Unclaimed project
Are you a maintainer of talos ? Claim this project to take control of your public changelog and roadmap.
Claim this project Changelog
talos Talos Linux is a modern Linux distribution built for Kubernetes.
cloud-native containerd go grpc kubernetes kubernetes-distribution +3
Last updated 22 days ago
© 2026 AnnounceHQ. All rights reserved.
v1.13.0-alpha.1 - talos Release Notes | AnnounceHQ
Improved February 3, 2026
v1.13.0-alpha.1
Welcome to the v1.13.0-alpha.1 release of Talos!This is a pre-release of Talos
Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.
Environment Configuration Document
A new EnvironmentConfig document has been introduced to allow users to specify environment variables for Talos components.
It replaces and deprecates the previous method of setting environment variables via the .machine.env field.
Multiple values for the same environment variable will replace previous values, with the last one taking precedence.
To remove an environment variable, remove it from the EnvironmentConfig document and restart the node.
External Volumes
Talos now supports virtiofs-based external volumes via the new
These virtiofs external volumes are not supported when SELinux is running
in enforcing mode.
Extra Arguments accept slices in addition to strings Several Talos configuration fields that previously accepted single string values for extra arguments have been updated to accept slices of strings as well.
This includes fields such as .cluster.apiServer.extraArgs.
BREAKING: If you were relying on the resources EtcdConfigs, KubeletConfigs, ControllerManagerConfigs, SchedulerConfigs or APIServerConfigs, the protobuf format has changed from map<string,string> to map<string,message>.
Talos Imager Enhancements Talos imager now supports running rootless. --privileged and -v /dev:/dev are no longer required.
Talosctl images k8s-bundle subcommand accepts version parameter The talosctl images k8s-bundle command now accepts an optional version overrides arguments.
Kubernetes server-side apply Talos now uses inventory backed server-side apply when applying bootsrap manifests (including extraManifests and inlineManifests).
Purging of unneeded manifests is automatically performed.
The switch and inventory backfill is automatic and no action is needed from the user.
KubeSpan Configuration A new KubeSpanConfig document has been introduced to configure KubeSpan settings.
It replaces and deprecates the previous method of configuring KubeSpan via the .machine.network.kubespan field.
The old configuration field will continue to work for backward compatibility.
Negative Max Volume Size Negative max size represents the amount of space to be left free on the device, rather than the size the volume should consume.
For example:
* a max size of "-10GiB" means the volume can grow to the available space minus 10GiB.
* a max size of "-25%" means the volume can grow to the available space minus 25%.
Container Image Decompression Talos now ships with igzip (amd64) and pigz (arm64) to speed up container image decompression.
ProbeConfig The TCPProbeConfig configuration document allows to configure TCP probes for network reachability checks.
This allows to define a custom connectivity condition.
/proc/PID/mem Access Hardening A new kernel parameter proc_mem.force_override=never has been introduced by default to enhance system security
by preventing unwanted writes to protected process memory via /proc/PID/mem.
If the kernel parameter is removed, default behavior is restored, allowing access only if the process is traced.
Reproducible Disk Images Talos disk images are now reproducible. Building the same version of Talos multiple times will yield
identical disk images.
Note: VHD and VMDK (Azure and VMware) images are not currently reproducible due to limitations in the underlying image creation tools.
Users verifying reproducible images should use raw images, verify checksums, and convert them to VHD/VMDK as needed.
ResolverConfig The nameservers configuration in machine configuration now overwrites any previous layers (defaults, platform, etc.) when specified.
Previously a smart merge was performed to keep IPv4/IPv6 nameservers from lower layers if the machine configuration specified only one type.
Service Account Issuer configuration In API Server, passing extra args with service-account-issuer will append them after default value.
This allows easy migration, e.g. by changing .cluster.controlPlane.endpoint to new value, and keeping the old value in
.cluster.apiServer.extraArgs["service-account-issuer"].
talosctl images talos-bundle can ignore reaching to the registryThe talosctl images talos-bundle command now accepts optional --overlays and --extensions flags.
If those are set to false, the command will not attempt to reach out to the container registry to fetch the latest versions and digests of the overlays and extensions.
Component Updates Linux: 6.18.8
containerd: 2.2.1
etcd: 3.6.7
CoreDNS: 1.13.2
Kubernetes: 1.35.0
Flannel CNI plugin: v1.9.0-flannel1
LVM2: 2_03_38
runc: 1.4.0
systemd: 259
cryptsetup: 2.8.3
Talos is built with Go 1.25.6.
