siderolabs/extensions v1.12.0 on GitHub

Talos System Extensions 1.12.0 (2025-12-22)

Welcome to the v1.12.0 release of Talos System Extensions!

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Component Updates

Amazon ENA: 2.16.0
NVIDIA LTS: 580.105.08
NVIDIA Production: 570.195.03
NVIDIA Container Toolkit: 1.18.1
ctr: 2.1.5
crun: 1.25.1
drbd: 9.2.16
ecr-credential-provider: 1.34.1
fuse3: 3.17.4
glibc: 2.42
gvisor: 20251208.0
hailort: 4.23.0
Kata Containers: 3.24.0
lldpd: 1.0.20
cloudflared: 2025.11.1
nebula: 1.10.0
netbird: 0.60.8
newt: 1.7.0
nut-client: 2.8.4
qemu-guest-agent: 10.1.3
SOCI Snapshotter: 0.12.1
spin: 0.22.0
stargz-snapshotter: 0.18.1
tailscale: 1.92.3
talos-vmtoolsd: 1.4.0
youki: 0.5.7
zerotier: 1.16.0
zfs: 2.4.0
linux-firmware: 20251125
tenstorrent: 2.5.0
mdadm: 4.4
Intel u-code: 20251125

wolfi-base: sha256:42012fa027adc864efbb7cf68d9fc575ea45fe1b9fb0d16602e00438ce3901b1

Contributors

Andrey Smirnov
Mateusz Urbanek
Noel Georgi
Dmitrii Sharshakov
Jorik Jonker
Nicole Hubbard
Steven Kreitzer
Thibault VINCENT
Hugo Meyronneinc
Jean-Francois Roy
Michael Smith
Serge van Ginderachter
Birger Johan Nordølum
Breland Miley
Clément Nussbaumer
Devin Buhl
Fred Heinecke
Guillaume LEGRAIN
Ian Thompson
Jaakko Sirén
Jan Untersander
Joakim Nohlgård
Matthias Riegler
Max Batleforc
Max Makarov
Robin Elfrink
Sammy ETUR
Steve Francis
Zach Langbert
eseiker
sam
veymax
Łukasz Szczepański

