siderolabs/image-factory v0.6.8 on GitHub

image-factory 0.6.8 (2025-03-20)

Welcome to the v0.6.8 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

Andrey Smirnov
Noel Georgi
Dmitriy Matrenichev
Dmitry Sharshakov
Justin Garrison
Mathspy
Nico Berlee
Utku Ozdemir
ihelmer07
459below
Alessio Moiso
Alexis La Goutte
Andrew Longwill
Andrew Symington
Christian Luetke-Stetzkamp
Christoph Hoopmann
Dmitrii Sharshakov
Dominik Masur
Florian Grignon
Ganawa Juanah
Jasmin
Jason Benedicic
Joakim Nohlgård
K Birt
KillianCdP
Louis SCHNEIDER
Luke Milby
Marcel Hamer
Matt Willsher
Mikhail Petrov
Mohammad Amin Mokhtari
Motte
Natalie Romana Albers
OliviaBarrington
Orzelius
PRIHLOP
Ram
Robin Elfrink
Roman Ivanov
Ryan Jacobs
Rémi Paulmier
Sam Stelfox
Serge Logvinov
Sergey Melnik
SpiReCZ
Thomas Gosteli
Tim Olson
Tine Jozelj
TomyLobo
Variant9
bzub
egrosdou01
greenpsi
sflotat2607
sophia-coldren
suse-coder

Changes

28 commits

3e56929 release(v0.6.8): prepare release
1af002d feat: support platform specific installers
e1d19df chore: add more tests for talos 1.10
0ecde68 fix(ci): image push
2460d03 fix(ci): image push
a016223 feat: pull in new Talos machinery
c6e3fa6 release(v0.6.7): prepare release
f896663 feat: update Talos to v1.10.0-alpha.1
0931477 release(v0.6.6): prepare release
b80192a feat: refactor platform metadata
4bb43ef fix: add imgfree to ipxe boot script
d5f3f5a feat: update for Talos 1.10 current
e727003 chore: update go-uefi module
3b302c6 feat: set secure boot support for nocloud platform
a4932a2 chore: reduce memory usage
1729190 chore: support gcr.io keychain for registry auth
1389813 release(v0.6.4): prepare release
b7c7c16 fix: secureboot pxe
67eb663 release(v0.6.3): prepare release
46f4104 feat: update to Talos 1.9.0-beta.1
cbf8cc9 feat: add Turing RK1 as option
d0dcfe5 release(v0.6.2): prepare release
a8cdc21 feat: update dependencies for Talos 1.9
b7f7fd3 chore: add hash errata for tarball headers
370c137 fix: vmware build assets on non-amd64
c102c95 chore: alias i915/amdgpu extensions to new name
b7b4c71 release(v0.6.1): prepare release
96c8455 chore: bump generated data

Changes since v0.6.7

6 commits

3e56929 release(v0.6.8): prepare release
1af002d feat: support platform specific installers
e1d19df chore: add more tests for talos 1.10
0ecde68 fix(ci): image push
2460d03 fix(ci): image push
a016223 feat: pull in new Talos machinery

