v1.8.2

Talos 1.8.2 (2024-10-28)

Welcome to the v1.8.2 release of Talos!

Starting with Talos v1.8.0, only standard assets would be published as github release assets. These include:

• cloud-images.json
• talosctl binaries
• kernel
• initramfs
• metal iso and disk images
• talosctl-cni-bundle

All other release assets can be downloaded from Image Factory.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

Linux: 6.6.58
containerd: 2.0.0-rc.6
runc: 1.2.0
Kubernetes: 1.31.2

Talos is built with Go 1.22.8.

Contributors

• Andrey Smirnov
• Dmitriy Matrenichev
• Joakim Nohlgård
• Noel Georgi
• Philip Schmid
• Philipp Kleber
• Serge Logvinov

Changes

18 commits

• 88f861a08 release(v1.8.2): prepare release
• cfc10106a fix: include iptables/netfilter ipv6 fix
• d8e2daf77 fix: wait for udevd to be running before activating LVM
• e105a3d74 fix: talosctl process null character
• 0e96e99b2 fix: rework the 'metal-iso' config acquisition
• 7ef579650 fix: improve error messages for invalid bridge/bond configuration
• a3fcbe0ba chore: rename tpm2.PCRExtent -> tpm2.PCRExtend
• a9e6e60ca fix: correct error message for invalid ip=
• 49de0abaa fix: update incorrect alias for PCIDevice resource
• 9b561ac3d feat: add Talos 1.9 compatibility guarantees
• 2ea3f85bc chore: update siderolabs/crypto module and return proper ALPN
• ce4791251 feat: optionally decode hcloud userdata as base64
• f20a6900d fix: json logging panic
• d855bb8be fix: skip ram disks
• b429e7f28 fix: do not use pflag csv comma reader for config-patch
• ee44f2c51 test: skip no error test in Cilium
• 7d055af29 fix: scaleway metadata
• 9f62fe96c feat: update pkgs and Kubernetes

Changes from siderolabs/crypto

1 commit

• siderolabs/crypto@58b2f92 chore: use HTTP/2 ALPN by default

Changes from siderolabs/go-circular

1 commit

• siderolabs/go-circular@9a0f7b0 fix: multiple data race issues

Changes from siderolabs/pkgs

8 commits

• siderolabs/pkgs@e72b2f4 fix: apply netfilter ipv6 fix
• siderolabs/pkgs@9aac1a8 feat: update containerd to v2.0.0-rc.6
• siderolabs/pkgs@9668729 feat: update Linux to 6.6.58
• siderolabs/pkgs@9bc27b3 feat: update runc to 1.2.0
• siderolabs/pkgs@f7cc89e fix: default IOMMU mode to 'lazy'
• siderolabs/pkgs@7ca4e2c feat: update Linux to 6.6.57, update Linux firmware
• siderolabs/pkgs@e2c4848 feat: update Linux 6.6.56 and protect /proc/mem
• siderolabs/pkgs@c7729c3 feat: enable CONFIG_XFRM_STATISTICS

Changes from siderolabs/siderolink

1 commit

• siderolabs/siderolink@1893385 fix: initialize tls listener properly

Dependency Changes

• github.com/klauspost/compress v1.17.10 -> v1.17.11
• github.com/siderolabs/crypto v0.4.4 -> v0.5.0
• github.com/siderolabs/go-circular v0.2.0 -> v0.2.1
• github.com/siderolabs/pkgs v1.8.0-16-g71d23b4 -> v1.8.0-24-ge72b2f4
• github.com/siderolabs/siderolink v0.3.10 -> v0.3.11
• github.com/siderolabs/talos/pkg/machinery v1.8.1 -> v1.8.2
• golang.org/x/time v0.6.0 -> v0.7.0
• k8s.io/api v0.31.1 -> v0.31.2
• k8s.io/apiserver v0.31.1 -> v0.31.2
• k8s.io/client-go v0.31.1 -> v0.31.2
• k8s.io/component-base v0.31.1 -> v0.31.2
• k8s.io/kube-scheduler v0.31.1 -> v0.31.2
• k8s.io/kubectl v0.31.1 -> v0.31.2
• k8s.io/kubelet v0.31.1 -> v0.31.2
• k8s.io/pod-security-admission v0.31.1 -> v0.31.2

Previous release can be found at v1.8.1

Images

ghcr.io/siderolabs/flannel:v0.25.7
registry.k8s.io/coredns/coredns:v1.11.3
gcr.io/etcd-development/etcd:v3.5.16
registry.k8s.io/kube-apiserver:v1.31.2
registry.k8s.io/kube-controller-manager:v1.31.2
registry.k8s.io/kube-scheduler:v1.31.2
registry.k8s.io/kube-proxy:v1.31.2
ghcr.io/siderolabs/kubelet:v1.31.2
ghcr.io/siderolabs/installer:v1.8.2
registry.k8s.io/pause:3.9