What siderolabs/talos shipped
Written by FoxPlug from the repository's own releases; not affiliated with Siderolabs. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/siderolabs/talos; Siderolabs did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Operators can now cap memory used by Talos containers, virtual machines and Kubernetes pods independently through WorkloadResourceConfig. Pull request #14569
- Virtual machine graphics can be reached through the admin-only Talos API, with the viewer bound to loopback and the running domain verified before attaching. Pull request #14594
- VM serial output is now persisted and can be read with talosctl logs --kind=vm, with bounded tail reads and rotation-aware following. Pull request #14559
- Cloud-init configuration for virtual machines is projected into spec and status resources and published as immutable NoCloud ISO assets in content libraries. Pull request #14577
- Content library modify and delete operations are now gated on files actively referenced by running VMs. Pull request #14541
- Host NUMA topology is published so VM placement can be checked against online host CPUs and memory nodes before starting or replacing a guest. Pull request #14591
- CPU boundaries are reconciled with actual cgroup state, retaining write intent so interrupted updates can be recovered without adopting foreign changes. Pull request #14581
- Guest VM IP addresses reported by qemu-guest-agent are exposed as part of VirtualMachineStatus. Pull request #14595
- VirtualMachineConfig gains a video block with model and vramMiB fields, keeping vga as the default when unset. Pull request #14607
- VirtualMachineConfig now includes a guest structure for describing guest configuration. Pull request #14420
Why it matters
This week the virtual machine surface expanded in both directions: configuration gained guest cloud-init, video settings and workload memory caps, while operations gained persisted serial logs, authenticated VNC access and status reporting through the guest agent. CPU partition work continued with cgroup operations and a planner, though the planner is not wired into runtime reconciliation yet. Content library operations now refuse to destroy files that running VMs depend on.
Changelog entry
- Feat: add aggregate workload memory limits with WorkloadResourceConfig Pull request #14569
- Feat: add authenticated VNC access to virtual machines Pull request #14594
- Feat: persist VM serial logs and add explicit log kind selection Pull request #14559
- Feat: provision cloud-init seed assets for virtual machines Pull request #14577
- Feat: Content Library protects actively referenced files Pull request #14541
- Feat: add host NUMA topology and validate VM placement Pull request #14591
- Feat: reconcile CPU partition policy Pull request #14581
- Feat: show guest VM IPs from qemu-guest-agent Pull request #14595
- Feat: configurable video device for virtual machines Pull request #14607
- Feat: add VirtualMachineConfig.guest Pull request #14420
- Feat: attach qemu-guest channel to virtual machines Pull request #14580
- Feat: plan safe CPU partition updates Pull request #14566
VM work landed this week: configure video model and vram, cap container/VM/pod memory independently, provision cloud-init seed assets, read persisted serial logs with talosctl logs --kind=vm, and reach guest graphics through admin-only authenticated VNC.
This week brought a broad set of VM changes. VirtualMachineConfig gained a guest structure and a video block with model and vramMiB fields, and operators can now cap memory used by Talos containers, virtual machines and Kubernetes pods independently through WorkloadResourceConfig. Cloud-init configuration is projected into spec and status resources and published as immutable NoCloud ISO assets, with seed media attached to VM domains. On the operations side, serial output is persisted and readable through talosctl logs --kind=vm, authenticated VNC tunnels guest graphics through the admin-only Talos API, and guest agent addresses appear in VirtualMachineStatus. Host NUMA topology is published for placement validation, and content library modify or delete operations are gated on files referen
Week of September 28, 2026
What shipped
- Released Talos 1.13.11 with TimeService/TimeCheck API restricted to higher privilege roles. Release
- Released Talos 1.14.2 with kubelet resource manager state file validation. Release
- Reworked route configuration to match Linux kernel routing table primary keys of table, family, destination, and priority. Pull request #14548
- Added CPU partition configuration to allow machine configuration to describe CPU boundaries and named VM slices. Pull request #14546
- Added hypervisor VM serial console streaming via HypervisorService.ConsoleStream RPC and talosctl hypervisor console command. Pull request #14505
- Implemented hypervisor network TAP to attach host network links to virtual machine interfaces via macvtap. Pull request #14487
- Added virtual machine CPU pinning and NUMA placement for explicit host CPU affinity and memory placement. Pull request #14479
- Fixed cleanup of mountpoints on unmount, particularly important for /var/mnt used by kubelet hostPath gating. Pull request #14547
- Implemented VM disk provisioning from ISO via content library with cdrom-type device support. Pull request #14499
- Added VirtualMachineStatus resource to track libvirt domain convergence, power state, and resource counts. Pull request #14489
Why it matters
Two stable releases landed this week with security and validation improvements. Major hypervisor enhancements enable serial console streaming, network TAP attachment, and CPU pinning for virtual machines, while routing and mounting fixes improve platform compatibility and resource cleanup.