Changes

84 commits

5572e82 release(v1.12.0): prepare release
538d34d feat: update ZFS to 2.4.0
4f2158c feat: bump dependencies
7ce4fe7 feat: sync pkgs
c989a41 release(v1.12.0-rc.1): prepare release
ebffdc6 feat: mellanox-msflint extension
124ac2b feat: update ZFS to 2.4.0-rc5
9b1ef5e chore: update pkgs
ad6107e release(v1.12.0-rc.0): prepare release
8ced5f6 feat: add bird2 system-extension
e439f3f docs: fix environment variable name for netbird
5377868 fix: add mc.ko to usb-audio-drivers
5f8c723 feat: update for Linux 6.18
65b2181 fix(nvidia-fabricmanager): memory leak in wrapper
36788ad feat: add gpio-pinctrl extension for Intel Apollo Lake platforms
afc5975 feat: update NVIDIA LTS to 580.105.08
1e3ec47 release(v1.12.0-beta.1): prepare release
48b5578 fix: update pkgs version and rekres
22be374 fix: remove tar file
6d51d7c feat: add multipath-tools and trident-iscsi-tools
38f5276 chore: update backportable dependencies
c3e3c94 fix: nvidia persistenced on arm64
2ef67df fix(nvidia-fabricmanager): ignore interfaces with isSMDisabled flag set
b309119 fix: soci snapshotter build
090b9b0 release(v1.12.0-beta.0): prepare release
f7304cf fix: disable soci-snapshotter extension
8a3c568 feat: add soci snapshotter extension
313ae03 fix: video4linux persistent udev rules
e58f8d5 feat: update dependencies
c5e0d1b feat: add service to create gdrdrv device
b61799a feat(thunderbolt): disable auto power management
a02f062 fix: glibc build for arm64
f341fab feat: allow aarch64 glibc so file
64a46a7 feat: update Go to 1.25.4
689420e feat: bump dependecies
db43866 feat: add nfs-utils extension
31bc8c8 feat(netbird): go further in making it work
25c20c9 fix: image-signer commands
6dffff6 feat: add the ability to have multiple zerotier network to join
9d7136b release(v1.12.0-alpha.2): prepare release
fc85294 feat: bump deps
ed8c228 feat: update cloudflared to 2025.10.0
0beff58 feat: update dependencies
9d782c5 feat: fabricmanager support Blackwell baseboards (DGX/HGX B100/B200/B300)
823659b feat: use image-signer
3f0e872 feat: add xe extension
e38736c chore: update external version references
38f9757 chore: update dependencies
83ee3b0 feat: update tools and pkgs for new Go and NVIDIA LTS
563da22 feat: update dependencies to match pkgs
5133393 fix: try fixing the grype scan
e0946ad release(v1.12.0-alpha.1): prepare release
6962487 feat: update extensions
f106fb4 feat: add usb-audio-drivers
b382dba feat: add netbird
17be2f7 chore: update linux-firmware
12654ec feat: update vmtoolsd to v1.4.0
47051c6 feat: update NVIDIA LTS to 580.82.07
caa10a4 docs: update zfs readme for existing pools
b86a64b feat: update dependencies
ea43af9 feat: update Go to 1.25.1
ffcd027 chore: redo dependencies as SVG
ef73a85 feat: update dependencies
2273c9b release(v1.12.0-alpha.0): prepare release
8976af3 fix: nvidia-container-toolkit: use SHA512 from a variable for tirpc
5de79a6 feat: update to Linux 6.16 and GCC 15
d6bc2ce docs: fix catalog for qemu-guest-agent
5ccda4b feat: zerotier - add possible custom planet file
df7a67d chore: refactor manifest for talos-vmtoolsd
d7a938f docs: update README.md
263f699 chore: annotate extensions with tiers
59496eb feat: update to Go 1.25 and Linux 6.15
40c7a03 feat: update NVIDIA LTS to series 580
ea0d1a3 feat: update Linux firmware and Intel u-code
1b1d883 chore: update nfsrahead defaults
ba3c2ac feat: update Go to 1.24.6
7ef078a fix: remove sbom of kernel modules
efcb066 docs: add SBOM for more extensions
b42fa41 feat: update pkgs for containerd 2.1.4
7f8a3a1 feat(ci): add grype scan
35b176d fix: nfsrahead udev rule
b4c2a62 docs: add SBOM for more extensions
bbea573 feat: add thunderbolt udev rule
c66e678 docs: add SBOM for container-runtimes

Changes since v1.12.0-rc.1

4 commits

5572e82 release(v1.12.0): prepare release
538d34d feat: update ZFS to 2.4.0
4f2158c feat: bump dependencies
7ce4fe7 feat: sync pkgs

