Releases: siderolabs/talos
v1.11.0-beta.1
smira
Andrey Smirnov
5a15ce8
smira
Andrey Smirnov
Talos 1.11.0-beta.1 (2025-08-04)
Welcome to the v1.11.0-beta.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Azure
Talos on Azure now defaults to MTU of 1400 bytes for the eth0 interface to avoid packet fragmentation issues.
The default MTU can be overriden with machine configuration.
Boot
Talos increases the boot partition size to 2 GiB to accommodate larger images (with many system extensions included).
Kernel Command Line
Talos now exposes the kernel command line as a KernelCmdline resource (talosctl get cmdline).
Disk Encryption
Disk encryption for system volumes is now managed by the VolumeConfig machine configuration document.
Legacy configuration in valpha1 machine configuration is still supported.
New per-key option lockToSTATE is added to the VolumeConfig document, which allows to lock the volume encryption key to the secret salt in the STATE volume.
So, if the STATE volume is wiped or replaced, the volume encryption key will not be usable anymore.
Disk Wipe
Talos now supports talosctl disk wipe command in maintenance mode (talosctl disk wipe <disk> --insecure).
Early Inline Configuration
Talos now supports passing early inline configuration via the talos.config.early kernel parameter.
This allows to pass the configuration before the platform config source is probed, which is useful for early boot configuration.
The value of this parameter has same format as the talos.config.inline parameter, i.e. it should be base64 encoded and zstd-compressed.
ETCD downgrade API
Added ETCD downgrade API mimicking the ETCD API and etcdctl interfaces.
This API allows to downgrade ETCD cluster (storage format) to a previous version.
IMA support removed
Talos now drops the IMA (Integrity Measurement Architecture) support. This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues. See #11133 for more details.
Kubernetes Version Validation
Talos now validates Kubernetes version in the image submitted in the machine configuration.
Previously this check was performed only on upgrade, but now it is consistently applied to upgrade, initial provisioning, and machine configuration updates.
This implies that all image references should contain the tag, even if the image is pinned by digest.
Qemu provisioner on MacOS
On MacOS talosctl cluster create command now supports the Qemu provisioner in addition to the Docker provisioner.
Kernel Modules
Talosctl now returns the loaded modules, not the modules configured to be loaded (talosctl get modules).
SBOM
Talos now publishes Software Bill of Materials (SBOM) in the SPDX format.
Swap Suport
Talos now supports swap on block devices.
This feature can be enable by using SwapVolumeConfig document in the machine configuration.
Component Updates
Linux: 6.12.40
Kubernetes: 1.34.0-beta.0
runc: 1.3.0
etcd: 3.6.4
containerd: 2.1.4
Flannel CNI plugin: 1.7.1-flannel1
Flannel: 0.27.2
CoreDNS: 1.12.2
xfsprogs: 6.15.0
systemd-udevd and systemd-boot: 257.7
lvm2: 2.03.33
cryptsetup: 2.8.0
Talos is built with Go 1.24.5.
VMware
Talos VMWare platform now supports arm64 architecture in addition to amd64.
Volumes
Talos now supports raw user volumes, allowing to allocate unformatted disk space as partition.
In addition to that, support for existing volumes has been added, allowing to mount existing partitions without formatting them.
Zswap Support
Talos now supports zswap, a compressed cache for swap pages.
This feature can be enabled by using ZswapConfig document in the machine configuration.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitrii Sharshakov
- Orzelius
- Mateusz Urbanek
- Orzelius
- Justin Garrison
- Spencer Smith
- Steve Francis
- Till Hoffmann
- Utku Ozdemir
- Andrew Longwill
- Artem Chernyshev
- Michael Robbins
- Alexandre GV
- Marat Bakeev
- Olav Thoresen
- Thibault VINCENT
- Alvaro "Chamo" Linares Cabre
- Amarachi Iheanacho
- Brian Brookman
- Bryan Mora
- Clément Nussbaumer
- Damien
- David R
- Dennis Marttinen
- Dmitriy Matrenichev
- Joakim Nohlgård
- Jorik Jonker
- Justin Seely
- Luke Cousins
- Marco Mihai Condrache
- Markus Reiter
- Martyn Ranyard
- Michael Moerz
- Mike
- Oguz Kilcan
- Tan Siewert
- Tom Keur
- jvanthienen-gluo
- killcity
- yashutanu
Changes
247 commits
- 5a15ce88b release(v1.11.0-beta.1): prepare release
- 614ca2e22 fix: one more attempt to fix volume mount race on restart
- 4b86dfe6f feat: implement encryption locking to STATE
- 8ae76c320 feat: implement
talos.config.earlycommand line arg - 19f8c605e docs: remove talos API flags from mgmt commands
- fa1d6fef8 feat: bootedentry resource
- 7dee810d4 fix: live reload of TLS client config for discovery client
- a5dc22466 fix: enforce minimum size on user volumes if not set explicitly
- 7836e924d feat: update containerd to 2.1.4
- 5012550ec feat: add F71808E watchdog driver
- 10ddc4cdd fix: grype scan
- d108e0a08 fix(ci): use a random suffix for ami names
- 504225546 fix: issues with reading GPT
- bdaf08dd4 feat: update PCI DB module to v0.3.2
- 667dcebec test: wait for service account test job longer
- ae176a4b7 feat: update etcd to 3.6.4
- 201b6801f fix: issue with volume remount on service restart
- 2a911402b chore: tag aws snapshots created via ci with the image name
- d8bd84b56 docs: add SBOM documentation
- 7eec61993 feat: unify disk encryption configuration
- 4ff2bf9e0 feat: update etcd to v3.5.22
- 31a67d379 fix: do not download artifacts for cron Grype scan
- c6b6e0bb3 docs: rewrite the getting started and prod docs for v1.10 and v1.11
- ca1c656e6 chore(ci): add more nvidia test matrix
- 7a2e0f068 feat: sync pkgs, update Linux to 6.12.40
- 85e7989cf release(v1.11.0-beta.0): prepare release
- 3039162dc feat: update Flannel to v0.27.2
- 7e6052e63 feat: increase boot partition to 2 GiB
- cb7ca17bb feat: implement ExistingVolumeConfig
- a857c696f chore(machined): remove deprecated Endpoints
- a60101c55 fix: fill serial using helpers
