siderolabs/talos v1.7.0-alpha.1 on GitHub

Talos 1.7.0-alpha.1 (2024-03-14)

Welcome to the v1.7.0-alpha.1 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Device Selectors

Talos Linux now supports physical: true qualifier for device selectors, it selects non-virtual network interfaces (i.e. en0 is selected, while bond0 is not).

DNS Caching

Talos Linux now provides a caching DNS resolver for host workloads (including host networking pods). It can be disabled with:

machine:
   features:
       localDNS: false

Extension Services Config

Talos now supports supplying configuration files and environment variables for extension services.
The extension service configuration is a separate config document. An example is shown below:

---
apiVersion: v1alpha1
kind: ExtensionServiceConfig
name: nut-client
configFiles:
  - content: MONITOR ${upsmonHost} 1 remote pass password
    mountPath: /usr/local/etc/nut/upsmon.conf
environment:
  - UPS_NAME=ups

For documentation, see Extension Services Config Files.

Note: The use of environmentFile in extension service spec is now deprecated and will be removed in a future release of Talos.
Use ExtensionServiceConfig instead.

Kubernetes Upgrade

The command talosctl upgrade-k8s now supports specifying custom image references for Kubernetes components via --*-image flags.
The default behavior is unchanged, and the flags are optional.

KubeSpan

Talos Linux disables by default a KubeSpan feature to harvest additional endpoints from KubeSpan members.
This feature turned out to be less helpful than expected and caused unnecessary performance issues.

Previous behavior can be restored with:

machine:
  network:
    kubespan:
        harvestExtraEndpoints: true

NTP

Default NTP server was updated to be time.cloudflare.com instead of pool.ntp.org.
Default server is only used if the user does not specify any NTP servers in the configuration.

OpenNebula

Talos Linux now supports OpenNebula platform.

Known Problems

DRBD extension is disabled in this release due to incompatibility with the latest Linux kernel.

Kubernetes API Server Service Account Key

Talos Linux starting from this release uses RSA key for Kubernetes API Server Service Account instead of ECDSA key to provide better compatibility with external OpenID Connect implementations.

SBC

Talos core will drop support for SBC's and will not include the SBC binaries in the release.
Overlays are being developed to support SBC's.

Secure Boot Image

Talos Linux now provides a way to configure systemd-boot ISO 'secure-boot-enroll' option while generating a SecureBoot ISO image:

output:
    kind: iso
    isoOptions:
        sdBootEnrollKeys: force # default is still if-safe
    outFormat: raw

Syslog

Talos Linux now starts a basic syslog receiver listening on /dev/log.
The receiver can mostly parse both RFC3164 and RFC5424 messages and writes them as JSON formatted message.
The logs can be viewed via talosctl logs syslogd.

This is mostly implemented for extension services that log to syslog.

Component Updates

Linux: 6.6.21
etcd: 3.5.11
Kubernetes: 1.30.0-beta.0
containerd: 1.7.14
runc: 1.1.12
Flannel: 0.24.1

Talos is built with Go 1.22.1.

Contributors

Andrey Smirnov
Noel Georgi
Dmitriy Matrenichev
Utku Ozdemir
Andrey Smirnov
Artem Chernyshev
Radosław Piliszek
Spencer Smith
Anthony ARNAUD
Justin Garrison
Steve Francis
Anastasios Papagiannis
Andrei Kvapil
Andrian Zubovic
AvnarJakob
Cas de Reuver
Christian Mohn
Christian WALDBILLIG
Dmitry Sharshakov
Dmitry Sharshakov
Drew Hess
ExtraClock
Fabiano Fidêncio
Henno Schooljan
Hervé Werner
JJGadgets
Jacob McSwain
Jonomir
Kai Hanssen
Louis SCHNEIDER
Matthieu S
Michael Stephenson
Nico Berlee
Pip Oomen
Saiyam Pathak
Sebastiaan Gerritsen
Sebastian Gaiser
Serge Logvinov
Tim Jones
bri
ebcrypto
edwinavalos
fazledyn-or
james-dreebot
pardomue
shurkys
stereobutter