Changes from siderolabs/pkgs

78 commits

e0b78b8 feat: update OpenZFS to 2.4.0
829f7d1 feat: enable CONFIG_MISC_RP1 in ARM64 config
4520007 feat: update Linux to 6.18.1
b6018f7 feat: enable Powercap and Intel RAPL
25f8db7 fix: add json support to nftables binary
8b594c4 fix: drop containerd cgroups patch
f2d2e28 feat: update containerd to v2.1.6
34f3186 feat: add mstflint module
366370a feat: update ZFS to 2.4.0-rc5
5cdd862 feat: update CNI plugins to v1.9.0
96634c7 feat: enable amd sev-snp
1fc8435 fix: patch containerd 2.1.5 with cgroups fix patch
9377282 feat: update Linux to 6.18
9622280 feat: enable Amlogic Meson PCIe controller driver
2e8a32f feat: enable Intel GPIO/Pinctrl kernel modules
084abe6 feat: update NVIDIA LTS to 580.105.08
bc9a949 feat: update runc to 1.3.4
cd63cf9 fix: regenerate configs
ce742ba fix: add missing kernel config entries
ac40721 chore: update dependencies
e653477 feat: enable gpio-fan module
60c9013 chore: use ubuntu mirrors
6ad371f feat: update dependencies
22a9943 feat: update dependencies
1768ccf feat: enable VDPA settings
3913216 feat: enable USERFAULTFD in the kernel
4ae050a feat: update Go to 1.25.4
0abcf01 feat: update containerd to 2.1.5
70404aa feat: bump dependencies
f70250f feat: add nvidia gdrcopy gdrdrv kernel module
a7d7c1a feat: enable CONFIG_PCI_P2PDMA for GPUDirect RDMA
da97c36 feat: update linux-firmware
6d58d7f feat: bump deps
b535af8 feat: update dependencies
a098092 feat: update Linux to 6.17.3, tt-kmd to 2.4.1
661e578 feat: add xe extension
8ddac2d feat: bump go
332303e fix: rollback libseccomp version
f62ebca chore: update dependencies
56f8ae3 feat: update Linux to 6.17.1, NVIDIA LTS to 580.95.05
20b1849 fix: revert "feat" support adding extra trusted certificates in the kernel"
1e3d375 feat: bump go
ddfd7af feat: bump dependencies
4dc7709 feat: update runc to 1.3.2
61d8b44 chore: fix renovate config for urcu & hailort
5bda512 feat: upgrade Linux to 6.17
202a8e6 feat: update Linux to 6.16.9
3a0900f feat: enable SRv6 LWTUNNEL and BPF support
628efc8 chore: update linuxfirmware and rekres
9d1fb02 feat: support adding extra trusted certificates in the kernel
7fe686d fix: build nftables with embedded gmp
fede0a7 feat: add nft binary
0dae01a feat: update NVIDIA to 580.82.07
9ac2392 feat: enable Kernel config options for IPVS Maglev hashing scheduler support
3c5315c feat: update dependencies
122fa66 feat: update Linux to 6.16.6
ab1e866 feat: update Go to 1.25.1
7d6ef1b feat: update runc to 1.3.1
e067c20 feat: enable USB audio support
c4faa38 feat: bump dependencies
453cdfc feat: enable ublk support
9824684 fix: enable memcg v1
2447e11 feat: update Linux to 6.16, GCC to 15
2cfb920 feat: update Linux to 6.15.11, update tools, rekres
ab4e975 feat: update Linux to 6.12.43
cd67e36 chore: update kernel config to support max SMP CPUs
e3b2094 fix: fix build for new NVIDIA drivers
fd5fdfd feat: update Nvidia LTS to 580.65.06 and production to 570.172.08
0edf426 fix: backport CVE kernel patches to 6.12
26d8fef feat: enable Infiniband IRDMA support
16b5fac fix: re-enable CPUSETS_V1 cgroups controller
fd53886 feat: update backportable dependencies
d5f7467 feat: update Go to 1.24.6
0bd019f feat: update containerd to 2.1.4
0ba8b5b feat: enable F71808E watchdog driver
895a86b fix: enable ISCSI IBFT
a76a67c feat: update Linux to 6.12.40
8b0a561 feat: enable bootloader control on amd64

Changes from siderolabs/tools

22 commits

7d57df0 feat: update Go to 1.25.5
188885e feat: update dependencies
b82e375 feat: update dependencies
44932c0 feat: update Go to 1.25.4
b39bb09 feat: update dependencies
a08cc1f feat: update git to 2.51.1
e62d613 feat: bump go
916b464 fix: add pkgconf for ncurses, fix Renovate configs, bump deps
11f0337 feat: update Go
2c56d7a feat: update OpenSSL to 3.5.4
8f27cfa feat: update dependencies
1c1420e feat: add tinfo to ncurses
7c7328b fix: set regex in renovate config directly
3ab353b fix: modify renovate regex on ca_certificates
4f90801 chore: update openssl, curl, libexpat and rekres
c37ac80 feat: update Go to 1.25.1
7c659e9 feat: update to GCC 15
83fd7b7 feat: migrate from pkg-config to pkgconf
edafd5f feat: update toolchain for new Go and Linux headers
65789c7 chore: drop unused vars from Pkgfile
52db66e chore: drop protobuf-related stuff from tools
e3c3ef2 feat: update Go to 1.24.6

Dependency Changes

github.com/siderolabs/pkgs v1.11.0-15-g2ac857a -> v1.12.0-23-ge0b78b8
github.com/siderolabs/tools v1.11.0-2-g8556c73 -> v1.12.0-2-g7d57df0

Previous release can be found at v1.11.0