v1.4.0-alpha.2

[smira]

Talos 1.4.0-alpha.2 (2023-02-28)

Welcome to the v1.4.0-alpha.2 release of Talos!
This is a pre-release of Talos

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Registry Mirror Catch-All Option

Talos now supports a catch-all option for registry mirrors:

machine:
    registries:
        mirrors:
            docker.io:
                - https://registry-1.docker.io/
            "*":
                - https://my-registry.example.com/

Talos Dashboard on TTY2

Talos now starts a text-based UI dashboard on virtual console /dev/tty2 and switches to it by default upon boot.
Kernel logs remain available on /dev/tty1.

To switch TTYs, use the Alt+F1 through Alt+F2 keys.

You can disable this behavior by setting the kernel parameter talos.dashboard.disabled=1.

This behavior is disabled by default on SBCs.

etcd Maintenance

Talos adds new APIs to make it easier to perform etcd maintenance operations.

These APIs are available via new talosctl etcd sub-commands:

• talosctl etcd alarm list|disarm
• talosctl etcd defrag
• talosctl etcd status

See also etcd maintenance guide.

Kernel Modules

Talos now supports automatically loading kernel drivers built as modules.
If any system extensions or the Talos base kernel build provides kernel modules and if they matches the system hardware (via PCI IDs), they will be loaded automatically.
Modules can still be loaded explicitly by defining it in machine configuration.

Kernel Modules Tree

Talos now supports re-building the kernel modules dependency tree information on upgrades.
This allows modules of same name to co-exist as in-tree and external modules.
System Extensions can provide modules installed into extras directory and when loading it'll take precendence over the in-tree module.

Machine Configuration

Strategic merge config patches correctly support merging .vlans sections of the network interface.

Reset API Enhancements

Talos now supports resetting user disks through the Reset API,
the list of disks to wipe is set using the --user-disks-to-wipe parameter in talosctl.
Additionally, the Reset API can now function in maintenance mode
and has the capability to wipe the node's system disk (partial wipe is not supported).

Component Updates

• Linux: 6.1.12
• containerd: v1.6.18
• Kubernetes: v1.26.1
• etcd: v3.5.7
• CoreDNS: v1.10.1

Talos is built with Go 1.20.1.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Spencer Smith
• Serge Logvinov
• Steve Francis
• Artem Chernyshev
• Tim Jones
• Andrey Smirnov
• Cees-Jan Kiewiet
• Chris van de Sande
• Lance R. Vick
• Matthias Riegler
• Michael Vorburger
• Murtaza Udaipurwala
• Nico Berlee
• Niklas Wik
• Rowan Smith
• Samuel Kees
• Sander Maijers
• Seán C McCord
• Steffen Windoffer
• Tim van Druenen
• Victor Seva
• budimanjojo