Changes

163 commits

3ba180d07 release(v1.7.0-alpha.1): prepare release
403ad93c3 feat: update dependencies
7376f34e8 fix: remove maintenance config when maintenance service is shut down
952801d8b fix: handle overlay partition options
465b9a4e6 fix: update discovery client with the fix for keepalive interval
1e9f866ac feat: update Kubernetes to v1.30.0-beta.0
d118a852b feat: implement Install for imager overlays
cd5a5a447 chore: migrate to go-grpc-middleware/v2
e3c2a6398 feat: set default NTP server to time.cloudflare.com
32e087760 chore: print all available logs containers in logs command completions
e89d755c5 fix: etcd config validation for worker
1aa3c9182 docs: add DreeBot to ADOPTERS.md
1bb6027cc fix: fix nil panic on maintenance upgrade with partial config
aa70bfb9d docs: add Redpill Linpro to adopters list
f02aeec92 fix: do not fail cluster create when input dir does not contain talosconfig
1ec6683e0 chore: use go-copy
3c8f51d70 chore: move cli formatters and version modules to machinery
8152a6dd6 feat: update Go to 1.22.1
8c7953991 docs: update replicated-local-storage-with-openebs-jiva.md
f23bd8144 fix: syslog parser
bbed07e03 feat: update Linux to 6.6.18
8125e754b feat: imager overlay
0b9b4da12 feat: update Kubernetes to 1.30.0-alpha.3
3a764029e docs: fix typo in word governor
d81d49000 chore: update CoreDNS renovate source
b2ad5dc5f fix: workaround a race in CNI setup (talosctl cluster create)
457507803 fix: provide auth when pulling images in the imager
e707175ab docs: update config patch in cilium docs
f8c556a1c chore: listen for dns requests on 127.0.0.53
8872a7a21 fix: ignore 'no such device' in addition to 'no such file'
1cb544353 chore: uki der certs in iso
67ac6933d fix: handle errors to watch apid/trustd certs
c79d69c2e fix: only set gateway if set in context (opennebula)
4575dd8e7 chore: allow not preallocated disks for QEMU cluster
0bddfea81 chore: add oceanbox.io to adopters
136427592 chore: use proper talos_version_contract for TF tests
6bf50fdc1 chore: disable x/net/trace in gRPC to enable dead code elimination
815a8e9cc feat: add partial config support to talosctl cluster create
64e9703f8 chore: add tests for the Kata Containers extension
9b6291925 feat: update pkgs
66f3ffdd4 fix: ensure that Talos runs in a pod (container)
9dbc33972 feat: add basic syslog implementation
0b7a27e6a feat: allow access to all resources over siderolink in maintenance mode
53721883d feat: support AWS KMS for the SecureBoot signing
7ee999f8a fix: disable KubeSpan endpoint harvesting by default
7b87c7fe9 chore: bump Go dependencies
8e9596d3c docs: rpi talosctl install update
493bb60f8 fix: correctly handle partial configs in DNSUpstreamController
6deb10ae2 chore: deprecate environmentFile for extensions
f8b4ee82a chore: update extensions test
1366ce14a feat: update Kubernetes to v1.30.0-alpha.2
559308ef7 fix: use MachineStatus resource to check for boot done
15e8bca2b feat: support environment in ExtensionServicesConfig
3fe82ec46 feat: custom image settings for k8s upgrade
