LoginSign Up
← Back to all sparks
T

Talos Linux

INFRA · APIS
Velocity5.0

Immutable API-managed Linux distribution for Kubernetes

www.talos.dev ↗

Talos 1.15's alpha keeps moving: a silent containerd config trap and declarative CPU control

kubernetesdeclarative-configcontainerdnetworkingself-hostedlinux
◆Current state
Talos is on v1.15.0-alpha.2 while stable branches keep receiving maintenance releases such as v1.13.12. The alpha adds boot partition waiting for late-enumerated disks, container swap limits and a declarative CPUScalingConfig document. It also generates containerd configuration version 4, under which settings that moved between versions are silently ignored in custom CRI configs apart from a logged warning.
◆Where it's heading
The 1.15 cycle extends Talos's habit of replacing kernel arguments and raw system settings with typed configuration documents. Networking dominated 1.14 and the first 1.15 alpha; alpha.2 widens that approach to hardware and resource control, and consolidates talosctl around a shared --namespace flag. The containerd change is the real operational cost of the cycle, because a customized metrics or gRPC section stops taking effect with only a logged warning.
◆Prediction
Expect more typed documents for settings that still live in kernel arguments or SysfsConfig keys, and further alphas before a beta. Operators with CRICustomizationConfig patches should expect migration guidance to feature in the eventual 1.15 upgrade notes.

◆Recent moves

  1. 6d ago

    v1.15 alpha.2: CPU scaling, swap limits, containerd v4 caveats

    The second 1.15 alpha adds typed CPU scaling, container swap limits and safer boot partition detection. It also carries forward the containerd v4 change, which silently ignores moved settings in custom CRI configs.

    View source ↗
  2. 12d ago

    v1.13.12: DHCP fix, QEMU GSO workaround, kernel and containerd

    Maintenance on the 1.13 branch: Linux 6.18.57, containerd 2.2.10, a DHCP address-change fix and GSO offload disabled on QEMU 10.2 and later. Stable branches keep moving independently of the alpha.

    View source ↗
  3. 1mo ago

    Talos v1.15 alpha: containerd v4, VXLAN/MACVLAN, KubeSpan filtering

    ⚡ SPARK

    The 1.15 alpha opens a new development cycle with containerd configuration format v4 (breaking for customized CRI configs), MACVLAN and VXLAN link support, KubeSpan peer endpoint filtering, a unified `--namespace` flag across CLI tools, and a new `talosctl diskfree` command—continuing the 1.14 networking build-out into the next major cycle.

    View source ↗
  4. 1mo ago

    v1.12.12

    v1.12.12 is a security maintenance release: kubelet client certificate handling hardening, API proxying metadata filtering, tar extraction safety fixes (parent directory creation, xattr handling, os.Root path isolation), and component bumps to Kubernetes 1.35.8, etcd 3.6.14, and Linux 6.18.49.

    View source ↗
  5. 2mo ago

    v1.13.10

    v1.13.10 delivers 28 commits of security hardening and stability fixes: kubelet certificate hardening, kubeconfig validation, CSI volume SELinux context fix, etcd snapshot atomicity, route creation churn fix (every 100ms), and CoreDNS updated to 1.14.7. This branch is getting serious production reliability attention.

    View source ↗
  6. 2mo ago

    Talos v1.14.0-rc.2: BGP instances, DNS-over-TLS, etcd port split

    ⚡ SPARK

    v1.14.0-rc.2 refines the BGP implementation from beta: `BGPInstanceConfig` replaces `BGPPeerConfig`, supporting named instances, optional Linux VRF, BFD, ECMP, and cross-instance route imports. The RC also adds DNS over TLS/HTTPS per nameserver, btrfs volume support, etcd HTTP/gRPC port split (2379/2383), and EtcFileConfig for managing files under /etc without restarts.

    View source ↗