- 5420e9979 refactor: output default selection for profiles
- 023a24cd4 test: use Grype to scan SBOM for vulnerabilities
- 96896fddb chore: build less images by default
- 75b5dec06 fix: sd-boot kexec with disk images
- 10546d6f8 feat: update Kuberentes 1.34.0-beta.0
- 3f35b83ae fix: ignore absent extensions SBOM directory
- 9920da3e1 feat: add etcd downgrade API
- c38682279 feat: bump pkgs and tools, read extensions' SBOMs, rekres
- 9c0d2706c docs: add release notes about v3.6.x bug
- d21994210 test: refactor various merge controller tests
- da5a4449f feat: implement raw volume support
- 41adda1cf docs: add secure boot setup mode note for Xen
- 993b4ade8 docs: fix typo in hugo config: pre-releaase
- 130b7fd6e test: fix flaky TestDNS
- 35b45ae6e feat(talosctl): support tpm operation on mac
- 24628db20 feat: update Kubernetes to v1.34.0-alpha.3
- ff68286d1 feat: include hwrandom modules
- a5b07c9a5 test: split tests and lint from the default pipeline
- a957ef416 feat: add SBOMs to the imager container
- 506212a71 feat: include AMD encrypted mem modules into base
- a966321cc fix: add more bootloader probe logs on upgrade
- b38fa568a feat: add validation for secrets bundle
- 2d89bcc71 feat: bump Linux, Go and other packages
- 0b8c180b8 fix: rename instances to referenceCount
- 378fe4f2f feat: support writing EFI boot order
- 9f0792632 fix: improve volume provisioning errors
- b8fcf3c71 fix: change module instance evaluation
- d680e560d docs: create FUNDING.yml
- 641505584 feat: support project quota support for user volumes
- 52656cc3c feat: allow taloscl disk wipe in maintenance mode
- 850579448 feat: export SBOM as resources
- 4f3a2ffab test: update unit-test runner
- d531b682c fix: provide FIPS 140-3 compliance
- 3e3129d36 feat: include packages into SBOM
- 54bd50be3 fix: talos endpoint might not be created in Kubernetes
- 8789a02c3 feat: present loaded kernel modules
- 33ecbaec6 test: update apply config tests
- siderol...
v1.10.6
smira
Andrey Smirnov
cfa6c98
smira
Andrey Smirnov
Talos 1.10.6 (2025-07-31)
Welcome to the v1.10.6 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.12.40
Kubernetes: 1.33.3
Talos is built with Go 1.24.5.
Contributors
- Andrey Smirnov
- Andrew Longwill
- Mateusz Urbanek
Changes
8 commits
- cfa6c98ce release(v1.10.6): prepare release
- 755308906 fix: issues with reading GPT
- bb1cdc86b fix: issue with volume remount on service restart
- e8bbe4a51 chore: tag aws snapshots created via ci with the image name
- e59522577 feat: include AMD encrypted mem modules into base
- 68a485269 fix: add more bootloader probe logs on upgrade
- d76649dd5 fix: talos endpoint might not be created in Kubernetes
- e62175948 feat: update Linux to 6.12.40
Changes from siderolabs/gen
Changes from siderolabs/pkgs
5 commits
- siderolabs/pkgs@2e6dd0a feat: update Linux to 6.12.40
- siderolabs/pkgs@3657b7d feat: update Linux to 6.12.38
- siderolabs/pkgs@a8e77ff feat: enable AMD encrypted memory
- siderolabs/pkgs@8dd783f feat: update Linux to 6.12.36 and firmware
- siderolabs/pkgs@7e49fce feat: update tools and toolchain
Changes from siderolabs/tools
Dependency Changes
- github.com/siderolabs/gen v0.8.4 -> v0.8.5
- github.com/siderolabs/go-blockdevice/v2 v2.0.16 -> v2.0.19
- github.com/siderolabs/pkgs v1.10.0-24-g28fa97d -> v1.10.0-29-g2e6dd0a
- github.com/siderolabs/talos/pkg/machinery v1.10.5 -> v1.10.6
- github.com/siderolabs/tools v1.10.0-4-g9d54ed4 -> v1.10.0-5-g31fd099
- golang.org/x/sync v0.15.0 -> v0.16.0
- golang.org/x/sys v0.33.0 -> v0.34.0
- golang.org/x/text v0.26.0 -> v0.27.0
Previous release can be found at v1.10.5
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.3
registry.k8s.io/kube-controller-manager:v1.33.3
registry.k8s.io/kube-scheduler:v1.33.3
registry.k8s.io/kube-proxy:v1.33.3
ghcr.io/siderolabs/kubelet:v1.33.3
ghcr.io/siderolabs/installer:v1.10.6
registry.k8s.io/pause:3.10
v1.11.0-beta.0
smira
Andrey Smirnov
85e7989
smira
Andrey Smirnov
Talos 1.11.0-beta.0 (2025-07-22)
Welcome to the v1.11.0-beta.0 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Azure
Talos on Azure now defaults to MTU of 1400 bytes for the eth0 interface to avoid packet fragmentation issues.
The default MTU can be overriden with machine configuration.
Boot
Talos increases the boot partition size to 2 GiB to accommodate larger images (with many system extensions included).
Kernel Command Line
Talos now exposes the kernel command line as a KernelCmdline resource (talosctl get cmdline).
Disk Wipe
Talos now supports talosctl disk wipe command in maintenance mode (talosctl disk wipe <disk> --insecure).
ETCD v3.6.x
Talos won't default to ETCD v3.6.x in the next release due to bug in the v3.6.x series that causes data corruption in some cases.
The default version will be kept at v3.5.x for now, but users can still use v3.6.x by explicitly specifying it in the configuration.
ETCD downgrade API
Added ETCD downgrade API mimicking the ETCD API and etcdctl interfaces.
This API allows to downgrade ETCD cluster (storage format) to a previous version.
IMA support removed
Talos now drops the IMA (Integrity Measurement Architecture) support. This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues. See #11133 for more details.
Kubernetes Version Validation
Talos now validates Kubernetes version in the image submitted in the machine configuration.
Previously this check was performed only on upgrade, but now it is consistently applied to upgrade, initial provisioning, and machine configuration updates.
This implies that all image references should contain the tag, even if the image is pinned by digest.
Qemu provisioner on MacOS
On MacOS talosctl cluster create command now supports the Qemu provisioner in addition to the Docker provisioner.
Kernel Modules
Talosctl now returns the loaded modules, not the modules configured to be loaded (talosctl get modules).
SBOM
Talos now publishes Software Bill of Materials (SBOM) in the SPDX format.