fa3b93370 chore: replace fmt.Errorf with errors.New where possible
d4521ee9c feat: update kernel with sfc driver and LSM updates
2f0421b40 fix: run xfs_repair on invalid argument error
f868fb8e8 docs: update vmware tools url
fa2d34dd8 chore: enable v6 support on the same port
83e0b0c19 chore: adjust dns sockets settings
a1ec1705b chore: update Go to 1.22.0
76b50fcd4 chore: add Ænix to the Adopters list
5324d3916 chore: bump stuff
087b50f42 feat: support systemd-boot ISO enroll keys option
afa71d6b0 chore: use "handle-like" resource in DNSResolveCacheController
013e13070 fix: error with decoding config document with wrong apiVersion
1e77bb1c3 chore: allow custom pkgs to build talos
3f8a85f1b fix: unlock the upgrade mutex properly
61c3331b1 docs: update indentation in vip.md
383e528df chore: allow uuid-based hostnames in talosctl cluster create
1e6c8c4de feat: extensions services config
989ca3ade feat: add OpenNebula platform support
914f88778 docs: update nocloud.md Proxmox information
a04cc8015 fix: pass TTL when generating client certificate
3fe8c12ca fix: add log line about controller runtime failing
ddbabc7e5 fix: use a separate cgroup for each extension service
6ccdd2c09 chore: fix markdown-lint call
4184e617a chore: add test for wasmedge runtime extension
95ea3a6c6 chore: bump timeout in acquire tests
c19a505d8 chore: bump docker dind image
d7d4154d5 chore: remove channel blocking in qemu launch
029d7f7b9 release(v1.7.0-alpha.0): prepare release
2ff81c06b feat: update runc 1.1.12, containerd 1.7.13
9d8cd4d05 chore: drop deprecated method EtcdRemoveMember
17567f19b fix: take into account the moment seen when cleaning up CRI images
aa03204b8 docs: document the process of building custom kernel packages
7af48bd55 feat: use RSA key for kube-apiserver service account key
a5e13c696 fix: retry blockdevice open in the installer
593afeea3 fix: run the interactive installer loop to report errors
87be76b87 fix: be more tolerant to error handling in Mounts API
03add7503 docs: add section on using imager with extensions from tarball
ee0fb5eff docs: consolidate certificate management articles
9c14dea20 chore: bump coredns
ebeef2852 feat: implement local caching dns server
4a3691a27 docs: fix broken links in metal-network-configuration.md
c4ed189a6 docs: provide sane defaults for each release series in vmware script
8138d54c6 docs: clarify node taints/labels for worker nodes
b44551ccd feat: update Linux to 6.6.13
385707c5f docs: update vmware.sh
d1a79b845 docs: fix small typo in etcd maintenance guide
cf0603330 docs: copy generated JSON schema to host
f11139c22 docs: document local path provisioner install
e0dfbb8fb fix: allow META encoded values to be compressed
d677901b6 feat: implement device selector for 'physical'
7d1117289 docs: add missing talosconfig flag
8a1732bcb fix: pull in mptspi driver
c1e45071f refactor: use etcd configuration from the EtcdSpec resource
4e9b688d3 fix: use correct TTL for talosconfig in talosctl config new
fb5ad0555 feat: update Kubernetes default to 1.29.1
fe24139f3 docs: fork docs for v1.7
