v1.12.0-beta.0

[smira]

Talos System Extensions 1.12.0-beta.0 (2025-11-14)

Welcome to the v1.12.0-beta.0 release of Talos System Extensions!
This is a pre-release of Talos System Extensions

See Talos Linux documentation for information on using system extensions.

Please try out the release binaries and report any issues at
https://github.com/siderolabs/extensions/issues.

Component Updates

Amazon ENA: 2.16.0
NVIDIA LTS: 580.95.05
NVIDIA Production: 570.195.03
NVIDIA Container Toolkit: 1.18.0
ctr: 2.1.5
crun: 1.25
drbd: 9.2.15
ecr-credential-provider: 1.34.1
fuse3: 3.17.4
glibc: 2.42
gvisor: 20251103.0
hailort: 4.23.0
kata-containers: 3.22.0
lldpd: 1.0.20
cloudflared: 2025.11.1
nebula: 1.9.7
netbird: 0.59.12
newt: 1.6.0
nut-client: 2.8.4
qemu: 10.1.2
spin: 0.22.0
stargz-snapshotter: 0.18.1
tailscale: 1.90.6
talos-vmtoolsd: 1.4.0
youki: 0.5.7
zerotier: 1.16.0
zfs: 2.4.0-rc2
linux-firmware: 20251111
tenstorrent: 2.5.0
mdadm: 4.4
Intel u-code: 20251111

wolfi-base: sha256:77891a12dc762228955294f2207ee1cbd2b127f18dc7c7458203116288dce828

Contributors

• Andrey Smirnov
• Dmitrii Sharshakov
• Noel Georgi
• Mateusz Urbanek
• Jorik Jonker
• Nicole Hubbard
• Steven Kreitzer
• Hugo Meyronneinc
• Michael Smith
• Breland Miley
• Clément Nussbaumer
• Devin Buhl
• Fred Heinecke
• Guillaume LEGRAIN
• Ian Thompson
• Max Batleforc
• Max Makarov
• Robin Elfrink
• Sammy ETUR
• Steve Francis
• Thibault VINCENT
• Zach Langbert
• veymax
• Łukasz Szczepański

Changes

60 commits

• 090b9b0 release(v1.12.0-beta.0): prepare release
• f7304cf fix: disable soci-snapshotter extension
• 8a3c568 feat: add soci snapshotter extension
• 313ae03 fix: video4linux persistent udev rules
• e58f8d5 feat: update dependencies
• c5e0d1b feat: add service to create gdrdrv device
• b61799a feat(thunderbolt): disable auto power management
• a02f062 fix: glibc build for arm64
• f341fab feat: allow aarch64 glibc so file
• 64a46a7 feat: update Go to 1.25.4
• 689420e feat: bump dependecies
• db43866 feat: add nfs-utils extension
• 31bc8c8 feat(netbird): go further in making it work
• 25c20c9 fix: image-signer commands
• 6dffff6 feat: add the ability to have multiple zerotier network to join
• 9d7136b release(v1.12.0-alpha.2): prepare release
• fc85294 feat: bump deps
• ed8c228 feat: update cloudflared to 2025.10.0
• 0beff58 feat: update dependencies
• 9d782c5 feat: fabricmanager support Blackwell baseboards (DGX/HGX B100/B200/B300)
• 823659b feat: use image-signer
• 3f0e872 feat: add xe extension
• e38736c chore: update external version references
• 38f9757 chore: update dependencies
• 83ee3b0 feat: update tools and pkgs for new Go and NVIDIA LTS
• 563da22 feat: update dependencies to match pkgs
• 5133393 fix: try fixing the grype scan
• e0946ad release(v1.12.0-alpha.1): prepare release
• 6962487 feat: update extensions
• f106fb4 feat: add usb-audio-drivers
• b382dba feat: add netbird
• 17be2f7 chore: update linux-firmware
• 12654ec feat: update vmtoolsd to v1.4.0
• 47051c6 feat: update NVIDIA LTS to 580.82.07
• caa10a4 docs: update zfs readme for existing pools
• b86a64b feat: update dependencies
• ea43af9 feat: update Go to 1.25.1
• ffcd027 chore: redo dependencies as SVG
• ef73a85 feat: update dependencies
• 2273c9b release(v1.12.0-alpha.0): prepare release
• 8976af3 fix: nvidia-container-toolkit: use SHA512 from a variable for tirpc
• 5de79a6 feat: update to Linux 6.16 and GCC 15
• d6bc2ce docs: fix catalog for qemu-guest-agent
• 5ccda4b feat: zerotier - add possible custom planet file
• df7a67d chore: refactor manifest for talos-vmtoolsd
• d7a938f docs: update README.md
• 263f699 chore: annotate extensions with tiers
• 59496eb feat: update to Go 1.25 and Linux 6.15
• 40c7a03 feat: update NVIDIA LTS to series 580
• ea0d1a3 feat: update Linux firmware and Intel u-code
• 1b1d883 chore: update nfsrahead defaults
• ba3c2ac feat: update Go to 1.24.6
• 7ef078a fix: remove sbom of kernel modules
• efcb066 docs: add SBOM for more extensions
• b42fa41 feat: update pkgs for containerd 2.1.4
• 7f8a3a1 feat(ci): add grype scan
• 35b176d fix: nfsrahead udev rule
• b4c2a62 docs: add SBOM for more extensions
• bbea573 feat: add thunderbolt udev rule
• c66e678 docs: add SBOM for container-runtimes