The SBOM is available in the /usr/share/sbom directory on the machine and can be retrieved using talosctl get sbom.
Swap Suport
Talos now supports swap on block devices.
This feature can be enable by using SwapVolumeConfig document in the machine configuration.
Component Updates
Linux: 6.12.38
Kubernetes: 1.34.0-beta.0
runc: 1.3.0
containerd: 2.1.3
Flannel CNI plugin: 1.7.1-flannel1
Flannel: 0.27.2
CoreDNS: 1.12.2
xfsprogs: 6.15.0
systemd-udevd and systemd-boot: 257.7
lvm2: 2.03.33
cryptsetup: 2.8.0
Talos is built with Go 1.24.5.
VMware
Talos VMWare platform now supports arm64 architecture in addition to amd64.
Volumes
Talos now supports raw user volumes, allowing to allocate unformatted disk space as partition.
In addition to that, support for existing volumes has been added, allowing to mount existing partitions without formatting them.
Zswap Support
Talos now supports zswap, a compressed cache for swap pages.
This feature can be enabled by using ZswapConfig document in the machine configuration.
Contributors
- Andrey Smirnov
- Noel Georgi
- Dmitrii Sharshakov
- Orzelius
- Mateusz Urbanek
- Orzelius
- Justin Garrison
- Spencer Smith
- Steve Francis
- Till Hoffmann
- Utku Ozdemir
- Artem Chernyshev
- Michael Robbins
- Alexandre GV
- Andrew Longwill
- Marat Bakeev
- Olav Thoresen
- Thibault VINCENT
- Alvaro "Chamo" Linares Cabre
- Brian Brookman
- Bryan Mora
- Clément Nussbaumer
- Damien
- David R
- Dennis Marttinen
- Dmitriy Matrenichev
- Joakim Nohlgård
- Jorik Jonker
- Justin Seely
- Luke Cousins
- Marco Mihai Condrache
- Markus Reiter
- Martyn Ranyard
- Michael Moerz
- Mike
- Oguz Kilcan
- Tan Siewert
- Tom Keur
- jvanthienen-gluo
- killcity
- yashutanu
Changes
222 commits
- 85e7989cf release(v1.11.0-beta.0): prepare release
- 3039162dc feat: update Flannel to v0.27.2
- 7e6052e63 feat: increase boot partition to 2 GiB
- cb7ca17bb feat: implement ExistingVolumeConfig
- a857c696f chore(machined): remove deprecated Endpoints
- a60101c55 fix: fill serial using helpers
- 5420e9979 refactor: output default selection for profiles
- 023a24cd4 test: use Grype to scan SBOM for vulnerabilities
- 96896fddb chore: build less images by default
- 75b5dec06 fix: sd-boot kexec with disk images
- 10546d6f8 feat: update Kuberentes 1.34.0-beta.0
- 3f35b83ae fix: ignore absent extensions SBOM directory
- 9920da3e1 feat: add etcd downgrade API
- c38682279 feat: bump pkgs and tools, read extensions' SBOMs, rekres
- 9c0d2706c docs: add release notes about v3.6.x bug
- d21994210 test: refactor various merge controller tests
- da5a4449f feat: implement raw volume support
- 41adda1cf docs: add secure boot setup mode note for Xen
- 993b4ade8 docs: fix typo in hugo config: pre-releaase
- 130b7fd6e test: fix flaky TestDNS
- 35b45ae6e feat(talosctl): support tpm operation on mac
- 24628db20 feat: update Kubernetes to v1.34.0-alpha.3
- ff68286d1 feat: include hwrandom modules
- a5b07c9a5 test: split tests and lint from the default pipeline
- a957ef416 feat: add SBOMs to the imager container
- 506212a71 feat: include AMD encrypted mem modules into base
- a966321cc fix: add more bootloader probe logs on upgrade
- b38fa568a feat: add validation for secrets bundle
- 2d89bcc71 feat: bump Linux, Go and other packages
- 0b8c180b8 fix: rename instances to referenceCount
- 378fe4f2f feat: support writing EFI boot order
- 9f0792632 fix: improve volume provisioning errors
- b8fcf3c71 fix: change module instance evaluation
- d680e560d docs: create FUNDING.yml
- 641505584 feat: support project quota support for user volumes
- 52656cc3c feat: allow taloscl disk wipe in maintenance mode
- 850579448 feat: export SBOM as resources
- 4f3a2ffab test: update unit-test runner
- d531b682c fix: provide FIPS 140-3 compliance
- 3e3129d36 feat: include packages into SBOM
- 54bd50be3 fix: talos endpoint might not be created in Kubernetes
- 8789a02c3 feat: present loaded kernel modules
- 33ecbaec6 test: update apply config tests
- 7d2fd390c chore: bump Talos version in the Image Factory CI pipeline
- de77f2142 docs: add example for fluentbit config
- 1f1f78106 fix: add limited retries for not found images
- 3d6a2c14e chore: generate and upload signatures on release
- 380141330 feat: expose kernel cmdline as a resource
- 4c6b3b14d docs: document disabling SELinux
- 3a6e5a71e feat: add talosctl mulitarch bundle image
- be671ee6d chore: add sbom step to the release pipeline
- 7fd0e8fc7 release(v1.11.0-alpha.3): prepare release
- 777335f23 chore: improve cloud image uploader resilience
- 14e5eee7d release(v1.11.0-alpha.2): prepare release
- 1e5a008f5 fix: hold user volume mount point across kubelet restarts
- cdad50590 docs: user volumes and kubernetes upgrade updates
- c880835c8 feat: implement zswap support
- 7f0300f10 feat: update dependencies, Kubernetes 1.34.0-alpha.2
- 61afbe3d2 docs: add vc4 documentation
- b9dbdc8e7 fix: etcd recover with multiple advertised addresses
- 19d94c357 feat: update Linux to 6.12.35, containerd to 2.1.3
- 44a1fc3b7 fix: treat context canceled as expected error on image pull
- 4da2dd537 feat: enforce Kubernetes version compatibility
- 6c7f8201a fix: set default MTU on Azure to 1400
- 091cd6989 docs: small yaml typo fix
- 66ecbd48f docs: update support matrix with omni version
- c948d7617 docs: minor fixes for creating kernel modules
- cc14c4a25 docs: add docs for creating kernel modules
- 93bcd3b56 docs: create SBOM for Go dependencies
- 38c4ce415 feat: add user-space InfiniBand modules
- 251dc934f feat: arm64 support for platform vmware
- 09b3ad577 feat: update containerd to 2.1.2
- 0767dd07b chore: enable --with-siderolink-agent on Darwin
- 9642198d7 fix: userspace wireguard library overrides
- 208f0763e chore: fix talosctl ...
v1.10.5
smira
Andrey Smirnov
55fc623
smira
Andrey Smirnov
Talos 1.10.5 (2025-07-03)
Welcome to the v1.10.5 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Azure
Talos on Azure now defaults to MTU of 1400 bytes for the eth0 interface to avoid packet fragmentation issues.