Changes

129 commits

• 594f27d87 release(v1.4.0-alpha.2): prepare release
• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs
• 92bc15f7f release(v1.4.0-alpha.1): prepare release
• e3da4754e feat: update Linux to 6.1.7
• 006449e46 test: build integration test early in the pipeline
• 09aa71264 fix: renovate config
• 2d136f187 feat: set markdown and html descriptions in config json schema
• f0804027a fix: renovate config
• 812a2877c chore: bump deps + renovate cleanup
• aa9f66c1c fix: mark DigitalOcean anchor IP as scope link
• bb4937f1b feat: enable renovate
• 3e0057162 fix: unwrap gRPC errors on stop/remove pods check
• 00e52ae07 fix: build correctly etcd initial cluster URL
• ae83b10ae feat: create JSON schema for v1alpha1.Config
• 703d96595 feat: update Kubernetes to 1.26.1, etcd to 3.5.7
• 965e64591 docs: update to use talosctl install script
• c5954f434 chore: bump deps
• bb50f6a56 chore: preallocate disk images for QEMU VMs
• d4b8b35de feat: generate kernel module dependency tree
• 18122ae73 fix: service restart (including extension services)
• 680fd5e45 fix: bump COSI runtime with the panic controller restart fix
• 0b65bbfc8 fix: handle overwriting tags in syslinux ADV
• 70d9428a1 fix: kubespan MSS clamping
• 683b4ccb4 chore: update Go to 1.19.5 and kernel to 6.1.4
• 062c7d754 test: fix integration test on cp endpoint update
• 8e9fc13d7 feat: implement enum generator for proto files
• 771b0dc06 docs: update left over rpi_4 ref to rpi_generic
• 6c04b5f79 chore: bump dependencies
• 0a5a8802e feat: use 'localhost' endpoint for controlplane nodes
• b0775ebf2 feat: add ISO wipe GRUB boot option
• 29020cb9c fix: report fatal sequence errors as reboots
• 96629d5ba feat: implement etcd maintenance commands
• 80fed3194 feat: include Kubernetes controlplane endpoint as one of the endpoints
• c6cb36cc1 docs: fix auditpolicy example typo
• ba8265bc5 feat: new talosctl config remove to remove context
• fcb19ff51 fix: implement upgrade version checks for Talos 1.4
• 80f150ac8 feat: enable ipv6 on gcp
• 8db622f3d docs: add Vandebron to adopters list
• f6a86ae90 fix: oralce cloud zone
• 89dbb0ecf release(v1.4.0-alpha.0): prepare release
• 31fb90535 feat: update Linux 6.1.1, containerd 1.6.14
• a0c0352dd fix: send diagnostic output to stderr consistently
• 9a5f4c08a fix: default the manifest namespace if not set
• 3c6cce5fe docs: update last release for Talos 1.2.x
• 703624c43 docs: fix the 1.3 release date
• 386c9293a docs: update nvidia-container-runtime version
• ff83d9fd7 fix: improve talosctl completion
• 31ff431fa chore: add schulz systemtechnik to the list
• 97bef7c47 docs: vsphere.sh > vmware.sh
• 34babe858 chore: make organization selection an interface
• a9643b477 fix: use proper key usage for apid client certificate
• 171aa9467 fix: disable Wireless Lan using dtoverlay
• 2e84d2ab3 chore: update conformance product.yaml
• b7763843a feat: add install script that improves talosctl installation user experience This install script detects the platform and architecture, and downloads the correct talosctl, and checks the gpg checksums. It also installs and chmods the binary.
• afc45ad63 docs: mark Talos 1.3 docs as default
• 873bd3807 fix: redact service account key in config in RedactSecrets method
• b3aebfadf feat: validate Talos API access roles in machine config
• 40761e17d docs: fork docs for Talos 1.4
• 474604cd2 docs: update documentation for Talos 1.3
• faf49218c feat: add more checks for K8s upgrade
• 5b992bd86 fix: allow empty dnsDomain in machine config
• eb332cfcb feat: add health check for a minimal memory / disk size
• d04970dfa fix: ignore k8s additional addresses if nil
• 63c17104c feat: update Kubernets to 1.26.0
• f7a9a90db chore: update pkgs/tools (Go 1.19.4, containerd 1.6.11)
• cf7adc51c feat: add RedactSecrets method to v1alpha1.Config
• 4c31b9b1a docs: clarify what the deal is with /var
• a8ebcca4a chore: remove watchErr from metal.getResource
• 1253513bd fix: fix nil pointer panic and incorrect error output
• 82e8c9e1f fix: workaround panic in the kubelet service controller
• a505b8909 fix: update COSI and reset restart backoff on success
• e92fdcbad chore: bump kernel to 5.15.81
• f0dddca2a docs: expand help for 'talosctl get'
• fcffc8879 fix: add ext4 filesystem detection
• 5b2960eff fix: introduce 'overridePath' setting and fix Talos resolver
• 0219d1124 fix: use only kube-apiserver endpoints for Talos API access endpoints
• dc5e0f4af fix: report errors to Equinix Metal event API
• 7ab140a94 feat: add talosctl machineconfig patch command
• d3cf06114 fix: ignore many more filesystems in IMA
• 44e2799b8 feat: add stdout and single config type support to talosctl gen config
• 4452f0e17 docs: bump talos version
• 38e57bd12 feat: update Kubernetes to v1.26.0-rc.1
• 4cd125d49 fix: correctly handle new watch event types
• 881b84152 feat: update Flannel to 0.20.2

