v0.6.7

[smira]

image-factory 0.6.7 (2025-02-03)

Welcome to the v0.6.7 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Dmitry Sharshakov
• Justin Garrison
• Nico Berlee
• Utku Ozdemir
• Alessio Moiso
• Alexis La Goutte
• Andrew Symington
• Christian Luetke-Stetzkamp
• Christoph Hoopmann
• Florian Grignon
• Ganawa Juanah
• Jasmin
• Jason Benedicic
• K Birt
• KillianCdP
• Louis SCHNEIDER
• Luke Milby
• Marcel Hamer
• Matt Willsher
• Mohammad Amin Mokhtari
• Motte
• Natalie Romana Albers
• OliviaBarrington
• PRIHLOP
• Ram
• Roman Ivanov
• Rémi Paulmier
• Sam Stelfox
• Sergey Melnik
• SpiReCZ
• Tim Olson
• Tine Jozelj
• TomyLobo
• Variant9
• bzub
• egrosdou01
• greenpsi
• sflotat2607
• sophia-coldren
• suse-coder

Changes

22 commits

• c6e3fa6 release(v0.6.7): prepare release
• f896663 feat: update Talos to v1.10.0-alpha.1
• 0931477 release(v0.6.6): prepare release
• b80192a feat: refactor platform metadata
• 4bb43ef fix: add imgfree to ipxe boot script
• d5f3f5a feat: update for Talos 1.10 current
• e727003 chore: update go-uefi module
• 3b302c6 feat: set secure boot support for nocloud platform
• a4932a2 chore: reduce memory usage
• 1729190 chore: support gcr.io keychain for registry auth
• 1389813 release(v0.6.4): prepare release
• b7c7c16 fix: secureboot pxe
• 67eb663 release(v0.6.3): prepare release
• 46f4104 feat: update to Talos 1.9.0-beta.1
• cbf8cc9 feat: add Turing RK1 as option
• d0dcfe5 release(v0.6.2): prepare release
• a8cdc21 feat: update dependencies for Talos 1.9
• b7f7fd3 chore: add hash errata for tarball headers
• 370c137 fix: vmware build assets on non-amd64
• c102c95 chore: alias i915/amdgpu extensions to new name
• b7b4c71 release(v0.6.1): prepare release
• 96c8455 chore: bump generated data

Changes since v0.6.6

2 commits

• c6e3fa6 release(v0.6.7): prepare release
• f896663 feat: update Talos to v1.10.0-alpha.1