Changes from siderolabs/gen

1 commit

5ae3afe chore: update hashtriemap implementation from the latest upstream

Changes from siderolabs/go-debug

1 commit

ea108ca chore: add support for Go 1.24

Changes from siderolabs/talos

298 commits

ab6cb3dfa chore: disable azure upload
2355218e4 release(v1.10.0-alpha.2): prepare release
d4e3e957c fix(ci): fix integration tests
1849b5388 feat: update dependencies
88fc6bbeb test: fix UKI preserving talos.config and image cache
ba8cd304d test: enable image-cache in the cron
28b5dc738 test: fix reproduciblity test
50998038b feat: prefer sd-boot for UEFI
e831e52e0 feat: add support for qla2xx
ec5c049a5 feat: update Kubernetes to 1.33.0-alpha.2
ebfa82f35 docs: update deprecated command
d79059a2c chore: fix shutdown typo in shutdown sequence
a3f88d2ef fix: block NodePort services with ingress firewall
fd8131cb8 feat: generate unified installer
ebfdb91b4 fix: handle dynamic HTTP proxy settings for discovery client
d45eaeb74 fix: correctly map link names/aliases when using VIP operator
7c4e47c0c chore: stop doing generate on each build
b1d410cb6 feat: dual boot disk image
468e318ba fix: multiple fixes for dashboard/no data
3dd8d9aed docs: update resetting-a-machine.md to include example of reset
7af8f6b2f feat: validate docker image references in upgrade options
c949f55e6 docs: remove typo on resetting a machine page
f5c097041 feat: add description to schema object defs
79ee304e1 chore: update enumer to a version that fixes Go 1.24 compatibility
46d67fe44 chore: update Go to 1.24, update pkgs
7f1dd2669 fix(ci): fix integration-misc crons
26a773d3f docs: add a note about syslog sending messages to services
7ce053638 fix: ignore digest part of images when checking version
ae1b00354 feat: support noclooud instance-id from dmi
58661dea7 docs: update getting-started.md
94cf9fb84 chore: fix spurious generate failures
32a34791e fix: typo in Makefile target talosctl-freebsd-arm64
1b4464c8a feat: update Kubernetes to 1.32.2
9463ac23e fix: make ingress firewall filter traffic to nodeports
8531d91a1 fix: blockdevice transport detection
ce616d93a fix: path for ca-certificates
f35b58779 fix: fix diff printing
bf0f910a1 chore: provide more logging for dns requests
607998ba2 feat: support uki profiles via imager
711cf2d99 fix: ignore errors to stop pods
142d75483 fix: handle empty registry config
47f377b21 feat: implement the last ethtool feature - channels
88cf69b8c feat: multi profile UKIs
557faad75 feat: update Linux to 6.12.13
5dbf9e350 refactor: implement volume mount controller
aa11e9abb fix: make image cache volume management less strict
26a62e342 docs: fix typo in Wireguard docs
0419f5d8b feat: implement features in ethtool-like support
cd66fc6e8 feat: use bootstrapped packages for building Talos
2b5bd5d1d chore: upgrade siderolabs/go-loadbalancer
15191aa3e fix: extract cmdline multi profile UKIs
716f700da feat: provide initial support for ethtool configuration
b726e2f9f feat: update Flannel to 0.26.4
98d56d4d6 chore: track opened grpc connections
5e28c8e03 fix: image cache volume provisioning
c9667813d chore: remove containerd importer
270ffb69a fix: duplicate qemu drive ids
71ec41be1 fix: build of Talos on non-Linux host
e2aa7c98c fix: installer with SecureBoot should contain UKIs
6e22c06c3 release(v1.10.0-alpha.1): prepare release
3a2d9867b fix: do not close client.Client.conn with finalizer
73f30ff25 feat: bump pkgs for udev update
aea90cb8f docs: update hyper-v
b7165615f fix: use local NTP for AWS platform
673ca4bcb fix: ensure proper closure of client.Client.conn with finalizer
19040ffd6 fix: handle of PE sections with duplicate names
83489d348 docs: add note about vmxnet and flannel conflict
f1292f5e7 docs: add iscsi-tools extension to prerequisites
93b4a3740 test: bump timeout on rotate CA test
42e166984 feat: support kexec from uki
8da264946 docs: add Orange Pi 5 to Image Factory platforms and documentation
c5fb62e2e feat: update Linux to 6.2.11
83d007c16 feat: update etcd to 3.5.18
edf7c3288 fix: pe uki extract
70f72c5b0 docs: update multus.md