1c2d10ccc chore: bump dependencies
a599e3867 chore: allow custom registry to build installer/imager
3911ddf7b docs: add how-to for cert management
b0ee0bfba fix: strategic patch merging for audit policy
474eccdc4 fix: watch bufer overrun for RouteStatus
cc06b5d7a fix: fix .der output in talosctl gen secureboot
1dbb4abf4 fix: update discovery service client to v0.1.6
9782319c3 fix: support KubePrism settings in Kubernetes Discovery
6c5a0c281 feat: generate a single JSON schema for multidoc config
f70b47ddd fix: force KubePrism to connect using IPv4
d5321e085 fix: update kmsg with utf-8 fix
7fa7362dd fix: fix nodes on dashboard footer when node names are used in --nodes
ba88678f1 fix: merge ports and ingress configs correctly in NetworkRuleConfig
dea9bda2d fix: disk UUID & WWID always empty in talosctl disks
8dc112f36 chore: pull in NBD modules
f6926faab fix: default priority for ipv6
e8758dcba chore: support http downloads for assets in talosctl cluster create
265f21be0 fix: replace the filemap implementation to not buffer in memory
8db3c5b3c fix: pick correctly base installer image layers
0a30ef784 fix: imager should support different Talos versions
d6342cda5 docs: update latest version to v1.6.1
e6e422b92 chore: bump dependencies
5a19d078a fix: properly overwrite files on install
9eb6cea78 docs: secureboot sd-boot menu clarification
01f0cbe61 feat: support iPXE direct booting in talosctl cluster create
3ba84701d feat: pull in kernel modules for mlx Infiniband and VFIO
ba993e0ed docs: announce that SecureBoot is available
241bc9312 fix: update the way secureboot signer fetches certificate (azure)
59b62398f chore: modernize machined/pkg/controllers/k8s
760f793d5 fix: use correct prefix when installing SBC files
0b94550c4 chore: fix the gvisor test
3a787c1d6 docs: update 1.6 docs with Noel's feedback
d803e40ef docs: provide documentation for Talos 1.6
9a185a30f feat: update Kubernetes to v1.29.0
5934815d2 chore: split more kernel modules on amd64
10c59a6b9 fix: leave discovery service later in the reset sequence
0c86ca1cc chore: enable kubespan+firewall for cilium tests
98fd722d5 feat: provide compatibility for future Talos 1.7
131a1b167 fix: add a KubeSpan option to disable extra endpoint harvesting
4547ad9af feat: send actor id to the SideroLink events sink
04e774547 docs: cap max heading level
6bb1e99aa chore: optimize pcap dump
4f9d3b975 feat: update Kubernetes to v1.29.0-rc.2
46121c9fe docs: rework machine config documentation generation
e128d3c82 fix: talosctl cluster create not to enforce kubeprism always
320064c5a feat: update Go 1.21.5, Linux 6.1.65, etcd 3.5.11
270604bea fix: support user disks via symlinks
4f195dd27 chore: fix the release.toml
474fa0480 fix: store and execute desired action on emergency action
515ae2a18 docs: extend hetzner-cloud docs for arm64
eecc4dbd5 fix: trim leading spaces\newlines in inline manifest contents
dbf274ddf fix: skip writing the file if the contents haven't changed
6329222bd fix: do not panic in merge.Merge if map value is nil

