siderolabs/talos v1.9.0-alpha.0 on GitHub

Talos 1.9.0-alpha.0 (2024-10-18)

Welcome to the v1.9.0-alpha.0 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

`talosctl cgroups`

The talosctl cgroups command has been added to the talosctl tool.
This command allows you to view the cgroup resource consumption and limits for a machine, e.g.
talosctl cgroups --preset memory.

udevd

Talos previously used udevd to provide udevd, now it uses systemd-udevd instead.

Component Updates

Linux: 6.6.57
containerd: 2.0.0-rc.5
Flannel: 0.25.7

Talos is built with Go 1.23.2.

Contributors

Andrey Smirnov
Dmitriy Matrenichev
Noel Georgi
Dmitry Sharshakov
Jean-Francois Roy
Adolfo Ochagavía
Dan Rue
Eddie Wang
Florian Ströger
Hexoplon
Mike Beaumont
Philip Schmid
Philipp Kleber
Robby Ciliberto
Ryan Borstelmann
Serge Logvinov
Spencer Smith
Steven Cassamajor
Tim Jones
adilTepe
ekarlso
naed3r

Changes

72 commits

f7d35a5e0 release(v1.9.0-alpha.0): prepare release
e0434d77d feat: update dependencies
5c5a24886 feat: add Talos 1.9 compatibility guarantees
bc4c21f41 test: add json logs test environment
71faa3294 docs: nvidia proprietary/oss hardware requirement
59a78da42 chore: add proto-codec/codec
7ff1cedfe chore: update siderolabs/crypto module and return proper ALPN
ccbd5aed3 feat: optionally decode hcloud userdata as base64
34f652ce8 feat: add well-known app.kubernetes.io labels to control-plane pods
fc89dc216 fix: support extra-disks when using iso
f2bff814d chore: add arm64 target for integration-test
5853bb0ea fix: json logging panic
a859cff36 chore: use virtio driver for disks in arm64
db248de88 chore(ci): add config for lldpd extension
9f0de9f43 test: update provision upgrade tests for Talos 1.9
39fe285e6 fix: skip ram disks
a9bff3a1d test: skip no error test in Cilium
4d902021b fix: do not use pflag csv comma reader for config-patch
5371788ce fix: typo in documentation
8a228ba6b docs: add egress documentation
182325cb0 test: skip lvm test if not enough user disks available
519a48302 fix: wipe system partitions correctly via kernel args
0a2b4556c fix: volume encryption with failing keyslots
6affbd318 fix: update grpc-go the latest patch release
77a4a4adc fix: scaleway metadata
7acadc0c8 fix: do not stop udevd before unmounting volumes
6a081055b feat: update Flannel to v0.25.7
2362f6d3e fix: improve container detection
b67bc73fd fix: fix mdadm system extension
f08669c7a feat: bring in lpfc kernel module driver
6a014374b feat: enable QEDF driver
f711907e0 fix: make /var/run empty on reboots
7d02eb60f docs: fix typo in CloudStack docs
74861573a fix: multiple fixes for LVM activation
74c12c20e feat: replace eudev with systemd-udevd
0a4df4ef8 docs: fix nvidia CRI config example
afc1e1a46 docs: fix typo in extraMounts directory
a341bdb06 fix: prevent file descriptors leaks to child processes
dec653bfe chore: better lvm2 tests
908fd8789 feat: support cgroup deep analysis in talosctl
aa846cc18 feat: add support for CI Network config in nocloud
10f2539f2 chore: disable cloud-images cron workflow
b07a8b36b chore: ignore more plugins for system containerd
392c4798f feat: prepare for Talos 1.9
ea7bf9fb4 docs: update storage.md
4ab8dee69 fix: build talosctl without tcell_minimal
2fa019bd9 docs: enable 'edit on GitHub' link
d2ccbc2b1 docs: update hetzner documentation for CCM
d498f647c docs: fix Kernel Self Protection Project (KSPP) references
0ec75463e docs: make Talos 1.8 current release
9b77698cf fix: update blockdevice library to v2.0.2
e46227ab9 docs: fix kubespan name inconsistency
6b15ca19c fix: audit and fix cgroup reservations
32b5d01ed chore: bump lvm2
6484581eb feat: allow /sbin/ldconfig in extensions
9fa08e843 chore: refactor tests
d8ab4981b feat: support lvm auto activation
8166a58b3 fix: filter out non-printable characters in process line
806b6aaf5 docs: add SECURITY.md
7bd26df30 docs: document /dev/net/tun compatibility
18daedb51 fix: strategic merge patch delete for map keys
f3370529a docs: correct typo
8d6884a8e test: add a test for inline machine config trusted roots
d4a6d017d fix: ignore invalid NTP responses
869f8379f feat: update default Kubernetes version to 1.31.1
780a1f198 fix: update CoreDNS health check
79cd03158 chore: account for resource sorting in dns upstream resource
e17fafaca chore: drop activateLogicalVolumes sequencer step
a294b366f fix: parse SideroLink API endpoint correctly
a9269ac7b fix: remove extra logging on ethtool ioctl failures
5c6277d17 feat: update etcd to 3.5.16
c1ed2984b docs: add what's new for Talos 1.8