807a3cd29 refactor: all network merge controllers
ec8c4660e docs: update vmware.md
baf81cd49 fix(ci): k8s integration suite wait for resource
cd5e54903 feat: generate iso's with both UKI and grub
75673b6a3 feat: provide stable symlinks in disk resources
f407c88e4 fix(ci): wait for longhorn node resource
601cdccb9 feat: extract kernel/initrd from uki for grub
ff175b9fb docs: update disk-encryption.md
a8d84e315 docs: fix typos and add more explanations in docs
3a384240e fix: invalid date field in iqn/nqn
82c9ec158 chore(ci): add tests with longhorn v2 engine
689ea1dbf fix: bring back disk UUID
7a712fad2 fix: disks with 4k sector size and systemd-boot
d62a34aaf feat: update tools/pkgs/extras
b9a8ad6ac chore: de-hardcode list of extra images for image-cache test
683153a33 docs: remove the last mentions of preserve flag for Talos 1.8+
33c7f4195 docs: fix typo an MacOS to on MacOS
21cff3919 chore(ci): fio benchmark results as separate artifacts
0b7fc7cdf fix: abort node watch on hostname change
99ba53941 docs: remove the mention of preserve flag for Talos 1.8+
bde516fde chore(ci): rework iscsi-tools extensions test
e1efbf656 refactor: extract platform metadata into Talos machinery
79987c05d feat: generate iqn and nqn files
0cab6ed17 docs: update troubleshooting.md
921e10254 chore: update Go to 1.23.5
399d53b54 fix: ignore forbidden error when waiting for pod eviction
8dea57a81 fix: make etc binds read-only
63157dcb4 docs: update SideroLinkConfig example
fc7080e34 chore: clear cache after updating upstreams
51e0f273f docs: update documentation for Talos 1.9.2
e06b14112 feat: update Kubernetes to 1.32.1
4310b290d fix: generate UKI only if actually needed
a8cd99102 docs: update OpenEBS Mayastor installation
cf45f4764 docs: add Radxa ROCK 5B docs to Single Board Computer section
b21bdc5e5 chore(ci): save csi tests fio results
01c86832c chore(ci): add test for OpenEBS MayaStor
c77483510 test: update talosctl debug air-gapped
ddd695d93 feat: update containerd to 2.0.2
da2e81120 fix: add informer resync period for node status watcher
9b957df64 chore: uki code restructure
e41a99525 fix: kube-apiserver authorizers order
db4ca5668 feat: add a kernel parameter to disable built-in auditd
faa149003 feat: update Linux to 6.12.9
8de19758d fix: a couple of imager panics/crashes
5bc3e34cb fix: detect GPT before ZFS
ed7e47d15 refactor: drop usage of objcopy to generate UKIs
edf5c5e29 fix: extfs repair and resize
6e32ea5b7 fix: merge of VolumeConfig documents with sizes
1be5f8ff2 feat: update Linux to 6.12.8
e6a4583ba feat: support generating unsigned UKIs
bbd6067d4 fix: partition alignment on disks with 4k sectors
84fcc976f fix: yet another dashboard panic
6d605fc85 fix: disable NRI plugin in a different way
499695e24 fix: request previous IP address in discovery
cc84caf8c docs: update Cilium documentation
fa5300d91 chore: revert: drop deprecated allowSchedulingOnMasters
0abb3dabf docs: fix command to wait for ceph-rook HEALTH_OK
32c67c27c chore: drop deprecated allowSchedulingOnMasters
ae6d065be fix: mount selinuxfs only when SELinux is enabled
5ccbf4bcd feat: enable configfs
59582496d feat: bring in partity with sd-257
83d84a831 chore(ci): better zfs checks
650eb3a4f refactor: rewrite cloud uploader to use AWS SDK Go v2
01bf8449b fix: update field name for bus path disk selector
e915c98d5 fix: exclude disks with empty transport for disk selector
b7a7fdc4b refactor: generate /etc/os-release file static way
e79c9e127 chore(ci): drop equinix metal e2e-test
418945444 fix: build of talosctl on non-Linux platforms
4761a9e6a chore: update dependencies
f98efb333 fix: ignore member not found error on leave cluster
b72bda0a4 fix: talosctl support and race tests
27233cf0f test: use node informer instead of raw watch
5dc15e8db fix: update go-blockdevice to v2.0.9
5f3acd0f2 fix: use correct default search domain
7e5d36d46 fix: pci driver rebind config validation
4b97bbc3f fix: pull in containerd CNI deadlock fix
066480722 test: fix apparmor tests
82ea44a6b fix: reduce installer image
