siderolabs/extensions v1.14.0 on GitHub

Talos System Extensions 1.14.0 (2026-09-03)

Welcome to the v1.14.0 release of Talos System Extensions!

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

cachefilesd

The cachefilesd extension has been added to provide support for the cachefilesd daemon, which is used to cache files from a network filesystem (NFS) on a local disk.
This can improve performance and reduce network load for frequently accessed files.

Kata Containers

Kata Containers now has support for the kata-qemu runtime handler which uses QEMU instead of Cloud Hypervisor for virtualization.

The new extension kata-containers-snp provides additional support for AMD SEV-SNP confidential VMs.

The new extension kata-containers-nvidia-gpu-snp adds NVIDIA GPU VFIO passthrough into SEV-SNP confidential VMs (the GPU driver runs inside the encrypted guest).

Component Updates

ctr: 2.3.4
cloudflared: 2026.7.3
px-fuse: 8b52ef67d261369cbc93f132db299e5dcf64ad7c-VERSION
util-linux: 2.42.2
tenstorrent: 2.10.0
NVIDIA LTS: 580.178.04
NVIDIA Production: 595.91.07
NVIDIA Container Toolkit: 1.19.1
DRBD: 9.3.3
Amazon ENA: 2.17.2
xdma-driver: 8721136
crun: 1.29
gvisor: 20260810.0
kata-containers: 3.32.0
spin: 0.25.1
netbird: 0.76.3
newt: 1.15.0
mdadm: 4.6
qemu-guest-agent: 11.1.0
hyperv-guest-agent: 6.18.44
ZFS: 2.4.4
linux-firmware: 20260810
intel-ucode: 20260812
cloud-provider-aws: v1.36.1
lldpd: 1.0.22
tailscale: 1.102.2
zerotier: 1.16.2
soci-snapshotter: v0.15.0
wasmedge: 0.6.1
hailort: 4.24.0
youki: 0.7.0
nebula: 1.11.0
vmtoolsd: 1.5.1

Contributors

Andrey Smirnov
Noel Georgi
Maja Bojarska
Mateusz Urbanek
Lukasz Raczylo
Ansgar Dahlen
Calin Stefan
Christian A. Jacobsen
Edward Sammut Alessi
Rokoucha
imusmanmalik
Albert
Bernard Gütermann
Calin
Christopher Barnes
Daniil Kivenko
Dario Emerson
David Donchez
Devin Buhl
Dmitrii Sharshakov
Evan Champion
Galen Abell
Max Makarov
OrbisAI Security
Ryan VanGundy
Utku Ozdemir
Vassil Iordanov
YANG JOO WOONG
appkins
ctr49
sam