The default MTU can be overriden with machine configuration.
Component Updates
Linux: 6.12.35
Kubernetes: 1.33.2
Talos is built with Go 1.24.4.
Contributors
- Andrey Smirnov
- Noel Georgi
Changes
9 commits
- 55fc62331 release(v1.10.5): prepare release
- b84e15037 feat: update Kubernetes default to 1.33.2
- 2017ec228 fix: add limited retries for not found images
- b3e510ac5 chore: improve cloud image uploader resilience
- 4a40cddbb fix: hold user volume mount point across kubelet restarts
- 9e1f347f5 fix: etcd recover with multiple advertised addresses
- f85ff5fa8 feat: update Linux to 6.12.35
- 87ed1b589 fix: treat context canceled as expected error on image pull
- 9a0644a64 fix: set default MTU on Azure to 1400
Changes from siderolabs/pkgs
2 commits
- siderolabs/pkgs@28fa97d fix: iptables url
- siderolabs/pkgs@6109fe6 feat: update dependencies
Dependency Changes
- github.com/siderolabs/pkgs v1.10.0-22-g51e388c -> v1.10.0-24-g28fa97d
- github.com/siderolabs/talos/pkg/machinery v1.10.4 -> v1.10.5
- k8s.io/api v0.33.1 -> v0.33.2
- k8s.io/apiserver v0.33.1 -> v0.33.2
- k8s.io/client-go v0.33.1 -> v0.33.2
- k8s.io/component-base v0.33.1 -> v0.33.2
- k8s.io/kube-scheduler v0.33.1 -> v0.33.2
- k8s.io/kubectl v0.33.1 -> v0.33.2
- k8s.io/kubelet v0.33.1 -> v0.33.2
- k8s.io/pod-security-admission v0.33.1 -> v0.33.2
Previous release can be found at v1.10.4
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.2
registry.k8s.io/kube-controller-manager:v1.33.2
registry.k8s.io/kube-scheduler:v1.33.2
registry.k8s.io/kube-proxy:v1.33.2
ghcr.io/siderolabs/kubelet:v1.33.2
ghcr.io/siderolabs/installer:v1.10.5
registry.k8s.io/pause:3.10
v1.11.0-alpha.3
smira
Andrey Smirnov
7fd0e8f
smira
Andrey Smirnov
Talos 1.11.0-alpha.3 (2025-07-02)
Welcome to the v1.11.0-alpha.3 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Azure
Talos on Azure now defaults to MTU of 1400 bytes for the eth0 interface to avoid packet fragmentation issues.
The default MTU can be overriden with machine configuration.
IMA support removed
Talos now drops the IMA (Integrity Measurement Architecture) support. This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues. See #11133 for more details.
Kubernetes Version Validation
Talos now validates Kubernetes version in the image submitted in the machine configuration.
Previously this check was performed only on upgrade, but now it is consistently applied to upgrade, initial provisioning, and machine configuration updates.
This implies that all image references should contain the tag, even if the image is pinned by digest.
Qemu provisioner on MacOS
On MacOS talosctl cluster create command now supports the Qemu provisioner in addition to the Docker provisioner.
Swap Suport
Talos now supports swap on block devices.
This feature can be enable by using SwapVolumeConfig document in the machine configuration.
Component Updates
Linux: 6.12.35
Kubernetes: 1.34.0-alpha.2
runc: 1.3.0
containerd: 2.1.3
Flannel CNI plugin: 1.7.1-flannel1
Flannel: 0.27.0
CoreDNS: 1.12.2
Talos is built with Go 1.24.4.
VMware
Talos VMWare platform now supports arm64 architecture in addition to amd64.
Zswap Support
Talos now supports zswap, a compressed cache for swap pages.
This feature can be enabled by using ZswapConfig document in the machine configuration.
Contributors
- Andrey Smirnov
- Noel Georgi
- Orzelius
- Orzelius
- Justin Garrison
- Spencer Smith
- Till Hoffmann
- Utku Ozdemir
- Artem Chernyshev
- Dmitrii Sharshakov
- Michael Robbins
- Steve Francis
- Andrew Longwill
- Marat Bakeev
- Olav Thoresen
- Thibault VINCENT
- Alvaro "Chamo" Linares Cabre
- Brian Brookman
- Bryan Mora
- Clément Nussbaumer
- Damien
- David R
- Dennis Marttinen
- Dmitriy Matrenichev
- Joakim Nohlgård
- Jorik Jonker
- Justin Seely
- Luke Cousins
- Marco Mihai Condrache
- Markus Reiter
- Martyn Ranyard
- Michael Moerz
- Mike
- Tan Siewert
- Tom Keur
- jvanthienen-gluo
- killcity
- yashutanu
Changes
171 commits
- 7fd0e8fc7 release(v1.11.0-alpha.3): prepare release
- 777335f23 chore: improve cloud image uploader resilience
- 14e5eee7d release(v1.11.0-alpha.2): prepare release
- 1e5a008f5 fix: hold user volume mount point across kubelet restarts
- cdad50590 docs: user volumes and kubernetes upgrade updates
- c880835c8 feat: implement zswap support
- 7f0300f10 feat: update dependencies, Kubernetes 1.34.0-alpha.2
- 61afbe3d2 docs: add vc4 documentation
- b9dbdc8e7 fix: etcd recover with multiple advertised addresses
- 19d94c357 feat: update Linux to 6.12.35, containerd to 2.1.3
- 44a1fc3b7 fix: treat context canceled as expected error on image pull
- 4da2dd537 feat: enforce Kubernetes version compatibility
- 6c7f8201a fix: set default MTU on Azure to 1400
- 091cd6989 docs: small yaml typo fix