Changes from siderolabs/gen

1 commit

• 5ae3afe chore: update hashtriemap implementation from the latest upstream

Changes from siderolabs/talos

240 commits

• e2aa7c98c fix: installer with SecureBoot should contain UKIs
• 6e22c06c3 release(v1.10.0-alpha.1): prepare release
• 3a2d9867b fix: do not close client.Client.conn with finalizer
• 73f30ff25 feat: bump pkgs for udev update
• aea90cb8f docs: update hyper-v
• b7165615f fix: use local NTP for AWS platform
• 673ca4bcb fix: ensure proper closure of client.Client.conn with finalizer
• 19040ffd6 fix: handle of PE sections with duplicate names
• 83489d348 docs: add note about vmxnet and flannel conflict
• f1292f5e7 docs: add iscsi-tools extension to prerequisites
• 93b4a3740 test: bump timeout on rotate CA test
• 42e166984 feat: support kexec from uki
• 8da264946 docs: add Orange Pi 5 to Image Factory platforms and documentation
• c5fb62e2e feat: update Linux to 6.2.11
• 83d007c16 feat: update etcd to 3.5.18
• edf7c3288 fix: pe uki extract
• 70f72c5b0 docs: update multus.md
• 807a3cd29 refactor: all network merge controllers
• ec8c4660e docs: update vmware.md
• baf81cd49 fix(ci): k8s integration suite wait for resource
• cd5e54903 feat: generate iso's with both UKI and grub
• 75673b6a3 feat: provide stable symlinks in disk resources
• f407c88e4 fix(ci): wait for longhorn node resource
• 601cdccb9 feat: extract kernel/initrd from uki for grub
• ff175b9fb docs: update disk-encryption.md
• a8d84e315 docs: fix typos and add more explanations in docs
• 3a384240e fix: invalid date field in iqn/nqn
• 82c9ec158 chore(ci): add tests with longhorn v2 engine
• 689ea1dbf fix: bring back disk UUID
• 7a712fad2 fix: disks with 4k sector size and systemd-boot
• d62a34aaf feat: update tools/pkgs/extras
• b9a8ad6ac chore: de-hardcode list of extra images for image-cache test
• 683153a33 docs: remove the last mentions of preserve flag for Talos 1.8+
• 33c7f4195 docs: fix typo an MacOS to on MacOS
• 21cff3919 chore(ci): fio benchmark results as separate artifacts
• 0b7fc7cdf fix: abort node watch on hostname change
• 99ba53941 docs: remove the mention of preserve flag for Talos 1.8+
• bde516fde chore(ci): rework iscsi-tools extensions test
• e1efbf656 refactor: extract platform metadata into Talos machinery
• 79987c05d feat: generate iqn and nqn files
• 0cab6ed17 docs: update troubleshooting.md
• 921e10254 chore: update Go to 1.23.5
• 399d53b54 fix: ignore forbidden error when waiting for pod eviction
• 8dea57a81 fix: make etc binds read-only
• 63157dcb4 docs: update SideroLinkConfig example
• fc7080e34 chore: clear cache after updating upstreams
• 51e0f273f docs: update documentation for Talos 1.9.2
• e06b14112 feat: update Kubernetes to 1.32.1
• 4310b290d fix: generate UKI only if actually needed
• a8cd99102 docs: update OpenEBS Mayastor installation
• cf45f4764 docs: add Radxa ROCK 5B docs to Single Board Computer section
• b21bdc5e5 chore(ci): save csi tests fio results
• 01c86832c chore(ci): add test for OpenEBS MayaStor
• c77483510 test: update talosctl debug air-gapped
• ddd695d93 feat: update containerd to 2.0.2
• da2e81120 fix: add informer resync period for node status watcher
• 9b957df64 chore: uki code restructure
• e41a99525 fix: kube-apiserver authorizers order
• db4ca5668 feat: add a kernel parameter to disable built-in auditd
• faa149003 feat: update Linux to 6.12.9
• 8de19758d fix: a couple of imager panics/crashes
• 5bc3e34cb fix: detect GPT before ZFS
• ed7e47d15 refactor: drop usage of objcopy to generate UKIs
• edf5c5e29 fix: extfs repair and resize
• 6e32ea5b7 fix: merge of VolumeConfig documents with sizes
• 1be5f8ff2 feat: update Linux to 6.12.8
• e6a4583ba feat: support generating unsigned UKIs
• bbd6067d4 fix: partition alignment on disks with 4k sectors
• 84fcc976f fix: yet another dashboard panic
• 6d605fc85 fix: disable NRI plugin in a different way
• 499695e24 fix: request previous IP address in discovery
• cc84caf8c docs: update Cilium documentation
• fa5300d91 chore: revert: drop deprecated allowSchedulingOnMasters
• 0abb3dabf docs: fix command to wait for ceph-rook HEALTH_OK
• 32c67c27c chore: drop deprecated allowSchedulingOnMasters
• ae6d065be fix: mount selinuxfs only when SELinux is enabled
• 5ccbf4bcd feat: enable configfs
• 59582496d feat: bring in partity with sd-257
• 83d84a831 chore(ci): better zfs checks
• 650eb3a4f refactor: rewrite cloud uploader to use AWS SDK Go v2
• 01bf8449b fix: update field name for bus path disk selector
• e915c98d5 fix: exclude disks with empty transport for disk selector
