v1.14.0-alpha.2

Talos System Extensions 1.14.0-alpha.2 (2026-06-26)

Welcome to the v1.14.0-alpha.2 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Component Updates

ctr: 2.3.2
containerd: 2.3.2
cloudflared: 2026.5.2
px-fuse: 6c31bb5022ef0bf4e120ce1a0abc5dd40ce7c74d
util-linux: 2.42.0
tenstorrent: 2.9.0
NVIDIA LTS: 580.167.08
NVIDIA Production: 595.71.05
NVIDIA Container Toolkit: 1.19.1
DRBD: 9.3.2
Amazon ENA: 2.17.0
xdma-driver: f09dce7
crun: 1.28
gvisor: 20260525.0
kata-containers: 3.31.0
spin: 0.24.0
netbird: 0.71.4
newt: 1.13.0
mdadm: 4.6
qemu-guest-agent: 11.0.1
ZFS: 2.4.3
linux-firmware: 20260519
intel-ucode: 20260512
cloud-provider-aws: v1.36.0
lldpd: 1.0.22
tailscale: 1.98.3
zerotier: 1.16.2
soci-snapshotter: v0.14.0
runc: 1.5.0-rc.3

Contributors

• Andrey Smirnov
• Noel Georgi
• Maja Bojarska
• Mateusz Urbanek
• Lukasz Raczylo
• Ansgar Dahlen
• Edward Sammut Alessi
• Rokoucha
• Bernard Gütermann
• Daniil Kivenko
• Galen Abell
• OrbisAI Security
• Vassil Iordanov
• YANG JOO WOONG
• appkins
• imusmanmalik
• sam

Changes

53 commits

• 31ac838 release(v1.14.0-alpha.2): prepare release
• 9882a33 chore: sync pkgs/tools
• aea2cef chore: bump containerd to 2.3.2
• 5bf06ba chore: update pkgs (2026-06-18)
• f5c6faa chore: update zfs and nvidia
• 9d97e46 chore: update deps 2026-06-16
• 1b7063c fix: bound zpool export at shutdown with a configurable timeout
• 87d1abc chore: run rekres and bump deps
• 55c738c feat: bump dependencies
• 7266883 feat: update pkgs and tools
• 599a483 release(v1.14.0-alpha.1): prepare release
• f7d9773 chore: sync pkgs/tools to match Talos main
• 8ee3fc5 feat: add harbor-credential-provider extension
• e25da7f chore: update tools, pkgs, extensions
• 0b765a1 fix: drop phonet module
• 126ef5d fix: nvme-cli install path
• 0d2ef77 docs: add a note on rpcbind listening on all interfaces
• e67c9ea feat: update ZFS & NVIDIA LTS
• 1b6d4d3 feat: update intel ucode to 20260512
• e045f20 chore: small cleanups
• 93e1668 fix: add missing ldconfig step fabricmanager production
• 6bcd249 fix: nvidia-fabricmanager missing libz dependency
• 2d752ea feat: update Go to 1.26.3
• a2632a3 feat: add btrfsprogs (userspace tools) to btrfs extensions
• 4cc7808 feat: bump dependencies
• d57047e feat: allow bird to start in maintenance mode
• f599887 feat: sync pkgs/tools
• 2a533b1 feat: update DRBD to 9.3.2
• 582f9a8 feat: update NVIDIA drivers
• 3698471 fix: install iptables correctly into tailscale extension
• dade5d9 feat: promote multitpath-tools to extra, bump version
• d64b3c1 release(v1.14.0-alpha.0): prepare release
• 7aabff3 chore: update tools and pkgs version
• 74431c0 chore: bump metal-agent to 0.1.5
• fe0a99c chore: rekres
• 2f45d7c docs: fix setup key variable name in README
• 66f49bb chore: sync pkgs & tools
• 7871fc2 fix: grype scans
• 07b4337 fix: enable for real joydev & uinput extensions
• c5ef7eb feat: add uhid and joydev extensions
• 3670607 feat: update pkgs to pull in Linux firmware 20260410
• 26dae82 feat(ci): add extensions duplicate finder
• a9a1e7d chore: update dependencies
• f525338 chore: rekres
• fdd0258 feat: nvidia extension rework
• 5a0db53 feat: allow more nvidia and nvme files from extensions
• 77208fd feat: allow glibc ld files in etc
• ddd4720 feat: reenable netbird
• 62d2176 fix: netbird config to a persistent location
• 5aeaf4e fix: export zpools on zfs shutdown
• b28a70d fix: disable NVIDIA GPU check while building the driver
• faa5ccd feat: update musl to 1.2.6
• a6b6bb9 feat: update NVIDIA production to 595.58.03

