github siderolabs/extensions v1.13.0

13 hours ago

Talos System Extensions 1.13.0 (2026-04-27)

Welcome to the v1.13.0 release of Talos System Extensions!

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Component Updates

bird2: 2.18
crun: 1.27
ctr: 2.2.2
glibc: 2.43
ecr-credential-provider: 1.35.1
netbird: 0.67.4
newt: 1.11.0
fuse3: 3.18.2
qemu-guest-agent: 10.2.2
Linux Firmware: 20260410
NVIDIA LTS: 580.126.20
NVIDIA Production: 595.58.03
nvidia-container-toolkit: v1.19.0
DRBD: 9.3.1
gvisor: 20260406.0
Kata containers: 3.28.0
stargz-snapshotter: 0.18.2
cloudflared: 2026.3.0
nebula: 1.10.3
tailscale: 1.96.4
vmtoolsd-guest-agent: 1.5.0
metal-agent: 0.1.4
wolfi-base: 2a43204178a08b8c7f5e881c550bb52733364beff904ed36eeabe33cc656c749
spin: 0.23.0
youki: 0.6.0
Intel ucode: 20260227
ZFS: 2.4.1
lldpd: 1.0.21
px-fuse: 4b7ade7d7a4afe10b87ff7a16a59e9d1e3fae68f
gdrcopy: v2.5.2
soci-snapshotter: v0.13.0
nut: 2.8.5

Contributors

  • Andrey Smirnov
  • Noel Georgi
  • Mateusz Urbanek
  • Dmitrii Sharshakov
  • Andreas Lüdeke
  • Ansgar Dahlen
  • Jean-Francois Roy
  • Max Makarov
  • Michal Baumgartner
  • Serge van Ginderachter
  • Thibault VINCENT
  • lmacka
  • sam
  • Andras BALI
  • Andreas Freund
  • Birger Johan Nordølum
  • Camillo Rossi
  • Camillo Rossi
  • Fritz Schaal
  • Galen Abell
  • Gregor Gruener
  • Jaakko Sirén
  • Jan Untersander
  • Joakim Nohlgård
  • Jonathan Senecal
  • Jorik Jonker
  • Justin Garrison
  • Kai Zhang
  • Matthias Riegler
  • Nico Berlee
  • Utku Ozdemir
  • Vassil Iordanov
  • Zadkiel AHARONIAN
  • arita
  • eseiker
  • pranav767