• b7a7fdc4b refactor: generate /etc/os-release file static way
• e79c9e127 chore(ci): drop equinix metal e2e-test
• 418945444 fix: build of talosctl on non-Linux platforms
• 4761a9e6a chore: update dependencies
• f98efb333 fix: ignore member not found error on leave cluster
• b72bda0a4 fix: talosctl support and race tests
• 27233cf0f test: use node informer instead of raw watch
• 5dc15e8db fix: update go-blockdevice to v2.0.9
• 5f3acd0f2 fix: use correct default search domain
• 7e5d36d46 fix: pci driver rebind config validation
• 4b97bbc3f fix: pull in containerd CNI deadlock fix
• 066480722 test: fix apparmor tests
• 82ea44a6b fix: reduce installer image
• 78b3e7f4f fix: get next rule number for IPv6 in the appropriate chain
• 675854aa0 docs: fix two typos
• f70b7386a test: add a xfs makefs test
• 8212e4864 refactor: use quirks in kernel args
• b4aa5189d release(v1.10.0-alpha.0): prepare release
• bd85bd5b7 fix: fix Failed to initialize SELinux labeling handle udev error
• 73c82e3e5 feat: bring Linux 6.12.6, CNI plugins 1.6.1
• c12b52491 docs: document Kubernetes service registry incompat with K8s 1.32
• a5660ed77 feat: pcirebind controller
• 4c3261626 docs: fix several typos
• fb3675321 fix: dashboard crash on CPU data
• dec0185c8 chore: reduce memory usage for secureboot functions
• cee6c60a0 fix: make talosctl time work with PTP time sync
• f75604313 chore: support gcr.io auth for cache and image gen
• 6ef2596da docs: improve Hetzner documentation
• 7d39b9ec2 feat: remove cgroupsv1 in non-container mode
• 8003536c7 fix: restore previous disk serial fetching
• 03116ef9b chore: prepare for Talos 1.10
• 00682fdd6 docs: activate 1.9 docs as default
• bea05f5c9 docs: update deploying-cilium.md
• 284ab1179 feat: support link altnames/aliases
• 5bfd829bf docs: fix 'containter' typo
• 8d151b771 docs: clarify TALOSCONFIG for AWS
• 0ef19171f fix: renovate typo
• c568adc7d fix: renovate config
• ec2e24fd9 fix: match MAC addresses case-insensitive (nocloud)
• 41a0c440a chore: rekres for renovate changes
• a49bb9ee4 feat: update Linux to 6.12.5
• b15917ecc chore: add more debugging logs for META and volumes
• 2b1b326f0 docs: mention different paths for OpenEBS
• 9470e842f test: cleanup failed Kubernetes pods
• c9c685150 fix: node identity flip
• 590c01657 feat: update containerd to v2.0.1
• 18fa5a258 docs: update image-cache doc for iso
• ab5bb6884 fix: generate and serve registries with port
• 58236066d fix: support image cache on VFAT USB stick
• e193a5071 fix: image cache integration test
• 08ee400fd test: fix flaky test NodeAddressSort
• d45e8d1d1 feat: update Kubernetes to 1.32.0
• 136b12912 chore: drop semicolon for supporting vfat filesystems
• 3e9e027ef test: add an option to boot from an USB stick
• ef8c3e3b3 docs: fix typo in multus.md
• d54414add fix: authorization config gen
• cce72cfe8 docs: replace deprecated Hetzner server plans
• 81805103d chore: enable proper parallel usage of TestDepth
• e1b824eba docs: update ceph-with-rook.md
• 470b75563 fix: use mtu network option for podman
• 61b1489a0 fix: order volume config by the requested size
• bc3039acd feat: update runc to 1.2.3
• 30016a0a8 fix: avoid nil-pointer-panic in RegistriesConfigController
• fe0457152 fix: power on the machine on reboot request in qemu power api
• 10da553ef docs: build what's new for 1.9
• d946ccae3 feat: update Linux to 6.12.4
• 707a77bf6 test: fix user namespace test, TPM2 fixes
• c3537b2f5 feat: update Linux to 6.12.3
• cb4d9d673 docs: fix a few mistakes in release notes
• c4724fc97 chore: add integration tests for image-cache
• 07220fe7f fix: install iptables-nft to the host
• 14841750b chore: add version compatibility for Talos 1.10
• 852baf819 feat: support vlan/bond in v1, vlan in v2 for nocloud
• dd61ad861 fix: lock provisioning order of user disk partitions
• d0773ff09 chore: update Go to 1.23.4
• 7d6507189 feat: implement new address sorting algorithm
• 9081506d6 feat: add process scheduling options
• 77e9db4ab test: use two workers in qemu tests by default
• 5a4bdf62a feat: update Kubernetes to 1.32.0-rc.1
• d99bcc950 chore: refactor mergeDNSServers func
• 0cde08d8b docs: add Turing RK1 docs to Single Board Computer section
• ff13ccc5b docs: update the Cilium CNI deployment
• 191825a44 docs: update install-kubevirt.md
• 770be1642 feat: support image cache copying
• 8fb567dd1 docs: fix typo in virtualbox docs
• 60e4561b4 feat: add support for custom search domains
• 95c695880 fix: don't reset health status if service doesn't support health checks
