v0.7.5

[smira]

image-factory 0.7.5 (2025-07-23)

Welcome to the v0.7.5 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitrii Sharshakov
• Mateusz Urbanek
• Orzelius
• Artem Chernyshev
• Justin Garrison
• Michael Robbins
• Alexandre GV
• Steve Francis
• Thibault VINCENT
• Brian Brookman
• Damien
• David R
• Dennis Marttinen
• Jorik Jonker
• Justin Seely
• Luke Cousins
• Markus Reiter
• Martyn Ranyard
• Michael Moerz
• Oguz Kilcan
• Spencer Smith
• Thomas Gosteli
• Till Hoffmann
• Tom Keur
• Utku Ozdemir
• jvanthienen-gluo
• killcity
• yashutanu

Changes

6 commits

• 19ac9c2 release(v0.7.5): prepare release
• 3b2b97a fix: support iPXE aliases for architectures
• b838a44 feat: update to Talos 1.11.0-beta.0
• 953e217 docs: document source images used
• e1e80fd feat: serve talosctl from image factory
• 3e35f91 feat(secureboot): implement reading key material from AWS KMS

Changes from siderolabs/gen

4 commits

• 044d921 feat: add xslices.Deduplicate
• dcb2b74 feat: add panicsafe package
• b36ee43 feat: make xyaml.CheckUnknownKeys public
• 3e319e7 feat: implement xyaml.UnmarshalStrict

Changes from siderolabs/pkgs

35 commits

• e2fbfb1 feat: update tools/toolchain to 1.11.0
• 383bbb4 feat: update NVIDIA production to 570.158.01
• 853cf3a feat: bump e2fsprogs, ipxe, kspp, tools
• a3f8281 feat: update Linux to 6.12.38
• 8ed84c5 feat: refactor HW_RANDOM configuration
• 108099f feat: enable AMD encrypted memory
• c97d25e fix: remove erroneous PURLs
• 90f7c65 fix: bump bldr
• a24b40e feat: update Linux to 6.12.36 and firmware
• 2537e61 docs: more SBOM metadata to cover whole Talos
• 0f4cbbc feat: update dependencies
• 9cec45c feat: add SBOM metadata for some packages
• 03bb94c feat: update dependencies
• c613abd fix: iptables url
• fae59df fix: download and copy hailo8 firmware
• fadf1e2 feat: update containerd to 2.1.2
• a0b0da1 feat: enable io.latency cgroup controller
• 0aaa07a feat: add hailort package
• 8555e94 chore: use ftpmirror for GNU sources
• 9fbe2b4 feat: update Go to 1.24.4
• 79bfa9e feat: update NVIDIA drivers to 570.148.08
• c8b8bd8 feat: bump dependencies
• 54bf03e feat: update Linux to 6.12.31
• 93b3aaa feat: add patch for CephFS IMA performance regression
• ebd6627 feat: disable IMA support
• 8aad53b feat: add CONFIG_NFT_CONNLIMIT to kernel
• 7a299fa feat: update Linux to 6.12.30
• 8c4603e feat: move more configs to modules on arm64
• 7b1183b feat(kernel): enable IB user-space management and RDMA
• 1b1430e fix: drop pcre2 binaries
• 487610c fix: drop broken symlinks
• f31d518 fix: clean up some binaries
• 0f74b9b feat: update containerd to v2.1.1
• 89b4037 fix: tenstorrent pkg name
• a14b544 chore: drop qemu-tools vmdk support