Changes since v1.4.0-alpha.1

47 commits

• 594f27d87 release(v1.4.0-alpha.2): prepare release
• b52071081 feat: introduce new flag in reset API that makes Talos reset user disks
• f55f5df73 feat: move dashboard package & run it in tty2
• 36e077ead chore: bump deps
• 5a01d5fd4 chore: run extension build as downstream
• 426fe9687 fix: extension base folder permission
• 609d3a8a6 feat: support strategic merge patches on VLAN configuration
• 7e19f32d7 chore: provide version compatibility data for Talos 1.2.x
• 230e46e56 refactor: extract parts of kubernetes libraries
• f3d3f0f26 fix: update go-smbios library with Hyper-V data fix
• 8711eea96 fix: use passed --context in talosctl config cmd
• 5ac9f43e4 feat: start machined earlier & in maintenance mode
• 36ab414a1 docs: fix the endpoints in the libvirt guide
• 3d55bd80f fix: add --force flag to talosctl gen config
• 660b8874d feat: cmdline integer netmask
• 1e3daacc4 docs: update nvidia component versions
• b5c03a7fa fix: docker talosctl cluster create provisioner
• 6e8f13529 fix: add support for a fallback '*' mirror configuration
• dcd4eb1a9 fix: improve error message on single node upgrade
• ed5af3f78 chore: bump deps
• 0dc6858e5 chore: bump cosi-project/runtime
• da2edb9de chore: bump dependencies
• e51a110f0 chore: bump dependencies
• 2d0148018 feat: automatically load modules based on hw info
• 7b75cd8b9 fix: kernel module dependency tree generation
• 65d02e5ad fix: dbus shutdown when it's not initialized
• a7079ce85 fix: quote the ampersand character in GRUB config
• 933ba2d82 fix: display correct blockdevice size
• c449cb736 fix: talosctl reboot command passing mode in wait mode
• 34ab0007a docs: port is needed for wireguard endpoint
• 1e1aa84f6 fix: kubernetes removed resource version check
• dcbcf5a93 fix: wait for network and retry in platform get config funcs
• 3d7566ec7 test: update Canal CNI manifest URL
• e09e10666 fix: default dns domain to 'cluster.local' in local case
• cc6e37a47 feat: use process wrapper for dropping capabilities
• 0c6c88874 fix: trackable action flag usage text. --no-wait does not exist
• 5cb2915d8 feat: use wrapper for starting processes
• 56d945326 fix: panic in talosctl cluster show
• 38a51191e fix: correctly expand parameters in the URL
• af21860a2 fix: return proper error if download attempts time out
• 54f7d4c92 fix: correctly quote and unquote strings in GRUB config
• 54cf0672a fix: omit zero MTU in the machine config
• bdc53ac25 docs: add hyperlink to Docker API docs about config.json
• b3bc06dd1 chore: bump vtprotobuf to v0.4.0
• 0ba5e59f6 fix: drone config for renovate PR's
• 590a393de fix: udevd healthcheck
• 2b6b6deac docs: simplify and clarify digital ocean docs

Changes from siderolabs/discovery-api

1 commit

• siderolabs/discovery-api@ac75538 chore: regen the proto definitions with vtprotobuf v0.4.0

Changes from siderolabs/discovery-client

1 commit

• siderolabs/discovery-client@269a832 chore: rekres, update discovery api

Changes from siderolabs/extras

6 commits

• siderolabs/extras@8b28b6b chore: bump deps
• siderolabs/extras@5ab4f59 chore: disable renovate builds
• siderolabs/extras@ddeddbd chore: update packages, tc_redirect_tap
• siderolabs/extras@8cb4792 chore: update Go to 1.19.5
• siderolabs/extras@3ca2df3 chore: disable provenance in buildx
• siderolabs/extras@55d8452 feat: update releases

Changes from siderolabs/gen

2 commits

• siderolabs/gen@214c1ef chore: set slice.Filter result slice cap to len
• siderolabs/gen@8e89b1e feat: add GetOrCreate and GetOrCall methods

Changes from siderolabs/go-blockdevice

1 commit

• siderolabs/go-blockdevice@8c7ea19 fix: blockdevice size is reported by Linux in 512 blocks always

Changes from siderolabs/go-kubernetes

2 commits

• siderolabs/go-kubernetes@570819b feat: initial version of the library
• siderolabs/go-kubernetes@fb79215 Initial commit