Changes since v1.7.0-alpha.0

81 commits

3ba180d07 release(v1.7.0-alpha.1): prepare release
403ad93c3 feat: update dependencies
7376f34e8 fix: remove maintenance config when maintenance service is shut down
952801d8b fix: handle overlay partition options
465b9a4e6 fix: update discovery client with the fix for keepalive interval
1e9f866ac feat: update Kubernetes to v1.30.0-beta.0
d118a852b feat: implement Install for imager overlays
cd5a5a447 chore: migrate to go-grpc-middleware/v2
e3c2a6398 feat: set default NTP server to time.cloudflare.com
32e087760 chore: print all available logs containers in logs command completions
e89d755c5 fix: etcd config validation for worker
1aa3c9182 docs: add DreeBot to ADOPTERS.md
1bb6027cc fix: fix nil panic on maintenance upgrade with partial config
aa70bfb9d docs: add Redpill Linpro to adopters list
f02aeec92 fix: do not fail cluster create when input dir does not contain talosconfig
1ec6683e0 chore: use go-copy
3c8f51d70 chore: move cli formatters and version modules to machinery
8152a6dd6 feat: update Go to 1.22.1
8c7953991 docs: update replicated-local-storage-with-openebs-jiva.md
f23bd8144 fix: syslog parser
bbed07e03 feat: update Linux to 6.6.18
8125e754b feat: imager overlay
0b9b4da12 feat: update Kubernetes to 1.30.0-alpha.3
3a764029e docs: fix typo in word governor
d81d49000 chore: update CoreDNS renovate source
b2ad5dc5f fix: workaround a race in CNI setup (talosctl cluster create)
457507803 fix: provide auth when pulling images in the imager
e707175ab docs: update config patch in cilium docs
f8c556a1c chore: listen for dns requests on 127.0.0.53
8872a7a21 fix: ignore 'no such device' in addition to 'no such file'
1cb544353 chore: uki der certs in iso
67ac6933d fix: handle errors to watch apid/trustd certs
c79d69c2e fix: only set gateway if set in context (opennebula)
4575dd8e7 chore: allow not preallocated disks for QEMU cluster
0bddfea81 chore: add oceanbox.io to adopters
136427592 chore: use proper talos_version_contract for TF tests
6bf50fdc1 chore: disable x/net/trace in gRPC to enable dead code elimination
815a8e9cc feat: add partial config support to talosctl cluster create
64e9703f8 chore: add tests for the Kata Containers extension
9b6291925 feat: update pkgs
66f3ffdd4 fix: ensure that Talos runs in a pod (container)
9dbc33972 feat: add basic syslog implementation
0b7a27e6a feat: allow access to all resources over siderolink in maintenance mode
53721883d feat: support AWS KMS for the SecureBoot signing
7ee999f8a fix: disable KubeSpan endpoint harvesting by default
7b87c7fe9 chore: bump Go dependencies
8e9596d3c docs: rpi talosctl install update
493bb60f8 fix: correctly handle partial configs in DNSUpstreamController
6deb10ae2 chore: deprecate environmentFile for extensions
f8b4ee82a chore: update extensions test
1366ce14a feat: update Kubernetes to v1.30.0-alpha.2
559308ef7 fix: use MachineStatus resource to check for boot done
15e8bca2b feat: support environment in ExtensionServicesConfig
3fe82ec46 feat: custom image settings for k8s upgrade
fa3b93370 chore: replace fmt.Errorf with errors.New where possible
d4521ee9c feat: update kernel with sfc driver and LSM updates
2f0421b40 fix: run xfs_repair on invalid argument error
f868fb8e8 docs: update vmware tools url
fa2d34dd8 chore: enable v6 support on the same port
83e0b0c19 chore: adjust dns sockets settings
a1ec1705b chore: update Go to 1.22.0
76b50fcd4 chore: add Ænix to the Adopters list
5324d3916 chore: bump stuff
087b50f42 feat: support systemd-boot ISO enroll keys option
afa71d6b0 chore: use "handle-like" resource in DNSResolveCacheController
013e13070 fix: error with decoding config document with wrong apiVersion
1e77bb1c3 chore: allow custom pkgs to build talos
3f8a85f1b fix: unlock the upgrade mutex properly
61c3331b1 docs: update indentation in vip.md
383e528df chore: allow uuid-based hostnames in talosctl cluster create
1e6c8c4de feat: extensions services config
989ca3ade feat: add OpenNebula platform support
914f88778 docs: update nocloud.md Proxmox information
a04cc8015 fix: pass TTL when generating client certificate
3fe8c12ca fix: add log line about controller runtime failing
ddbabc7e5 fix: use a separate cgroup for each extension service
6ccdd2c09 chore: fix markdown-lint call
4184e617a chore: add test for wasmedge runtime extension
95ea3a6c6 chore: bump timeout in acquire tests
c19a505d8 chore: bump docker dind image
d7d4154d5 chore: remove channel blocking in qemu launch

Changes from siderolabs/crypto

1 commit

siderolabs/crypto@1c94bb3 chore: bump dependencies

Changes from siderolabs/discovery-api

1 commit

siderolabs/discovery-api@e1dc7bb chore: rekres, update dependencies

Changes from siderolabs/discovery-client

3 commits

siderolabs/discovery-client@f4095a1 chore: bump discovery API to v0.1.4
siderolabs/discovery-client@fbb1cea fix: keepalive interval calculation
siderolabs/discovery-client@ff8f4be fix: enable gRPC keepalives

Changes from siderolabs/extras

4 commits

siderolabs/extras@47bb718 chore: update base pkgs
siderolabs/extras@60793cd feat: update Go to 1.22.1
siderolabs/extras@c4934e1 feat: update Go to 1.22
siderolabs/extras@8909d6f chore: update Go to 1.21.5