Changes from siderolabs/crypto

1 commit

siderolabs/crypto@58b2f92 chore: use HTTP/2 ALPN by default

Changes from siderolabs/discovery-client

1 commit

siderolabs/discovery-client@b74fb90 fix: allow custom TLS config for the client

Changes from siderolabs/extras

2 commits

siderolabs/extras@eab6e58 feat: update dependencies
siderolabs/extras@1459d78 feat: update pkgs for 1.9

Changes from siderolabs/go-blockdevice

1 commit

siderolabs/go-blockdevice@134c41b fix: fast wipe also last 1MB of the device

Changes from siderolabs/go-circular

1 commit

siderolabs/go-circular@9a0f7b0 fix: multiple data race issues

Changes from siderolabs/go-kubernetes

1 commit

siderolabs/go-kubernetes@381f251 feat: update for Kubernetes 1.32

Changes from siderolabs/grpc-proxy

2 commits

siderolabs/grpc-proxy@de1c628 fix: copy data from big frame msg
siderolabs/grpc-proxy@ef47ec7 chore: upgrade Codec implementations and usages to Codec2

Changes from siderolabs/pkgs

25 commits

siderolabs/pkgs@be92da0 feat: update Linux to 6.6.57, update Linux firmware
siderolabs/pkgs@0b67a13 feat: bump dependencies
siderolabs/pkgs@dd5f928 feat: update Linux 6.6.56 and protect /proc/mem
siderolabs/pkgs@b1bf972 feat: enable CONFIG_XFRM_STATISTICS
siderolabs/pkgs@c63beae feat: update Linux to 6.6.54
siderolabs/pkgs@f474a55 fix: libselinux: support running without /etc/selinux
siderolabs/pkgs@ba0341e fix: systemd-udevd: search for config in /usr/etc
siderolabs/pkgs@2b193f1 feat: add lpfc kernel module
siderolabs/pkgs@1adb946 feat: enable QEDF driver
siderolabs/pkgs@dbbe3d0 feat: update containerd to v2.0.0-rc.5
siderolabs/pkgs@f19590e feat: update Go to 1.23.2
siderolabs/pkgs@e2a561f fix: drop the LVM2 udev lvm rule
siderolabs/pkgs@ae205aa fix: force LVM to use /run as state directory
siderolabs/pkgs@232a153 feat: replace eudev with systemd-udevd
siderolabs/pkgs@40fb82a feat: add libselinux, libsepol, pcre2 and libcap
siderolabs/pkgs@6f40fbb feat: update xfsprogs 6.10.1
siderolabs/pkgs@a1709c7 feat: enable module unloading and memory hotplug (for NVIDIA UVM)
siderolabs/pkgs@2c5785b feat: enable transparent huge pages in madvise mode
siderolabs/pkgs@ca2e8c8 fix: lvm2 modprobe path
siderolabs/pkgs@6b334a6 feat: update Linux to 6.6.52
siderolabs/pkgs@e90ae7e feat: update Linux firmware to 20240909
siderolabs/pkgs@79a4f92 feat: enable INET_DIAG
siderolabs/pkgs@c9f7eb9 feat: update Linux to 6.6.51
siderolabs/pkgs@126b6a4 fix: add mpt3sas UBSAN patches
siderolabs/pkgs@a09bf93 chore: drop UBSAN patch

