You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Talos Linux can now apply the default AppArmor profiles to all workloads started via containerd, if the machine is installed with the AppArmor LSM enforced via the extraKernelArgs.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Talos 1.8.0-alpha.1 (2024-07-08)
Welcome to the v1.8.0-alpha.1 release of Talos!
This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Workload Apparmor Profile
Talos Linux can now apply the default AppArmor profiles to all workloads started via containerd, if the machine is installed with the AppArmor LSM enforced via the extraKernelArgs.
Eg:
Bridge Interface
Talos Linux now support configuring 'vlan_filtering' for bridge interfaces.
Diagnostics
Talos Linux now shows diagnostics information for common problems related to misconfiguration via
talosctl health
and Talos dashboard.DNS Forwarding for CoreDNS pods
Usage of the host DNS resolver as upstream for Kubernetes CoreDNS pods is now enabled by default. You can disable it
with:
Please note that on running cluster you will have to kill CoreDNS pods for this change to apply.
PCI Devices
A list of PCI devices can now be obtained via
PCIDevices
resource, e.g.talosctl get pcidevices
.Component Updates
Kubernetes: 1.30.2
Linux: 6.6.36
containerd: 2.0.0-rc.3
runc: 1.2.0-rc.2
etcd: 3.5.14
Flannel: 0.25.3
Flannel CNI plugin: 1.5.1
Talos is built with Go 1.22.5.
ZSTD Compression
Talos Linux now compresses kernel and initramfs using ZSTD.
Linux arm64 kernel is now compressed (previously it was uncompressed).
Contributors
Changes
166 commits
v
prefixapply-config
dry runmessure
->measure
ExecuteCommandInPod
failstime.SyncController
nslookup
withdig
in integration teststracefs
filesystemnil
machine config during installationtalosctl cluster create --input-dir
--non-masquerade-cidrs
flag totalosctl cluster create
host-dns
servicepkg/imager/quirks
topkg/machinery
Changes since v1.8.0-alpha.0
114 commits
v
prefixapply-config
dry runmessure
->measure
ExecuteCommandInPod
failstime.SyncController
nslookup
withdig
in integration teststracefs
filesystemnil
machine config during installationChanges from siderolabs/discovery-client
2 commits
Changes from siderolabs/extras
4 commits
Changes from siderolabs/gen
2 commits
Changes from siderolabs/go-api-signature
1 commit
Changes from siderolabs/go-circular
3 commits
Changes from siderolabs/go-loadbalancer
1 commit
Changes from siderolabs/go-pcidb
1 commit
Changes from siderolabs/go-tail
1 commit
Changes from siderolabs/go-talos-support
1 commit
Changes from siderolabs/pkgs
36 commits
Changes from siderolabs/siderolink
4 commits
Changes from siderolabs/tools
7 commits
Dependency Changes
v1.8.0-alpha.0-3-gcab51d8
v1.8.0-alpha.0-34-gce49757
Previous release can be found at v1.7.0
Images
This discussion was created from the release v1.8.0-alpha.1.
Beta Was this translation helpful? Give feedback.
All reactions