siderolabs/extensions v1.14.0-beta.0 on GitHub

Talos System Extensions 1.14.0-beta.0 (2026-07-23)

Welcome to the v1.14.0-beta.0 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Kata Containers

Kata Containers now has support for the kata-qemu runtime handler which uses QEMU instead of Cloud Hypervisor for virtualization.

The new extension kata-container-snp provides additional support for AMD SEV-SNP confidential VMs.

Component Updates

ctr: 2.3.3
cloudflared: 2026.7.2
px-fuse: 8b52ef67d261369cbc93f132db299e5dcf64ad7c-VERSION
util-linux: 2.42.2
tenstorrent: 2.10.0
NVIDIA LTS: 580.173.02
NVIDIA Production: 595.71.05
NVIDIA Container Toolkit: 1.19.1
DRBD: 9.3.3
Amazon ENA: 2.17.0
xdma-driver: 8721136
crun: 1.28
gvisor: 20260714.0
kata-containers: 3.32.0
spin: 0.25.1
netbird: 0.74.7
newt: 1.15.0
mdadm: 4.6
qemu-guest-agent: 11.0.2
ZFS: 2.4.3
linux-firmware: 20260622
intel-ucode: 20260512
cloud-provider-aws: v1.36.1
lldpd: 1.0.22
tailscale: 1.98.9
zerotier: 1.16.2
soci-snapshotter: v0.14.1
wasmedge: 0.6.1

Contributors

Andrey Smirnov
Noel Georgi
Maja Bojarska
Mateusz Urbanek
Lukasz Raczylo
Ansgar Dahlen
Edward Sammut Alessi
Rokoucha
Albert
Bernard Gütermann
Calin
Calin Stefan
Daniil Kivenko
Dario Emerson
Devin Buhl
Galen Abell
OrbisAI Security
Ryan VanGundy
Utku Ozdemir
Vassil Iordanov
YANG JOO WOONG
appkins
imusmanmalik
sam

Changes

69 commits

5db41de release(v1.14.0-beta.0): prepare release
62b6bdd chore: sync pkgs with Talos main
99ddb4f feat: add kata-containers-snp extension
c8d5b9d feat: update backportable dependencies
85e5dca feat(kata-containers): add QEMU hypervisor handler
e6871ac feat: pull in new pkgs/tools
6e17607 chore: bump metal-agent version to v0.1.6
16f9f3d feat: update dependencies
fd0eddd chore: bump tools, pkgs, and components
1959ffb feat: update DRBD to 9.3.3
5817a73 feat: add hyperv-guest-agent extension
0a3a577 docs: document how to build a single extensions and a catalog (#1127)
f1889ed chore: make mdadm package no-op
685e166 feat: update Linux firmware to 20260622
824211c feat: update dependencies
ed27dab feat: sync pkgs and tools
31ac838 release(v1.14.0-alpha.2): prepare release
9882a33 chore: sync pkgs/tools
aea2cef chore: bump containerd to 2.3.2
5bf06ba chore: update pkgs (2026-06-18)
f5c6faa chore: update zfs and nvidia
9d97e46 chore: update deps 2026-06-16
1b7063c fix: bound zpool export at shutdown with a configurable timeout
87d1abc chore: run rekres and bump deps
55c738c feat: bump dependencies
7266883 feat: update pkgs and tools
599a483 release(v1.14.0-alpha.1): prepare release
f7d9773 chore: sync pkgs/tools to match Talos main
8ee3fc5 feat: add harbor-credential-provider extension
e25da7f chore: update tools, pkgs, extensions
0b765a1 fix: drop phonet module
126ef5d fix: nvme-cli install path
0d2ef77 docs: add a note on rpcbind listening on all interfaces
e67c9ea feat: update ZFS & NVIDIA LTS
1b6d4d3 feat: update intel ucode to 20260512
e045f20 chore: small cleanups
93e1668 fix: add missing ldconfig step fabricmanager production
6bcd249 fix: nvidia-fabricmanager missing libz dependency
2d752ea feat: update Go to 1.26.3
a2632a3 feat: add btrfsprogs (userspace tools) to btrfs extensions
4cc7808 feat: bump dependencies
d57047e feat: allow bird to start in maintenance mode
f599887 feat: sync pkgs/tools
2a533b1 feat: update DRBD to 9.3.2
582f9a8 feat: update NVIDIA drivers
3698471 fix: install iptables correctly into tailscale extension
dade5d9 feat: promote multitpath-tools to extra, bump version
d64b3c1 release(v1.14.0-alpha.0): prepare release
7aabff3 chore: update tools and pkgs version
74431c0 chore: bump metal-agent to 0.1.5
fe0a99c chore: rekres
2f45d7c docs: fix setup key variable name in README
66f49bb chore: sync pkgs & tools
7871fc2 fix: grype scans
07b4337 fix: enable for real joydev & uinput extensions
c5ef7eb feat: add uhid and joydev extensions
3670607 feat: update pkgs to pull in Linux firmware 20260410
26dae82 feat(ci): add extensions duplicate finder
a9a1e7d chore: update dependencies
f525338 chore: rekres
fdd0258 feat: nvidia extension rework
5a0db53 feat: allow more nvidia and nvme files from extensions
77208fd feat: allow glibc ld files in etc
ddd4720 feat: reenable netbird
62d2176 fix: netbird config to a persistent location
5aeaf4e fix: export zpools on zfs shutdown
b28a70d fix: disable NVIDIA GPU check while building the driver
faa5ccd feat: update musl to 1.2.6
a6b6bb9 feat: update NVIDIA production to 595.58.03

