v1.15.0-alpha.2

[smira]

Talos System Extensions 1.15.0-alpha.2 (2026-10-27)

Welcome to the v1.15.0-alpha.2 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

NVIDIA New Feature Branch

New nvidia-open-gpu-kernel-modules-new-feature, nvidia-container-toolkit-new-feature and nvidia-fabricmanager-new-feature
extensions track the NVIDIA "new feature" driver branch (615.x), in addition to the existing lts and production variants.
Only the open-source kernel modules are provided for this branch, as NVIDIA does not ship a proprietary build of 615.x.

Component Updates

ceph: 21.3.0
cloud-provider-aws: v1.37.0
cloudflared: 2026.8.3
crun: 1.29.1
ctr: 2.3.7
drbd: 9.3.4
fuse: 3.18.3
glib: 2.90.0
gvisor: 20260831.0
harbor-credential-provider: 0.2.0
hyperv-guest-agent: 6.18.50
kata-containers: 4.3.1
libvirt: 12.7.0
libxml2: 2.15.4
Linux firmware: 20260916
metal-agent: 0.1.7
nebula: 1.11.1
netbird: 0.78.1
newt: 1.16.0
NVIDIA New Feature: 615.71.10
Open-iSCSI: 2.1.13
qemu-guest-agent: 11.1.1
tailscale: 1.102.3

Contributors

• Andrey Smirnov
• Noel Georgi
• Maja Bojarska
• Mateusz Urbanek
• Justin Garrison
• Angelos Petheriotis
• Dennis Docter
• Dmitrii Sharshakov
• Max Makarov
• Calin Stefan
• Christian A. Jacobsen
• Christoph Engelbert (noctarius)
• Evan Champion
• Jarrad S
• Joakim Nohlgård
• Johan Thomsen
• Licia Seiker
• Maxime Louet
• Neil Levien
• Pranav Patil
• Prasanth Baskar
• Ruk Doe
• Ryuki Maruyama
• Sacha Weatherstone
• Steffen Windoffer
• Steve Wills
• Steven Kreitzer
• Tom Plant
• Utku Ozdemir
• saguila
• usman.malik_ext
• zavermax

Changes

58 commits

• e455ac0 release(v1.15.0-alpha.2): prepare release
• 6b21676 chore: sync pkgs
• 523354d fix: harden kata-containers allowed pod annotations
• 9baa6fa feat: update kata containers to 4.3.1
• a4198e2 fix: generate kata-containers config from the upstream one
• 1c8a408 feat: adapt to the kTLS changes
• 9f2aa1d feat: add new extensions for NVIDIA 'new feature' branch
• 80d6696 feat: update to Linux 7.3
• 6e96d79 fix(multipathd): move statedir path from /etc to /var/lib
• 776e232 fix(soci-snapshotter): remove hardcoded debug log level
• 9a265f4 chore: update pixman mirror
• 3bb9a06 fix: skip transient domains during shutdown
• 502ca48 fix: build glibc libgcc for fabric manager
• b0c7655 fix: dereference hailo firmware symlinks
• 02310d4 fix(gvisor): ship sidecar binaries in gvisor-bin
• 2d54d36 chore: use bldr 0.6.5 and shortened tag
• 5e2b32e release(v1.15.0-alpha.1): prepare release
• e93d242 fix: replace lsscsi mirror
• c62786d feat: bump deps
• 140de06 feat: add hailo v5 system extension
• 7d75c4b feat: add qaic extension
• e17bf6f fix: switch to correct chrdev lock dir
• 378217d feat: update harbor-credential-provider to v0.2.0
• 993f14a feat: add libnl to libvirt
• fdd5757 fix(libvirtd): allow block device behind emulator TPM state
• 5f08d0c chore: bump metal-agent version to v0.1.7
• e3b52eb feat: add software TPM support to libvirtd
• f585712 chore: sync pkgs/tools with the latest
• 6d4c034 feat: update DRBD to 9.3.4 & Linux firmware
• 1d78a28 feat(nfsrahead): read config from /etc/nfs.conf
• 62074ae fix: point to non-existent dbus path for virtstoraged
• 0a16e7d chore: switch Ceph mirror
• e3769b4 chore: downgrade to go 1.26.8
• bfa89ca chore: bump tools, pkgs, go-tools
• 083f238 chore: update go to 1.27.1, direct dep updates
• baf1274 chore: component updates (2026-09-10)
• 2a2873c feat: add dvb-pt3 extension
• acb82c6 feat: add Intel HD audio system extension
• 7d8b5c9 release(v1.15.0-alpha.0): prepare release
• cf7ad2b fix(nfs-server): harden bind mounts with nodev,noexec,nosuid
• 1df903b docs: multipathd
• 777096f feat: update to containerd 2.3.5
• cc0c57c feat: add NFS server extension
• e9498f6 feat: switch to nri for nvidia
• 508c918 feat: replace wolfi build roots with stagex
• d804199 feat: update glibc to 2.44
• 09b2b40 fix: avoid virtqemud reconnect deadlock
• 1097ccd feat: add libvirtd
• 678bf42 fix: nvidia vulkan paths
• a0f602c feat: add kata-containers-nvidia-gpu-snp extension
• f0d8914 fix: wait for multipath configuration
• 631db05 fix: update multipath-tools to 0.14.3
• eac6c72 fix: update CRI configs for version 4
• ba4b275 feat: update OpenZFS to 2.4.4
• 26822f5 chore: update Go to 1.26.7
• 853c219 fix: drop multipath dependency on cri
• 85f5bfb docs: update broken talos.dev URLs to docs.siderolabs.com
• f2c879a feat: add cachefilesd extension