Changes since v1.12.0-alpha.2

15 commits

• 090b9b0 release(v1.12.0-beta.0): prepare release
• f7304cf fix: disable soci-snapshotter extension
• 8a3c568 feat: add soci snapshotter extension
• 313ae03 fix: video4linux persistent udev rules
• e58f8d5 feat: update dependencies
• c5e0d1b feat: add service to create gdrdrv device
• b61799a feat(thunderbolt): disable auto power management
• a02f062 fix: glibc build for arm64
• f341fab feat: allow aarch64 glibc so file
• 64a46a7 feat: update Go to 1.25.4
• 689420e feat: bump dependecies
• db43866 feat: add nfs-utils extension
• 31bc8c8 feat(netbird): go further in making it work
• 25c20c9 fix: image-signer commands
• 6dffff6 feat: add the ability to have multiple zerotier network to join

Changes from siderolabs/pkgs

55 commits

• 22a9943 feat: update dependencies
• 1768ccf feat: enable VDPA settings
• 3913216 feat: enable USERFAULTFD in the kernel
• 4ae050a feat: update Go to 1.25.4
• 0abcf01 feat: update containerd to 2.1.5
• 70404aa feat: bump dependencies
• f70250f feat: add nvidia gdrcopy gdrdrv kernel module
• a7d7c1a feat: enable CONFIG_PCI_P2PDMA for GPUDirect RDMA
• da97c36 feat: update linux-firmware
• 6d58d7f feat: bump deps
• b535af8 feat: update dependencies
• a098092 feat: update Linux to 6.17.3, tt-kmd to 2.4.1
• 661e578 feat: add xe extension
• 8ddac2d feat: bump go
• 332303e fix: rollback libseccomp version
• f62ebca chore: update dependencies
• 56f8ae3 feat: update Linux to 6.17.1, NVIDIA LTS to 580.95.05
• 20b1849 fix: revert "feat" support adding extra trusted certificates in the kernel"
• 1e3d375 feat: bump go
• ddfd7af feat: bump dependencies
• 4dc7709 feat: update runc to 1.3.2
• 61d8b44 chore: fix renovate config for urcu & hailort
• 5bda512 feat: upgrade Linux to 6.17
• 202a8e6 feat: update Linux to 6.16.9
• 3a0900f feat: enable SRv6 LWTUNNEL and BPF support
• 628efc8 chore: update linuxfirmware and rekres
• 9d1fb02 feat: support adding extra trusted certificates in the kernel
• 7fe686d fix: build nftables with embedded gmp
• fede0a7 feat: add nft binary
• 0dae01a feat: update NVIDIA to 580.82.07
• 9ac2392 feat: enable Kernel config options for IPVS Maglev hashing scheduler support
• 3c5315c feat: update dependencies
• 122fa66 feat: update Linux to 6.16.6
• ab1e866 feat: update Go to 1.25.1
• 7d6ef1b feat: update runc to 1.3.1
• e067c20 feat: enable USB audio support
• c4faa38 feat: bump dependencies
• 453cdfc feat: enable ublk support
• 9824684 fix: enable memcg v1
• 2447e11 feat: update Linux to 6.16, GCC to 15
• 2cfb920 feat: update Linux to 6.15.11, update tools, rekres
• ab4e975 feat: update Linux to 6.12.43
• cd67e36 chore: update kernel config to support max SMP CPUs
• e3b2094 fix: fix build for new NVIDIA drivers
• fd5fdfd feat: update Nvidia LTS to 580.65.06 and production to 570.172.08
• 0edf426 fix: backport CVE kernel patches to 6.12
• 26d8fef feat: enable Infiniband IRDMA support
• 16b5fac fix: re-enable CPUSETS_V1 cgroups controller
• fd53886 feat: update backportable dependencies
• d5f7467 feat: update Go to 1.24.6
• 0bd019f feat: update containerd to 2.1.4
• 0ba8b5b feat: enable F71808E watchdog driver
• 895a86b fix: enable ISCSI IBFT
• a76a67c feat: update Linux to 6.12.40
• 8b0a561 feat: enable bootloader control on amd64

Changes from siderolabs/tools

20 commits

• b82e375 feat: update dependencies
• 44932c0 feat: update Go to 1.25.4
• b39bb09 feat: update dependencies
• a08cc1f feat: update git to 2.51.1
• e62d613 feat: bump go
• 916b464 fix: add pkgconf for ncurses, fix Renovate configs, bump deps
• 11f0337 feat: update Go
• 2c56d7a feat: update OpenSSL to 3.5.4
• 8f27cfa feat: update dependencies
• 1c1420e feat: add tinfo to ncurses
• 7c7328b fix: set regex in renovate config directly
• 3ab353b fix: modify renovate regex on ca_certificates
• 4f90801 chore: update openssl, curl, libexpat and rekres
• c37ac80 feat: update Go to 1.25.1
• 7c659e9 feat: update to GCC 15
• 83fd7b7 feat: migrate from pkg-config to pkgconf
• edafd5f feat: update toolchain for new Go and Linux headers
• 65789c7 chore: drop unused vars from Pkgfile
• 52db66e chore: drop protobuf-related stuff from tools
• e3c3ef2 feat: update Go to 1.24.6

Dependency Changes

• github.com/siderolabs/pkgs v1.11.0-15-g2ac857a -> v1.12.0
• github.com/siderolabs/tools v1.11.0-2-g8556c73 -> v1.12.0

Previous release can be found at v1.11.0

---

This discussion was created from the release v1.12.0-beta.0.