Changes from siderolabs/go-smbios

1 commit

• siderolabs/go-smbios@c526764 feat: fix reading "broken" Hyper-V DMI data

Changes from siderolabs/pkgs

30 commits

• siderolabs/pkgs@5dbce6b fix: xz url
• siderolabs/pkgs@0097233 chore: re-enable drbd
• siderolabs/pkgs@7493721 fix: sourcefourge url shasums
• siderolabs/pkgs@185f482 feat: update containerd to 1.6.18
• siderolabs/pkgs@e3cab6c chore: bump deps
• siderolabs/pkgs@18661b0 chore: bump deps
• siderolabs/pkgs@885a68b chore: bump deps
• siderolabs/pkgs@c3a6e18 chore: bump dependencies
• siderolabs/pkgs@1fae0b2 feat: virtio drivers as modules
• siderolabs/pkgs@61d8ff4 chore: bump deps and disable un-needed kconfig
• siderolabs/pkgs@15fe6d8 fix: kernel module tree files missing
• siderolabs/pkgs@987d24a feat: mellanox drivers are modules
• siderolabs/pkgs@b82a015 feat: mellanox oped
• siderolabs/pkgs@057d4f9 chore: bump deps
• siderolabs/pkgs@4ac4138 feat: enable nvme support for raspberrypi cm4
• siderolabs/pkgs@ccb9d39 fix: disable magic sysrq
• siderolabs/pkgs@d33202d chore: bump u-boot to 2023.01
• siderolabs/pkgs@cb83e16 chore: bump dependencies
• siderolabs/pkgs@e561dcb feat: bump Go to 1.19.5
• siderolabs/pkgs@c7797c7 feat: update Linux to 6.1.4, restore RPi support
• siderolabs/pkgs@5e8ebb0 feat: add AMD K10 sensor support
• siderolabs/pkgs@73ac37d chore: disable provenance in buildx
• siderolabs/pkgs@8965bee chore: use default symlinks to /bin in base
• siderolabs/pkgs@325c9bf feat: bump dependencies
• siderolabs/pkgs@165dff6 fix: patch ipmitool IANA URL
• siderolabs/pkgs@c542f39 feat: add kernel support for usb setrial console
• siderolabs/pkgs@f564f45 chore: bump tools, containerd
• siderolabs/pkgs@268ea7c chore: bump deps
• siderolabs/pkgs@dcf3ceb feat: add nitro enclave support in kernel
• siderolabs/pkgs@17ea5e6 chore: bump kernel to 5.15.81

Changes from siderolabs/tools

20 commits

• siderolabs/tools@cd9687b fix: renovate config
• siderolabs/tools@977e3fc chore: bump go to 1.20.1
• siderolabs/tools@15748aa chore: bump deps
• siderolabs/tools@d4b719a chore: bump deps
• siderolabs/tools@8c36dbd chore: bump toolchain, bump protoc-gen-go-grpc
• siderolabs/tools@a62e365 feat: update Go to 1.20
• siderolabs/tools@28d4a57 chore: reduce renovate noise
• siderolabs/tools@e130fd5 chore: bump deps
• siderolabs/tools@37612fe fix: revert enabling provenance
• siderolabs/tools@e0b01e3 chore: bump deps
• siderolabs/tools@d0e6bd0 feat: add gnutls
• siderolabs/tools@3d34b5d chore: bump dependencies
• siderolabs/tools@763c1d9 feat: update Go to 1.19.5
• siderolabs/tools@136958f chore: disable provenance in buildx
• siderolabs/tools@e2a8692 feat: update releases
• siderolabs/tools@0e48f37 chore: bump protobuf
• siderolabs/tools@a21aa1c chore: bump toolchain and mpc versions
• siderolabs/tools@1a75d0f chore: bump deps
• siderolabs/tools@55bd185 feat: update Go to 1.19.4
• siderolabs/tools@f291f46 chore: bump tools

