v1.14.0-beta.0

[smira]

Talos System Extensions 1.14.0-beta.0 (2026-07-23)

Welcome to the v1.14.0-beta.0 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Kata Containers

Kata Containers now has support for the kata-qemu runtime handler which uses QEMU instead of Cloud Hypervisor for virtualization.

The new extension kata-container-snp provides additional support for AMD SEV-SNP confidential VMs.

Component Updates

ctr: 2.3.3
cloudflared: 2026.7.2
px-fuse: 8b52ef67d261369cbc93f132db299e5dcf64ad7c-VERSION
util-linux: 2.42.2
tenstorrent: 2.10.0
NVIDIA LTS: 580.173.02
NVIDIA Production: 595.71.05
NVIDIA Container Toolkit: 1.19.1
DRBD: 9.3.3
Amazon ENA: 2.17.0
xdma-driver: 8721136
crun: 1.28
gvisor: 20260714.0
kata-containers: 3.32.0
spin: 0.25.1
netbird: 0.74.7
newt: 1.15.0
mdadm: 4.6
qemu-guest-agent: 11.0.2
ZFS: 2.4.3
linux-firmware: 20260622
intel-ucode: 20260512
cloud-provider-aws: v1.36.1
lldpd: 1.0.22
tailscale: 1.98.9
zerotier: 1.16.2
soci-snapshotter: v0.14.1
wasmedge: 0.6.1

Contributors

• Andrey Smirnov
• Noel Georgi
• Maja Bojarska
• Mateusz Urbanek
• Lukasz Raczylo
• Ansgar Dahlen
• Edward Sammut Alessi
• Rokoucha
• Albert
• Bernard Gütermann
• Calin
• Calin Stefan
• Daniil Kivenko
• Dario Emerson
• Devin Buhl
• Galen Abell
• OrbisAI Security
• Ryan VanGundy
• Utku Ozdemir
• Vassil Iordanov
• YANG JOO WOONG
• appkins
• imusmanmalik
• sam

