v1.11.0-rc.0

[smira]

Talos System Extensions 1.11.0-rc.0 (2025-08-19)

Welcome to the v1.11.0-rc.0 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

HailoRT drivers

HailoRT driver is now supported as an extension.

Newt client

Newt client is now supported as an extension.

Tenstorrent drivers

Tennstorrent driver is now supported as an extension.

Component Updates

ZFS: 2.3.3
DRBD: 9.2.14
qemu-guest-agent: 10.0.2
fuse: 3.17.2
nut: 2.8.3
Tailscale: 1.84.2
Linux firmware: 20250808
metal-agent: 0.1.3
Intel u-code: 20250812
wasmedge: 0.6.0
Kata containers: 3.18.0
NVIDIA LTS: 535.247.01
NVIDIA Production: 570.158.01
NVIDIA Container Toolkit: 1.17.8
vmtoolsd: 1.1.0
newt: 1.2.1
Amazon ENA: 2.15.0
gVisor: 20250707.0
Spin: v0.20.0
crun: 1.22
ecr-credential-helper: 1.33.1

Youki Container Runtime

Youki is now supported as a container runtime.

Contributors

• Andrey Smirnov
• Noel Georgi
• Dmitrii Sharshakov
• Steven Kreitzer
• Mateusz Urbanek
• Marco Mihai Condrache
• Michael Robbins
• Camp
• Justin Garrison
• 0xBrandon
• Andrew Rynhard
• Dennis Marttinen
• Jean-Francois Roy
• Jorik Jonker
• Marat Bakeev
• Olav Thoresen
• Spencer Smith
• Thibault VINCENT
• Utku Ozdemir
• Yehia Amer

Changes

59 commits

• bf63c83 release(v1.11.0-rc.0): prepare release
• 13b711c feat: update Linux firmware and Intel u-code
• 9982d41 release(v1.11.0-beta.2): prepare release
• a3299b6 chore: update nfsrahead defaults
• 1fa8891 feat: update Go to 1.24.6
• 6aaf6c8 release(v1.11.0-beta.1): prepare release
• 5422c17 feat: add thunderbolt udev rule
• 395e871 fix: remove sbom of kernel modules
• b8f4088 feat: update pkgs for containerd 2.1.4
• 758e6a7 docs: add SBOM for more extensions
• 4565678 fix: nfsrahead udev rule
• 539915c docs: add SBOM for more extensions
• 0614a8a docs: add SBOM for container-runtimes
• 9af8f58 chore: sync pkgs repo
• 2696504 release(v1.11.0-beta.0): prepare release
• c479d91 fix: build of nfsrahead extension
• 7351b9d feat: update dependencies
• cd46736 feat: add SBOM to some extensions
• 0213624 chore: update readme and only make required nfsrahead libs
• 357b561 feat: add nfsrahead extension
• 97ec587 feat: update dependencies
• 7bc2170 fix(newt): add SSL ca cert mount
• 030ac16 chore: add tools/pkgs in the release notes
• b485082 release(v1.11.0-alpha.3): prepare release
• 5895d8b release(v1.11.0-alpha.2): prepare release
• 50e4ba4 feat: add DVBSky S952 firmware driver extension
• bc53fc3 feat: add Newt extension
• a094039 feat: update dependencies via pkgs
• 1f02973 fix: nvme hostnqn lookup path
• 0835e02 feat: add hailort extension
• 5c5403b feat: update vmtoolsd to v1.1.0
• 0723b38 feat: update to Go 1.24.4
• d13039b release(v1.11.0-alpha.1): prepare release
• c26f543 fix: glib version
• 29c809b feat: udpate NVIDIA extensions
• 76bba6d feat: bump dependencies
• f9b5bf6 fix: nvidia builds
• 5de8e28 fix: revert "fix(glibc): use lib64 for better compatibility"
• f161267 feat: update Intel u-code to 20250512
• 1efc06b fix: nebula extension spec
• d668b07 fix(glibc): use lib64 for better compatibility
• 30eb717 chore: bump metal-agent version to v0.1.3
• 21b44b1 fix: tailscale static builds
• 5f1070a fix: staticallty link ecr-credential-provider
• 40a0b65 feat: add tenstorrent extension
• 3df6924 feat: update Linux firmware to 20250509
• ac5ad5d feat: update pkgs with containerd 2.1.0
• 29ce902 chore: update pkgs and zstd module
• 9b311a0 feat(panfrost): add kernel drivers
• f632ef9 feat: bump dependencies
• 643c853 fix(panfrost): add mali firmware
• e908223 feat: update for new pkgs, ZFS 2.3.2
• bcc1d6e fix: lldpd build
• 573ed8c release(v1.11.0-alpha.0): prepare release
• 0fa2a42 chore: prepare for 1.11.0-alpha.0 release
• 08108ca feat: add youki container runtime extension
• e45c086 fix: build of tirpc
• 6c7422b feat: update pkgs
• 5bf5413 fix: add SSL mount to Tailscale

