v0.3.2

image-factory 0.3.2 (2024-04-17)

Welcome to the v0.3.2 release of image-factory!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/image-factory/issues.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitriy Matrenichev
• Utku Ozdemir
• Dmitry Sharshakov
• Artem Chernyshev
• Spencer Smith
• Evan Johnson
• Justin Garrison
• Mattias Cockburn
• Andrei Kvapil
• AvnarJakob
• Bernard Gütermann
• Christian Mohn
• Christian WALDBILLIG
• Dmitry Sharshakov
• Fabiano Fidêncio
• Grzegorz Rożniecki
• Henno Schooljan
• Jean-Tiare Le Bigot
• Kai Hanssen
• Louis SCHNEIDER
• Matthieu S
• Michael Stephenson
• Niklas Wik
• Pip Oomen
• Saiyam Pathak
• Sebastiaan Gerritsen
• Steve Francis
• bri
• ebcrypto
• edwinavalos
• fazledyn-or
• goodmost
• james-dreebot
• looklose
• pardomue
• shurkys
• stereobutter

Changes

16 commits

• 40a13c5 release(v0.3.2): prepare release
• 2fe6825 fix: generation of overlay installer images
• db55c07 release(v0.3.1): prepare release
• 762cf2b fix: generation of SecureBoot ISO
• ae1f0a3 fix: sort extensions in the UI schematic generator
• c2de13f release(v0.3.0): prepare release
• 7062392 chore: update Talos dependency to 1.7.0-beta.0
• 78f8944 feat: add cert issuer regexp option
• c0981e8 feat: add support for -insecure-schematic-service-repository flag
• 5d779bb chore: bump dependencies
• 93eb7de feat: support overlay
• df3d211 release(v0.2.3): prepare release
• 4ccf0e5 fix: ignore missing DTB and other SBC artifacts
• c7dba02 chore: run tailwindcss before creating image
• 81f2cb4 chore: bump dependencies, rekres
• 07095cd chore: re-enable govulncheck

Changes since v0.3.1

2 commits

• 40a13c5 release(v0.3.2): prepare release
• 2fe6825 fix: generation of overlay installer images

Changes from siderolabs/gen

1 commit

• 238baf9 chore: add typesafe SyncMap and bump stuff

Changes from siderolabs/go-debug

1 commit

• 0c2be80 chore: run rekres (update to Go 1.22)

