
|
<div>
|
|
Talos reduces your attack surface by practicing the Principle of
|
|
Least Privilege (PoLP) and by securing the API with mutual TLS
|
|
(mTLS) authentication.
|
|
</div>
|
|
</div>
|
|
<div class="px-4">
|
|
<h2 class="text-center">Predictability</h2>
|
|
<div>
|
|
Talos eliminates unneeded variables and reduces unknown factors in
|
|
your environment by employing immutable infrastructure ideology.
|
|
</div>
|
|
</div>
|
|
<div class="px-4">
|
|
<h2 class="text-center">Evolvability</h2>
|
|
<div>
|
|
Talos simplifies your architecture and increases your ability to
|
|
easily accommodate future changes.
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="w-3/4 mx-auto mb-20 pt-4">
|
|
<div class="flex flex-col justify-center">
|
|
<div class="text-center">
|
|
<h2>API Driven</h2>
|
|
<Terminal></Terminal>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="w-1/2 h-auto mx-auto mb-20">
|
|
<div class="text-center pt-6">
|
|
<h1>Built with Modern Technology</h1>
|
|
</div>
|
|
<div class="flex flex-wrap md:flex-no-wrap justify-center">
|
|
<div class="flex items-center lg:m-6 p-2">
|
|
<a href="https://www.musl-libc.org/" target="_blank"
|
|
><img class="logo logo-musl" src="/images/musl-logo.png" alt=""
|
|
/></a>
|
|
</div>
|
|
<div class="flex items-center lg:m-6 p-2">
|
|
<a href="https://golang.org/" target="_blank"
|
|
><img class="logo" src="/images/go-logo.png" alt=""
|
|
/></a>
|
|
</div>
|
|
<div class="flex items-center lg:m-6 p-2">
|
|
<a href="https://grpc.io/" target="_blank"
|
|
><img class="logo" src="/images/grpc-logo.png" alt=""
|
|
/></a>
|
|
</div>
|
|
<div class="flex items-center lg:m-6 p-2">
|
|
<a href="https://containerd.io/" target="_blank"
|
|
><img class="logo" src="/images/containerd-logo.png" alt=""
|
|
/></a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="w-3/4 h-auto mx-auto pb-12 mb-20">
|
|
<div class="text-center">
|
|
<h1>Features</h1>
|
|
</div>
|
|
<div class="md:grid grid-columns-3 grid-gap-12 justify-center">
|
|
<div class="w-full">
|
|
<h2 class="text-center">Minimal</h2>
|
|
<p>
|
|
Talos consists of only a handful of binaries and shared libraries:
|
|
just enough to run containerd and a small set of system services.
|
|
</p>
|
|
|
|
<p>
|
|
This aligns with NIST's recommendation in the
|
|
<a
|
|
href="https://www.nist.gov/publications/application-container-security-guide"
|
|
target="_blank"
|
|
>
|
|
Application Container Security Guide</a
|
|
>.
|
|
</p>
|
|
</div>
|
|
<div>
|
|
<h2 class="text-center">Hardened</h2>
|
|
<div>
|
|
<p>Talos is hardened by design and configuration:</p>
|
|
<ul class="ml-8">
|
|
<li>
|
|
Built with the
|
|
<a
|
|
href="https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project"
|
|
target="_blank"
|
|
>Kernel Self Protection Project</a
|
|
>
|
|
configuration recommendations.
|
|
</li>
|
|
<li>
|
|
All access to the API is secured with Mutual TLS.
|
|
</li>
|
|
<li>
|
|
Settings and configuration described in the
|
|
<a
|
|
href="https://www.cisecurity.org/benchmark/kubernetes/"
|
|
target="_blank"
|
|
>CIS</a
|
|
>
|
|
guidelines are applied by default.
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<h2 class="text-center">Immutable</h2>
|
|
<div>
|
|
Talos improves its security posture further by mounting the root
|
|
filesystem as read-only and removing any host-level access by
|
|
traditional means such as a shell and SSH.
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div
|
|
class="md:grid grid-columns-2 grid-gap-12 justify-center md:w-2/3 md:mx-auto"
|
|
>
|
|
<div>
|
|
<h2 class="text-center">Ephemeral</h2>
|
|
<div>
|
|
Talos runs in memory from a SquashFS, and persists nothing, leaving
|
|
the primary disk entirely to Kubernetes.
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<h2 class="text-center">Current</h2>
|
|
<div>
|
|
We are committed to an <tt>n-1</tt> adoption rate of upstream
|
|
Kubernetes, and the latest LTS Linux kernel will always be used.
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<img
|
|
class="hidden"
|
|
src="https://placeholder.pics/svg/300/DEDEDE/555555/some%20nifty%20image%20here"
|
|
/>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</template>
|
|
|
|
<script>
|
|
import Terminal from '~/components/Terminal.vue'
|
|
|
|
export default {
|
|
name: 'Index',
|
|
components: {
|
|
Terminal
|
|
}
|
|
}
|
|
</script>
|
|
|
|
<style>
|
|
#landing-page {
|
|
height: 100%;
|
|
background: url(~assets/images/chips_bg_v1.svg) no-repeat center center fixed;
|
|
-webkit-background-size: contain;
|
|
-moz-background-size: contain;
|
|
-o-background-size: contain;
|
|
background-size: contain;
|
|
background-position: center bottom;
|
|
}
|
|
|
|
.logo {
|
|
display: block;
|
|
width: 189px;
|
|
height: auto;
|
|
margin: auto;
|
|
}
|
|
|
|
.logo-musl {
|
|
width: 107px;
|
|
}
|
|
|
|
.certified {
|
|
@apply m-5;
|
|
height: auto;
|
|
width: 400px;
|
|
}
|
|
|
|
.c-rich-text ul {
|
|
list-style-position: outside;
|
|
}
|
|
</style>
|