Changes since v1.11.0-beta.2

2 commits

• bf63c83 release(v1.11.0-rc.0): prepare release
• 13b711c feat: update Linux firmware and Intel u-code

Changes from siderolabs/pkgs

64 commits

• 3bb9cc9 fix: backport CVE kernel patches to 6.12
• c87dc6c feat: enable Infiniband IRDMA support
• 2598d53 fix: re-enable CPUSETS_V1 cgroups controller
• 6a8bca7 feat: update backportable dependencies
• a150a75 feat: update Go to 1.24.6
• a94734c feat: update containerd to 2.1.4
• 662c5a4 feat: enable F71808E watchdog driver
• 48afc2a fix: enable ISCSI IBFT
• ddb7b5e feat: update Linux to 6.12.40
• 5616981 feat: enable bootloader control on amd64
• 4a840bc chore: allow more than one commit for a PR
• e2fbfb1 feat: update tools/toolchain to 1.11.0
• 383bbb4 feat: update NVIDIA production to 570.158.01
• 853cf3a feat: bump e2fsprogs, ipxe, kspp, tools
• a3f8281 feat: update Linux to 6.12.38
• 8ed84c5 feat: refactor HW_RANDOM configuration
• 108099f feat: enable AMD encrypted memory
• c97d25e fix: remove erroneous PURLs
• 90f7c65 fix: bump bldr
• a24b40e feat: update Linux to 6.12.36 and firmware
• 2537e61 docs: more SBOM metadata to cover whole Talos
• 0f4cbbc feat: update dependencies
• 9cec45c feat: add SBOM metadata for some packages
• 03bb94c feat: update dependencies
• c613abd fix: iptables url
• fae59df fix: download and copy hailo8 firmware
• fadf1e2 feat: update containerd to 2.1.2
• a0b0da1 feat: enable io.latency cgroup controller
• 0aaa07a feat: add hailort package
• 8555e94 chore: use ftpmirror for GNU sources
• 9fbe2b4 feat: update Go to 1.24.4
• 79bfa9e feat: update NVIDIA drivers to 570.148.08
• c8b8bd8 feat: bump dependencies
• 54bf03e feat: update Linux to 6.12.31
• 93b3aaa feat: add patch for CephFS IMA performance regression
• ebd6627 feat: disable IMA support
• 8aad53b feat: add CONFIG_NFT_CONNLIMIT to kernel
• 7a299fa feat: update Linux to 6.12.30
• 8c4603e feat: move more configs to modules on arm64
• 7b1183b feat(kernel): enable IB user-space management and RDMA
• 1b1430e fix: drop pcre2 binaries
• 487610c fix: drop broken symlinks
• f31d518 fix: clean up some binaries
• 0f74b9b feat: update containerd to v2.1.1
• 89b4037 fix: tenstorrent pkg name
• a14b544 chore: drop qemu-tools vmdk support
• 2563e47 feat: add tenstorrent package
• 2a1c42f fix(renovate): flannel config
• bfa69a8 feat: add open-vmdk package
• 9f1ba1f fix: bring back updated containerd gvisor patch
• 1567cb6 feat: update Linux 6.12.28, firmware
• 9bc66e6 feat: update containerd to 2.1.0
• c6b54e0 feat: enable zswap
• 4cd7084 feat: update dependencies
• a3fcbf8 feat(kernel): enable panthor driver
• 74d1665 feat: update ZFS to 2.3.2
• ddc866b feat: update Linux to 6.12.27
• a347857 fix: build containerd with Go 1.23
• 74da85c fix: containerd build doesn't need seccomp
• 4effa05 fix: downgrade libseccomp to 2.5.5
• 9cea00b feat: update Linux to 6.12.25
• cb108a5 feat(kernel): enable bcache module
• d042432 fix: backport sandbox fix for Gvisor
• fa625dc feat: update Linux 6.12.24, containerd 2.0.5

Changes from siderolabs/tools

11 commits

• 330f478 feat: update Go to 1.24.6
• 1d451f3 feat: update toolchain to 1.11.0
• 650b916 chore: bump toolchain, update names in SBOM
• 594704b feat: bump dependencies
• 4818702 docs: add SBOM metadata for packages copied to pkgs
• 542a03c feat: update dependencies
• 0554e87 chore: use ftpmirror for GNU sources
• 1dfd14b feat: update Go to 1.24.4
• af3fd64 feat: update dependencies
• e35234b feat: update dependencies
• c96a4e6 chore: update toolchain to the latest version

Dependency Changes

• github.com/siderolabs/pkgs v1.10.0-5-g48dba3e -> v1.11.0-11-g3bb9cc9
• github.com/siderolabs/tools v1.10.0 -> v1.11.0-1-g330f478

Previous release can be found at v1.10.0

---

This discussion was created from the release v1.11.0-rc.0.