Changes since v1.14.0-alpha.1

10 commits

• 31ac838 release(v1.14.0-alpha.2): prepare release
• 9882a33 chore: sync pkgs/tools
• aea2cef chore: bump containerd to 2.3.2
• 5bf06ba chore: update pkgs (2026-06-18)
• f5c6faa chore: update zfs and nvidia
• 9d97e46 chore: update deps 2026-06-16
• 1b7063c fix: bound zpool export at shutdown with a configurable timeout
• 87d1abc chore: run rekres and bump deps
• 55c738c feat: bump dependencies
• 7266883 feat: update pkgs and tools

Changes from siderolabs/pkgs

90 commits

• ea48e8b fix: patch Linux kernel for tunnel metadata buffer overflow
• ff80d88 feat: add support for AMD XGBE driver
• 9f8ab22 feat: enable NF_TABLES_ARP option
• bedfbeb feat: update Linux to 6.18.36
• a9f2bb3 chore: bump containerd to 2.3.2
• 73e76f8 chore: upgrade runc to 1.5.0-rc.3
• 28db1ca chore: update nvidia driver lts to 580.167.08
• 5df1a44 chore: update zfs to 2.4.3
• cd77c4f chore: update dependencies 2026-06-16
• 0f27ecc feat: bump runc
• d213ff5 feat: bump OpenSSL to 3.6.3
• cb713ae feat: bump kernel to 6.18.35
• 09cb04e fix: avoid page_table_check BUG on time namespace VVAR page
• bfb88f6 feat: add nvidia-fs kernel module
• f2850d1 feat: enable USB hiddev for apcupsd support
• 55aa64f feat: bump go to 1.26.4
• f27dbe1 feat: bump kernel to 6.18.34
• aa9fe00 feat: add DVB USB Modules
• 0870a4b feat: bump dependencies
• f9134e5 fix: enable CONFIG_BCM2712_MIP as built-in in arm64 kernel config
• 285c6ae fix: set usermode static helper to machine
• bd2a754 feat: pre-generate drbd patches using spatch out of tree
• 898844e feat: update Linux to 6.18.33
• a8dfbf7 fix: disable kernel modprobe path
• c542950 fix: pull in tools with zstd sbom
• c0ec8f3 feat: enable PPP and INFINIBAND_BNXT_RE
• c62c4e1 feat: update containerd to 2.3.1
• 270f9f8 chore: update deps
• 4f7feb4 feat: enable more options for CRI-U checkpoint/restore
• 87994f7 feat: move autoloadable stuff as modules
• 80c27f3 fix: drop legacy network protocols
• fbb7360 feat: drop legacy iptables/ebtables support
• eac5f86 feat: bump kernel 6.18.32
• d616f6c feat: update Linux to 6.18.31
• 02bcfce fix: macb silent TX stall on BCM2712/RP1 (v2 patches from netdev)
• 12ca698 feat: update ZFS & NVIDIA LTS
• 9fff943 feat: update Linux to 6.18.30
• c5a1685 feat: move HWMON as modules
• b2a45fb feat: move CONFIG_INTEL_IOATDMA as a module
• ea8d35f feat: move ACPI device drivers as modules
• 501ba58 feat: move HID quirks as modules
• b35312c feat: move PS/2 mouse drivers as modules
• 3a5d9d7 feat: move IPMI driver to be a module
• 792a69a feat: disable AGP drivers
• 99990b4 feat: move Hyper-V drivers as modules
• fb697d6 feat: move Xen frontend drivers as modules
• 1df1713 feat: move ATA / MMC controllers as modules
• f7f9341 feat: move USB class drivers as modules
• ba873e9 feat: move USB host controllers as modules
