feat(container): update image ghcr.io/siderolabs/talosctl to v1.11.0 #318
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![robodexo2000[bot]](https://avatars.githubusercontent.com/in/446641?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.10.7->1.11.0Release Notes
siderolabs/talos (ghcr.io/siderolabs/talosctl)
v1.11.0Compare Source
Welcome to the v1.11.0-alpha.3 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Azure
Talos on Azure now defaults to MTU of 1400 bytes for the
eth0interface to avoid packet fragmentation issues.The default MTU can be overriden with machine configuration.
IMA support removed
Talos now drops the IMA (Integrity Measurement Architecture) support. This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues. See #11133 for more details.
Kubernetes Version Validation
Talos now validates Kubernetes version in the image submitted in the machine configuration.
Previously this check was performed only on upgrade, but now it is consistently applied to upgrade, initial provisioning, and machine configuration updates.
This implies that all image references should contain the tag, even if the image is pinned by digest.
Qemu provisioner on MacOS
On MacOS
talosctl cluster createcommand now supports the Qemu provisioner in addition to the Docker provisioner.Swap Suport
Talos now supports swap on block devices.
This feature can be enable by using SwapVolumeConfig document in the machine configuration.
Component Updates
Linux: 6.12.35
Kubernetes: 1.34.0-alpha.2
runc: 1.3.0
containerd: 2.1.3
Flannel CNI plugin: 1.7.1-flannel1
Flannel: 0.27.0
CoreDNS: 1.12.2
Talos is built with Go 1.24.4.
VMware
Talos VMWare platform now supports
arm64architecture in addition toamd64.Zswap Support
Talos now supports zswap, a compressed cache for swap pages.
This feature can be enabled by using ZswapConfig document in the machine configuration.
Contributors
Changes
170 commits
777335f23chore: improve cloud image uploader resilience14e5eee7drelease(v1.11.0-alpha.2): prepare release1e5a008f5fix: hold user volume mount point across kubelet restartscdad50590docs: user volumes and kubernetes upgrade updatesc880835c8feat: implement zswap support7f0300f10feat: update dependencies, Kubernetes 1.34.0-alpha.261afbe3d2docs: add vc4 documentationb9dbdc8e7fix: etcd recover with multiple advertised addresses19d94c357feat: update Linux to 6.12.35, containerd to 2.1.344a1fc3b7fix: treat context canceled as expected error on image pull4da2dd537feat: enforce Kubernetes version compatibility6c7f8201afix: set default MTU on Azure to 1400091cd6989docs: small yaml typo fix66ecbd48fdocs: update support matrix with omni versionc948d7617docs: minor fixes for creating kernel modulescc14c4a25docs: add docs for creating kernel modules93bcd3b56docs: create SBOM for Go dependencies38c4ce415feat: add user-space InfiniBand modules251dc934ffeat: arm64 support for platform vmware09b3ad577feat: update containerd to 2.1.20767dd07bchore: enable --with-siderolink-agent on Darwin9642198d7fix: userspace wireguard library overrides208f0763echore: fix talosctl build on non-Linux hosts87421af87docs: expand documentation descriptiond32ccfa59feat: implement swap support8f5cf81dbdocs: update kvm documentation8e84c8b0ffix: nil pointer deref in quirk6e74a3676docs: aad ery basic details on how to run on scaleway260d1bc9afix: correctl close encrypted volumes034ef42affix: update siderolink library for wgtunnel panic fix3035744a8fix: correctly predict interface name on darwincfcfad3c4chore: movecheckUnknownKeysfunction togithub.com/siderolabs/gen5ecc53c69docs: add macos section to developing-talos.mdb5b35307fchore: update Go to 1.24.4fde772d8dfeat: update Flannel to 0.27.081ca27949release(v1.11.0-alpha.1): prepare release58a868e68chore: fix renovate config, add release-gate labela59aaee84feat: bump dependencies, Linux 6.12.31e954ee30adocs: typo correction: LongHorn -> Longhornaab053394fix: mashal resource byte slices as strings in YAMLc7d4191e7fix: rework the way CRI config generation is waited for0114183dedocs: updatelastReleaseto 1.10.3938b0760adocs: update issue template2a7b735b2feat: drop IMA support2d5a805b0fix: typo in DiscoverdVolume spec60c12bad9feat: support nocloud include url userdata directive0fd622c82fix(talosctl): correct --help output for dashboard commanda90c936a1feat: support qemu provisioner on darwin5322ca0d3docs: update overlay docsa60b6322dfix(ci): drop nebula from extensions testdbbb59a67docs: add note for defaultdataDirHostPathfor Rooke26054378docs: macos qemu provider5d0224093docs: use the cilium-cli image repo in the job installation manifestff80e4ccadocs: fix CIDR namea5fd15e8bfix(ci): reproducibility test8f8963e50docs: update Nexxen brandc6b86872dfix(ci): iso reproducibility file permissions995a1dec4chore: add a check for unsupported darwin flags9db5d0c97fix: nocloud metadata for hostname3cf325654feat: modularize more arm64 kernel3524745ccfix: allow any PKI in Talos APIf438cdb09chore: use custom dhcpd server on macos qemu11c17fb9afix: metal-iso reproducibility7fcb89ee3chore: add darwin vmnet qemu supportfc1237343chore: clean up/usr/binb551f32cefeat: update containerd to v2.1.167f4154f9docs: update disk-management.md0cb137ad7fix: make disk size check work on old Talos7c057edd5fix: use vmdk-convert istead of qemu-img to create VMDK for OVA filescd618dad0chore: update the go-blockdevice package0b99631a0fix: bump apid memory limit5451f35b1docs: update virtualboxbd4d202a5refactor: bring owned.State from COSI to simplify tests0b96df574feat: update containerd to 2.1.0e1a939144docs: fix formatting in disk encryption7a817df1cdocs: fix typof35b213b2test: fix DHCP unicast failures in QEMU environment7064bbf05docs: fix vmware factory URL78c33bcdbfeat: update default Kubernetes to v1.33.1da6795266fix: disable automatic MAC assignment to bridge interfacesca34adf58chore(ci): drop azure keysea5de19fafix: selinux detection52c76ea3afix: consistently apply dynamic grpc proxy dialeraa9569e5dchore: refactor cluster create cmd flags1161faa05docs: fix typo in Cilium docs164745e44docs: removepreserveflag mention in upgrade notes9a2ecbaaffix: makefile operating system param118aa69d6chore: update cloud-image-uploader dependenciesacdd721cfchore: dump qemu pachine ipam records on darwinbb9094534chore: rotate aws iam credentials0bfa4ae1bchore: update deps for cloud-image-uploader956d7c71bchore: update sops keyse2f819d88test: fix the process runner log collectionfdac4cfb9fix: upgrade go-kubernetes for DRA flag bug09d88e1e8test: fix some flaky testsec1f41a94chore: make qemu config server bind work on darwin980f4d2b9feat: bump dependencies95259337efix: k8s 1.32->1.33 upgrade checkc3c326b40fix: improve volume mounter automaton918b94d9arefactor: rewrite disk size checkab7e693d7chore: make qemu lb address bind work on darwin97ceab001fix: multiple logic issues in platform network config controller46349a9dfdocs: remove azure image gallery instructions0cfcdd3dedocs: fix search on base talos.dev78646b4e0docs: add registryd debug commandc6824c211fix: deny apply config requests without v1alpha1 in "normal" mode7df0408e4fix: interactive installer config gen881c5d62bfix: suppress duplicate platform config updates66d77888efix: replace downloaded asset paths correctly in cluster create cmd6bd6c9b5afix: generate iso greater than 4 gigac140324efix: skip PCR extension if TPM1.2 is found09ef1f8a4fix: ignore http proxy on grpc socket dial22a72dc80chore: split options between three structs22c34a50ffix(ci): provision cron jobsb3b20eff3fix: containerd crashing with sigsegvf7891c301chore: calculate vmnet interface name preemptivelyae87edffbfix: drop libseccomp from rootfsf74a805bbfix: do correct backoff for nocloud reconcile01bb294affix(ci): provision testse4945be3bdocs: add registryd debug commandd8c670ad3release(v1.11.0-alpha.0): prepare releaseace44ea61test: update hydrophone to 0.7.03a1163692chore: cross platform qemu preflight checks7914fb104chore: move the create command to it's own packagec8e619608chore: prepare for release 1.111299aaa45chore(ci): add extensions test for Youki runtimee50ceb221docs: activate Talos 1.10 docs9d12aaeb1test: improve config patch test106a656b6chore: make qemu provider build on darwin8013aa06ctest: replace platform metadata test2b89c2810fix: relax etcd APIs RBAC requirements1e677587cfix: preserve kubelet image suffix62ab8af45fix: disk image generation with image cached60626f01fix: handle encryption type mismatcha9109ebd0feat: allow SideroLink unique token in machine config2ff3a6e40feat(kernel): add bcache kernel module to core talosfa95a2146fix(ci): bios provision testf7c5b86befix: sync PCR extension with volume