Changes since v1.14.0-alpha.2

16 commits

5db41de release(v1.14.0-beta.0): prepare release
62b6bdd chore: sync pkgs with Talos main
99ddb4f feat: add kata-containers-snp extension
c8d5b9d feat: update backportable dependencies
85e5dca feat(kata-containers): add QEMU hypervisor handler
e6871ac feat: pull in new pkgs/tools
6e17607 chore: bump metal-agent version to v0.1.6
16f9f3d feat: update dependencies
fd0eddd chore: bump tools, pkgs, and components
1959ffb feat: update DRBD to 9.3.3
5817a73 feat: add hyperv-guest-agent extension
0a3a577 docs: document how to build a single extensions and a catalog (#1127)
f1889ed chore: make mdadm package no-op
685e166 feat: update Linux firmware to 20260622
824211c feat: update dependencies
ed27dab feat: sync pkgs and tools

Changes from siderolabs/pkgs

115 commits

f78e3dc feat: update cryptsetup to 2.8.7
8c5831c feat: update dependencies
0de2a61 feat: update Linux to 6.18.39
c652074 feat: enable UFSHC and some other options
c4b550c feat: bump dependencies
de07964 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
6a9c40c chore: bump tools 2026-07-14
61e3ed9 chore: bump bldr to v0.6.1
981029e chore: bump nvidia to 580.167.08
ff9a355 chore: bump deps (minor)
0b2474e chore: bump deps (patch)
94a16ef chore: bump toolchain
6dcf355 feat: enable devmapper plugin in containerd build
03534a5 fix: enable CONFIG_IFB as a module
a264237 feat: update DRBD to 9.3.3
3f09c0c chore: update toolchain and tools
6c08c46 feat: bump kernel to 6.18.38
7c4fe92 feat: build runs with libpathrs (only amd64)
8922b6d fix: correct finalize destination path
ae0d701 fix: use non-conflicting name for mdadm
5186a65 feat: add mdadm package for software RAID
e09f9fb feat: bump kernel 6.18.37
8d23631 feat: update Linux firmware to 20260622
0343557 feat: update runc to 1.5.0
55d3676 feat: bump dependencies
ea48e8b fix: patch Linux kernel for tunnel metadata buffer overflow
ff80d88 feat: add support for AMD XGBE driver
9f8ab22 feat: enable NF_TABLES_ARP option
bedfbeb feat: update Linux to 6.18.36
a9f2bb3 chore: bump containerd to 2.3.2
73e76f8 chore: upgrade runc to 1.5.0-rc.3
28db1ca chore: update nvidia driver lts to 580.167.08
5df1a44 chore: update zfs to 2.4.3
cd77c4f chore: update dependencies 2026-06-16
0f27ecc feat: bump runc
d213ff5 feat: bump OpenSSL to 3.6.3
cb713ae feat: bump kernel to 6.18.35
09cb04e fix: avoid page_table_check BUG on time namespace VVAR page
bfb88f6 feat: add nvidia-fs kernel module
f2850d1 feat: enable USB hiddev for apcupsd support
55aa64f feat: bump go to 1.26.4
f27dbe1 feat: bump kernel to 6.18.34
aa9fe00 feat: add DVB USB Modules
0870a4b feat: bump dependencies
f9134e5 fix: enable CONFIG_BCM2712_MIP as built-in in arm64 kernel config
285c6ae fix: set usermode static helper to machine
bd2a754 feat: pre-generate drbd patches using spatch out of tree
898844e feat: update Linux to 6.18.33
a8dfbf7 fix: disable kernel modprobe path
c542950 fix: pull in tools with zstd sbom
c0ec8f3 feat: enable PPP and INFINIBAND_BNXT_RE
c62c4e1 feat: update containerd to 2.3.1
270f9f8 chore: update deps
4f7feb4 feat: enable more options for CRI-U checkpoint/restore
87994f7 feat: move autoloadable stuff as modules
80c27f3 fix: drop legacy network protocols
fbb7360 feat: drop legacy iptables/ebtables support
eac5f86 feat: bump kernel 6.18.32
d616f6c feat: update Linux to 6.18.31
02bcfce fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
12ca698 feat: update ZFS & NVIDIA LTS
9fff943 feat: update Linux to 6.18.30
c5a1685 feat: move HWMON as modules