VM Hot-Add Support Talos now includes udev rules to support hot-adding of CPUs in virtualized environments.
Contributors
Andrey Smirnov
Mateusz Urbanek
Noel Georgi
Dmitrii Sharshakov
Orzelius
Laura Brehm
Bryan Lee
Edward Sammut Alessi
Alexis La Goutte
Andras BALI
Andrei Kvapil
Artem Chernyshev
Birger Johan Nordølum
Camillo Rossi
Christopher Puschmann
Florian Ströger
Gregor Gruener
Jaakko Sirén
Jean-Francois Roy
Joakim Nohlgård
Jonas Lammler
Justin Garrison
Lennard Klein
Matthew Sanabria
Max Makarov
Michal Baumgartner
Mickaël Canévet
Olav Thoresen
Pranav Patil
Serge van Ginderachter
Skye Soss
Spencer Smith
Tim Jones
dataprolet
eseiker
pranav767
Changes
Changes since v1.13.0-alpha.0 81 commits
siderolabs/talos@055add7ae release(v1.13.0-alpha.1): prepare release
siderolabs/talos@900516e68 chore: update image signer
siderolabs/talos@938de566e feat: bump kernel
siderolabs/talos@388cec727 feat(overlays): add new overlays
siderolabs/talos@9f2dd6312 refactor: api tests
siderolabs/talos@a90783146 feat: add a helper module to generate standard patches
siderolabs/talos@1fec5b23d fix: implement merger for PercentageSize
siderolabs/talos@8b245b8f2 feat: implement new image service APIs
siderolabs/talos@d90c775b8 chore: rename internal talosctl debug air-gapped
siderolabs/talos@2165280d0 refactor: change the way one2many proxying is picked
siderolabs/talos@b1b703dbe chore: move sync logging code to go-kubernetes package
siderolabs/talos@e48c6d7ab fix: allow to expose a port multiple times in Docker
siderolabs/talos@410d8cb57 fix: undo CRLF on Windows (talosctl edit)
siderolabs/talos@859d3f03c feat: add RPi5 to the list of supported SBCs
siderolabs/talos@0bd48bbc6 fix(talosctl): pass --k8s-endpoint flag to rotate-ca kubernetes rotation
siderolabs/talos@b9e27ebe7 feat: update Linux kernel with dm-integrity
siderolabs/talos@6aa9b0677 fix: skip empty documents on config decoding
siderolabs/talos@494492489 fix: always set advertised peer URLs
siderolabs/talos@782cc507d fix: open the filesystem as read-only
siderolabs/talos@28e61a740 fix: set GRUB prefix correctly on arm64
siderolabs/talos@a4f1c5239 feat: update GRUB to 2.14
siderolabs/talos@562920701 fix: use node podCIDRs for kubespan advertiseKubernetesNetworks
siderolabs/talos@39460365c feat: implement layering for ProbeSpec
siderolabs/talos@b5c760f70 feat: add ProbeConfig for network connectivity probes
siderolabs/talos@4b274f761 feat: support aws cert manager in imager
siderolabs/talos@417209512 fix: fallback to /proc/meminfo for memory modules
siderolabs/talos@7f1147bed fix: add warnings to 802.3ad bond
siderolabs/talos@ddd6b186e refactor: generate GRUB images
siderolabs/talos@c7aa266ea fix: overwrite resolver config with machine config
siderolabs/talos@cf70f05fa fix: oracle platform file format
siderolabs/talos@8c7b8f5b7 feat: add support for negative max size
siderolabs/talos@77bc3d21f fix: marshal of FailOverMac property
siderolabs/talos@38e280c93 fix: make OOM expression a bit less sensitive
siderolabs/talos@3d1301640 fix: wipe the first/last 1MiB in addition to wiping by signatures
siderolabs/talos@1aa6528ad fix: make OOM controller more precise by considering separate cgroup PSI
siderolabs/talos@f7072c050 fix: check if the device is not mounted when wiping
siderolabs/talos@743c3b94b fix: use correct containerd import path