Changes

69 commits

• 5db41de release(v1.14.0-beta.0): prepare release
• 62b6bdd chore: sync pkgs with Talos main
• 99ddb4f feat: add kata-containers-snp extension
• c8d5b9d feat: update backportable dependencies
• 85e5dca feat(kata-containers): add QEMU hypervisor handler
• e6871ac feat: pull in new pkgs/tools
• 6e17607 chore: bump metal-agent version to v0.1.6
• 16f9f3d feat: update dependencies
• fd0eddd chore: bump tools, pkgs, and components
• 1959ffb feat: update DRBD to 9.3.3
• 5817a73 feat: add hyperv-guest-agent extension
• 0a3a577 docs: document how to build a single extensions and a catalog (docs: document how to build a single extensions and a catalog #1127)
• f1889ed chore: make mdadm package no-op
• 685e166 feat: update Linux firmware to 20260622
• 824211c feat: update dependencies
• ed27dab feat: sync pkgs and tools
• 31ac838 release(v1.14.0-alpha.2): prepare release
• 9882a33 chore: sync pkgs/tools
• aea2cef chore: bump containerd to 2.3.2
• 5bf06ba chore: update pkgs (2026-06-18)
• f5c6faa chore: update zfs and nvidia
• 9d97e46 chore: update deps 2026-06-16
• 1b7063c fix: bound zpool export at shutdown with a configurable timeout
• 87d1abc chore: run rekres and bump deps
• 55c738c feat: bump dependencies
• 7266883 feat: update pkgs and tools
• 599a483 release(v1.14.0-alpha.1): prepare release
• f7d9773 chore: sync pkgs/tools to match Talos main
• 8ee3fc5 feat: add harbor-credential-provider extension
• e25da7f chore: update tools, pkgs, extensions
• 0b765a1 fix: drop phonet module
• 126ef5d fix: nvme-cli install path
• 0d2ef77 docs: add a note on rpcbind listening on all interfaces
• e67c9ea feat: update ZFS & NVIDIA LTS
• 1b6d4d3 feat: update intel ucode to 20260512
• e045f20 chore: small cleanups
• 93e1668 fix: add missing ldconfig step fabricmanager production
• 6bcd249 fix: nvidia-fabricmanager missing libz dependency
• 2d752ea feat: update Go to 1.26.3
• a2632a3 feat: add btrfsprogs (userspace tools) to btrfs extensions
• 4cc7808 feat: bump dependencies
• d57047e feat: allow bird to start in maintenance mode
• f599887 feat: sync pkgs/tools
• 2a533b1 feat: update DRBD to 9.3.2
• 582f9a8 feat: update NVIDIA drivers
• 3698471 fix: install iptables correctly into tailscale extension
• dade5d9 feat: promote multitpath-tools to extra, bump version
• d64b3c1 release(v1.14.0-alpha.0): prepare release
• 7aabff3 chore: update tools and pkgs version
• 74431c0 chore: bump metal-agent to 0.1.5
• fe0a99c chore: rekres
• 2f45d7c docs: fix setup key variable name in README
• 66f49bb chore: sync pkgs & tools
• 7871fc2 fix: grype scans
• 07b4337 fix: enable for real joydev & uinput extensions
• c5ef7eb feat: add uhid and joydev extensions
• 3670607 feat: update pkgs to pull in Linux firmware 20260410
• 26dae82 feat(ci): add extensions duplicate finder
• a9a1e7d chore: update dependencies
• f525338 chore: rekres
• fdd0258 feat: nvidia extension rework
• 5a0db53 feat: allow more nvidia and nvme files from extensions
• 77208fd feat: allow glibc ld files in etc
• ddd4720 feat: reenable netbird
• 62d2176 fix: netbird config to a persistent location
• 5aeaf4e fix: export zpools on zfs shutdown
• b28a70d fix: disable NVIDIA GPU check while building the driver
• faa5ccd feat: update musl to 1.2.6
• a6b6bb9 feat: update NVIDIA production to 595.58.03

Changes since v1.14.0-alpha.2

16 commits

• 5db41de release(v1.14.0-beta.0): prepare release
• 62b6bdd chore: sync pkgs with Talos main
• 99ddb4f feat: add kata-containers-snp extension
• c8d5b9d feat: update backportable dependencies
• 85e5dca feat(kata-containers): add QEMU hypervisor handler
• e6871ac feat: pull in new pkgs/tools
• 6e17607 chore: bump metal-agent version to v0.1.6
• 16f9f3d feat: update dependencies
• fd0eddd chore: bump tools, pkgs, and components
• 1959ffb feat: update DRBD to 9.3.3
• 5817a73 feat: add hyperv-guest-agent extension
• 0a3a577 docs: document how to build a single extensions and a catalog (docs: document how to build a single extensions and a catalog #1127)
• f1889ed chore: make mdadm package no-op
• 685e166 feat: update Linux firmware to 20260622
• 824211c feat: update dependencies
• ed27dab feat: sync pkgs and tools