b2a45fb feat: move CONFIG_INTEL_IOATDMA as a module
ea8d35f feat: move ACPI device drivers as modules
501ba58 feat: move HID quirks as modules
b35312c feat: move PS/2 mouse drivers as modules
3a5d9d7 feat: move IPMI driver to be a module
792a69a feat: disable AGP drivers
99990b4 feat: move Hyper-V drivers as modules
fb697d6 feat: move Xen frontend drivers as modules
1df1713 feat: move ATA / MMC controllers as modules
f7f9341 feat: move USB class drivers as modules
ba873e9 feat: move USB host controllers as modules
8f25baa feat: move virtio bus stuff as modules
d0c5480 feat: bump kernel to 6.18.29
dfb09f0 feat: bump kernel 6.18.28
c97bc24 feat: update Go to 1.26.3
dfe8926 feat: add btrfsprogs
06ff9dc feat: update Linux to 6.18.27
2265fc9 feat(kernel): backport two PCI bridge realloc fixes from v6.19
5a21d99 feat: bump dependencies
cb3f406 feat: update containerd to 2.3.0
e192574 feat: update Linux to 6.18.26
e5e6cb8 feat: update DRBD to 9.3.2
77538b1 feat: update NVIDIA drivers
adeaafc feat: preserve System.map on kernel builds
c77f985 fix: disable legacy framebuffer drivers
8f3ef77 fix: enable safesetid LSM
f82d3af fix: disable CONFIG_DEVPORT
b189a96 fix: disable crypto user API
9a718f6 docs: list net macb silent TX stall fixes in kernel/build/patches/README.md
ca3599f fix: macb silent TX stall on BCM2712/RP1 (RFC patches from netdev)
6a53a93 feat: bump kernel to 6.18.25
f567bce feat: disable more stuff in Kconfig
ffd9790 feat: bump kernel to 6.18.24
b7c709a feat: bump deps
e5e5b3c feat: update Linux to 6.18.23
1a4cd20 fix: renovate config
d0ed6ed feat: update dependencies
6ea49c7 fix: support disabling module signature verification
6520ec4 feat: update containerd to 2.2.3
37ce992 feat: enable CONFIG_UHID and CONFIG_INPUT_JOYDEV as modules
cddd934 feat: update backportable dependencies
32e4077 feat: update OpenSSL
2d241e7 feat: update Go to 1.26.2 and small deps updates
7f540ce feat: disable dynamic SCS
3bef043 feat: update runc to 1.4.2
c6e6f10 feat: update Linux to 6.18.21
a9e8afa fix: libarchive install prefix
e4d0113 feat: update for musl 1.2.6
9142603 feat: update NVIDIA production to 595.58.03
22fa669 feat: update Linux to 6.18.19
03680ae feat: update containerd patch verifier role
bdc239e feat: enable CHECKPOINT_RESTORE option

Changes from siderolabs/tools

27 commits

08071b1 feat: update dependencies
2723c06 chore: bump pkgfile bldr to v0.6.1
d333b32 chore: bump toolchain to latest
c7494c6 chore: deps 2026-07-13 (major bumps only)
57a0183 chore: deps 2026-07-13 (minor bumps only)
21db13e chore: deps 2026-07-13 (patch only)
7079a8a chore: bump toolchain
5326524 feat: build LLVM as cross-compiling
878f1db feat: bump dependencies
0f1c859 chore: make rekres
5c0c9be chore: update dependencies 2026-06-16
b88d99c feat: bump OpenSSL to 3.6.3
42c59b9 feat: bump toolchain to bring in Go 1.26.4
206a4c0 feat: update dependencies, rework LLVM build
f9f37df fix: add proper name for zlib-ng sbom
aa45c41 fix: add SBOM for zstd library
808f34f feat: update Go to 1.26.3
5dfe83d feat: drop fakeroot and policycoreutils
618fd20 feat: add Python wheel package
df3c1b7 feat: bump dependencies
44ad18c feat: bump deps
f3d0dd9 fix: renovate configs
4ac4449 feat: update dependencies
027744f feat: bump OpenSSL to 3.6.2
7067f1f feat: update util-linux to 2.41.4
6cb3e56 feat: update Go to 1.26.2
9186c5f feat: update musl to 1.2.6

Dependency Changes

github.com/siderolabs/pkgs v1.13.0 -> v1.14.0-alpha.0-113-gf78e3dc
github.com/siderolabs/tools v1.13.0 -> v1.14.0-alpha.0-26-g08071b1

Previous release can be found at v1.13.0