Changes from siderolabs/talos

120 commits

• 85e7989cf release(v1.11.0-beta.0): prepare release
• 3039162dc feat: update Flannel to v0.27.2
• 7e6052e63 feat: increase boot partition to 2 GiB
• cb7ca17bb feat: implement ExistingVolumeConfig
• a857c696f chore(machined): remove deprecated Endpoints
• a60101c55 fix: fill serial using helpers
• 5420e9979 refactor: output default selection for profiles
• 023a24cd4 test: use Grype to scan SBOM for vulnerabilities
• 96896fddb chore: build less images by default
• 75b5dec06 fix: sd-boot kexec with disk images
• 10546d6f8 feat: update Kuberentes 1.34.0-beta.0
• 3f35b83ae fix: ignore absent extensions SBOM directory
• 9920da3e1 feat: add etcd downgrade API
• c38682279 feat: bump pkgs and tools, read extensions' SBOMs, rekres
• 9c0d2706c docs: add release notes about v3.6.x bug
• d21994210 test: refactor various merge controller tests
• da5a4449f feat: implement raw volume support
• 41adda1cf docs: add secure boot setup mode note for Xen
• 993b4ade8 docs: fix typo in hugo config: pre-releaase
• 130b7fd6e test: fix flaky TestDNS
• 35b45ae6e feat(talosctl): support tpm operation on mac
• 24628db20 feat: update Kubernetes to v1.34.0-alpha.3
• ff68286d1 feat: include hwrandom modules
• a5b07c9a5 test: split tests and lint from the default pipeline
• a957ef416 feat: add SBOMs to the imager container
• 506212a71 feat: include AMD encrypted mem modules into base
• a966321cc fix: add more bootloader probe logs on upgrade
• b38fa568a feat: add validation for secrets bundle
• 2d89bcc71 feat: bump Linux, Go and other packages
• 0b8c180b8 fix: rename instances to referenceCount
• 378fe4f2f feat: support writing EFI boot order
• 9f0792632 fix: improve volume provisioning errors
• b8fcf3c71 fix: change module instance evaluation
• d680e560d docs: create FUNDING.yml
• 641505584 feat: support project quota support for user volumes
• 52656cc3c feat: allow taloscl disk wipe in maintenance mode
• 850579448 feat: export SBOM as resources
• 4f3a2ffab test: update unit-test runner
• d531b682c fix: provide FIPS 140-3 compliance
• 3e3129d36 feat: include packages into SBOM
• 54bd50be3 fix: talos endpoint might not be created in Kubernetes
• 8789a02c3 feat: present loaded kernel modules
• 33ecbaec6 test: update apply config tests
• 7d2fd390c chore: bump Talos version in the Image Factory CI pipeline
• de77f2142 docs: add example for fluentbit config
• 1f1f78106 fix: add limited retries for not found images
• 3d6a2c14e chore: generate and upload signatures on release
• 380141330 feat: expose kernel cmdline as a resource
• 4c6b3b14d docs: document disabling SELinux
• 3a6e5a71e feat: add talosctl mulitarch bundle image
• be671ee6d chore: add sbom step to the release pipeline
• 7fd0e8fc7 release(v1.11.0-alpha.3): prepare release
• 777335f23 chore: improve cloud image uploader resilience
• 14e5eee7d release(v1.11.0-alpha.2): prepare release
• 1e5a008f5 fix: hold user volume mount point across kubelet restarts
• cdad50590 docs: user volumes and kubernetes upgrade updates
• c880835c8 feat: implement zswap support
• 7f0300f10 feat: update dependencies, Kubernetes 1.34.0-alpha.2
• 61afbe3d2 docs: add vc4 documentation
• b9dbdc8e7 fix: etcd recover with multiple advertised addresses
• 19d94c357 feat: update Linux to 6.12.35, containerd to 2.1.3
• 44a1fc3b7 fix: treat context canceled as expected error on image pull
• 4da2dd537 feat: enforce Kubernetes version compatibility
• 6c7f8201a fix: set default MTU on Azure to 1400
• 091cd6989 docs: small yaml typo fix
• 66ecbd48f docs: update support matrix with omni version