Changes

89 commits

  • a4ec7bb release(v1.13.0): prepare release
  • 96d0e12 docs: fix setup key variable name in README
  • 2197ff8 feat: sync pkgs/tools
  • 5a70247 release(v1.13.0-rc.0): prepare release
  • a43e024 fix: enable for real joydev & uinput extensions
  • 3cbbbf0 fix: netbird config to a persistent location
  • 123b6e5 feat: add uhid and joydev extensions
  • ea1ee6f feat: update pkgs to pull in Linux firmware 20260410
  • cc7899a feat(ci): add extensions duplicate finder
  • 8b18e43 chore: update dependencies
  • d89996d chore: rekres
  • 76ea5dc feat: nvidia extension rework
  • 71db87b feat: allow more nvidia and nvme files from extensions
  • ad1c70a feat: allow glibc ld files in etc
  • f89b232 fix: export zpools on zfs shutdown
  • 72acf39 feat: reenable netbird
  • b7885db release(v1.13.0-beta.1): prepare release
  • 858961d feat: update musl to 1.2.6
  • 63d5a47 fix: disable NVIDIA GPU check while building the driver
  • 3fc1ead feat: update NVIDIA production to 595.58.03
  • dcef57f release(v1.13.0-beta.0): prepare release
  • 20f2cac fix: rework image digests one more time
  • 4328287 fix: calculate correctly image digests for the catalog
  • 03ed43c chore: update pkgs and tools
  • 279ee3a feat: bump deps
  • e4afe22 fix: iscsi-tools and multipath-tools
  • a22602f feat: update pkgs with containerd 2.2.2
  • 2644125 chore: sync pkgs and tools
  • 59dbb65 fix: nvidia production pkg firmware path
  • c5480f9 feat(nvidia): switch to CDI
  • 74580ee feat: update dependencies
  • d347c27 feat: update Go to 1.26.1
  • 5eb92a9 feat: add ipheth to usb-modem-drivers extension
  • c538dab release(v1.13.0-alpha.2): prepare release
  • 8b3058b chore: update deps
  • 42cc888 feat: update Linux firmware to 20260221
  • c2bff8e fix: iscsi and rpcbind extensions
  • 95fe5cb fix: iscsi extension
  • 8f958d7 feat: add intel-npu extension for IVPU module and firmware
  • b8da034 fix: iscsi extension
  • b626ae0 feat: bring in go1.26
  • fb4eb04 feat: consolidate extension services
  • 7ea3858 feat: update extensions versions for pkgs deps
  • d2960cd feat: update Intel ucode to 20260210
  • 4299bc8 feat: update backportable dependencies
  • 49bf5e4 feat: update NVIDIA LTS to 580.126.16
  • bdbd278 feat: update bird2 to 2.18
  • 4e7d253 feat: update glibc to 2.43
  • 26b0843 feat: support SOCI snapshotter's lazy loading mode
  • 604909b chore: update deps
  • 8fb14b3 release(v1.13.0-alpha.1): prepare release
  • 958d56f chore: update image signer
  • f864275 chore: bump metal-agent version to v0.1.4
  • b0c7205 chore: update backportable dependencies
  • 7150cfe chore: update deps
  • efec352 feat: update OpenSSL to 3.6.1
  • 4a2d41f fix(multipath-tools): add /run/udev mount for device enumeration
  • 6daf50e feat: add px-fuse module
  • 9f47510 feat: update dependencies
  • 0efc69a feat: update pkgs for DRBD 9.3.0
  • ce115f0 chore: update Go to 1.12.6
  • 5b356b5 feat: bump NVIDIA production/LTS drivers
  • a265b08 feat: update Linux firmware to 20260110
  • 9f80dff feat: add RKNN Extension
  • 46978a1 release(v1.13.0-alpha.0): prepare release
  • 578af7d chore: update tools and pkgs
  • 37abf04 feat: update dependencies
  • 6905e85 feat: update ZFS to 2.4.0
  • daa3308 feat: bump dependencies
  • b08fffb chore: update pkgs and rekres
  • 0ee08dd feat: mellanox-msflint extension
  • 9d2dec3 feat: update ZFS to 2.4.0-rc5
  • 491a383 feat: add bird2 system-extension
  • bb8ee5b docs: fix environment variable name for netbird
  • 3f532ce fix: add mc.ko to usb-audio-drivers
  • 96c61c3 fix(nvidia-fabricmanager): memory leak in wrapper
  • 162401e feat: update for Linux 6.18
  • 1db4912 feat: add gpio-pinctrl extension for Intel Apollo Lake platforms
  • f86b2e1 feat: update NVIDIA LTS to 580.105.08
  • 138eefb chore: update ctr version to 2.2.0
  • 394768f chore: update to 1.13 tags
  • 6070d96 fix: update pkgs version and rekres
  • b6327c5 fix: remove tar file
  • 7973fa9 feat: add multipath-tools and trident-iscsi-tools
  • ac40996 chore: update dependencies
  • 6f10745 chore: update backportable dependencies
  • edbd5ae fix: nvidia persistenced on arm64
  • a979d09 fix(nvidia-fabricmanager): ignore interfaces with isSMDisabled flag set
  • 2f503ed fix: soci snapshotter build

Changes since v1.13.0-rc.0

3 commits

  • a4ec7bb release(v1.13.0): prepare release
  • 96d0e12 docs: fix setup key variable name in README
  • 2197ff8 feat: sync pkgs/tools