Changes

98 commits

d605a04 release(v1.14.0): prepare release
d97befa fix: avoid virtqemud reconnect deadlock
6b0abcf feat: add libvirtd
8708c32 fix: nvidia vulkan paths
c0ae6df fix: wait for multipath configuration
c590278 fix: update multipath-tools to 0.14.3
e21701a feat: add kata-containers-nvidia-gpu-snp extension
70314cf fix: update CRI configs for version 4
551ea6b feat: update tools/pkgs
ee29ccc release(v1.14.0-rc.2): prepare release
df138a8 feat: bring go 1.26.7
14871ba feat: update OpenZFS to 2.4.4
933419f feat: sync pkgs with talos
771fb5d fix: drop multipath dependency on cri
2fdb936 feat: add cachefilesd extension
5732907 release(v1.14.0-rc.1): prepare release
076693f chore: backport go 1.26.6
b8b667c release(v1.14.0-rc.0): prepare release
6546099 chore: bump dependencies 2026-08-13
70aae4e chore: disable qemu
b08df37 feat: update Linux firmware to 20260810
9f8631a feat: update Intel ucode to 20260811
12c4033 fix: preserve open-iscsi node record compatibility
3006772 feat: update backportable dependencies
c593bcc feat: add hypervisor qemu
9a91c40 feat: support overriding gnu mirror source
a4877e6 release(v1.14.0-beta.1): prepare release
dd4b1ac feat: sync pkgs with talos
a0f96c5 feat: sync pkgs/tools
5db41de release(v1.14.0-beta.0): prepare release
62b6bdd chore: sync pkgs with Talos main
99ddb4f feat: add kata-containers-snp extension
c8d5b9d feat: update backportable dependencies
85e5dca feat(kata-containers): add QEMU hypervisor handler
e6871ac feat: pull in new pkgs/tools
6e17607 chore: bump metal-agent version to v0.1.6
16f9f3d feat: update dependencies
fd0eddd chore: bump tools, pkgs, and components
1959ffb feat: update DRBD to 9.3.3
5817a73 feat: add hyperv-guest-agent extension
0a3a577 docs: document how to build a single extensions and a catalog (#1127)
f1889ed chore: make mdadm package no-op
685e166 feat: update Linux firmware to 20260622
824211c feat: update dependencies
ed27dab feat: sync pkgs and tools
31ac838 release(v1.14.0-alpha.2): prepare release
9882a33 chore: sync pkgs/tools
aea2cef chore: bump containerd to 2.3.2
5bf06ba chore: update pkgs (2026-06-18)
f5c6faa chore: update zfs and nvidia
9d97e46 chore: update deps 2026-06-16
1b7063c fix: bound zpool export at shutdown with a configurable timeout
87d1abc chore: run rekres and bump deps
55c738c feat: bump dependencies
7266883 feat: update pkgs and tools
599a483 release(v1.14.0-alpha.1): prepare release
f7d9773 chore: sync pkgs/tools to match Talos main
8ee3fc5 feat: add harbor-credential-provider extension
e25da7f chore: update tools, pkgs, extensions
0b765a1 fix: drop phonet module
126ef5d fix: nvme-cli install path
0d2ef77 docs: add a note on rpcbind listening on all interfaces
e67c9ea feat: update ZFS & NVIDIA LTS
1b6d4d3 feat: update intel ucode to 20260512
e045f20 chore: small cleanups
93e1668 fix: add missing ldconfig step fabricmanager production
6bcd249 fix: nvidia-fabricmanager missing libz dependency
2d752ea feat: update Go to 1.26.3
a2632a3 feat: add btrfsprogs (userspace tools) to btrfs extensions
4cc7808 feat: bump dependencies
d57047e feat: allow bird to start in maintenance mode
f599887 feat: sync pkgs/tools
2a533b1 feat: update DRBD to 9.3.2
582f9a8 feat: update NVIDIA drivers
3698471 fix: install iptables correctly into tailscale extension
dade5d9 feat: promote multitpath-tools to extra, bump version
d64b3c1 release(v1.14.0-alpha.0): prepare release
7aabff3 chore: update tools and pkgs version
74431c0 chore: bump metal-agent to 0.1.5
fe0a99c chore: rekres
2f45d7c docs: fix setup key variable name in README
66f49bb chore: sync pkgs & tools
7871fc2 fix: grype scans
07b4337 fix: enable for real joydev & uinput extensions
c5ef7eb feat: add uhid and joydev extensions
3670607 feat: update pkgs to pull in Linux firmware 20260410
26dae82 feat(ci): add extensions duplicate finder
a9a1e7d chore: update dependencies
f525338 chore: rekres
fdd0258 feat: nvidia extension rework
5a0db53 feat: allow more nvidia and nvme files from extensions
77208fd feat: allow glibc ld files in etc
ddd4720 feat: reenable netbird
62d2176 fix: netbird config to a persistent location
5aeaf4e fix: export zpools on zfs shutdown
b28a70d fix: disable NVIDIA GPU check while building the driver
faa5ccd feat: update musl to 1.2.6
a6b6bb9 feat: update NVIDIA production to 595.58.03

Changes since v1.14.0-rc.2

9 commits

d605a04 release(v1.14.0): prepare release
d97befa fix: avoid virtqemud reconnect deadlock
6b0abcf feat: add libvirtd
8708c32 fix: nvidia vulkan paths
c0ae6df fix: wait for multipath configuration
c590278 fix: update multipath-tools to 0.14.3
e21701a feat: add kata-containers-nvidia-gpu-snp extension
70314cf fix: update CRI configs for version 4
551ea6b feat: update tools/pkgs