siderolabs/talos@f2dd08594 feat: report image pull progress in the console
siderolabs/talos@72fe98a06 fix: boot with GRUB
siderolabs/talos@d4ed13d93 fix: add talos version to Hetzner Cloud client user agent
siderolabs/talos@150c41c30 feat: update Linux to 6.18.5
siderolabs/talos@01a367891 fix: use append instead of prepend in service-account-issuer
siderolabs/talos@d1954278a feat: add extraArgs from service-account-issuer
siderolabs/talos@91b88f7f9 feat: support multiple values for extraArgs
siderolabs/talos@96e604874 fix: add hostname to endpoints
siderolabs/talos@7033275a7 refactor: move BootloaderKind into machinery
siderolabs/talos@71adaf0ea fix: sort mirrors and tls configs when generating the machine config
siderolabs/talos@34f09a300 feat: add VLAN support to OpenStack platform
siderolabs/talos@5127ef7c2 fix: wipe disk by signatures
siderolabs/talos@415bfaedb fix: panic in configpatcher when the whole section is missing
siderolabs/talos@e5aca71cd fix: fix healthcheck timeout
siderolabs/talos@634b71e2d docs: move talosctl pcap example to Example Block
siderolabs/talos@818492731 feat: implement KubeSpan multi-document configuration
siderolabs/talos@4d0604b9d chore: remove unrelated machineconfig
siderolabs/talos@e36863470 feat: add it87 hwmon module
siderolabs/talos@308c75090 fix: resolve SideroLink Wireguard endpoint on reconnect
siderolabs/talos@e4ef494de fix: drop the persist config flag from gen config
siderolabs/talos@c3176adcf feat: add EnvironmentConfig document
siderolabs/talos@c839b3880 feat: expose more SSA options in the upgrade-k8s command
siderolabs/talos@b8ff9677e fix: handle correctly incomplete RegistryTLSConfig
siderolabs/talos@99f2ddada fix: bond config via platform
siderolabs/talos@2449ffea4 fix: allow HostnameConfig to be used with incomplete machine config
siderolabs/talos@35fc52087 fix: lock down etcd listen address to IPv4 localhost
siderolabs/talos@27253d731 feat: use new xfs config file
siderolabs/talos@c9d84ae21 fix: generate OCI-compliant image config
siderolabs/talos@7a4b2b33a fix: update VIP config example
siderolabs/talos@080efcbda feat: add k8s-version parameter to k8s-bundle
siderolabs/talos@b764f5f72 fix: skip sync test when kube-proxy is disabled
siderolabs/talos@70e67787d feat: imager: populate filesystems with root owned files
siderolabs/talos@7416dca59 fix: print talosctl images to release notes
siderolabs/talos@dc2009e47 chore: use context when creating filesystems
siderolabs/talos@85f7be6e3 chore: update slack links
siderolabs/talos@154952175 fix: disable swap for system services
siderolabs/talos@d98b415af fix: drop more non-overlay SBC stuff
siderolabs/talos@226cd6bc1 fix: do not allocate for the actual disk image file
siderolabs/talos@53f5bf8d2 fix: overlay installers
siderolabs/talos@10d0cfd93 fix: overlay install in image mode
siderolabs/talos@77086694d fix: partition data population
siderolabs/talos@4d5657b1a fix: drop SBC board code
siderolabs/talos@c4f3f6d3e feat: implement kubernetes server-side apply
siderolabs/talos@f12fd2b0a test: bump Image Factory tests
Changes from siderolabs/go-kubernetes 3 commits
siderolabs/go-kubernetes@604c56b chore: extract common code to the go-kubernetes package
siderolabs/go-kubernetes@ec0e3ae chore: expose more ssa options
siderolabs/go-kubernetes@ad2fccd feat: add SSA and pruning support