• b7609edd1 chore: update pkgs/extras to final 1.9.0 tags
• c7b25430b fix: multiple small fixes for service runners
• e33d2f581 feat: support overriding base OCI spec for CRI
• 347b75846 chore: support saving cluster logs on destroy
• c254f261f fix: do not extract xattrs in unsquashfs
• fc3b31575 fix: multiple issues with opening encrypted volumes
• 145b02642 chore: deprecate cgroupsv1 in non-container mode
• 581c0851d feat: update dependencies
• e9058461e feat: add api-server authorization config
• db1c70768 chore: move enabling SELinux by default to 1.10
• ef69c9d39 feat: update Linux to 6.12.1
• ccc5a8d34 chore: split config.Registry into the separate resource
• c735d1492 fix: wait for udevd before starting sync
• bef4d5150 fix: make system_disk condition work properly before install
• af91c99ba chore: update image cache config
• e10e90b05 fix: nocloud network link matching on MAC addresses
• 2a9130a2e fix: make Talos META partition match more precise
• 9adaf7f01 docs: update local-storage.md
• 7e19d5c4c docs: add kubevirt install
• f1d1628c8 fix: properly halt installation if Talos already installed
• 177df62a0 fix: small logrus fixes
• a9875b770 fix: return proper number from the timeStampWriter
• e8a262490 fix: systemd-udevd restore old naming behavior
• 939c555f9 fix: imager disk image-cache generator
• 1bac0b183 feat: support generating disk images with image cache
• 84459d902 fix: make immage cache config apply immediately
• 56e1ee72e release(v1.9.0-alpha.3): prepare release
• af5d6b8c4 fix: show SELinux labels on pseudo-fs
• f46922fa9 chore: fix dockerfile warnings
• a13f82c59 feat: udev: label device nodes
• e899fb37f feat: label created files in /etc
• 5f68c17ed feat: implement image cache configuration
• 0ffb2187a feat: registry proxy
• 77cf84fb5 feat: support generating iso with imagecache
• 5de6275b8 chore: image cache generator improvements
• 1a8cc5f8b feat: add SELinux labels to volumes
• 61b9129e0 fix: add directory entries and filemode to tarball
• 4caeae21e refactor: optimize flags and SetLabel
• 6074a870a feat: add e2fsprogs to talos rootfs
• 7ffcf5b93 docs: update getting started
• c4c1a0d7c fix: make vmware platform common code build on all arches
• cc768037f feat: implement block device wipe
• 6fb518ae5 fix: don't activate LVM volumes in agent mode
• 0e3ed3072 fix: no longer leak Close reader
• 4dc58cfdf chore: small fixes
• f400ae911 fix: small fixes for image cache generation
• 93754b7de fix: config and platform manifest generation
• 95b2fc946 feat: image cache gen
• e4c6186c6 chore: remove i915/amdgpu drivers
• 744ad12a6 docs: update replicated-local-storage-with-openebs.md
• fd713e451 feat: add permanent hardware addr to device selectors
• d55a96e8c refactor: remove SELinux client_u and client_r
• 3a5b55fd2 fix: allow CEL expressions config merge
• f1b15f580 chore: remove replace for safchain/ethtool
• f9697a9a0 fix: register controlplane node with NoSchedule taint
• 30f8b5a9f fix: registry mirror fallback handling
• 0f41e7743 feat: allow for onlink directive (nocloud)
• e26d0043e chore: code cleanup
• 43fe3807a feat: implement tracking of blockdevice secondaries
• 8a7476c3a fix: install on non-empty disk
• 8b4253d18 feat: update etcd to v3.5.17
• 5a0fd5b88 refactor: move early initialization functions to pre-initialize phase
• 9916e2cd8 chore: update pkgs/tools/extras for Go 1.23.3
• 20bbf0235 docs: update vultr documentation
• aea98940b fix: arch linux search paths and names for QEMU provisioner
• 682718d4c fix: use imager incoming version for extension validation
• 9a02ecc49 feat: rewrite install disk selector to use CEL expressions
• eba35f441 docs: add note about PSP in Rook-Ceph guide
• 38b80fb1d docs: add missing --talosconfig parameter to end of Hetzner guide
• a07f66c91 docs: gcp: fix controlplane nodes tags
• 4fe6dc8a0 chore: clean dns code

Dependency Changes

• github.com/google/go-containerregistry v0.20.2 -> v0.20.3
• github.com/siderolabs/gen v0.7.0 -> v0.8.0
• github.com/siderolabs/talos v1.9.0-alpha.2 -> e2aa7c98cceb
• github.com/siderolabs/talos/pkg/machinery 8b4253d18544 -> e2aa7c98cceb
• github.com/sigstore/cosign/v2 v2.4.0 -> v2.4.1
• github.com/sigstore/sigstore v1.8.8 -> v1.8.12
• github.com/slok/go-http-metrics v0.12.0 -> v0.13.0
• github.com/stretchr/testify v1.9.0 -> v1.10.0
• golang.org/x/net v0.30.0 -> v0.34.0
• golang.org/x/sync v0.8.0 -> v0.10.0
• golang.org/x/sys v0.26.0 -> v0.29.0

Previous release can be found at v0.6.0

---

This discussion was created from the release v0.6.7.