• c948d7617 docs: minor fixes for creating kernel modules
• cc14c4a25 docs: add docs for creating kernel modules
• 93bcd3b56 docs: create SBOM for Go dependencies
• 38c4ce415 feat: add user-space InfiniBand modules
• 251dc934f feat: arm64 support for platform vmware
• 09b3ad577 feat: update containerd to 2.1.2
• 0767dd07b chore: enable --with-siderolink-agent on Darwin
• 9642198d7 fix: userspace wireguard library overrides
• 208f0763e chore: fix talosctl build on non-Linux hosts
• 87421af87 docs: expand documentation description
• d32ccfa59 feat: implement swap support
• 8f5cf81db docs: update kvm documentation
• 8e84c8b0f fix: nil pointer deref in quirk
• 6e74a3676 docs: aad ery basic details on how to run on scaleway
• 260d1bc9a fix: correctl close encrypted volumes
• 034ef42af fix: update siderolink library for wgtunnel panic fix
• 3035744a8 fix: correctly predict interface name on darwin
• cfcfad3c4 chore: move checkUnknownKeys function to github.com/siderolabs/gen
• 5ecc53c69 docs: add macos section to developing-talos.md
• b5b35307f chore: update Go to 1.24.4
• fde772d8d feat: update Flannel to 0.27.0
• 81ca27949 release(v1.11.0-alpha.1): prepare release
• 58a868e68 chore: fix renovate config, add release-gate label
• a59aaee84 feat: bump dependencies, Linux 6.12.31
• e954ee30a docs: typo correction: LongHorn -> Longhorn
• aab053394 fix: mashal resource byte slices as strings in YAML
• c7d4191e7 fix: rework the way CRI config generation is waited for
• 0114183de docs: update lastRelease to 1.10.3
• 938b0760a docs: update issue template
• 2a7b735b2 feat: drop IMA support
• 2d5a805b0 fix: typo in DiscoverdVolume spec
• 60c12bad9 feat: support nocloud include url userdata directive
• 0fd622c82 fix(talosctl): correct --help output for dashboard command
• a90c936a1 feat: support qemu provisioner on darwin
• 5322ca0d3 docs: update overlay docs
• a60b6322d fix(ci): drop nebula from extensions test
• dbbb59a67 docs: add note for default dataDirHostPath for Rook
• e26054378 docs: macos qemu provider
• 5d0224093 docs: use the cilium-cli image repo in the job installation manifest
• ff80e4cca docs: fix CIDR name
• a5fd15e8b fix(ci): reproducibility test
• 8f8963e50 docs: update Nexxen brand
• c6b86872d fix(ci): iso reproducibility file permissions
• 995a1dec4 chore: add a check for unsupported darwin flags
• 9db5d0c97 fix: nocloud metadata for hostname
• 3cf325654 feat: modularize more arm64 kernel
• 3524745cc fix: allow any PKI in Talos API
• f438cdb09 chore: use custom dhcpd server on macos qemu
• 11c17fb9a fix: metal-iso reproducibility
• 7fcb89ee3 chore: add darwin vmnet qemu support
• fc1237343 chore: clean up /usr/bin
• b551f32ce feat: update containerd to v2.1.1
• 67f4154f9 docs: update disk-management.md
• 0cb137ad7 fix: make disk size check work on old Talos

Dependency Changes

• github.com/google/go-containerregistry v0.20.3 -> v0.20.6
• github.com/siderolabs/gen v0.8.1 -> v0.8.5
• github.com/siderolabs/go-blockdevice/v2 v2.0.17 -> v2.0.18
• github.com/siderolabs/pkgs v1.11.0-alpha.0-17-g2563e47 -> v1.11.0
• github.com/siderolabs/talos 7c057edd5f36 -> v1.11.0-beta.0
• github.com/siderolabs/talos/pkg/machinery 7c057edd5f36 -> v1.11.0-beta.0
• github.com/sigstore/cosign/v2 v2.5.0 -> v2.5.3
• github.com/sigstore/sigstore v1.9.3 -> v1.9.5
• golang.org/x/net v0.40.0 -> v0.42.0
• golang.org/x/sync v0.14.0 -> v0.16.0
• golang.org/x/sys v0.33.0 -> v0.34.0
• golang.org/x/text v0.25.0 -> v0.27.0

Previous release can be found at v0.7.4

---

This discussion was created from the release v0.7.5.