Changes from siderolabs/pkgs 53 commits
siderolabs/pkgs@dc737a6 chore: update kernel
siderolabs/pkgs@9b118b3 chore: update deps
siderolabs/pkgs@a63c227 feat: update OpenSSL to v3.6.1
siderolabs/pkgs@da7ab57 feat: add px-fuse pkg
siderolabs/pkgs@553e0fb feat: enable dm-integrity
siderolabs/pkgs@15a3cdf feat: update Linux to 6.18.6
siderolabs/pkgs@b518a19 feat: update dependencies
siderolabs/pkgs@1b4fbf5 feat: update GRUB to 2.14
siderolabs/pkgs@30bc671 fix: enable pinctrl for Raspberry Pi 5
siderolabs/pkgs@375983f feat: update Go to 1.25.6
siderolabs/pkgs@d445c80 feat: update Linux to 6.18.5
siderolabs/pkgs@6994400 feat: update NVIDIA LTS and production driver versions
siderolabs/pkgs@05c3d85 feat: update Linux firmware to 20260110
siderolabs/pkgs@c61b466 feat: enable IT87 hwmon module
siderolabs/pkgs@ae2572e feat: enable IPV6_MROUTE
siderolabs/pkgs@d6b503e feat: add RK3588 NPU Support
siderolabs/pkgs@df4b4c8 feat: bump deps
siderolabs/pkgs@a220898 feat: add libarchive
siderolabs/pkgs@c2371b5 feat: enable ZRAM support
siderolabs/pkgs@ab4d169 feat: add a patch to force uid when populating from a directory
siderolabs/pkgs@972f44d feat: update dependencies
siderolabs/pkgs@f8eb5b0 feat: update Linux to 6.18.2
siderolabs/pkgs@3fb6291 feat: update systemd to 259
siderolabs/pkgs@59241bd fix: add SBOMs for pigz/igzip
siderolabs/pkgs@9377c78 feat: optimize decompression for containerd
siderolabs/pkgs@e8e61ce feat: update containerd to 2.2.1
siderolabs/pkgs@daa74ba feat: support xfs filesystem reproducibility
siderolabs/pkgs@1f66513 feat: update OpenZFS to 2.4.0
siderolabs/pkgs@b209af5 chore: rekres with latest changes
siderolabs/pkgs@2b806b9 feat: bump dependencies
siderolabs/pkgs@65242fd feat: enable CONFIG_MISC_RP1 in ARM64 config
siderolabs/pkgs@4daecd8 feat: update Linux to 6.18.1
siderolabs/pkgs@9868a66 feat: enable Powercap and Intel RAPL
siderolabs/pkgs@07883ee feat: build and package perf binary
siderolabs/pkgs@47abca0 fix: add json support to nftables binary
siderolabs/pkgs@b961ff8 feat: patch containerd 2.2.0 with cgroups fix patch
siderolabs/pkgs@b7dd7f6 feat: add mstflint module
siderolabs/pkgs@ae53351 feat: update ZFS to 2.4.0-rc5
siderolabs/pkgs@b8edf01 feat: update CNI plugins to v1.9.0
siderolabs/pkgs@a57c1b0 feat: enable amd sev-snp
siderolabs/pkgs@68562c1 feat: update Linux to 6.18
siderolabs/pkgs@6f4ff8c feat: enable Amlogic Meson PCIe controller driver
siderolabs/pkgs@c41127b feat: enable Intel GPIO/Pinctrl kernel modules
siderolabs/pkgs@4a31ff7 feat: update NVIDIA LTS to 580.105.08
siderolabs/pkgs@3e858d3 chore: fork pkgs for Talos 1.13
siderolabs/pkgs@dcc5aa1 feat: update runc to 1.3.4
siderolabs/pkgs@8b6ae5b fix: regenerate configs
siderolabs/pkgs@2992598 fix: add missing kernel config entries
siderolabs/pkgs@c8ea18a feat: rekres to alow multiple commits
siderolabs/pkgs@2ddef8b chore: update dependencies
siderolabs/pkgs@d1f28e0 chore: update dependencies
siderolabs/pkgs@ab253f5 feat: enable gpio-fan module
siderolabs/pkgs@0b10666 chore: use ubuntu mirrors
Changes from siderolabs/proto-codec 1 commit
siderolabs/proto-codec@bd9c491 chore: bump and update dependencies
Changes from siderolabs/tools 13 commits
siderolabs/tools@ca26e1c chore: update deps
siderolabs/tools@0281af0 feat: update OpenSSL to 3.6.1
siderolabs/tools@721ad07 feat: update dependencies