Changes from siderolabs/gen

1 commit

siderolabs/gen@238baf9 chore: add typesafe SyncMap and bump stuff

Changes from siderolabs/go-api-signature

21 commits

siderolabs/go-api-signature@cf2bd06 chore: bump dependencies
siderolabs/go-api-signature@370cebf fix: always print the login URL on key renew flow
siderolabs/go-api-signature@d28609a feat: move in the cli grpc interceptor logic, support service account in env
siderolabs/go-api-signature@4602acc chore: add a dummy workflow
siderolabs/go-api-signature@cfd21b6 fix: support validating signatures generated with the time in the future
siderolabs/go-api-signature@74dd3dc chore: bump deps
siderolabs/go-api-signature@d78bedb chore: bump deps
siderolabs/go-api-signature@a034e9f feat: replace scopes with roles
siderolabs/go-api-signature@5b4f3bb chore: run rekres
siderolabs/go-api-signature@9dba116 chore: remove time.Sleep hack
siderolabs/go-api-signature@e84e686 chore: bump dependencies
siderolabs/go-api-signature@8baaf8a chore: bump deps
siderolabs/go-api-signature@5f27e1e chore: add renovate bot and bump deps
siderolabs/go-api-signature@69886dc feat: allow custom validations on PGP key
siderolabs/go-api-signature@63d4da3 fix: limit clock skew for short-lived keys
siderolabs/go-api-signature@cdb9722 feat: add support for +-5 min clock skew
siderolabs/go-api-signature@7b80a50 refactor: use options pattern in RegisterPGPPublicKey
siderolabs/go-api-signature@c647861 feat: add scopes to RegisterPublicKeyRequest
siderolabs/go-api-signature@5d3647e feat: provide more client PGP functions
siderolabs/go-api-signature@2b682ec feat: initial version
siderolabs/go-api-signature@a4c2943 chore: initial commit

Changes from siderolabs/go-copy

2 commits

siderolabs/go-copy@aa4ade4 chore: add initial code
siderolabs/go-copy@52a6d48 chore: go-copy repo

Changes from siderolabs/go-debug

1 commit

siderolabs/go-debug@0c2be80 chore: run rekres (update to Go 1.22)

Changes from siderolabs/go-kmsg

2 commits

siderolabs/go-kmsg@e358d13 fix: decode escape sequences while reading from kmsg
siderolabs/go-kmsg@4297bd5 feat: add BSD support

Changes from siderolabs/go-kubernetes

1 commit

siderolabs/go-kubernetes@ddd4c69 feat: add support for Kubernetes 1.30

Changes from siderolabs/go-loadbalancer

1 commit

siderolabs/go-loadbalancer@aab4671 chore: rekres, update dependencies

Changes from siderolabs/pkgs

37 commits

siderolabs/pkgs@8804a60 chore: update dependencies
siderolabs/pkgs@a587b42 feat: enable most common amd64 watchdog drivers
siderolabs/pkgs@3aacf03 feat: update releases
siderolabs/pkgs@e5c0c79 feat: build NVMe target module
siderolabs/pkgs@cb39126 chore: re-enable zfs pkg
siderolabs/pkgs@d9c1540 feat: update releases
siderolabs/pkgs@1904994 feat: enable VRF module
siderolabs/pkgs@87eb013 feat: disable PCI busmastering on bridges during boot
siderolabs/pkgs@30f18c8 chore: remove symlinks and broken binaries
siderolabs/pkgs@7811e5e chore: set PREEMPT_NONE as recommended for servers
siderolabs/pkgs@65006ed fix: enable KFD support in kernel
siderolabs/pkgs@510a3f9 feat: add support for Solarflare SFC9100 and SFC9200 family
siderolabs/pkgs@4340508 feat: enable CONFIG_SECURITY_PATH and CONFIG_BPF_LSM
siderolabs/pkgs@0ec4cc3 feat: update Go to 1.22
siderolabs/pkgs@36c08ae feat: enable PSI (pressure stall information)
siderolabs/pkgs@0853224 feat: update Linux to 6.6.16
siderolabs/pkgs@96cc841 chore: bump deps
siderolabs/pkgs@064fd58 feat: update Linux to 6.6.14, enable XDP
siderolabs/pkgs@efbbd23 feat: update Linux to 6.6.13
siderolabs/pkgs@dfb5026 chore: switch to git ref for raspberrypi firmware
siderolabs/pkgs@4af2d0f feat: update Linux to 6.1.74
siderolabs/pkgs@2358efe fix: enable FUSION_SPI driver
siderolabs/pkgs@f376a53 chore: bump dependencies
siderolabs/pkgs@583e519 feat: add v4l usb video class (webcam) drivers
siderolabs/pkgs@2d3ca68 feat: enable NBD
siderolabs/pkgs@f647edd feat: update Linux to 6.1.69
siderolabs/pkgs@6af1691 feat: enable VFIO also on amd64
siderolabs/pkgs@d633cd6 feat: enable modules for mlx infiniband
siderolabs/pkgs@4c59641 fix: zfs module build
siderolabs/pkgs@e325097 feat: enable nct6683 sensors as module
siderolabs/pkgs@d6185ec feat: enable IRQ remapping on amd64
siderolabs/pkgs@814dc60 feat: update containerd to 1.7.11
siderolabs/pkgs@dd71790 chore: rekres to fix 'failed' build on main
siderolabs/pkgs@a36dec4 feat: split more device drivers into modules
siderolabs/pkgs@97270a2 feat: update Linux to 6.1.67
siderolabs/pkgs@8a73907 feat: update Go to 1.21.5
siderolabs/pkgs@8f0ffb9 feat: update zfs to v2.2.2