78b3e7f4f fix: get next rule number for IPv6 in the appropriate chain
675854aa0 docs: fix two typos
f70b7386a test: add a xfs makefs test
8212e4864 refactor: use quirks in kernel args
b4aa5189d release(v1.10.0-alpha.0): prepare release
bd85bd5b7 fix: fix Failed to initialize SELinux labeling handle udev error
73c82e3e5 feat: bring Linux 6.12.6, CNI plugins 1.6.1
c12b52491 docs: document Kubernetes service registry incompat with K8s 1.32
a5660ed77 feat: pcirebind controller
4c3261626 docs: fix several typos
fb3675321 fix: dashboard crash on CPU data
dec0185c8 chore: reduce memory usage for secureboot functions
cee6c60a0 fix: make talosctl time work with PTP time sync
f75604313 chore: support gcr.io auth for cache and image gen
6ef2596da docs: improve Hetzner documentation
7d39b9ec2 feat: remove cgroupsv1 in non-container mode
8003536c7 fix: restore previous disk serial fetching
03116ef9b chore: prepare for Talos 1.10
00682fdd6 docs: activate 1.9 docs as default
bea05f5c9 docs: update deploying-cilium.md
284ab1179 feat: support link altnames/aliases
5bfd829bf docs: fix 'containter' typo
8d151b771 docs: clarify TALOSCONFIG for AWS
0ef19171f fix: renovate typo
c568adc7d fix: renovate config
ec2e24fd9 fix: match MAC addresses case-insensitive (nocloud)
41a0c440a chore: rekres for renovate changes
a49bb9ee4 feat: update Linux to 6.12.5
b15917ecc chore: add more debugging logs for META and volumes
2b1b326f0 docs: mention different paths for OpenEBS
9470e842f test: cleanup failed Kubernetes pods
c9c685150 fix: node identity flip
590c01657 feat: update containerd to v2.0.1
18fa5a258 docs: update image-cache doc for iso
ab5bb6884 fix: generate and serve registries with port
58236066d fix: support image cache on VFAT USB stick
e193a5071 fix: image cache integration test
08ee400fd test: fix flaky test NodeAddressSort
d45e8d1d1 feat: update Kubernetes to 1.32.0
136b12912 chore: drop semicolon for supporting vfat filesystems
3e9e027ef test: add an option to boot from an USB stick
ef8c3e3b3 docs: fix typo in multus.md
d54414add fix: authorization config gen
cce72cfe8 docs: replace deprecated Hetzner server plans
81805103d chore: enable proper parallel usage of TestDepth
e1b824eba docs: update ceph-with-rook.md
470b75563 fix: use mtu network option for podman
61b1489a0 fix: order volume config by the requested size
bc3039acd feat: update runc to 1.2.3
30016a0a8 fix: avoid nil-pointer-panic in RegistriesConfigController
fe0457152 fix: power on the machine on reboot request in qemu power api
10da553ef docs: build what's new for 1.9
d946ccae3 feat: update Linux to 6.12.4
707a77bf6 test: fix user namespace test, TPM2 fixes
c3537b2f5 feat: update Linux to 6.12.3
cb4d9d673 docs: fix a few mistakes in release notes
c4724fc97 chore: add integration tests for image-cache
07220fe7f fix: install iptables-nft to the host
14841750b chore: add version compatibility for Talos 1.10
852baf819 feat: support vlan/bond in v1, vlan in v2 for nocloud
dd61ad861 fix: lock provisioning order of user disk partitions
d0773ff09 chore: update Go to 1.23.4
7d6507189 feat: implement new address sorting algorithm
9081506d6 feat: add process scheduling options
77e9db4ab test: use two workers in qemu tests by default
5a4bdf62a feat: update Kubernetes to 1.32.0-rc.1
d99bcc950 chore: refactor mergeDNSServers func
0cde08d8b docs: add Turing RK1 docs to Single Board Computer section
ff13ccc5b docs: update the Cilium CNI deployment
191825a44 docs: update install-kubevirt.md
770be1642 feat: support image cache copying
8fb567dd1 docs: fix typo in virtualbox docs
60e4561b4 feat: add support for custom search domains
95c695880 fix: don't reset health status if service doesn't support health checks
b7609edd1 chore: update pkgs/extras to final 1.9.0 tags
c7b25430b fix: multiple small fixes for service runners
e33d2f581 feat: support overriding base OCI spec for CRI
347b75846 chore: support saving cluster logs on destroy
c254f261f fix: do not extract xattrs in unsquashfs
fc3b31575 fix: multiple issues with opening encrypted volumes