Changes from siderolabs/pkgs

150 commits

2f03590 chore: update tools
2638a41 fix: preserve symlinks for libudev
d72f498 feat: update kernel to 6.18.48
3a3fc4d feat: bump kernel to 6.18.47
8a1612e feat: expose more software as pkgs
13c7afc chore: update OpenZFS to 2.4.4
7cf25e7 feat: bump kernel to 6.18.46
84c1b87 feat: backport aes256k support (Ceph)
9e069b7 feat: enable SPD5118 sensor driver
fe419a4 feat: enable IPSec offload and dma-buf heaps
02ae809 feat: update Linux to 6.18.45
2b995f1 feat(kernel): enable CONFIG_MLX5_VFIO_PCI
fc35614 feat: update containerd to 2.3.4
e708524 feat: update toolchain/tools
effed43 chore: bump tools and toolchain
fd81ac7 chore: bump qemu to 11.1.0
7cf62fb chore: bump pxe_fuse_ref to 3b3f794
797450a chore: bump ipxe_ref to e6d0a97c
de9b576 chore: rekres
74b0cb6 chore: bump deps 2026-08-12
bcdabd9 feat: update Linux firmware to 20260810
7d8b87b chore: dependency updates 2026-08-10
0cc868b feat(kernel): enable CONFIG_FS_ENCRYPTION
e5b0a80 feat: bump kernel to 6.18.44
6f77a30 feat: enable CONFIG_FSCACHE and CONFIG_NFS_FSCACHE
b0a7e99 feat: bump kernel to 6.18.43
f489e70 feat: update backportable dependencies
4c14c73 feat: support confiuring gnu mirror urls
445e180 fix: iptables with Cilium
b256af1 chore: update kernel
1181429 fix: backport macb IEEE 802.3az EEE support for Raspberry Pi 5 RP1
aa8d7d6 feat: bump kernel to 6.18.41
b253464 feat: enable PCF8523 RTC support for arm64
0383b09 feat: bump kernel to 6.18.40
37184f0 feat: enable CONFIG_NFT_SOCKET in the kernel
f78e3dc feat: update cryptsetup to 2.8.7
8c5831c feat: update dependencies
0de2a61 feat: update Linux to 6.18.39
c652074 feat: enable UFSHC and some other options
c4b550c feat: bump dependencies
de07964 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
6a9c40c chore: bump tools 2026-07-14
61e3ed9 chore: bump bldr to v0.6.1
981029e chore: bump nvidia to 580.167.08
ff9a355 chore: bump deps (minor)
0b2474e chore: bump deps (patch)
94a16ef chore: bump toolchain
6dcf355 feat: enable devmapper plugin in containerd build
03534a5 fix: enable CONFIG_IFB as a module
a264237 feat: update DRBD to 9.3.3
3f09c0c chore: update toolchain and tools
6c08c46 feat: bump kernel to 6.18.38
7c4fe92 feat: build runs with libpathrs (only amd64)
8922b6d fix: correct finalize destination path
ae0d701 fix: use non-conflicting name for mdadm
5186a65 feat: add mdadm package for software RAID
e09f9fb feat: bump kernel 6.18.37
8d23631 feat: update Linux firmware to 20260622
0343557 feat: update runc to 1.5.0
55d3676 feat: bump dependencies
ea48e8b fix: patch Linux kernel for tunnel metadata buffer overflow
ff80d88 feat: add support for AMD XGBE driver
9f8ab22 feat: enable NF_TABLES_ARP option
bedfbeb feat: update Linux to 6.18.36
a9f2bb3 chore: bump containerd to 2.3.2
73e76f8 chore: upgrade runc to 1.5.0-rc.3
28db1ca chore: update nvidia driver lts to 580.167.08
5df1a44 chore: update zfs to 2.4.3
cd77c4f chore: update dependencies 2026-06-16
0f27ecc feat: bump runc
d213ff5 feat: bump OpenSSL to 3.6.3
cb713ae feat: bump kernel to 6.18.35
09cb04e fix: avoid page_table_check BUG on time namespace VVAR page
bfb88f6 feat: add nvidia-fs kernel module
f2850d1 feat: enable USB hiddev for apcupsd support
55aa64f feat: bump go to 1.26.4
f27dbe1 feat: bump kernel to 6.18.34
aa9fe00 feat: add DVB USB Modules
0870a4b feat: bump dependencies
f9134e5 fix: enable CONFIG_BCM2712_MIP as built-in in arm64 kernel config
285c6ae fix: set usermode static helper to machine
bd2a754 feat: pre-generate drbd patches using spatch out of tree
898844e feat: update Linux to 6.18.33
a8dfbf7 fix: disable kernel modprobe path
c542950 fix: pull in tools with zstd sbom
c0ec8f3 feat: enable PPP and INFINIBAND_BNXT_RE
c62c4e1 feat: update containerd to 2.3.1
270f9f8 chore: update deps
4f7feb4 feat: enable more options for CRI-U checkpoint/restore
87994f7 feat: move autoloadable stuff as modules
80c27f3 fix: drop legacy network protocols
fbb7360 feat: drop legacy iptables/ebtables support
eac5f86 feat: bump kernel 6.18.32
d616f6c feat: update Linux to 6.18.31
02bcfce fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
12ca698 feat: update ZFS & NVIDIA LTS
9fff943 feat: update Linux to 6.18.30
c5a1685 feat: move HWMON as modules
b2a45fb feat: move CONFIG_INTEL_IOATDMA as a module
ea8d35f feat: move ACPI device drivers as modules
501ba58 feat: move HID quirks as modules
b35312c feat: move PS/2 mouse drivers as modules
3a5d9d7 feat: move IPMI driver to be a module
792a69a feat: disable AGP drivers
99990b4 feat: move Hyper-V drivers as modules
fb697d6 feat: move Xen frontend drivers as modules
1df1713 feat: move ATA / MMC controllers as modules
f7f9341 feat: move USB class drivers as modules
ba873e9 feat: move USB host controllers as modules
8f25baa feat: move virtio bus stuff as modules
d0c5480 feat: bump kernel to 6.18.29
dfb09f0 feat: bump kernel 6.18.28
c97bc24 feat: update Go to 1.26.3
dfe8926 feat: add btrfsprogs
06ff9dc feat: update Linux to 6.18.27
2265fc9 feat(kernel): backport two PCI bridge realloc fixes from v6.19
5a21d99 feat: bump dependencies
cb3f406 feat: update containerd to 2.3.0
e192574 feat: update Linux to 6.18.26
e5e6cb8 feat: update DRBD to 9.3.2
77538b1 feat: update NVIDIA drivers
adeaafc feat: preserve System.map on kernel builds
c77f985 fix: disable legacy framebuffer drivers
8f3ef77 fix: enable safesetid LSM
f82d3af fix: disable CONFIG_DEVPORT
b189a96 fix: disable crypto user API
9a718f6 docs: list net macb silent TX stall fixes in kernel/build/patches/README.md
ca3599f fix: macb silent TX stall on BCM2712/RP1 (RFC patches from netdev)
6a53a93 feat: bump kernel to 6.18.25
f567bce feat: disable more stuff in Kconfig
ffd9790 feat: bump kernel to 6.18.24
b7c709a feat: bump deps
e5e5b3c feat: update Linux to 6.18.23
1a4cd20 fix: renovate config
d0ed6ed feat: update dependencies
6ea49c7 fix: support disabling module signature verification
6520ec4 feat: update containerd to 2.2.3
37ce992 feat: enable CONFIG_UHID and CONFIG_INPUT_JOYDEV as modules
cddd934 feat: update backportable dependencies
32e4077 feat: update OpenSSL
2d241e7 feat: update Go to 1.26.2 and small deps updates
7f540ce feat: disable dynamic SCS
3bef043 feat: update runc to 1.4.2
c6e6f10 feat: update Linux to 6.18.21
a9e8afa fix: libarchive install prefix
e4d0113 feat: update for musl 1.2.6
9142603 feat: update NVIDIA production to 595.58.03
22fa669 feat: update Linux to 6.18.19
03680ae feat: update containerd patch verifier role
bdc239e feat: enable CHECKPOINT_RESTORE option