Changes since v1.15.0-alpha.1

16 commits

• e455ac0 release(v1.15.0-alpha.2): prepare release
• 6b21676 chore: sync pkgs
• 523354d fix: harden kata-containers allowed pod annotations
• 9baa6fa feat: update kata containers to 4.3.1
• a4198e2 fix: generate kata-containers config from the upstream one
• 1c8a408 feat: adapt to the kTLS changes
• 9f2aa1d feat: add new extensions for NVIDIA 'new feature' branch
• 80d6696 feat: update to Linux 7.3
• 6e96d79 fix(multipathd): move statedir path from /etc to /var/lib
• 776e232 fix(soci-snapshotter): remove hardcoded debug log level
• 9a265f4 chore: update pixman mirror
• 3bb9a06 fix: skip transient domains during shutdown
• 502ca48 fix: build glibc libgcc for fabric manager
• b0c7655 fix: dereference hailo firmware symlinks
• 02310d4 fix(gvisor): ship sidecar binaries in gvisor-bin
• 2d54d36 chore: use bldr 0.6.5 and shortened tag

Changes from siderolabs/pkgs

64 commits

• 6e225ae feat: enable applesmc on amd64
• 2c33dc1 feat: enable EDAC_10NM kernel option
• 5a48570 feat: enable kTLS device offload (CONFIG_TLS_DEVICE, CONFIG_MLX5_EN_TLS)
• b4b1cec feat: add new flavor of NVIDIA 'new feature' for 615.x
• 9b40a60 feat: update Linux to 7.3
• 641c033 fix: restore ACPI power button
• 8eab26a chore: update DRBD compat
• 3890840 feat: update Linux to 6.18.57
• 465612a feat: update to containerd 2.3.7
• cbcef4d feat: update Linux to 6.18.56
• 7bb6d79 feat: bump deps
• 305b1b6 feat: bump deps
• 2a7769e feat: enable bhyve guest support on amd64
• ce4bafb feat: enable CONFIG_DRM_ACCEL_AMDXDNA on amd64
• 8f7ce6c feat: enable CONFIG_MOTORCOMM_PHY on arm64
• fa71c34 feat: enable pNFS block and SCSI layouts in nfsd
• f6b8411 feat: add hailort v5 package
• 64af669 feat: enable Qualcomm Cloud AI 100 (QAIC) driver
• 518972a fix: add a patch to fix booting on Apple hardware
• 2b782b6 feat: update Linux to 6.18.54, runc to 1.5.2
• 4871c10 feat: enable CONFIG_CRYPTO_ECC, CONFIG_CRYPTO_ECDH on arm64 to match amd64
• b4cb94c feat: enable CONFIG_BLK_WBT
• 6868054 feat: update containerd to 2.3.6
• 55806c6 feat: update systemd to v262
• a2b57ee fix: add missing sboms for swtpm
• 12b29b3 feat: update Linux to 6.18.53
• 6868000 feat: bump dependencies
• bed8e18 feat: add swtpm
• 777c95f feat: enable CONFIG_MACSEC in the kernel
• 99ec357 feat: update DRBD & Linux firmware
• a51429b feat(kernel): enable CONFIG_NO_HZ_FULL
• b39d2c3 feat: update Linux to 6.18.52