provisioning lifecyclef90c79474chore: show bound driver in pcidevices info8db34624cfix: handle correctly changing platform network config77c7a075bfeat: update Kubernetes to 1.33.074f0c48c7feat: add version compatibility for Talos 1.11c4fb7dad0fix: force DNS runner shutdown on timeoutc49b4836edocs: hetzner: add note about public iso16ea2b113docs: add what is new for 1.10be3f0c018fix: fix Gvisor tests with containerd patch37db132b3chore(ci): add provision test with biosec60b70e7fix: set media type to OCI for image cache layera471eb31bfeat: update Linux 6.12.24, containerd 2.0.554ad5b872fix: extension services logging to console601f036badocs: correct flannel extra args exampleae94377d1feat: support encryption config for user volumes9616f6e8ddocs: add caveat for kubespan and host portsa1d08a362docs: fixes typo at OpenEBS Mayastor worker patchesa91e8726edocs: add a dark themec76189c58fix: grub EFI mount point4ca985c65fix: grub efi platform installb31260281docs: update storage.md396a29040feat: add new SBCsa902f6580feat: update Flannel to v0.26.72bbefec1adocs: use cache in preview6028a8d2ddocs: update kubeprism.mde51a8ef8cfix: prefer newMountStatusresourced9c7e7946docs: fix searchb32fa029bfeat: update Kubernetes to 1.33.0-rc.1f0ea478cbfeat: support address priority8cd3c8dc7test: fix NVIDIA OSS tests62f2d27cddocs: update virtualbox.md141326ea3docs: fix tabpane styling134aa53ccfeat: update base CoreDNS code in host DNS to 1.12.1Changes since v1.11.0-alpha.2
1 commit
777335f23chore: improve cloud image uploader resilienceChanges from siderolabs/crypto
2 commits
17107aefix: add generic CSR generator and OpenSSL interop53659fcrefactor: split into filesChanges from siderolabs/gen
4 commits
dcb2b74feat: addpanicsafepackageb36ee43feat: makexyaml.CheckUnknownKeyspublic3e319e7feat: implementxyaml.UnmarshalStrict7c0324fchore: future-proof HashTrieMapChanges from siderolabs/go-circular
1 commit
5b39ef8fix: do not log error if chunk zero was never writtenChanges from siderolabs/go-kubernetes
3 commits
657a74bfeat: prepare for Kubernetes 1.349070be4fix: remove DynamicResourceAllocation feature gate8cb588bfix: k8s 1.32->1.33 upgrade checkChanges from siderolabs/pkgs
41 commits
03bb94cfeat: update dependenciesc613abdfix: iptables urlfae59dffix: download and copy hailo8 firmwarefadf1e2feat: update containerd to 2.1.2a0b0da1feat: enable io.latency cgroup controller0aaa07afeat: add hailort package8555e94chore: use ftpmirror for GNU sources9fbe2b4feat: update Go to 1.24.479bfa9efeat: update NVIDIA drivers to 570.148.08c8b8bd8feat: bump dependencies54bf03efeat: update Linux to 6.12.3193b3aaafeat: add patch for CephFS IMA performance regressionebd6627feat: disable IMA support8aad53bfeat: add CONFIG_NFT_CONNLIMIT to kernel7a299fafeat: update Linux to 6.12.308c4603efeat: move more configs to modules on arm647b1183bfeat(kernel): enable IB user-space management and RDMA1b1430efix: drop pcre2 binaries487610cfix: drop broken symlinksf31d518fix: clean up some binaries0f74b9bfeat: update containerd to v2.1.189b4037fix: tenstorrent pkg namea14b544chore: drop qemu-tools vmdk support2563e47feat: add tenstorrent package2a1c42ffix(renovate): flannel configbfa69a8feat: add open-vmdk package9f1ba1ffix: bring back updated containerd gvisor patch1567cb6feat: update Linux 6.12.28, firmware9bc66e6feat: update containerd to 2.1.0c6b54e0feat: enable zswap4cd7084feat: update dependenciesa3fcbf8feat(kernel): enable panthor driver74d1665feat: update ZFS to 2.3.2ddc866bfeat: update Linux to 6.12.27a347857fix: build containerd with Go 1.2374da85cfix: containerd build doesn't need seccomp4effa05fix: downgrade libseccomp to 2.5.59cea00bfeat: update Linux to 6.12.25cb108a5feat(kernel): enable bcache moduled042432fix: backport sandbox fix for Gvisorfa625dcfeat: update Linux 6.12.24, containerd 2.0.5Changes from siderolabs/siderolink
3 commits
5f46f65feat: handle panics in goroutinesd09ff45fix: race in wait valued2a79e0fix: clean up device on failureChanges from siderolabs/tools
4 commits
1dfd14bfeat: update Go to 1.24.4af3fd64feat: update dependenciese35234bfeat: update dependenciesc96a4e6chore: update toolchain to the latest versionDependency Changes
432fa64new69fb7db->a3183a1949945f->a4a78f1b92baf7-> v0.7.0Previous release can be found at v1.10.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.