Changes from siderolabs/tools

12 commits

siderolabs/tools@cb5fd56 chore: update xz to 5.6.1
siderolabs/tools@14bf457 fix: use musl 1.2.4 in tools, revert kmod back to 32
siderolabs/tools@6c1f73d fix: revert kmod to version 31
siderolabs/tools@59fd552 feat: update releases
siderolabs/tools@eff5d16 feat: update Go to 1.22.1
siderolabs/tools@b6b4d9e feat: update Go to 1.22
siderolabs/tools@f4b41d1 fix: rust toolchain
siderolabs/tools@8cc79e6 feat: update dependencies
siderolabs/tools@c7076eb chore: bump dependencies
siderolabs/tools@a80a2aa feat: update Go to 1.21.6
siderolabs/tools@b677a2b feat: add rust build stage
siderolabs/tools@1659d82 feat: update Go to 1.21.5

Dependency Changes

github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0 -> v1.10.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 -> v1.5.1
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azcertificates v1.0.0 -> v1.1.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.1 -> v1.1.0
github.com/alexflint/go-filemutex v1.3.0 new
github.com/aws/aws-sdk-go-v2/config v1.25.6 -> v1.27.7
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.5 -> v1.15.3
github.com/aws/aws-sdk-go-v2/service/kms v1.29.2 new
github.com/aws/smithy-go v1.17.0 -> v1.20.1
github.com/beevik/ntp v1.3.0 -> v1.3.1
github.com/containerd/cgroups/v3 v3.0.2 -> v3.0.3
github.com/containerd/containerd v1.7.9 -> v1.7.14
github.com/containernetworking/plugins v1.3.0 -> v1.4.1
github.com/coredns/coredns v1.11.1 new
github.com/cosi-project/runtime v0.3.19 -> v0.4.0-alpha.9
github.com/docker/docker v24.0.7 -> v25.0.4
github.com/docker/go-connections v0.4.0 -> v0.5.0
github.com/foxboron/go-uefi 18b9ba9cd4c3 -> 48be911532c2
github.com/gdamore/tcell/v2 v2.6.0 -> v2.7.4
github.com/google/go-containerregistry v0.16.1 -> v0.19.0
github.com/google/go-tpm v0.9.0 -> ee6cbcd136f8
github.com/google/nftables v0.1.0 -> v0.2.0
github.com/google/uuid v1.4.0 -> v1.6.0
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0 new
github.com/hetznercloud/hcloud-go/v2 v2.4.0 -> v2.6.0
github.com/insomniacslk/dhcp b0416c0f187a -> c728f5dd21c8
github.com/jeromer/syslogparser v1.1.0 new
github.com/jsimonetti/rtnetlink v1.4.0 -> v1.4.1
github.com/miekg/dns v1.1.58 new
github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.0
github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.2.0
github.com/packethost/packngo v0.30.0 -> v0.31.0
github.com/pmorjan/kmod v1.1.0 -> v1.1.1
github.com/prometheus/procfs v0.12.0 -> v0.13.0