Changes from siderolabs/talos

174 commits

• 0a785802e fix: overlay installer operations
• b1b63f658 fix: mark overlay installer executable
• 3433fa13b feat: use container DNS when in container mode
• 5d07ac5a7 fix: close apid inter-backend connections gracefully for real
• 7ba18555b docs: fix typos in Akamai and AWS platform docs
• 3dd1f4e88 chore: extract pkg/imager/quirks to pkg/machinery
• 78bc3a433 docs: update Cilium docs
• 831f3d39e feat: update Flannel to v0.25.1
• ea5b3ff0c feat: update Kubernetes to v1.30.0-rc.2
• 54dac5ed4 feat: update Linux 6.6.24, containerd 1.7.15
• c51f146da docs: update Akamai platform docs
• 9550f5ff7 docs: fix getAuthenticationMethod and completePathFromNode docs
• bfbd02abf fix: assign different priority to IPv6 default gateway on OpenStack
• c8f674bd3 test: add a test for 'spin' container runtime
• 5390ccd48 chore: replace []byte with string and use go:embed for templates
• ba7cdc8c8 chore: optimize DNSResolveCacheController
• 145f24063 fix: don't modify a global map of profiles
• 6fe91ad9c feat: provide Kubernets/Talos version compatibility for 1.8
• 909a5800e fix: generate secureboot ISO .der certificate correctly
• b0fdc3c8c fix: make static pods check output consistent
• c6ad0fcce fix: validate that workers don't get cluster CA key
• 3735add87 fix: reconnect to the logs stream in dashboard after reboot
• 9aa1e1b79 fix: present all accepted CAs to the kube-apiserver
• 336e61174 fix: close the apid connection to other machines gracefully
• ff2c427b0 fix: pre-create nftables chain to make kubelet use nftables
• 5622f0e45 docs: change localDNS to hostDNS in release notes yaml section
• 01d8b897c fix: make safeReset truly safe to call multiple times
• 653f838b0 feat: support multiple Docker cluster in talosctl cluster create
• 951904554 chore: bump dependencies (go 1.22.2)
• 862c76001 feat: add support for CoreDNS forwarding to host DNS
• e8ae5ef63 feat: add akamai platform support
• 5c0f74b37 fix: don't announce the VIP on acquire failure
• 2f0fe10d5 chore: update sbc docs
• 1b17008e9 fix: handle more OpenStack link types
• e7d804140 fix: always update firewall rules (kubespan)
• 78b9bd927 fix: report unsupported x86_64 microarchitecture level
• 71d90ba5f fix: retry in the fixed amount of time if grpc relay failed
• d320498a4 chore: bump dependencies
• 3195e5d15 fix: force Flannel CNI to use KubePrism Kubernetes API endpoint
• 917043fb5 chore: bump tools, pkgs and extra to stable
• f515741b5 chore: add equinix e2e-tests
• 117e60583 feat: add support for static extra fields for JSON logs
• 090143b03 fix: allow platform cmdline args to be platform-specific
• 7a68504b6 feat: support rotating Kubernetes CA
• fac3dd043 fix: don't set default endpoints on gen config
• 8dc4910c4 chore: enable "WG over GRPC" testing in siderolink agent tests
• bac366e43 chore: add ExtraInfo field for extensions
• 0fc24eeb0 feat: provide insecure flag to imager
• a6b2f5456 feat: update Kubernetes to 1.30.0-rc.0, etcd to 3.5.13
• 0361ff895 docs: quickstart video and brew install
• b752a8618 chore: talosctl: add openSUSE OVMF paths
• 945648914 feat: support hardware watchdog timers
• 949ad11a2 chore: import siderolink as siderolink-launch subcommand
• ee51f04af chore: azure e2e
• 55dd41c0d chore: update coredns to v1.11.2 in required section
• 8eacc4ba8 feat: support rotation of Talos API CA
• 92808e3bc feat: report Docker node resources in cluster show
• 84ec8c16f feat: support syncing to PTP clocks
• 7d43c9aa6 chore: annotate installer errors
• f737e6495 fix: populate routes to BGP neighbors (Equinix Metal)
• 19f15a840 chore: bump golangci-lint to 1.57.0
• 684011963 docs: add docs for overlays
• 9b6ec5929 chore: bump kernel
• 69f0466cd docs: remove repetitive words
• 113fb646e chore: use go-talos-support library
• 89fc68b45 fix: service lifecycle issues
• ead37abf0 test: disable volume tests
• c64523a7a feat: update Flannel to v0.24.4
• 15beb1478 feat: implement blockdevice watch controller
• 06e3bc0cb feat: implement Siderolink wireguard over GRPC
• 9afa70baf fix: patch correctly config in talosctl upgrade-k8s
• 3130caf95 chore: re-enable DRBD extension
• 3ba180d07 release(v1.7.0-alpha.1): prepare release
• 403ad93c3 feat: update dependencies
• 7376f34e8 fix: remove maintenance config when maintenance service is shut down
• 952801d8b fix: handle overlay partition options
• 465b9a4e6 fix: update discovery client with the fix for keepalive interval
• 1e9f866ac feat: update Kubernetes to v1.30.0-beta.0
• d118a852b feat: implement Install for imager overlays
• cd5a5a447 chore: migrate to go-grpc-middleware/v2
• e3c2a6398 feat: set default NTP server to time.cloudflare.com
• 32e087760 chore: print all available logs containers in logs command completions
• e89d755c5 fix: etcd config validation for worker
• 1aa3c9182 docs: add DreeBot to ADOPTERS.md
• 1bb6027cc fix: fix nil panic on maintenance upgrade with partial config
• aa70bfb9d docs: add Redpill Linpro to adopters list
• f02aeec92 fix: do not fail cluster create when input dir does not contain talosconfig
• 1ec6683e0 chore: use go-copy
• 3c8f51d70 chore: move cli formatters and version modules to machinery
• 8152a6dd6 feat: update Go to 1.22.1
• 8c7953991 docs: update replicated-local-storage-with-openebs-jiva.md
• f23bd8144 fix: syslog parser
• bbed07e03 feat: update Linux to 6.6.18
• 8125e754b feat: imager overlay