• 8f25baa feat: move virtio bus stuff as modules
• d0c5480 feat: bump kernel to 6.18.29
• dfb09f0 feat: bump kernel 6.18.28
• c97bc24 feat: update Go to 1.26.3
• dfe8926 feat: add btrfsprogs
• 06ff9dc feat: update Linux to 6.18.27
• 2265fc9 feat(kernel): backport two PCI bridge realloc fixes from v6.19
• 5a21d99 feat: bump dependencies
• cb3f406 feat: update containerd to 2.3.0
• e192574 feat: update Linux to 6.18.26
• e5e6cb8 feat: update DRBD to 9.3.2
• 77538b1 feat: update NVIDIA drivers
• adeaafc feat: preserve System.map on kernel builds
• c77f985 fix: disable legacy framebuffer drivers
• 8f3ef77 fix: enable safesetid LSM
• f82d3af fix: disable CONFIG_DEVPORT
• b189a96 fix: disable crypto user API
• 9a718f6 docs: list net macb silent TX stall fixes in kernel/build/patches/README.md
• ca3599f fix: macb silent TX stall on BCM2712/RP1 (RFC patches from netdev)
• 6a53a93 feat: bump kernel to 6.18.25
• f567bce feat: disable more stuff in Kconfig
• ffd9790 feat: bump kernel to 6.18.24
• b7c709a feat: bump deps
• e5e5b3c feat: update Linux to 6.18.23
• 1a4cd20 fix: renovate config
• d0ed6ed feat: update dependencies
• 6ea49c7 fix: support disabling module signature verification
• 6520ec4 feat: update containerd to 2.2.3
• 37ce992 feat: enable CONFIG_UHID and CONFIG_INPUT_JOYDEV as modules
• cddd934 feat: update backportable dependencies
• 32e4077 feat: update OpenSSL
• 2d241e7 feat: update Go to 1.26.2 and small deps updates
• 7f540ce feat: disable dynamic SCS
• 3bef043 feat: update runc to 1.4.2
• c6e6f10 feat: update Linux to 6.18.21
• a9e8afa fix: libarchive install prefix
• e4d0113 feat: update for musl 1.2.6
• 9142603 feat: update NVIDIA production to 595.58.03
• 22fa669 feat: update Linux to 6.18.19
• 03680ae feat: update containerd patch verifier role
• bdc239e feat: enable CHECKPOINT_RESTORE option

Changes from siderolabs/tools

18 commits

• 0f1c859 chore: make rekres
• 5c0c9be chore: update dependencies 2026-06-16
• b88d99c feat: bump OpenSSL to 3.6.3
• 42c59b9 feat: bump toolchain to bring in Go 1.26.4
• 206a4c0 feat: update dependencies, rework LLVM build
• f9f37df fix: add proper name for zlib-ng sbom
• aa45c41 fix: add SBOM for zstd library
• 808f34f feat: update Go to 1.26.3
• 5dfe83d feat: drop fakeroot and policycoreutils
• 618fd20 feat: add Python wheel package
• df3c1b7 feat: bump dependencies
• 44ad18c feat: bump deps
• f3d0dd9 fix: renovate configs
• 4ac4449 feat: update dependencies
• 027744f feat: bump OpenSSL to 3.6.2
• 7067f1f feat: update util-linux to 2.41.4
• 6cb3e56 feat: update Go to 1.26.2
• 9186c5f feat: update musl to 1.2.6

Dependency Changes

• github.com/siderolabs/pkgs v1.13.0 -> v1.14.0-alpha.0-88-gea48e8b
• github.com/siderolabs/tools v1.13.0 -> v1.14.0-alpha.0-17-g0f1c859

Previous release can be found at v1.13.0