Changelog entry
- Talos 1.13.11 released with TimeService/TimeCheck API access restrictions. Release
- Talos 1.14.2 released with kubelet resource manager state validation. Release
- Route configuration refactored to use table, family, destination, and priority as primary key matching Linux kernel semantics. Pull request #14548
- CPU partition configuration added for describing CPU boundaries and named VM slices. Pull request #14546
- Hypervisor VM serial console streaming added via HypervisorService.ConsoleStream RPC and talosctl hypervisor console. Pull request #14505
- Hypervisor network TAP implementation for attaching host network links to VMs via macvtap interfaces. Pull request #14487
- Virtual machine CPU pinning and NUMA placement configuration added for host CPU affinity and guest memory placement. Pull request #14479
- Mountpoint cleanup on unmount fixed to remove directories like /var/mnt used for kubelet hostPath gating. Pull request #14547
- VM disk provisioning from ISO via content library with cdrom-type device support implemented. Pull request #14499
- VirtualMachineStatus resource added to track libvirt domain power state, UUID, and resource counts. Pull request #14489
- Kubernetes updated to 1.38.0-alpha.1. Pull request #14506
- Etcd updated to 3.7.2. Pull request #14498
Talos v1.13.11 and v1.14.2 released. Hypervisor gains serial console streaming, network TAP, and CPU pinning. Route configuration and mountpoint cleanup improved.
Two releases this week: v1.13.11 and v1.14.2 are now available. Major improvements include hypervisor serial console streaming for VM access, network TAP attachment for host connectivity, and CPU pinning with NUMA placement. Route configuration was reworked to properly match Linux kernel routing table semantics, and mountpoint cleanup was fixed to prevent kubelet issues.
Week of September 21, 2026
What shipped
- Added CPU frequency scaling controller to manage scaling governor, energy performance preference, and min-max frequency per CPU policy with CEL selector support for hybrid cores. Pull request #14430
- Separated virtual machine configuration projection from libvirt rendering to produce backend-neutral CPU, memory, and ballooning resources with validation and tracked domain XML specs. Pull request #14437
- Added SecureBoot fingerprint reporting by parsing TPM event logs to extract EFI DB key certificates used during boot verification. Pull request #14431
- Fixed boot partition detection for hybrid ISO installations by publishing discovered volumes for ISO partitions. Pull request #14458
- Added support for partitions on device-mapper backed devices through go-blockdevice library updates. Pull request #14313
- Introduced StoragePoolConfig document for libvirt directory pool configuration backed by User, Existing, or External volumes. Pull request #14406
- Updated Linux kernel to 6.18.53 and systemd to v262. Pull request #14447
- Fixed config merge command to reject extra paths instead of silently dropping them. Pull request #14463
- Added optional integrity verification and automatic hash calculation (sha256, sha512) for Content Library uploads. Pull request #14427
- Added bounded exponential retry timer for LVM volume-group and logical-volume reconciliation transient failures. Pull request #14395
Why it matters
This week brings significant hypervisor support improvements with virtual machine configuration implementation and CPU frequency scaling. Infrastructure reliability improves through boot partition detection fixes, device-mapper support, and LVM retry handling. Security enhancements include SecureBoot fingerprint reporting and Wireguard key protection.
