siderolabs/image-factory v0.7.5 on GitHub

image-factory 0.7.5 (2025-07-23)

Welcome to the v0.7.5 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

Andrey Smirnov
Noel Georgi
Dmitrii Sharshakov
Mateusz Urbanek
Orzelius
Artem Chernyshev
Justin Garrison
Michael Robbins
Alexandre GV
Steve Francis
Thibault VINCENT
Brian Brookman
Damien
David R
Dennis Marttinen
Jorik Jonker
Justin Seely
Luke Cousins
Markus Reiter
Martyn Ranyard
Michael Moerz
Oguz Kilcan
Spencer Smith
Thomas Gosteli
Till Hoffmann
Tom Keur
Utku Ozdemir
jvanthienen-gluo
killcity
yashutanu

Changes

6 commits

19ac9c2 release(v0.7.5): prepare release
3b2b97a fix: support iPXE aliases for architectures
b838a44 feat: update to Talos 1.11.0-beta.0
953e217 docs: document source images used
e1e80fd feat: serve talosctl from image factory
3e35f91 feat(secureboot): implement reading key material from AWS KMS

Changes from siderolabs/gen

4 commits

044d921 feat: add xslices.Deduplicate
dcb2b74 feat: add panicsafe package
b36ee43 feat: make xyaml.CheckUnknownKeys public
3e319e7 feat: implement xyaml.UnmarshalStrict

Changes from siderolabs/pkgs

35 commits

e2fbfb1 feat: update tools/toolchain to 1.11.0
383bbb4 feat: update NVIDIA production to 570.158.01
853cf3a feat: bump e2fsprogs, ipxe, kspp, tools
a3f8281 feat: update Linux to 6.12.38
8ed84c5 feat: refactor HW_RANDOM configuration
108099f feat: enable AMD encrypted memory
c97d25e fix: remove erroneous PURLs
90f7c65 fix: bump bldr
a24b40e feat: update Linux to 6.12.36 and firmware
2537e61 docs: more SBOM metadata to cover whole Talos
0f4cbbc feat: update dependencies
9cec45c feat: add SBOM metadata for some packages
03bb94c feat: update dependencies
c613abd fix: iptables url
fae59df fix: download and copy hailo8 firmware
fadf1e2 feat: update containerd to 2.1.2
a0b0da1 feat: enable io.latency cgroup controller
0aaa07a feat: add hailort package
8555e94 chore: use ftpmirror for GNU sources
9fbe2b4 feat: update Go to 1.24.4
79bfa9e feat: update NVIDIA drivers to 570.148.08
c8b8bd8 feat: bump dependencies
54bf03e feat: update Linux to 6.12.31
93b3aaa feat: add patch for CephFS IMA performance regression
ebd6627 feat: disable IMA support
8aad53b feat: add CONFIG_NFT_CONNLIMIT to kernel
7a299fa feat: update Linux to 6.12.30
8c4603e feat: move more configs to modules on arm64
7b1183b feat(kernel): enable IB user-space management and RDMA
1b1430e fix: drop pcre2 binaries
487610c fix: drop broken symlinks
f31d518 fix: clean up some binaries
0f74b9b feat: update containerd to v2.1.1
89b4037 fix: tenstorrent pkg name
a14b544 chore: drop qemu-tools vmdk support