• 0b9b4da12 feat: update Kubernetes to 1.30.0-alpha.3
• 3a764029e docs: fix typo in word governor
• d81d49000 chore: update CoreDNS renovate source
• b2ad5dc5f fix: workaround a race in CNI setup (talosctl cluster create)
• 457507803 fix: provide auth when pulling images in the imager
• e707175ab docs: update config patch in cilium docs
• f8c556a1c chore: listen for dns requests on 127.0.0.53
• 8872a7a21 fix: ignore 'no such device' in addition to 'no such file'
• 1cb544353 chore: uki der certs in iso
• 67ac6933d fix: handle errors to watch apid/trustd certs
• c79d69c2e fix: only set gateway if set in context (opennebula)
• 4575dd8e7 chore: allow not preallocated disks for QEMU cluster
• 0bddfea81 chore: add oceanbox.io to adopters
• 136427592 chore: use proper talos_version_contract for TF tests
• 6bf50fdc1 chore: disable x/net/trace in gRPC to enable dead code elimination
• 815a8e9cc feat: add partial config support to talosctl cluster create
• 64e9703f8 chore: add tests for the Kata Containers extension
• 9b6291925 feat: update pkgs
• 66f3ffdd4 fix: ensure that Talos runs in a pod (container)
• 9dbc33972 feat: add basic syslog implementation
• 0b7a27e6a feat: allow access to all resources over siderolink in maintenance mode
• 53721883d feat: support AWS KMS for the SecureBoot signing
• 7ee999f8a fix: disable KubeSpan endpoint harvesting by default
• 7b87c7fe9 chore: bump Go dependencies
• 8e9596d3c docs: rpi talosctl install update
• 493bb60f8 fix: correctly handle partial configs in DNSUpstreamController
• 6deb10ae2 chore: deprecate environmentFile for extensions
• f8b4ee82a chore: update extensions test
• 1366ce14a feat: update Kubernetes to v1.30.0-alpha.2
• 559308ef7 fix: use MachineStatus resource to check for boot done
• 15e8bca2b feat: support environment in ExtensionServicesConfig
• 3fe82ec46 feat: custom image settings for k8s upgrade
• fa3b93370 chore: replace fmt.Errorf with errors.New where possible
• d4521ee9c feat: update kernel with sfc driver and LSM updates
• 2f0421b40 fix: run xfs_repair on invalid argument error
• f868fb8e8 docs: update vmware tools url
• fa2d34dd8 chore: enable v6 support on the same port
• 83e0b0c19 chore: adjust dns sockets settings
• a1ec1705b chore: update Go to 1.22.0
• 76b50fcd4 chore: add Ænix to the Adopters list
• 5324d3916 chore: bump stuff
• 087b50f42 feat: support systemd-boot ISO enroll keys option
• afa71d6b0 chore: use "handle-like" resource in DNSResolveCacheController
• 013e13070 fix: error with decoding config document with wrong apiVersion
• 1e77bb1c3 chore: allow custom pkgs to build talos
• 3f8a85f1b fix: unlock the upgrade mutex properly
• 61c3331b1 docs: update indentation in vip.md
• 383e528df chore: allow uuid-based hostnames in talosctl cluster create
• 1e6c8c4de feat: extensions services config
• 989ca3ade feat: add OpenNebula platform support
• 914f88778 docs: update nocloud.md Proxmox information
• a04cc8015 fix: pass TTL when generating client certificate
• 3fe8c12ca fix: add log line about controller runtime failing
• ddbabc7e5 fix: use a separate cgroup for each extension service
• 6ccdd2c09 chore: fix markdown-lint call
• 4184e617a chore: add test for wasmedge runtime extension
• 95ea3a6c6 chore: bump timeout in acquire tests
• c19a505d8 chore: bump docker dind image
• d7d4154d5 chore: remove channel blocking in qemu launch
• 029d7f7b9 release(v1.7.0-alpha.0): prepare release
• 2ff81c06b feat: update runc 1.1.12, containerd 1.7.13
• 9d8cd4d05 chore: drop deprecated method EtcdRemoveMember
• 17567f19b fix: take into account the moment seen when cleaning up CRI images
• aa03204b8 docs: document the process of building custom kernel packages
• 7af48bd55 feat: use RSA key for kube-apiserver service account key
• a5e13c696 fix: retry blockdevice open in the installer
• 593afeea3 fix: run the interactive installer loop to report errors
• 87be76b87 fix: be more tolerant to error handling in Mounts API
• 03add7503 docs: add section on using imager with extensions from tarball
• ee0fb5eff docs: consolidate certificate management articles
• 9c14dea20 chore: bump coredns
• ebeef2852 feat: implement local caching dns server
• 4a3691a27 docs: fix broken links in metal-network-configuration.md
• c4ed189a6 docs: provide sane defaults for each release series in vmware script
• 8138d54c6 docs: clarify node taints/labels for worker nodes
• b44551ccd feat: update Linux to 6.6.13
• 385707c5f docs: update vmware.sh
• d1a79b845 docs: fix small typo in etcd maintenance guide
• cf0603330 docs: copy generated JSON schema to host
• f11139c22 docs: document local path provisioner install

Dependency Changes

• github.com/google/go-containerregistry v0.18.0 -> v0.19.1
• github.com/prometheus/client_golang v1.18.0 -> v1.19.0
• github.com/siderolabs/gen v0.4.7 -> v0.4.8
• github.com/siderolabs/go-debug v0.2.3 -> v0.3.0
• github.com/siderolabs/talos e0dfbb8fba3c -> 0a785802ea22
• github.com/siderolabs/talos/pkg/machinery e0dfbb8fba3c -> 0a785802ea22
• github.com/sigstore/cosign/v2 v2.2.2 -> v2.2.3
• github.com/sigstore/sigstore v1.8.1 -> v1.8.3
• github.com/stretchr/testify v1.8.4 -> v1.9.0
• github.com/u-root/u-root v0.12.0 -> v0.14.0
• github.com/ulikunitz/xz v0.5.11 -> v0.5.12
• go.uber.org/zap v1.26.0 -> v1.27.0
• golang.org/x/net v0.20.0 -> v0.23.0
• golang.org/x/sys v0.16.0 -> v0.18.0

Previous release can be found at v0.2.2