Changelog entry
- Feat: add CPU frequency scaling controller Pull request #14430
- Feat: translate virtual machine configuration into domain specs Pull request #14437
- Feat: provide SecureBoot fingerprints used during boot Pull request #14431
- Feat: detect and publish hybrid ISO partitions Pull request #14458
- Feat: support partitions on device mapper devices Pull request #14313
- Feat: add libvirt storage pool configuration Pull request #14406
- Feat: Content Library upload digest verification Pull request #14427
- Fix: reject extra config merge paths Pull request #14463
- Fix: retry transient LVM reconciliation failures Pull request #14395
- Fix: handle correctly routes without outlinkname set Pull request #14438
- Feat: update Linux to 6.18.53 Pull request #14447
Week 38: CPU frequency scaling controller, virtual machine config rendering, SecureBoot fingerprints, hybrid ISO boot fixes, device-mapper partition support, and LVM retry improvements in Talos.
This week in Talos: Added CPU frequency scaling controller for fine-grained CPU management across hybrid cores. Implemented virtual machine configuration projection with backend-neutral rendering. Enhanced security with SecureBoot fingerprint reporting from TPM event logs. Fixed boot partition detection for hybrid ISO installations and added device-mapper partition support. Improved reliability with LVM transient failure retry handling. Updated to Linux 6.18.53 and systemd v262.
Week of September 14, 2026
What shipped
- Talos 1.14.1 released with Linux 6.18.51, containerd 2.3.5, and Go 1.26.8. Release
- ContentLibrary API added with talosctl support for uploading, listing, and deleting virtual machine images. Pull request #14400
- Boot device wait implemented in volume manager to prevent failures when STATE and boot partitions are on the same disk. Pull request #14393
- LLDP neighbor reporting added on physical links, publishing chassis and system information with automatic expiration handling. Pull request #14289
- Container dependency status propagation refactored to prevent desync between ContainerStatus and ContainerInstance. Pull request #14390
- ContainerStatusController implemented with support for dependsOn.containers enabling container dependency evaluation. Pull request #14122
- Fixed CRI and sandboxd dependency conditions to ensure sandboxd starts early and unconditionally. Pull request #14392
- USB settle code extended to MMC subsystem for SD card enumeration with timeout handling. Pull request #14370
- Debug controller and resource tracer implemented for recording and analyzing controller operations. Pull request #14401
- SideroLink library updated to v0.3.18 with upstream improvements. Pull request #14388
Why it matters
Talos 1.14.1 stabilizes device enumeration and boot reliability while introducing ContentLibrary for virtual machine image management. Container dependency tracking improvements and LLDP neighbor reporting enhance cluster networking visibility and operational reliability.
Changelog entry
- ContentLibrary API added with talosctl support for uploading, listing, and deleting virtual machine images Pull request #14400
- LLDP neighbor reporting on physical links with chassis, system, port, and management address information Pull request #14289
- Boot device wait implemented in volume manager to handle late block device enumeration Pull request #14393
- ContainerStatusController implemented with support for container dependencies via dependsOn.containers Pull request #14122
- Container dependency status propagation refactored to prevent ContainerStatus vs ContainerInstance desync Pull request #14390
- Fixed CRI and sandboxd dependency conditions to ensure proper startup order Pull request #14392
- USB and MMC subsystem settle code extended for comprehensive device enumeration waiting Pull request #14370
- Linux updated to 6.18.52 Pull request #14389
- SideroLink library updated to v0.3.18 Pull request #14388
- Debug controller and resource tracer added for recording and analyzing controller operations Pull request #14401
Talos 1.14.1 is out. Boot device handling, ContentLibrary API, container dependencies, and LLDP neighbor reporting. Linux 6.18.51, containerd 2.3.5.
Talos 1.14.1 is now available. This release improves boot reliability with better device enumeration handling, introduces the ContentLibrary API for managing VM images, and enhances container orchestration with dependency tracking. Network observability gets a boost with LLDP neighbor reporting on physical links. Updated with Linux 6.18.51 and containerd 2.3.5.