- 66ecbd48f docs: update support matrix with omni version
- c948d7617 docs: minor fixes for creating kernel modules
- cc14c4a25 docs: add docs for creating kernel modules
- 93bcd3b56 docs: create SBOM for Go dependencies
- 38c4ce415 feat: add user-space InfiniBand modules
- 251dc934f feat: arm64 support for platform vmware
- 09b3ad577 feat: update containerd to 2.1.2
- 0767dd07b chore: enable --with-siderolink-agent on Darwin
- 9642198d7 fix: userspace wireguard library overrides
- 208f0763e chore: fix talosctl build on non-Linux hosts
- 87421af87 docs: expand documentation description
- d32ccfa59 feat: implement swap support
- 8f5cf81db docs: update kvm documentation
- 8e84c8b0f fix: nil pointer deref in quirk
- 6e74a3676 docs: aad ery basic details on how to run on scaleway
- 260d1bc9a fix: correctl close encrypted volumes
- 034ef42af fix: update siderolink library for wgtunnel panic fix
- 3035744a8 fix: correctly predict interface name on darwin
- cfcfad3c4 chore: move
checkUnknownKeysfunction togithub.com/siderolabs/gen - 5ecc53c69 docs: add macos section to developing-talos.md
- b5b35307f chore: update Go to 1.24.4
- fde772d8d feat: update Flannel to 0.27.0
- 81ca27949 release(v1.11.0-alpha.1): prepare release
- 58a868e68 chore: fix renovate config, add release-gate label
- a59aaee84 feat: bump dependencies, Linux 6.12.31
- e954ee30a docs: typo correction: LongHorn -> Longhorn
- aab053394 fix: mashal resource byte slices as strings in YAML
- c7d4191e7 fix: rework the way CRI config generation is waited for
- 0114183de docs: update
lastReleaseto 1.10.3 - 938b0760a docs: update issue template
- 2a7b735b2 feat: drop IMA support
- 2d5a805b0 fix: typo in DiscoverdVolume spec
- 60c12bad9 feat: support nocloud include url userdata directive
- 0fd622c82 fix(talosctl): correct --help output for dashboard command
- a90c936a1 feat: support qemu provisioner on darwin
- 5322ca0d3 docs: update overlay docs
- a60b6322d fix(ci): drop nebula from extensions test
- dbbb59a67 docs: add note for default
dataDirHostPathfor Rook - e26054378 docs: macos qemu provider
- 5d0224093 docs: use the cilium-cli image repo in the job installation manifest
- ff80e4cca docs: fix CIDR name
- a5fd15e8b fix(ci): reproducibility test
- 8f8963e50 docs: update Nexxen brand
- c6b86872d fix(ci): iso reproducibility file permissions
- 995a1dec4 chore: add a check for unsupported darwin flags
- 9db5d0c97 fix: nocloud metadata for hostname
- 3cf325654 feat: modularize more arm64 kernel
- 3524745cc fix: allow any PKI in Talos API
- f438cdb09 chore: use custom dhcpd server on macos qemu
- 11c17fb9a fix: metal-iso reproducibility
- 7fcb89ee3 chore: add darwin vmnet qemu support
- fc1237343 chore: clean up
/usr/bin - b551f32ce feat: update containerd to v2.1.1
- 67f4154f9 docs: update disk-management.md
- 0cb137ad7 fix: make disk size check work on old Talos
- 7c057edd5 fix: use vmdk-convert istead of qemu-img to create VMDK for OVA files
- cd618dad0 chore: update the go-blockdevice package
- 0b99631a0 fix: bump apid memory limit
- 5451f35b1 docs: update virtualbox
- bd4d202a5 refactor: bring owned.State from COSI to simplify tests
- 0b96df574 feat: update containerd to 2.1.0
- e1a939144 docs: fix formatting in disk encryption
- 7a817df1c docs: fix typo
- f35b213b2 test: fix DHCP unicast failures in QEMU environment
- 7064bbf05 docs: fix vmware factory URL
- 78c33bcdb feat: update default Kubernetes to v1.33.1
- da6795266 fix: disable automatic MAC assignment to bridge interfaces
- ca34adf58 chore(ci): drop azure keys
- ea5de19fa fix: selinux detection
- 52c76ea3a fix: consistently apply dynamic grpc proxy dialer
- aa9569e5d chore: refactor cluster create cmd flags
- 1161faa05 docs: fix typo in Cilium docs
- 164745e44 docs: remove
preserveflag mention in upgrade notes - 9a2ecbaaf fix: makefile operating system param
- 118aa69d6 chore: update cloud-image-uploader dependencies
- acdd721cf chore: dump qemu pachine ipam records on darwin
- bb9094534 chore: rotate aws iam credentials
- 0bfa4ae1b chore: update deps for cloud-image-uploader
- 956d7c71b chore: update sops keys
- e2f819d88 test: fix the process runner log collection
- fdac4cfb9 fix: upgrade go-kubernetes for DRA flag bug
- 09d88e1e8 test: fix some flaky tests
- ec1f41a94 chore: make qemu config server bind work on darwin
- 980f4d2b9 feat: bump dependencies
- 95259337e fix: k8s 1.32->1.33 upgrade check
- c3c326b40 fix: improve volume mounter automaton
- 918b94d9a refactor: rewrite disk size check
- ab7e693d7 chore: make ...
v1.10.4
smira
Andrey Smirnov
3c119bf
smira
Andrey Smirnov
Talos 1.10.4 (2025-06-11)
Welcome to the v1.10.4 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.12.31
Talos is built with Go 1.24.4.
