ci: fix talos cluster initialization (#6093)

Signed-off-by: zhangzujian <zhangzujian.7@gmail.com>

Author: zhangzujian

.github/workflows/build-x86-image.yaml

@@ -29,6 +29,8 @@ env:
   HELM_VERSION: v4.0.4
   # renovate: datasource=github-releases depName=submariner packageName=submariner-io/submariner
   SUBMARINER_VERSION: 0.21.2
+  # renovate: datasource=github-releases depName=talos packageName=siderolabs/talos
+  TALOS_VERSION: v1.12.0
 
 jobs:
   build-kube-ovn-base:
@@ -2293,7 +2295,11 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Install talosctl
-        run: curl -sL https://talos.dev/install | sh
+        run: |
+          curl -sLo install-talosctl.sh https://talos.dev/install
+          sed -i "s|/latest/download/|/download/${{ env.TALOS_VERSION }}/|g" install-talosctl.sh
+          sed -i "s|/latest/|/${{ env.TALOS_VERSION }}/|g" install-talosctl.sh
+          sh install-talosctl.sh
 
       - name: Install KVM and libvirt
         run: |

makefiles/talos.mk

@@ -1,9 +1,14 @@
 # Makefile for managing Talos environment
 
 TALOS_ARCH = $(shell go env GOHOSTARCH)
-TALOS_VERSION = $(shell talosctl version --client --short | awk '{print $$NF}' | tail -n 1)
+TALOS_VERSION ?= $(shell talosctl version --client --short | awk '{print $$NF}' | tail -n 1)
 TALOS_IMAGE_DIR ?= /var/lib/talos
-TALOS_IMAGE_URL = https://github.com/siderolabs/talos/releases/download/$(TALOS_VERSION)/metal-$(TALOS_ARCH).iso
+
+# generated image download link by Talos Linux Image Factory https://factory.talos.dev/
+# customization:
+#   extraKernelArgs:
+#     - talos.network.interface.ignore=enp0s5f1
+TALOS_IMAGE_URL = https://factory.talos.dev/image/9ecea35ddd146528c1d742aab47e680a1f1137a93fc7bab55edc1afee125a658/$(TALOS_VERSION)/metal-$(TALOS_ARCH).iso
 TALOS_IMAGE_ISO = $(TALOS_VERSION)-metal-$(TALOS_ARCH).iso
 TALOS_IMAGE_PATH = $(TALOS_IMAGE_DIR)/$(TALOS_IMAGE_ISO)
 
@@ -65,7 +70,7 @@ talos-registry-mirror:
 .PHONY: talos-prepare-images
 talos-prepare-images: talos-registry-mirror
 	@echo ">>> Preparing Talos images..."
-	@for image in $$(talosctl image default | grep -v flannel); do \
+	@for image in ghcr.io/siderolabs/installer:$(TALOS_VERSION) $$(talosctl image default | grep -v flannel); do \
 		if echo "$$image" | grep -q kube; then \
 			image=$$(echo $$image | sed -e 's/:v\([[:digit:]]\+\.\)\{2\}[[:digit:]]\+$$/:v$(TALOS_K8S_VERSION)/'); \
 		fi; \
@@ -87,7 +92,7 @@ talos-libvirt-init: talos-libvirt-clean
 	@if [ ! -f "$(TALOS_IMAGE_PATH)" ]; then \
 		sudo mkdir -p "$(TALOS_IMAGE_DIR)" && \
 		sudo chmod 777 "$(TALOS_IMAGE_DIR)" && \
-		echo ">>> Downloading Talos image $(TALOS_IMAGE_ISO) into $(TALOS_IMAGE_DIR)..." && \
+		echo ">>> Downloading Talos image $(TALOS_IMAGE_URL) into $(TALOS_IMAGE_DIR)..." && \
 		wget "$(TALOS_IMAGE_URL)" --quiet -O "$(TALOS_IMAGE_PATH)" && \
 		echo ">>> Talos image downloaded."; \
 	fi
@@ -172,14 +177,14 @@ talos-apply-config-%:
 		echo ">>>>>> Applying Talos control plane configuration to $${node}..."; \
 		ip=$$(sudo virsh domifaddr --full "$${node}" | grep -w vnet0 | grep -iw ipv4 | awk '{print $$NF}' | awk -F/ '{print $$1}'); \
 		ip_family=$* cluster=$(TALOS_CLUSTER_NAME) node=$${node} jinjanate talos/machine-config.yaml.j2 -o talos/machine-config.yaml && \
-		talosctl apply-config --insecure --nodes $${ip} --file talos/controlplane.yaml --config-patch "@talos/machine-config.yaml"; \
+		talosctl apply-config --insecure --nodes $${ip} --file talos/controlplane.yaml --config-patch "@talos/machine-config.yaml" || exit 1; \
 		echo ">>>>>> Talos control plane configuration applied to $${node}."; \
 	done
 	@sudo virsh list --name | grep '^$(TALOS_WORKER_NODE)' | while read node; do \
 		echo ">>>>>> Applying Talos worker configuration to $${node}..."; \
 		ip=$$(sudo virsh domifaddr --full "$${node}" | grep -w vnet0 | grep -iw ipv4 | awk '{print $$NF}' | awk -F/ '{print $$1}'); \
 		ip_family=$* cluster=$(TALOS_CLUSTER_NAME) node=$${node} jinjanate talos/machine-config.yaml.j2 -o talos/machine-config.yaml && \
-		talosctl apply-config --insecure --nodes $${ip} --file talos/worker.yaml --config-patch "@talos/machine-config.yaml"; \
+		talosctl apply-config --insecure --nodes $${ip} --file talos/worker.yaml --config-patch "@talos/machine-config.yaml" || exit 1; \
 		echo ">>>>>> Talos worker configuration applied to $${node}."; \
 	done
 	@$(MAKE) talos-libvirt-wait-address-$(TALOS_ENDPOINT_IP_FAMILY)
@@ -257,6 +262,10 @@ talos-init-%: talos-libvirt-init talos-prepare-images talos-apply-config-%
 .PHONY: talos-init
 talos-init: talos-init-ipv4
 