Dependency Changes

• cloud.google.com/go/compute/metadata v0.2.1 -> v0.2.3
• github.com/aws/aws-sdk-go v1.44.147 -> v1.44.209
• github.com/containerd/cgroups v1.0.4 -> v1.1.0
• github.com/containerd/containerd v1.6.12 -> v1.6.18
• github.com/containernetworking/plugins v1.1.1 -> v1.2.0
• github.com/coreos/go-semver v0.3.0 -> v0.3.1
• github.com/cosi-project/runtime v0.2.0 -> v0.3.0-alpha.7
• github.com/docker/docker v20.10.21 -> v23.0.1
• github.com/dustin/go-humanize v1.0.0 -> v1.0.1
• github.com/emicklei/dot v1.2.0 -> v1.3.1
• github.com/fatih/color v1.13.0 -> v1.14.1
• github.com/freddierice/go-losetup/v2 v2.0.1 new
• github.com/gdamore/tcell/v2 v2.5.3 -> v2.6.0
• github.com/hashicorp/go-getter v1.6.2 -> v1.7.0
• github.com/hetznercloud/hcloud-go v1.37.0 -> v1.40.0
• github.com/insomniacslk/dhcp f26e6d78f622 -> 5369909a5de7
• github.com/jsimonetti/rtnetlink v1.3.0 -> v1.3.1
• github.com/mattn/go-isatty v0.0.16 -> v0.0.17
• github.com/mdlayher/ethtool 0e16326d06d1 -> ba3b4bc2e02c
• github.com/mdlayher/genetlink v1.3.0 -> v1.3.1
• github.com/mdlayher/netlink v1.7.0 -> v1.7.1
• github.com/prometheus/procfs v0.8.0 -> v0.9.0
• github.com/rivo/tview db36428c92d9 -> 47e7db7885b4
• github.com/scaleway/scaleway-sdk-go v1.0.0-beta.10 -> v1.0.0-beta.13
• github.com/siderolabs/discovery-api v0.1.1 -> v0.1.2
• github.com/siderolabs/discovery-client v0.1.3 -> v0.1.4
• github.com/siderolabs/extras v1.3.0-1-g3773d71 -> v1.4.0-alpha.0-5-g8b28b6b
• github.com/siderolabs/gen v0.4.1 -> v0.4.3
• github.com/siderolabs/go-blockdevice v0.4.2 -> v0.4.3
• github.com/siderolabs/go-kubernetes v0.1.0 new
• github.com/siderolabs/go-smbios v0.3.1 -> v0.3.2
• github.com/siderolabs/pkgs v1.3.0-5-g6509d23 -> v1.4.0-alpha.0-29-g5dbce6b
• github.com/siderolabs/talos/pkg/machinery v1.3.0 -> v1.4.0-alpha.2
• github.com/siderolabs/tools v1.3.0-1-g712379c -> v1.4.0-alpha.0-17-gcd9687b
• github.com/stretchr/testify v1.8.1 -> v1.8.2
• github.com/u-root/u-root v0.10.0 -> v0.11.0
• github.com/ulikunitz/xz v0.5.11 new
• github.com/vmware-tanzu/sonobuoy v0.56.12 -> v0.56.15
• github.com/vmware/govmomi v0.29.0 -> v0.30.2
• go.etcd.io/etcd/api/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/pkg/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/client/v3 v3.5.6 -> v3.5.7
• go.etcd.io/etcd/etcdutl/v3 v3.5.6 -> v3.5.7
• go.uber.org/zap v1.23.0 -> v1.24.0
• go4.org/netipx 797b0c90d8ab -> 8449b0a6169f
• golang.org/x/net v0.4.0 -> v0.7.0
• golang.org/x/sys v0.3.0 -> v0.5.0
• golang.org/x/term v0.3.0 -> v0.5.0
• golang.org/x/time v0.2.0 -> v0.3.0
• golang.zx2c4.com/wireguard/wgctrl 97bc4ad4a1cb -> 9c5414ab4bde
• google.golang.org/grpc v1.51.0 -> v1.53.0
• k8s.io/api v0.26.0 -> v0.26.1
• k8s.io/apimachinery v0.26.0 -> v0.26.1
• k8s.io/apiserver v0.26.0 -> v0.26.1
• k8s.io/client-go v0.26.0 -> v0.26.1
• k8s.io/component-base v0.26.0 -> v0.26.1
• k8s.io/klog/v2 v2.80.1 -> v2.90.0
• k8s.io/kubectl v0.26.0 -> v0.26.1
• k8s.io/kubelet v0.26.0 -> v0.26.1
• kernel.org/pub/linux/libs/security/libcap/cap v1.2.66 -> v1.2.67

Previous release can be found at v1.3.0

Images

ghcr.io/siderolabs/flannel:v0.20.2
ghcr.io/siderolabs/install-cni:v1.4.0-alpha.0-5-g8b28b6b
docker.io/coredns/coredns:1.10.1
gcr.io/etcd-development/etcd:v3.5.7
registry.k8s.io/kube-apiserver:v1.26.1
registry.k8s.io/kube-controller-manager:v1.26.1
registry.k8s.io/kube-scheduler:v1.26.1
registry.k8s.io/kube-proxy:v1.26.1
ghcr.io/siderolabs/kubelet:v1.26.1
ghcr.io/siderolabs/installer:v1.4.0-alpha.2
registry.k8s.io/pause:3.6

---

This discussion was created from the release v1.4.0-alpha.2.