Contributors
- Andrey Smirnov
- Artem Chernyshev
- Dennis Marttinen
- Utku Ozdemir
- Dmitriy Matrenichev
- Noel Georgi
- Spencer Smith
- yashutanu
Changes
12 commits
- 3c119bf87 release(v1.10.4): prepare release
- 7caf90a37 fix: nil pointer deref in quirk
- b6f16e592 fix: update siderolink library for wgtunnel panic fix
- 037801f5f fix: correctl close encrypted volumes
- 2755aebec chore: fix renovate config, add release-gate label
- 1cab7bba1 fix: rework the way CRI config generation is waited for
- bda53869e fix: typo in DiscoverdVolume spec
- 76ecdacbc feat: support nocloud include url userdata directive
- 4f96f35a4 fix(ci): drop nebula from extensions test
- 47a642804 feat: update Linux 6.12.31, go 1.24.4
- 141e452c4 fix: use correct FUSE magic for IMA
fsmagicmatching - 09a4ed1e0 fix: upgrade grpc library to the latest 1.71.x
Changes from siderolabs/gen
4 commits
- siderolabs/gen@dcb2b74 feat: add
panicsafepackage - siderolabs/gen@b36ee43 feat: make
xyaml.CheckUnknownKeyspublic - siderolabs/gen@3e319e7 feat: implement
xyaml.UnmarshalStrict - siderolabs/gen@7c0324f chore: future-proof HashTrieMap
Changes from siderolabs/pkgs
6 commits
- siderolabs/pkgs@51e388c chore: use ftpmirror for GNU sources
- siderolabs/pkgs@81623cd feat: update NVIDIA drivers to 570.148.08
- siderolabs/pkgs@f6caaf0 feat: update Linux to 6.12.31
- siderolabs/pkgs@ae52cde feat: add patch for CephFS IMA performance regression
- siderolabs/pkgs@d0a42eb feat: add CONFIG_NFT_CONNLIMIT to kernel
- siderolabs/pkgs@cd20b0a feat: update Go to 1.24.4/1.23.10
Changes from siderolabs/siderolink
3 commits
- siderolabs/siderolink@5f46f65 feat: handle panics in goroutines
- siderolabs/siderolink@d09ff45 fix: race in wait value
- siderolabs/siderolink@d2a79e0 fix: clean up device on failure
Changes from siderolabs/tools
2 commits
- siderolabs/tools@9d54ed4 chore: use ftpmirror for GNU sources
- siderolabs/tools@8b87c11 feat: update Go to 1.24.4
Dependency Changes
- github.com/siderolabs/gen v0.8.0 -> v0.8.4
- github.com/siderolabs/pkgs v1.10.0-16-g39b9c9f -> v1.10.0-22-g51e388c
- github.com/siderolabs/siderolink v0.3.13 -> v0.3.15
- github.com/siderolabs/talos/pkg/machinery v1.10.3 -> v1.10.4
- github.com/siderolabs/tools v1.10.0-2-gfa51331 -> v1.10.0-4-g9d54ed4
- golang.org/x/net v0.39.0 -> v0.41.0
- golang.org/x/oauth2 v0.29.0 -> v0.30.0
- golang.org/x/sync v0.13.0 -> v0.15.0
- golang.org/x/sys v0.32.0 -> v0.33.0
- golang.org/x/term v0.31.0 -> v0.32.0
- golang.org/x/text v0.24.0 -> v0.26.0
- google.golang.org/grpc v1.71.1 -> v1.71.3
Previous release can be found at v1.10.3
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.1
registry.k8s.io/kube-controller-manager:v1.33.1
registry.k8s.io/kube-scheduler:v1.33.1
registry.k8s.io/kube-proxy:v1.33.1
ghcr.io/siderolabs/kubelet:v1.33.1
ghcr.io/siderolabs/installer:v1.10.4
registry.k8s.io/pause:3.10
v1.11.0-alpha.1
smira
Andrey Smirnov
81ca279
smira
Andrey Smirnov
Talos 1.11.0-alpha.1 (2025-06-05)
Welcome to the v1.11.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
IMA support removed
Talos now drops the IMA (Integrity Measurement Architecture) support. This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues. See #11133 for more details.
Qemu provisioner on MacOS
On MacOS talosctl cluster create command now supports the Qemu provisioner in addition to the Docker provisioner.
Component Updates
Linux: 6.12.31
Kubernetes: 1.33.1
runc: 1.3.0
containerd: 2.1.1
Flannel CNI plugin: 1.7.1-flannel1
Talos is built with Go 1.24.3.
Contributors
- Andrey Smirnov
- Noel Georgi
- Orzelius
- Orzelius
- Spencer Smith
- Till Hoffmann
- Justin Garrison
- Steve Francis
- Andrew Longwill
- Dmitrii Sharshakov
- Marat Bakeev
- Olav Thoresen
- Utku Ozdemir
- Alvaro "Chamo" Linares Cabre
- Brian Brookman
- Bryan Mora
- Clément Nussbaumer
- Dennis Marttinen
- Dmitriy Matrenichev
- Joakim Nohlgård
- Justin Seely
- Luke Cousins
- Marco Mihai Condrache
- Markus Reiter
- Michael Moerz
- Mike
- Tan Siewert
- Thibault VINCENT
- Tom Keur
- killcity
- yashutanu
Changes
135 commits
- 81ca27949 release(v1.11.0-alpha.1): prepare release
- 58a868e68 chore: fix renovate config, add release-gate label
- a59aaee84 feat: bump dependencies, Linux 6.12.31
- e954ee30a docs: typo correction: LongHorn -> Longhorn
- aab053394 fix: mashal resource byte slices as strings in YAML
- c7d4191e7 fix: rework the way CRI config generation is waited for
- 0114183de docs: update
lastReleaseto 1.10.3 - 938b0760a docs: update issue template
- 2a7b735b2 feat: drop IMA support
- 2d5a805b0 fix: typo in DiscoverdVolume spec
- 60c12bad9 feat: support nocloud include url userdata directive
- 0fd622c82 fix(talosctl): correct --help output for dashboard command
- a90c936a1 feat: support qemu provisioner on darwin
- 5322ca0d3 docs: update overlay docs
- a60b6322d fix(ci): drop nebula from extensions test
- dbbb59a67 docs: add note for default
dataDirHostPathfor Rook - e26054378 docs: macos qemu provider
- 5d0224093 docs: use the cilium-cli image repo in the job installation manifest
- ff80e4cca docs: fix CIDR name
- a5fd15e8b fix(ci): reproducibility test
- 8f8963e50 docs: update Nexxen brand
- c6b86872d fix(ci): iso reproducibility file permissions
- 995a1dec4 chore: add a check for unsupported darwin flags
- 9db5d0c97 fix: nocloud metadata for hostname