145b02642 chore: deprecate cgroupsv1 in non-container mode
581c0851d feat: update dependencies
e9058461e feat: add api-server authorization config
db1c70768 chore: move enabling SELinux by default to 1.10
ef69c9d39 feat: update Linux to 6.12.1
ccc5a8d34 chore: split config.Registry into the separate resource
c735d1492 fix: wait for udevd before starting sync
bef4d5150 fix: make system_disk condition work properly before install
af91c99ba chore: update image cache config
e10e90b05 fix: nocloud network link matching on MAC addresses
2a9130a2e fix: make Talos META partition match more precise
9adaf7f01 docs: update local-storage.md
7e19d5c4c docs: add kubevirt install
f1d1628c8 fix: properly halt installation if Talos already installed
177df62a0 fix: small logrus fixes
a9875b770 fix: return proper number from the timeStampWriter
e8a262490 fix: systemd-udevd restore old naming behavior
939c555f9 fix: imager disk image-cache generator
1bac0b183 feat: support generating disk images with image cache
84459d902 fix: make immage cache config apply immediately
56e1ee72e release(v1.9.0-alpha.3): prepare release
af5d6b8c4 fix: show SELinux labels on pseudo-fs
f46922fa9 chore: fix dockerfile warnings
a13f82c59 feat: udev: label device nodes
e899fb37f feat: label created files in /etc
5f68c17ed feat: implement image cache configuration
0ffb2187a feat: registry proxy
77cf84fb5 feat: support generating iso with imagecache
5de6275b8 chore: image cache generator improvements
1a8cc5f8b feat: add SELinux labels to volumes
61b9129e0 fix: add directory entries and filemode to tarball
4caeae21e refactor: optimize flags and SetLabel
6074a870a feat: add e2fsprogs to talos rootfs
7ffcf5b93 docs: update getting started
c4c1a0d7c fix: make vmware platform common code build on all arches
cc768037f feat: implement block device wipe
6fb518ae5 fix: don't activate LVM volumes in agent mode
0e3ed3072 fix: no longer leak Close reader
4dc58cfdf chore: small fixes
f400ae911 fix: small fixes for image cache generation
93754b7de fix: config and platform manifest generation
95b2fc946 feat: image cache gen
e4c6186c6 chore: remove i915/amdgpu drivers
744ad12a6 docs: update replicated-local-storage-with-openebs.md
fd713e451 feat: add permanent hardware addr to device selectors
d55a96e8c refactor: remove SELinux client_u and client_r
3a5b55fd2 fix: allow CEL expressions config merge
f1b15f580 chore: remove replace for safchain/ethtool
f9697a9a0 fix: register controlplane node with NoSchedule taint
30f8b5a9f fix: registry mirror fallback handling
0f41e7743 feat: allow for onlink directive (nocloud)
e26d0043e chore: code cleanup
43fe3807a feat: implement tracking of blockdevice secondaries
8a7476c3a fix: install on non-empty disk
8b4253d18 feat: update etcd to v3.5.17
5a0fd5b88 refactor: move early initialization functions to pre-initialize phase
9916e2cd8 chore: update pkgs/tools/extras for Go 1.23.3
20bbf0235 docs: update vultr documentation
aea98940b fix: arch linux search paths and names for QEMU provisioner
682718d4c fix: use imager incoming version for extension validation
9a02ecc49 feat: rewrite install disk selector to use CEL expressions
eba35f441 docs: add note about PSP in Rook-Ceph guide
38b80fb1d docs: add missing --talosconfig parameter to end of Hetzner guide
a07f66c91 docs: gcp: fix controlplane nodes tags
4fe6dc8a0 chore: clean dns code

Dependency Changes

github.com/google/go-containerregistry v0.20.2 -> v0.20.3
github.com/klauspost/compress v1.17.11 -> v1.18.0
github.com/siderolabs/gen v0.7.0 -> v0.8.0
github.com/siderolabs/go-debug v0.4.0 -> v0.5.0
github.com/siderolabs/talos v1.9.0-alpha.2 -> v1.10.0-alpha.2
github.com/siderolabs/talos/pkg/machinery 8b4253d18544 -> v1.10.0-alpha.2
github.com/sigstore/cosign/v2 v2.4.0 -> v2.4.1
github.com/sigstore/sigstore v1.8.8 -> v1.8.12
github.com/slok/go-http-metrics v0.12.0 -> v0.13.0
github.com/stretchr/testify v1.9.0 -> v1.10.0
golang.org/x/net v0.30.0 -> v0.36.0
golang.org/x/sync v0.8.0 -> v0.11.0
golang.org/x/sys v0.26.0 -> v0.30.0

Previous release can be found at v0.6.0