+.PHONY: talos-init-single
+talos-init-single:
+	@TALOS_WORKER_COUNT=0 $(MAKE) talos-init
+
 .PHONY: talos-clean
 talos-clean: talos-libvirt-clean
 	@echo ">>> Deleting Talos registry mirror..."

talos/machine-config.yaml.j2

@@ -6,7 +6,7 @@
 {%- endmacro -%}
 {%- set duidv6 = random_duid_uuid() -%}
 {%- if 'control-plane' in node -%}
-{%- set duidv6 = '00030001aabbccddeeff' -%}
+  {%- set duidv6 = '00030001aabbccddeeff' -%}
 {%- endif -%}
 {%- if ip_family is not defined -%}
   {%- set ip_family = "ipv4" -%}
@@ -15,38 +15,12 @@ machine:
   install:
     disk: /dev/vda
     wipe: true
-  time:
-    disabled: true
   kernel:
     modules:
       # the following kernel modules configuration may be unnecessary
       - name: openvswitch
       - name: geneve
       - name: vxlan
-  network:
-    hostname: {{ node }}
-    disableSearchDomain: true
-    interfaces:
-      - deviceSelector:
-          busPath: 0000:00:05.0
-        mtu: 1500
-        dhcp: true
-        dhcpOptions:
-          {%- if ip_family is equalto "ipv4" or ip_family is equalto "dual" %}
-          ipv4: true
-          {%- else %}
-          ipv4: false
-          {%- endif %}
-          {%- if ip_family is equalto "ipv6" or ip_family is equalto "dual" %}
-          ipv6: true
-          duidv6: {{ duidv6 }}
-          {%- else %}
-          ipv6: false
-          {%- endif %}
-      - deviceSelector:
-          busPath: 0000:00:05.1
-        mtu: 1500
-        ignore: true
   kubelet:
     nodeIP:
       validSubnets:
@@ -59,3 +33,38 @@ machine:
         {%- endif %}
     extraArgs:
       provider-id: talos://libvirt/{{ cluster }}/{{ node }}
+---
+apiVersion: v1alpha1
+kind: TimeSyncConfig
+enabled: false
+---
+apiVersion: v1alpha1
+kind: HostnameConfig
+hostname: {{ node }}
+auto: off
+---
+apiVersion: v1alpha1
+kind: ResolverConfig
+searchDomains:
+  disableDefault: true
+---
+apiVersion: v1alpha1
+kind: LinkConfig
+name: enp0s5f0
+up: true
+{%- if ip_family is equalto "ipv4" or ip_family is equalto "dual" %}
+---
+apiVersion: v1alpha1
+kind: DHCPv4Config
+name: enp0s5f0
+ignoreHostname: true
+{%- endif %}
+{%- if ip_family is equalto "ipv6" or ip_family is equalto "dual" %}
+---
+apiVersion: v1alpha1
+kind: DHCPv6Config
+name: enp0s5f0
+ignoreHostname: true
+clientIdentifier: duid
+duidRaw: "{{ duidv6 }}"
+{%- endif %}