- 3cf325654 feat: modularize more arm64 kernel
- 3524745cc fix: allow any PKI in Talos API
- f438cdb09 chore: use custom dhcpd server on macos qemu
- 11c17fb9a fix: metal-iso reproducibility
- 7fcb89ee3 chore: add darwin vmnet qemu support
- fc1237343 chore: clean up
/usr/bin - b551f32ce feat: update containerd to v2.1.1
- 67f4154f9 docs: update disk-management.md
- 0cb137ad7 fix: make disk size check work on old Talos
- 7c057edd5 fix: use vmdk-convert istead of qemu-img to create VMDK for OVA files
- cd618dad0 chore: update the go-blockdevice package
- 0b99631a0 fix: bump apid memory limit
- 5451f35b1 docs: update virtualbox
- bd4d202a5 refactor: bring owned.State from COSI to simplify tests
- 0b96df574 feat: update containerd to 2.1.0
- e1a939144 docs: fix formatting in disk encryption
- 7a817df1c docs: fix typo
- f35b213b2 test: fix DHCP unicast failures in QEMU environment
- 7064bbf05 docs: fix vmware factory URL
- 78c33bcdb feat: update default Kubernetes to v1.33.1
- da6795266 fix: disable automatic MAC assignment to bridge interfaces
- ca34adf58 chore(ci): drop azure keys
- ea5de19fa fix: selinux detection
- 52c76ea3a fix: consistently apply dynamic grpc proxy dialer
- aa9569e5d chore: refactor cluster create cmd flags
- 1161faa05 docs: fix typo in Cilium docs
- 164745e44 docs: remove
preserveflag mention in upgrade notes - 9a2ecbaaf fix: makefile operating system param
- 118aa69d6 chore: update cloud-image-uploader dependencies
- acdd721cf chore: dump qemu pachine ipam records on darwin
- bb9094534 chore: rotate aws iam credentials
- 0bfa4ae1b chore: update deps for cloud-image-uploader
- 956d7c71b chore: update sops keys
- e2f819d88 test: fix the process runner log collection
- fdac4cfb9 fix: upgrade go-kubernetes for DRA flag bug
- 09d88e1e8 test: fix some flaky tests
- ec1f41a94 chore: make qemu config server bind work on darwin
- 980f4d2b9 feat: bump dependencies
- 95259337e fix: k8s 1.32->1.33 upgrade check
- c3c326b40 fix: improve volume mounter automaton
- 918b94d9a refactor: rewrite disk size check
- ab7e693d7 chore: make qemu lb address bind work on darwin
- 97ceab001 fix: multiple logic issues in platform network config controller
- 46349a9df docs: remove azure image gallery instructions
- 0cfcdd3de docs: fix search on base talos.dev
- 78646b4e0 docs: add registryd debug command
- c6824c211 fix: deny apply config requests without v1alpha1 in "normal" mode
- 7df0408e4 fix: interactive installer config gen
- 881c5d62b fix: suppress duplicate platform config updates
- 66d77888e fix: replace downloaded asset paths correctly in cluster create cmd
- 6bd6c9b5a fix: generate iso greater than 4 gig
- ac140324e fix: skip PCR extension if TPM1.2 is found
- 09ef1f8a4 fix: ignore http proxy on grpc socket dial
- 22a72dc80 chore: split options between three structs
- 22c34a50f fix(ci): provision cron jobs
- b3b20eff3 fix: containerd crashing with sigsegv
- f7891c301 chore: calculate vmnet interface name preemptively
- ae87edffb fix: drop libseccomp from rootfs
- f74a805bb fix: do correct backoff for nocloud reconcile
- 01bb294af fix(ci): provision tests
- e4945be3b docs: add registryd debug command
- d8c670ad3 release(v1.11.0-alpha.0): prepare release
- ace44ea61 test: update hydrophone to 0.7.0
- 3a1163692 chore: cross platform qemu preflight checks
- 7914fb104 chore: move the create command to it's own package
- c8e619608 chore: prepare for release 1.11
- 1299aaa45 chore(ci): add extensions test for Youki runtime
- e50ceb221 docs: activate Talos 1.10 docs
- 9d12aaeb1 test: improve config patch test
- 106a656b6 chore: make qemu provider build on darwin
- 8013aa06c test: replace platform metadata test
- 2b89c2810 fix: relax etcd APIs RBAC requirements
- 1e677587c fix: preserve kubelet image suffix
- 62ab8af45 fix: disk image generation with image cache
- d60626f01 fix: handle encryption type mismatch
- a9109ebd0 feat: allow SideroLink unique token in machine config
- 2ff3a6e40 feat(kernel): add bcache kernel module to core talos
- fa95a2146 fix(ci): bios provision test
- f7c5b86be fix: sync PCR extension with volume provisioning lifecycle
- f90c79474 chore: show bound driver in pcidevices info
- 8db34624c fix: handle correctly changing platform network config
- 77c7a075b feat: update Kubernetes to 1.33.0
- 74f0c48c7 feat: add version compatibility for Talos 1.11
- c4fb7dad0 fix: force DNS runner shutdown on timeout
- c49b4836e docs: hetzner: add note about public iso
- 16ea2b113 docs: add what is new for 1.10
- be3f0c018 fix: fix Gvisor tests with containerd patch
- 37db132b3 chore(ci): add provision test with bios
- ec60b70e7 fix: set media type to OCI for image cache layer
- a471eb31b feat: update Linux 6.12.24, containerd 2.0.5
- 54ad5b872 fix: extension services logging to console
- 601f036ba docs: correct flannel extra args example
- ae94377d1 feat: support encryption config for user volumes
- 9616f6e8d docs: add caveat for kubespan and host ports
- a1d08a362 docs: fixes typo at OpenEBS Mayastor worker patches
- a91e8726e docs: add a dark theme
- siderolabs/ta...
v1.10.3
smira
Andrey Smirnov
dde2ceb
smira
Andrey Smirnov
Talos 1.10.3 (2025-05-29)
Welcome to the v1.10.3 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.12.28
Kubernetes: 1.33.1
Talos is built with Go 1.24.3.