Changes from siderolabs/proto-codec

3 commits

siderolabs/proto-codec@0d84c65 chore: add support for gogo protobuf generator
siderolabs/proto-codec@19f8d2e chore: add kres
siderolabs/proto-codec@e038bb4 Initial commit

Changes from siderolabs/siderolink

1 commit

siderolabs/siderolink@1893385 fix: initialize tls listener properly

Changes from siderolabs/tools

5 commits

siderolabs/tools@2058296 feat: bump dependencies
siderolabs/tools@1151610 feat: update Go to 1.23.2
siderolabs/tools@9f2189b fix: bump gettext-tiny to the latest dev version
siderolabs/tools@95069d6 feat: update Go to 1.23.1
siderolabs/tools@eec0656 feat: replace gettext with gettext-tiny

Dependency Changes

cloud.google.com/go/compute/metadata v0.5.0 -> v0.5.2
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.13.0 -> v1.15.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0 -> v1.8.0
github.com/aws/aws-sdk-go-v2/config v1.27.33 -> v1.28.0
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13 -> v1.16.17
github.com/aws/aws-sdk-go-v2/service/kms v1.35.7 -> v1.37.2
github.com/aws/smithy-go v1.20.4 -> v1.22.0
github.com/containerd/containerd/v2 v2.0.0-rc.4 -> v2.0.0-rc.5
github.com/containernetworking/plugins v1.5.1 -> v1.6.0
github.com/cosi-project/runtime v0.5.5 -> v0.6.4
github.com/docker/docker v27.2.0 -> v27.3.1
github.com/gopacket/gopacket v1.2.0 -> v1.3.0
github.com/klauspost/compress v1.17.9 -> v1.17.11
github.com/mdlayher/ethtool v0.1.0 -> v0.2.0
github.com/rivo/tview fd649dbf1223 -> c5e4fb24af13
github.com/siderolabs/crypto v0.4.4 -> v0.5.0
github.com/siderolabs/discovery-client v0.1.9 -> v0.1.10
github.com/siderolabs/extras v1.8.0 -> v1.9.0-alpha.0-1-geab6e58
github.com/siderolabs/go-blockdevice v0.4.7 -> v0.4.8
github.com/siderolabs/go-blockdevice/v2 v2.0.2 -> v2.0.3
github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
github.com/siderolabs/go-kubernetes v0.2.12 -> v0.2.13
github.com/siderolabs/grpc-proxy v0.4.1 -> v0.5.1
github.com/siderolabs/pkgs v1.8.0-8-gdf1a1a5 -> v1.9.0-alpha.0-24-gbe92da0
github.com/siderolabs/proto-codec v0.1.1 new
github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
github.com/siderolabs/talos/pkg/machinery v1.8.0 -> v1.9.0-alpha.0
github.com/siderolabs/tools v1.8.0-1-ga0c06c6 -> v1.9.0-alpha.0-4-g2058296
golang.org/x/net v0.29.0 -> v0.30.0
golang.org/x/sys v0.25.0 -> v0.26.0
golang.org/x/term v0.24.0 -> v0.25.0
golang.org/x/text v0.18.0 -> v0.19.0
golang.org/x/time v0.6.0 -> v0.7.0
google.golang.org/grpc v1.66.0 -> v1.67.1
google.golang.org/protobuf v1.34.2 -> v1.35.1

Previous release can be found at v1.8.0

Images

ghcr.io/siderolabs/flannel:v0.25.7
registry.k8s.io/coredns/coredns:v1.11.3
gcr.io/etcd-development/etcd:v3.5.16
registry.k8s.io/kube-apiserver:v1.31.1
registry.k8s.io/kube-controller-manager:v1.31.1
registry.k8s.io/kube-scheduler:v1.31.1
registry.k8s.io/kube-proxy:v1.31.1
ghcr.io/siderolabs/kubelet:v1.31.1
ghcr.io/siderolabs/installer:v1.9.0-alpha.0
registry.k8s.io/pause:3.9