Changes from siderolabs/pkgs

103 commits

  • f3829f7 feat: bump kernel to 6.18.24
  • 3f77148 feat: update Linux to 6.18.23
  • 9243d0d feat: update tools/toolchain to 1.13.0
  • b121566 fix: support disabling module signature verification
  • a02d120 feat: update containerd to 2.2.3
  • a65a3e3 feat: enable CONFIG_UHID and CONFIG_INPUT_JOYDEV as modules
  • 89776b8 feat: update runc to 1.4.2
  • 9ab4f1b feat: update backportable dependencies
  • 7c122c4 feat: update Go to 1.26.2 and small deps updates
  • ddd56d2 feat: disable dynamic SCS
  • 5d027c4 feat: update Linux to 6.18.21
  • 46c12db fix: libarchive install prefix
  • 142b074 feat: update for musl 1.2.6
  • 4ef2ff4 feat: update NVIDIA production to 595.58.03
  • 1d3bbca feat: update Linux to 6.18.19
  • 0982fac feat: update containerd patch verifier role
  • 6d3cd66 feat: enable CHECKPOINT_RESTORE option
  • 83f5bcd chore: update toolchain and tools
  • 4f784de fix: install apparmor parser require config files
  • 559b1be feat: enable AMD GPU peer-to-peer DMA
  • 77194e4 fix: disable CONFIG_RT_GROUP_SCHED
  • 02ee1e3 feat: backportable deps update
  • 21af1c3 feat: bump deps
  • 6935f6f feat(kernel): enable CONFIG_USB_UHCI_HCD on amd64
  • 2c89e9f feat: update containerd to 2.2.2
  • 866939b feat: update tools with LLVM 22.1
  • 13d00e0 feat: enable dynamic preemption support
  • 7d0cc32 feat: update Linux 6.18.16, NVIDIA, ZFS
  • ef3a7c8 feat: update Go to 1.26.1
  • 8148601 feat: add containerd patch to verify images
  • b7c7ab2 feat: update Linux to 6.18.15
  • 830fbac feat: enable CONFIG_USB_IPHETH kernel module
  • adc1714 feat: update Linux to 6.18.14
  • 3c982f8 chore: update deps
  • d065c59 feat: update Linux firmware to 20260221
  • 773ea3a feat: update Linux to 6.18.13
  • 6ca02b3 fix: make udev rules read only
  • 520141c feat: enable kernel irq time accounting
  • 8f6df51 feat: enable CONFIG_HID_MULTITOUCH
  • 6934b50 feat: add patch for Cilium BPF verifier rejection by the kernel
  • 5760aa7 feat: enable MLX5 Scalable Functions and TC offload in kernel
  • c0c8bc5 feat: enable CONFIG_DRM_ACCEL and IVPU on amd64
  • b9cc39d feat: build kernel with Clang and ThinLTO, update Go to 1.26
  • 3327386 chore: drop mellanox-ofed
  • 9013985 feat: update dependencies
  • 17196f5 feat: update NVIDIA LTS to 580.126.16
  • 8f53ad2 feat: update Linux to 6.18.9
  • eff5ba0 feat: enable ip6_gre
  • 605ac0d chore: update deps
  • 7670ff4 feat: enable NFT_BRIDGE config
  • dc737a6 chore: update kernel
  • 9b118b3 chore: update deps
  • a63c227 feat: update OpenSSL to v3.6.1
  • da7ab57 feat: add px-fuse pkg
  • 553e0fb feat: enable dm-integrity
  • 15a3cdf feat: update Linux to 6.18.6
  • b518a19 feat: update dependencies
  • 1b4fbf5 feat: update GRUB to 2.14
  • 30bc671 fix: enable pinctrl for Raspberry Pi 5
  • 375983f feat: update Go to 1.25.6
  • d445c80 feat: update Linux to 6.18.5
  • 6994400 feat: update NVIDIA LTS and production driver versions
  • 05c3d85 feat: update Linux firmware to 20260110
  • c61b466 feat: enable IT87 hwmon module
  • ae2572e feat: enable IPV6_MROUTE
  • d6b503e feat: add RK3588 NPU Support
  • df4b4c8 feat: bump deps
  • a220898 feat: add libarchive
  • c2371b5 feat: enable ZRAM support
  • ab4d169 feat: add a patch to force uid when populating from a directory
  • 972f44d feat: update dependencies
  • f8eb5b0 feat: update Linux to 6.18.2
  • 3fb6291 feat: update systemd to 259
  • 59241bd fix: add SBOMs for pigz/igzip
  • 9377c78 feat: optimize decompression for containerd
  • e8e61ce feat: update containerd to 2.2.1
  • daa74ba feat: support xfs filesystem reproducibility
  • 1f66513 feat: update OpenZFS to 2.4.0
  • b209af5 chore: rekres with latest changes
  • 2b806b9 feat: bump dependencies
  • 65242fd feat: enable CONFIG_MISC_RP1 in ARM64 config
  • 4daecd8 feat: update Linux to 6.18.1
  • 9868a66 feat: enable Powercap and Intel RAPL
  • 07883ee feat: build and package perf binary
  • 47abca0 fix: add json support to nftables binary
  • b961ff8 feat: patch containerd 2.2.0 with cgroups fix patch
  • b7dd7f6 feat: add mstflint module
  • ae53351 feat: update ZFS to 2.4.0-rc5
  • b8edf01 feat: update CNI plugins to v1.9.0
  • a57c1b0 feat: enable amd sev-snp
  • 68562c1 feat: update Linux to 6.18
  • 6f4ff8c feat: enable Amlogic Meson PCIe controller driver
  • c41127b feat: enable Intel GPIO/Pinctrl kernel modules
  • 4a31ff7 feat: update NVIDIA LTS to 580.105.08
  • 3e858d3 chore: fork pkgs for Talos 1.13
  • dcc5aa1 feat: update runc to 1.3.4
  • 8b6ae5b fix: regenerate configs
  • 2992598 fix: add missing kernel config entries
  • c8ea18a feat: rekres to alow multiple commits
  • 2ddef8b chore: update dependencies
  • d1f28e0 chore: update dependencies
  • ab253f5 feat: enable gpio-fan module
  • 0b10666 chore: use ubuntu mirrors