• 69ed550 feat: update Linux to 6.18.51
• f380535 chore: rekres
• 05913b5 chore: updates 2026-09-10
• 1a28bfb chore: update tools, toolchain, rustc
• e7b09e2 feat: enable earth-pt3 dvb driver
• 5096469 feat: update libpathrs to 0.2.6
• 43e533c feat: update Linux to 6.18.50
• 977b61f feat: update containerd to 2.3.5
• 43e6298 fix: add a kernel patch for EFI SecureBoot integrity lockdown
• a8b682b feat: add kernel modules to enable Intel HD audio
• ff111ff feat: enable Apple Silicon platform drivers
• e68eeb5 feat: enable VIRTIO_INPUT as built-in for amd64/arm64
• 381fc2d feat: bump kernel to 6.18.49
• 5394321 feat: enable CONFIG_USB_LAN78XX and CONFIG_MICROCHIP_PHY on amd64
• 4b9bf36 fix: preserve symlinks for libudev
• 50bf09f fix: update OpenSSL to 3.6.4
• f2b7acf feat: update kernel to 6.18.48
• 73327ff feat: bump kernel to 6.18.47
• b6b2843 feat: enable CONFIG_XFRM_INTERFACE in the kernel
• 696fa3c feat: expose more software as pkgs
• aa069d3 chore: update OpenZFS to 2.4.4
• c1837b6 feat: bump kernel to 6.18.46
• 28f5f23 feat: enable SPD5118 sensor driver
• bc45b69 feat: backport aes256k support (Ceph)
• b914c26 feat: update Go to 1.26.7
• caac515 feat: update Linux to 6.18.45
• ada230a feat: enable IPSec offload and dma-buf heaps
• 33d14e0 feat(kernel): enable CONFIG_MLX5_VFIO_PCI
• 107b628 feat: kernel: enable MPTCP, sched_ext
• c9173bb feat: move IPVS into modules
• d418aa7 feat: update containerd to 2.3.4
• c4a6a61 feat: update Go to 1.26.6

Changes from siderolabs/tools

16 commits

• 2d70a26 feat: update Go to 1.27.3
• 151acc5 feat: update dependencies
• e952d34 feat: update llvm to 23.1.3
• 32e115c fix: restore llvm 22 for rust compatibility
• 47166ad feat: bump deps
• d40b203 feat: update tools components
• 19bb4b7 chore: downgrade llvm to major 22
• b28aa66 chore: bump util-linux 2.42.3
• 1023701 chore: update dependencies 2026-09-08
• c3165c7 chore: update toolchain image
• 09ccc74 feat: bump go to 1.26.8
• 35fab51 fix: update OpenSSL to 3.6.4
• e033f2a feat: move more packages into separate images
• d102f15 feat: update Go to 1.26.7
• fd531a3 feat: update Go to 1.26.6
• 5eabe31 chore: rekres 2026-08-12

Dependency Changes

• github.com/siderolabs/pkgs v1.14.0-15-g2f03590 -> v1.15.0-alpha.0-63-g6e225ae
• github.com/siderolabs/tools v1.14.0-5-g87316ca -> v1.15.0-alpha.0-15-g2d70a26

Previous release can be found at v1.14.0

---

This discussion was created from the release v1.15.0-alpha.2.