github.com/rivo/tview 33a1d271f2b6 -> e804876934a1
github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 -> v1.0.0-beta.25
github.com/siderolabs/crypto v0.4.1 -> v0.4.2
github.com/siderolabs/discovery-api v0.1.3 -> v0.1.4
github.com/siderolabs/discovery-client v0.1.5 -> v0.1.8
github.com/siderolabs/extras v1.6.0-1-g113887a -> v1.7.0-alpha.0-3-g47bb718
github.com/siderolabs/gen v0.4.7 -> v0.4.8
github.com/siderolabs/go-api-signature v0.3.2 new
github.com/siderolabs/go-copy v0.1.0 new
github.com/siderolabs/go-debug v0.2.3 -> v0.3.0
github.com/siderolabs/go-kmsg v0.1.3 -> v0.1.4
github.com/siderolabs/go-kubernetes v0.2.8 -> v0.2.9
github.com/siderolabs/go-loadbalancer v0.3.2 -> v0.3.3
github.com/siderolabs/pkgs v1.6.0-5-g3ae2450 -> v1.7.0-alpha.0-35-g8804a60
github.com/siderolabs/talos/pkg/machinery v1.6.0 -> v1.7.0-alpha.1
github.com/siderolabs/tools v1.6.0-1-g336d248 -> v1.7.0-alpha.0-11-gcb5fd56
github.com/stretchr/testify v1.8.4 -> v1.9.0
github.com/u-root/u-root v0.11.0 -> v0.14.0
go.etcd.io/etcd/api/v3 v3.5.11 -> v3.5.12
go.etcd.io/etcd/client/pkg/v3 v3.5.11 -> v3.5.12
go.etcd.io/etcd/client/v3 v3.5.11 -> v3.5.12
go.etcd.io/etcd/etcdutl/v3 v3.5.11 -> v3.5.12
go.uber.org/zap v1.26.0 -> v1.27.0
go4.org/netipx 6213f710f925 -> fdeea329fbba
golang.org/x/net v0.19.0 -> v0.22.0
golang.org/x/oauth2 v0.15.0 -> v0.18.0
golang.org/x/sync v0.5.0 -> v0.6.0
golang.org/x/sys v0.15.0 -> v0.18.0
golang.org/x/term v0.15.0 -> v0.18.0
google.golang.org/grpc v1.59.0 -> v1.62.1
google.golang.org/protobuf v1.31.0 -> v1.33.0
k8s.io/api v0.29.0 -> v0.30.0-beta.0
k8s.io/apimachinery v0.29.0 -> v0.30.0-beta.0
k8s.io/apiserver v0.29.0 -> v0.30.0-beta.0
k8s.io/client-go v0.29.0 -> v0.30.0-beta.0
k8s.io/component-base v0.29.0 -> v0.30.0-beta.0
k8s.io/cri-api v0.29.0 -> v0.30.0-beta.0
k8s.io/klog/v2 v2.110.1 -> v2.120.1
k8s.io/kube-scheduler v0.29.0 -> v0.30.0-beta.0
k8s.io/kubectl v0.29.0 -> v0.30.0-beta.0
k8s.io/kubelet v0.29.0 -> v0.30.0-beta.0
k8s.io/pod-security-admission v0.30.0-beta.0 new

Previous release can be found at v1.6.0

Images

ghcr.io/siderolabs/flannel:v0.24.1
ghcr.io/siderolabs/install-cni:v1.7.0-alpha.0-3-g47bb718
registry.k8s.io/coredns/coredns:v1.11.1
gcr.io/etcd-development/etcd:v3.5.12
registry.k8s.io/kube-apiserver:v1.30.0-beta.0
registry.k8s.io/kube-controller-manager:v1.30.0-beta.0
registry.k8s.io/kube-scheduler:v1.30.0-beta.0
registry.k8s.io/kube-proxy:v1.30.0-beta.0
ghcr.io/siderolabs/kubelet:v1.30.0-beta.0
ghcr.io/siderolabs/installer:v1.7.0-alpha.1
registry.k8s.io/pause:3.8