Changes from siderolabs/talos

120 commits

85e7989cf release(v1.11.0-beta.0): prepare release
3039162dc feat: update Flannel to v0.27.2
7e6052e63 feat: increase boot partition to 2 GiB
cb7ca17bb feat: implement ExistingVolumeConfig
a857c696f chore(machined): remove deprecated Endpoints
a60101c55 fix: fill serial using helpers
5420e9979 refactor: output default selection for profiles
023a24cd4 test: use Grype to scan SBOM for vulnerabilities
96896fddb chore: build less images by default
75b5dec06 fix: sd-boot kexec with disk images
10546d6f8 feat: update Kuberentes 1.34.0-beta.0
3f35b83ae fix: ignore absent extensions SBOM directory
9920da3e1 feat: add etcd downgrade API
c38682279 feat: bump pkgs and tools, read extensions' SBOMs, rekres
9c0d2706c docs: add release notes about v3.6.x bug
d21994210 test: refactor various merge controller tests
da5a4449f feat: implement raw volume support
41adda1cf docs: add secure boot setup mode note for Xen
993b4ade8 docs: fix typo in hugo config: pre-releaase
130b7fd6e test: fix flaky TestDNS
35b45ae6e feat(talosctl): support tpm operation on mac
24628db20 feat: update Kubernetes to v1.34.0-alpha.3
ff68286d1 feat: include hwrandom modules
a5b07c9a5 test: split tests and lint from the default pipeline
a957ef416 feat: add SBOMs to the imager container
506212a71 feat: include AMD encrypted mem modules into base
a966321cc fix: add more bootloader probe logs on upgrade
b38fa568a feat: add validation for secrets bundle
2d89bcc71 feat: bump Linux, Go and other packages
0b8c180b8 fix: rename instances to referenceCount
378fe4f2f feat: support writing EFI boot order
9f0792632 fix: improve volume provisioning errors
b8fcf3c71 fix: change module instance evaluation
d680e560d docs: create FUNDING.yml
641505584 feat: support project quota support for user volumes
52656cc3c feat: allow taloscl disk wipe in maintenance mode
850579448 feat: export SBOM as resources
4f3a2ffab test: update unit-test runner
d531b682c fix: provide FIPS 140-3 compliance
3e3129d36 feat: include packages into SBOM
54bd50be3 fix: talos endpoint might not be created in Kubernetes
8789a02c3 feat: present loaded kernel modules
33ecbaec6 test: update apply config tests
7d2fd390c chore: bump Talos version in the Image Factory CI pipeline
de77f2142 docs: add example for fluentbit config
1f1f78106 fix: add limited retries for not found images
3d6a2c14e chore: generate and upload signatures on release
380141330 feat: expose kernel cmdline as a resource
4c6b3b14d docs: document disabling SELinux
3a6e5a71e feat: add talosctl mulitarch bundle image
be671ee6d chore: add sbom step to the release pipeline
7fd0e8fc7 release(v1.11.0-alpha.3): prepare release
777335f23 chore: improve cloud image uploader resilience
14e5eee7d release(v1.11.0-alpha.2): prepare release
1e5a008f5 fix: hold user volume mount point across kubelet restarts
cdad50590 docs: user volumes and kubernetes upgrade updates
c880835c8 feat: implement zswap support
7f0300f10 feat: update dependencies, Kubernetes 1.34.0-alpha.2
61afbe3d2 docs: add vc4 documentation
b9dbdc8e7 fix: etcd recover with multiple advertised addresses
19d94c357 feat: update Linux to 6.12.35, containerd to 2.1.3
44a1fc3b7 fix: treat context canceled as expected error on image pull
4da2dd537 feat: enforce Kubernetes version compatibility
6c7f8201a fix: set default MTU on Azure to 1400
091cd6989 docs: small yaml typo fix
66ecbd48f docs: update support matrix with omni version
c948d7617 docs: minor fixes for creating kernel modules
cc14c4a25 docs: add docs for creating kernel modules
93bcd3b56 docs: create SBOM for Go dependencies
38c4ce415 feat: add user-space InfiniBand modules
251dc934f feat: arm64 support for platform vmware
09b3ad577 feat: update containerd to 2.1.2
0767dd07b chore: enable --with-siderolink-agent on Darwin
9642198d7 fix: userspace wireguard library overrides
208f0763e chore: fix talosctl build on non-Linux hosts
87421af87 docs: expand documentation description
d32ccfa59 feat: implement swap support
8f5cf81db docs: update kvm documentation
8e84c8b0f fix: nil pointer deref in quirk
6e74a3676 docs: aad ery basic details on how to run on scaleway
260d1bc9a fix: correctl close encrypted volumes
034ef42af fix: update siderolink library for wgtunnel panic fix
3035744a8 fix: correctly predict interface name on darwin
cfcfad3c4 chore: move checkUnknownKeys function to github.com/siderolabs/gen
5ecc53c69 docs: add macos section to developing-talos.md
b5b35307f chore: update Go to 1.24.4
fde772d8d feat: update Flannel to 0.27.0
81ca27949 release(v1.11.0-alpha.1): prepare release
58a868e68 chore: fix renovate config, add release-gate label
a59aaee84 feat: bump dependencies, Linux 6.12.31
e954ee30a docs: typo correction: LongHorn -> Longhorn
aab053394 fix: mashal resource byte slices as strings in YAML
c7d4191e7 fix: rework the way CRI config generation is waited for
0114183de docs: update lastRelease to 1.10.3
938b0760a docs: update issue template
2a7b735b2 feat: drop IMA support
2d5a805b0 fix: typo in DiscoverdVolume spec
60c12bad9 feat: support nocloud include url userdata directive
0fd622c82 fix(talosctl): correct --help output for dashboard command
a90c936a1 feat: support qemu provisioner on darwin
5322ca0d3 docs: update overlay docs
a60b6322d fix(ci): drop nebula from extensions test
dbbb59a67 docs: add note for default dataDirHostPath for Rook
e26054378 docs: macos qemu provider
5d0224093 docs: use the cilium-cli image repo in the job installation manifest
ff80e4cca docs: fix CIDR name
a5fd15e8b fix(ci): reproducibility test
8f8963e50 docs: update Nexxen brand
c6b86872d fix(ci): iso reproducibility file permissions
995a1dec4 chore: add a check for unsupported darwin flags
9db5d0c97 fix: nocloud metadata for hostname
3cf325654 feat: modularize more arm64 kernel
3524745cc fix: allow any PKI in Talos API
f438cdb09 chore: use custom dhcpd server on macos qemu
11c17fb9a fix: metal-iso reproducibility
7fcb89ee3 chore: add darwin vmnet qemu support
fc1237343 chore: clean up /usr/bin
b551f32ce feat: update containerd to v2.1.1
67f4154f9 docs: update disk-management.md
0cb137ad7 fix: make disk size check work on old Talos

Dependency Changes

github.com/google/go-containerregistry v0.20.3 -> v0.20.6
github.com/siderolabs/gen v0.8.1 -> v0.8.5
github.com/siderolabs/go-blockdevice/v2 v2.0.17 -> v2.0.18
github.com/siderolabs/pkgs v1.11.0-alpha.0-17-g2563e47 -> v1.11.0
github.com/siderolabs/talos 7c057edd5f36 -> v1.11.0-beta.0
github.com/siderolabs/talos/pkg/machinery 7c057edd5f36 -> v1.11.0-beta.0
github.com/sigstore/cosign/v2 v2.5.0 -> v2.5.3
github.com/sigstore/sigstore v1.9.3 -> v1.9.5
golang.org/x/net v0.40.0 -> v0.42.0
golang.org/x/sync v0.14.0 -> v0.16.0
golang.org/x/sys v0.33.0 -> v0.34.0
golang.org/x/text v0.25.0 -> v0.27.0

Previous release can be found at v0.7.4