siderolabs/tools@2b3f514 fix: reproducible build for nasm
siderolabs/tools@98c699e feat: update Go to 1.25.6
siderolabs/tools@cd5eb66 chore: run rekres and update dependencies
siderolabs/tools@896f8b9 fix: add sbom for zlib-ng
siderolabs/tools@543a16f feat: replace zlib -> zlib-ng, add nasm
siderolabs/tools@b67c1a1 chore: rekres with latest changes
siderolabs/tools@5e087cb feat: bump dependencies
siderolabs/tools@da96a27 chore: rekres to fix reproducibility
siderolabs/tools@e283ec8 feat: update Go to 1.25.5
siderolabs/tools@c38ff0c chore: update to 1.13.0-alpha.0 toolchain
Dependency Changes
github.com/aws/aws-sdk-go-v2/config v1.31.20 -> v1.32.6github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.13 -> v1.18.16github.com/aws/aws-sdk-go-v2/service/acm v1.37.19 new github.com/aws/aws-sdk-go-v2/service/kms v1.46.0 -> v1.49.4github.com/aws/smithy-go v1.23.2 -> v1.24.0github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0github.com/containerd/containerd/api v1.9.0 -> v1.10.0github.com/containerd/containerd/v2 v2.1.5 -> v2.2.0github.com/containerd/platforms v1.0.0-rc.1 -> v1.0.0-rc.2github.com/cosi-project/runtime v1.12.0 -> v1.13.0github.com/diskfs/go-diskfs fc569a00ea19 new github.com/docker/cli v29.0.0 -> v29.1.3github.com/gdamore/tcell/v2 v2.9.0 -> v2.13.4github.com/godbus/dbus/v5 v5.1.0 -> v5.2.0github.com/google/cadvisor v0.53.0 -> v0.54.1github.com/google/go-containerregistry v0.20.6 -> v0.20.7github.com/hetznercloud/hcloud-go/v2 v2.30.0 -> v2.32.0github.com/klauspost/compress v1.18.1 -> v1.18.3github.com/linode/go-metadata v0.2.2 -> v0.2.3github.com/mdlayher/ethtool v0.4.0 -> v0.5.0github.com/miekg/dns v1.1.68 -> v1.1.69github.com/moby/moby/client v0.1.0 -> v0.2.1github.com/siderolabs/go-blockdevice/v2 v2.0.20 -> v2.0.23github.com/siderolabs/go-kubernetes v0.2.28 -> v0.2.31github.com/siderolabs/pkgs v1.12.0-23-ge0b78b8 -> v1.13.0-alpha.0-44-gdc737a6github.com/siderolabs/proto-codec v0.1.2 -> v0.1.3github.com/siderolabs/talos/pkg/machinery v1.12.0 -> v1.13.0-alpha.1github.com/siderolabs/tools v1.12.0-2-g7d57df0 -> v1.13.0-alpha.0-12-gca26e1cgithub.com/sirupsen/logrus v1.9.3 -> dd1b4c2e81afgo.etcd.io/etcd/api/v3 v3.6.6 -> v3.6.7go.etcd.io/etcd/client/pkg/v3 v3.6.6 -> v3.6.7go.etcd.io/etcd/client/v3 v3.6.6 -> v3.6.7go.etcd.io/etcd/etcdutl/v3 v3.6.6 -> v3.6.7go.uber.org/zap v1.27.0 -> v1.27.1golang.org/x/net v0.47.0 -> v0.48.0golang.org/x/oauth2 v0.33.0 -> v0.34.0golang.org/x/sync v0.18.0 -> v0.19.0golang.org/x/sys v0.38.0 -> v0.40.0golang.org/x/term v0.37.0 -> v0.38.0golang.org/x/text v0.31.0 -> v0.33.0google.golang.org/grpc v1.76.0 -> v1.77.0google.golang.org/protobuf v1.36.10 -> v1.36.11sigs.k8s.io/cli-utils 77c836a69463 new Previous release can be found at v1.12.0
Images ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.7
registry.k8s.io/pause:3.10.1
registry.k8s.io/kube-apiserver:v1.35.0
registry.k8s.io/kube-controller-manager:v1.35.0
registry.k8s.io/kube-scheduler:v1.35.0
registry.k8s.io/kube-proxy:v1.35.0
ghcr.io/siderolabs/kubelet:v1.35.0
ghcr.io/siderolabs/installer:v1.13.0-alpha.1
ghcr.io/siderolabs/installer-base:v1.13.0-alpha.1
ghcr.io/siderolabs/imager:v1.13.0-alpha.1
ghcr.io/siderolabs/talos:v1.13.0-alpha.1
ghcr.io/siderolabs/talosctl-all:v1.13.0-alpha.1
ghcr.io/siderolabs/overlays:v1.13.0-alpha.1
ghcr.io/siderolabs/extensions:v1.13.0-alpha.1