Changes from siderolabs/tools

39 commits

87316ca fix: update OpenSSL to 3.6.4
2c8cf5a feat: move more packages into separate images
c1145d3 feat: update Go to 1.26.7
83caedf chore: update bldr (v0.6.2), rekres
c2fcfb2 chore: bump toolchain to bring in Go 1.26.6
dcf177c chore: update deps 2026-08-12
7c77e8c chore: update toolchain to v1.14.0
cf1a7ae chore: update perl to 5.44.0
89e4a00 chore: dependency updates 2026-08-10
80fd6eb feat: add python pyyaml tools
c59cce5 feat: enable static libs for pcre2
da6e92a feat: use kernel gnu mirrors
08071b1 feat: update dependencies
2723c06 chore: bump pkgfile bldr to v0.6.1
d333b32 chore: bump toolchain to latest
c7494c6 chore: deps 2026-07-13 (major bumps only)
57a0183 chore: deps 2026-07-13 (minor bumps only)
21db13e chore: deps 2026-07-13 (patch only)
7079a8a chore: bump toolchain
5326524 feat: build LLVM as cross-compiling
878f1db feat: bump dependencies
0f1c859 chore: make rekres
5c0c9be chore: update dependencies 2026-06-16
b88d99c feat: bump OpenSSL to 3.6.3
42c59b9 feat: bump toolchain to bring in Go 1.26.4
206a4c0 feat: update dependencies, rework LLVM build
f9f37df fix: add proper name for zlib-ng sbom
aa45c41 fix: add SBOM for zstd library
808f34f feat: update Go to 1.26.3
5dfe83d feat: drop fakeroot and policycoreutils
618fd20 feat: add Python wheel package
df3c1b7 feat: bump dependencies
44ad18c feat: bump deps
f3d0dd9 fix: renovate configs
4ac4449 feat: update dependencies
027744f feat: bump OpenSSL to 3.6.2
7067f1f feat: update util-linux to 2.41.4
6cb3e56 feat: update Go to 1.26.2
9186c5f feat: update musl to 1.2.6

Dependency Changes

github.com/siderolabs/pkgs v1.13.0 -> v1.14.0-15-g2f03590
github.com/siderolabs/tools v1.13.0 -> v1.14.0-5-g87316ca

Previous release can be found at v1.13.0