Changes from siderolabs/pkgs

115 commits

• f78e3dc feat: update cryptsetup to 2.8.7
• 8c5831c feat: update dependencies
• 0de2a61 feat: update Linux to 6.18.39
• c652074 feat: enable UFSHC and some other options
• c4b550c feat: bump dependencies
• de07964 feat: enable CONFIG_IOMMUFD and CONFIG_VFIO_DEVICE_CDEV
• 6a9c40c chore: bump tools 2026-07-14
• 61e3ed9 chore: bump bldr to v0.6.1
• 981029e chore: bump nvidia to 580.167.08
• ff9a355 chore: bump deps (minor)
• 0b2474e chore: bump deps (patch)
• 94a16ef chore: bump toolchain
• 6dcf355 feat: enable devmapper plugin in containerd build
• 03534a5 fix: enable CONFIG_IFB as a module
• a264237 feat: update DRBD to 9.3.3
• 3f09c0c chore: update toolchain and tools
• 6c08c46 feat: bump kernel to 6.18.38
• 7c4fe92 feat: build runs with libpathrs (only amd64)
• 8922b6d fix: correct finalize destination path
• ae0d701 fix: use non-conflicting name for mdadm
• 5186a65 feat: add mdadm package for software RAID
• e09f9fb feat: bump kernel 6.18.37
• 8d23631 feat: update Linux firmware to 20260622
• 0343557 feat: update runc to 1.5.0
• 55d3676 feat: bump dependencies
• ea48e8b fix: patch Linux kernel for tunnel metadata buffer overflow
• ff80d88 feat: add support for AMD XGBE driver
• 9f8ab22 feat: enable NF_TABLES_ARP option
• bedfbeb feat: update Linux to 6.18.36
• a9f2bb3 chore: bump containerd to 2.3.2
• 73e76f8 chore: upgrade runc to 1.5.0-rc.3
• 28db1ca chore: update nvidia driver lts to 580.167.08
• 5df1a44 chore: update zfs to 2.4.3
• cd77c4f chore: update dependencies 2026-06-16
• 0f27ecc feat: bump runc
• d213ff5 feat: bump OpenSSL to 3.6.3
• cb713ae feat: bump kernel to 6.18.35
• 09cb04e fix: avoid page_table_check BUG on time namespace VVAR page
• bfb88f6 feat: add nvidia-fs kernel module
• f2850d1 feat: enable USB hiddev for apcupsd support
• 55aa64f feat: bump go to 1.26.4
• f27dbe1 feat: bump kernel to 6.18.34
• aa9fe00 feat: add DVB USB Modules
• 0870a4b feat: bump dependencies
• f9134e5 fix: enable CONFIG_BCM2712_MIP as built-in in arm64 kernel config
• 285c6ae fix: set usermode static helper to machine
• bd2a754 feat: pre-generate drbd patches using spatch out of tree
• 898844e feat: update Linux to 6.18.33
• a8dfbf7 fix: disable kernel modprobe path
• c542950 fix: pull in tools with zstd sbom
• c0ec8f3 feat: enable PPP and INFINIBAND_BNXT_RE
• c62c4e1 feat: update containerd to 2.3.1
• 270f9f8 chore: update deps
• 4f7feb4 feat: enable more options for CRI-U checkpoint/restore
• 87994f7 feat: move autoloadable stuff as modules
• 80c27f3 fix: drop legacy network protocols
• fbb7360 feat: drop legacy iptables/ebtables support
• eac5f86 feat: bump kernel 6.18.32
• d616f6c feat: update Linux to 6.18.31
• 02bcfce fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
• 12ca698 feat: update ZFS & NVIDIA LTS
• 9fff943 feat: update Linux to 6.18.30
• c5a1685 feat: move HWMON as modules
• b2a45fb feat: move CONFIG_INTEL_IOATDMA as a module
• ea8d35f feat: move ACPI device drivers as modules
• 501ba58 feat: move HID quirks as modules
• b35312c feat: move PS/2 mouse drivers as modules
• 3a5d9d7 feat: move IPMI driver to be a module
• 792a69a feat: disable AGP drivers
• 99990b4 feat: move Hyper-V drivers as modules
• fb697d6 feat: move Xen frontend drivers as modules
• 1df1713 feat: move ATA / MMC controllers as modules
• f7f9341 feat: move USB class drivers as modules
• ba873e9 feat: move USB host controllers as modules
• 8f25baa feat: move virtio bus stuff as modules
• d0c5480 feat: bump kernel to 6.18.29
• dfb09f0 feat: bump kernel 6.18.28
• c97bc24 feat: update Go to 1.26.3
• dfe8926 feat: add btrfsprogs
• 06ff9dc feat: update Linux to 6.18.27
• 2265fc9 feat(kernel): backport two PCI bridge realloc fixes from v6.19
• 5a21d99 feat: bump dependencies
• cb3f406 feat: update containerd to 2.3.0
• e192574 feat: update Linux to 6.18.26
• e5e6cb8 feat: update DRBD to 9.3.2
• 77538b1 feat: update NVIDIA drivers
• adeaafc feat: preserve System.map on kernel builds
• c77f985 fix: disable legacy framebuffer drivers
• 8f3ef77 fix: enable safesetid LSM
• f82d3af fix: disable CONFIG_DEVPORT
• b189a96 fix: disable crypto user API
• 9a718f6 docs: list net macb silent TX stall fixes in kernel/build/patches/README.md
• ca3599f fix: macb silent TX stall on BCM2712/RP1 (RFC patches from netdev)
• 6a53a93 feat: bump kernel to 6.18.25
• f567bce feat: disable more stuff in Kconfig
• ffd9790 feat: bump kernel to 6.18.24
• b7c709a feat: bump deps
• e5e5b3c feat: update Linux to 6.18.23
• 1a4cd20 fix: renovate config
• d0ed6ed feat: update dependencies
• 6ea49c7 fix: support disabling module signature verification
• 6520ec4 feat: update containerd to 2.2.3
• 37ce992 feat: enable CONFIG_UHID and CONFIG_INPUT_JOYDEV as modules
• cddd934 feat: update backportable dependencies
• 32e4077 feat: update OpenSSL
• 2d241e7 feat: update Go to 1.26.2 and small deps updates
• 7f540ce feat: disable dynamic SCS
• 3bef043 feat: update runc to 1.4.2
• c6e6f10 feat: update Linux to 6.18.21
• a9e8afa fix: libarchive install prefix
• e4d0113 feat: update for musl 1.2.6
• 9142603 feat: update NVIDIA production to 595.58.03
• 22fa669 feat: update Linux to 6.18.19
• 03680ae feat: update containerd patch verifier role
• bdc239e feat: enable CHECKPOINT_RESTORE option