Changes from siderolabs/tools

25 commits

  • a092a07 chore: update toolchain to 1.13.0
  • c192d81 feat: bump OpenSSL to 3.6.2
  • 85db03f feat: update util-linux to 2.41.4
  • 136f1de feat: update musl to 1.2.6
  • 6d7a2e4 chore: update toolchain
  • 5c753fc feat: bump deps
  • 4075c05 feat: update LLVM to 22
  • f175a91 feat: update Go to 1.26.1 and other bumps
  • 9de9770 feat: update to Go 1.26
  • bd4ae8f feat: add LLVM+Clang+LLD toolchain
  • 90bd70c feat: update dependencies
  • decb988 chore: update deps
  • ca26e1c chore: update deps
  • 0281af0 feat: update OpenSSL to 3.6.1
  • 721ad07 feat: update dependencies
  • 2b3f514 fix: reproducible build for nasm
  • 98c699e feat: update Go to 1.25.6
  • cd5eb66 chore: run rekres and update dependencies
  • 896f8b9 fix: add sbom for zlib-ng
  • 543a16f feat: replace zlib -> zlib-ng, add nasm
  • b67c1a1 chore: rekres with latest changes
  • 5e087cb feat: bump dependencies
  • da96a27 chore: rekres to fix reproducibility
  • e283ec8 feat: update Go to 1.25.5
  • c38ff0c chore: update to 1.13.0-alpha.0 toolchain

Dependency Changes

  • github.com/siderolabs/pkgs v1.12.0-23-ge0b78b8 -> v1.13.0
  • github.com/siderolabs/tools v1.12.0-2-g7d57df0 -> v1.13.0

Previous release can be found at v1.12.0

Don't miss a new extensions release

NewReleases is sending notifications on new releases.