Contributors
- Andrey Smirnov
- Noel Georgi
Changes
10 commits
- dde2cebce release(v1.10.3): prepare release
- 85110deec fix(ci): reproducibility test
- 64609aad5 fix(ci): iso reproducibility file permissions
- d24ef442b fix: nocloud metadata for hostname
- d4eaf78dc fix: allow any PKI in Talos API
- 2b5f34a41 fix: metal-iso reproducibility
- 3692f6fef fix: bump apid memory limit
- 284ffe9cb feat: update default Kubernetes to v1.33.1
- ecdac8802 chore: clean up
/usr/bin - e9a6ba902 feat: update Linux to 6.12.28
Changes from siderolabs/crypto
2 commits
- siderolabs/crypto@17107ae fix: add generic CSR generator and OpenSSL interop
- siderolabs/crypto@53659fc refactor: split into files
Changes from siderolabs/pkgs
4 commits
- siderolabs/pkgs@39b9c9f fix: drop pcre2 binaries
- siderolabs/pkgs@b622793 fix: drop broken symlinks
- siderolabs/pkgs@ca63fc8 fix: clean up some binaries
- siderolabs/pkgs@1ff9dc5 feat: update Linux 6.12.28, firmware
Dependency Changes
- github.com/siderolabs/crypto v0.5.1 -> v0.6.0
- github.com/siderolabs/pkgs v1.10.0-12-gb425b44 -> v1.10.0-16-g39b9c9f
- github.com/siderolabs/talos/pkg/machinery v1.10.2 -> v1.10.3
- k8s.io/api v0.33.0 -> v0.33.1
- k8s.io/apimachinery v0.33.0 -> v0.33.1
- k8s.io/apiserver v0.33.0 -> v0.33.1
- k8s.io/client-go v0.33.0 -> v0.33.1
- k8s.io/component-base v0.33.0 -> v0.33.1
- k8s.io/kube-scheduler v0.33.0 -> v0.33.1
- k8s.io/kubectl v0.33.0 -> v0.33.1
- k8s.io/kubelet v0.33.0 -> v0.33.1
- k8s.io/pod-security-admission v0.33.0 -> v0.33.1
Previous release can be found at v1.10.2
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.1
registry.k8s.io/kube-controller-manager:v1.33.1
registry.k8s.io/kube-scheduler:v1.33.1
registry.k8s.io/kube-proxy:v1.33.1
ghcr.io/siderolabs/kubelet:v1.33.1
ghcr.io/siderolabs/installer:v1.10.3
registry.k8s.io/pause:3.10
v1.10.2
smira
Andrey Smirnov
1cf5914
smira
Andrey Smirnov
Talos 1.10.2 (2025-05-16)
Welcome to the v1.10.2 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Component Updates
Linux: 6.12.27
Talos is built with Go 1.24.3.
Contributors
- Andrey Smirnov
- Noel Georgi
- Andrew Longwill
Changes
12 commits
- 1cf5914b6 release(v1.10.2): prepare release
- 44083c6e6 feat: update Linux to 6.12.27
- 78df89b87 fix: disable automatic MAC assignment to bridge interfaces
- a5de48b87 fix: selinux detection
- 92dcddd19 fix: consistently apply dynamic grpc proxy dialer
- b8f1bde3c chore: rotate aws iam credentials
- e6b33e233 chore: update sops keys
- b7e5741e6 test: fix the process runner log collection
- 9e71cc8f5 fix: upgrade go-kubernetes for DRA flag bug
- 55885600b test: fix some flaky tests
- b183f95c7 fix: k8s 1.32->1.33 upgrade check
- 4b27faf44 fix: improve volume mounter automaton
Changes from siderolabs/go-kubernetes
2 commits
- siderolabs/go-kubernetes@9070be4 fix: remove DynamicResourceAllocation feature gate
- siderolabs/go-kubernetes@8cb588b fix: k8s 1.32->1.33 upgrade check
Changes from siderolabs/pkgs
4 commits
- siderolabs/pkgs@b425b44 feat: update NVIDIA drivers
- siderolabs/pkgs@88034a5 feat: update ZFS to 2.3.2
- siderolabs/pkgs@87ce8f7 feat: update Linux to 6.12.27
- siderolabs/pkgs@c0af3b8 feat: update Go to 1.24.3
Changes from siderolabs/tools
Dependency Changes
- github.com/siderolabs/go-kubernetes v0.2.21 -> v0.2.23
- github.com/siderolabs/pkgs v1.10.0-8-g13e9f09 -> v1.10.0-12-gb425b44
- github.com/siderolabs/talos/pkg/machinery v1.10.1 -> v1.10.2
- github.com/siderolabs/tools v1.10.0-1-g67d3f5a -> v1.10.0-2-gfa51331
Previous release can be found at v1.10.1
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.0
registry.k8s.io/kube-controller-manager:v1.33.0
registry.k8s.io/kube-scheduler:v1.33.0
registry.k8s.io/kube-proxy:v1.33.0
ghcr.io/siderolabs/kubelet:v1.33.0
ghcr.io/siderolabs/installer:v1.10.2
registry.k8s.io/pause:3.10
v1.10.1
smira
Andrey Smirnov
52269e8
smira
Andrey Smirnov
Talos 1.10.1 (2025-05-07)
Welcome to the v1.10.1 release of Talos!
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Contributors
- Andrey Smirnov
- Noel Georgi
Changes
16 commits
- 52269e812 release(v1.10.1): prepare release
- 5c4f5a120 fix: multiple logic issues in platform network config controller
- c881e6aa0 fix: deny apply config requests without v1alpha1 in "normal" mode
- 5c64e7c27 fix: interactive installer config gen
- 46c30f339 fix: generate iso greater than 4 gig
- 33401beb2 fix: skip PCR extension if TPM1.2 is found
- 77078ff22 fix: containerd crashing with sigsegv
- 39561440a fix: ignore http proxy on grpc socket dial
- eb6d98bc9 fix: suppress duplicate platform config updates
- 6a438ec93 fix: do correct backoff for nocloud reconcile
- 9d64f3194 fix: drop libseccomp from rootfs
- 29b20770e fix(ci): provision tests
- 52afece5d fix(ci): bios provision test
- 208503c8f test: update hydrophone to 0.7.0
- 649d0f857 chore(ci): add extensions test for Youki runtime
- e37573ec2 fix: relax etcd APIs RBAC requirements
Changes from siderolabs/pkgs
3 commits
- siderolabs/pkgs@13e9f09 fix: build containerd with Go 1.23
- siderolabs/pkgs@bdee168 fix: containerd build doesn't need seccomp
- siderolabs/pkgs@61c59a4 fix: downgrade libseccomp to 2.5.5
Changes from siderolabs/tools
Dependency Changes
- github.com/siderolabs/pkgs v1.10.0-5-g48dba3e -> v1.10.0-8-g13e9f09
- github.com/siderolabs/talos/pkg/machinery v1.10.0 -> v1.10.1
- github.com/siderolabs/tools v1.10.0 -> v1.10.0-1-g67d3f5a
- sigs.k8s.io/hydrophone b92baf7e0b04 -> v0.7.0
Previous release can be found at v1.10.0
Images
ghcr.io/siderolabs/flannel:v0.26.7
registry.k8s.io/coredns/coredns:v1.12.1
gcr.io/etcd-development/etcd:v3.5.21
registry.k8s.io/kube-apiserver:v1.33.0
registry.k8s.io/kube-controller-manager:v1.33.0
registry.k8s.io/kube-scheduler:v1.33.0
registry.k8s.io/kube-proxy:v1.33.0
ghcr.io/siderolabs/kubelet:v1.33.0
ghcr.io/siderolabs/installer:v1.10.1
registry.k8s.io/pause:3.10