Changes from siderolabs/tools

27 commits

• 08071b1 feat: update dependencies
• 2723c06 chore: bump pkgfile bldr to v0.6.1
• d333b32 chore: bump toolchain to latest
• c7494c6 chore: deps 2026-07-13 (major bumps only)
• 57a0183 chore: deps 2026-07-13 (minor bumps only)
• 21db13e chore: deps 2026-07-13 (patch only)
• 7079a8a chore: bump toolchain
• 5326524 feat: build LLVM as cross-compiling
• 878f1db feat: bump dependencies
• 0f1c859 chore: make rekres
• 5c0c9be chore: update dependencies 2026-06-16
• b88d99c feat: bump OpenSSL to 3.6.3
• 42c59b9 feat: bump toolchain to bring in Go 1.26.4
• 206a4c0 feat: update dependencies, rework LLVM build
• f9f37df fix: add proper name for zlib-ng sbom
• aa45c41 fix: add SBOM for zstd library
• 808f34f feat: update Go to 1.26.3
• 5dfe83d feat: drop fakeroot and policycoreutils
• 618fd20 feat: add Python wheel package
• df3c1b7 feat: bump dependencies
• 44ad18c feat: bump deps
• f3d0dd9 fix: renovate configs
• 4ac4449 feat: update dependencies
• 027744f feat: bump OpenSSL to 3.6.2
• 7067f1f feat: update util-linux to 2.41.4
• 6cb3e56 feat: update Go to 1.26.2
• 9186c5f feat: update musl to 1.2.6

Dependency Changes

• github.com/siderolabs/pkgs v1.13.0 -> v1.14.0-alpha.0-113-gf78e3dc
• github.com/siderolabs/tools v1.13.0 -> v1.14.0-alpha.0-26-g08071b1

Previous release can be found at v1.13.0

---

This discussion was created from the release v1.14.0-beta.0.