v1.9.5

[smira]

Talos 1.9.5 (2025-03-12)

Welcome to the v1.9.5 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

Component Updates

• Linux: 6.12.18
• containerd: 2.0.3
• runc: 1.2.5
• Kubernetes: 1.32.3
• etcd: 3.5.19

Talos is built with Go 1.23.7.

Contributors

• Andrey Smirnov
• Dmitriy Matrenichev
• Dmitry Sharshakov
• Robin Elfrink
• Serge Logvinov

Changes

12 commits

• d07f6daaa release(v1.9.5): prepare release
• dd629ad5f chore: fix the mount cache ids in the Dockerfile
• 456516f0b feat: update Flannel to 0.26.5
• 82f3a8c51 feat: update etcd to 3.5.19
• 46ab576e4 feat: add support for qla2xx
• 7f8923452 fix: handle dynamic HTTP proxy settings for discovery client
• 9a293327a fix: multiple fixes for dashboard/no data
• 9d3a2c8df fix: ignore digest part of images when checking version
• 93180bffe feat: support noclooud instance-id from dmi
• 76832c237 chore: disable azure upload
• d4986d957 feat: update default Kubernetes to 1.32.3
• 1fe0c2f1b feat: update Go, Linux, containerd, runc

Changes from siderolabs/discovery-api

1 commit

• siderolabs/discovery-api@64513a6 feat: rekres, regenerate proto files

Changes from siderolabs/discovery-client

1 commit

• siderolabs/discovery-client@b3632c4 feat: support extra dial options in the client

Changes from siderolabs/gen

1 commit

• siderolabs/gen@5ae3afe chore: update hashtriemap implementation from the latest upstream

Changes from siderolabs/pkgs

9 commits

• siderolabs/pkgs@792f5ca feat: update Linux firmware to 20250211
• siderolabs/pkgs@142de09 feat: update runc to 1.2.5
• siderolabs/pkgs@b39f244 feat: update Linux to 6.12.18
• siderolabs/pkgs@9a21d6c fix: backport MGLRU patch from Linux 6.13
• siderolabs/pkgs@1565250 feat: update Linux 6.12.17, containerd 2.0.3
• siderolabs/pkgs@fc5e81d feat: enable qla2xxx module
• siderolabs/pkgs@3ff0ab6 fix: patch Linux with blackhole patch
• siderolabs/pkgs@b4060f8 feat: update Go to 1.23.7
• siderolabs/pkgs@3349185 fix: patch musl to mitigate CVE-2025-26519

Changes from siderolabs/tools

1 commit

• siderolabs/tools@17d43b2 feat: update Go to 1.23.7

Dependency Changes

• github.com/siderolabs/discovery-api v0.1.5 -> v0.1.6
• github.com/siderolabs/discovery-client v0.1.10 -> v0.1.11
• github.com/siderolabs/gen v0.7.0 -> v0.8.0
• github.com/siderolabs/pkgs v1.9.0-27-g27017e0 -> v1.9.0-36-g792f5ca
• github.com/siderolabs/talos/pkg/machinery v1.9.4 -> v1.9.5
• github.com/siderolabs/tools v1.9.0-3-gb2ede52 -> v1.9.0-4-g17d43b2
• google.golang.org/grpc v1.68.1 -> v1.70.0
• google.golang.org/protobuf v1.35.2 -> v1.36.5

Previous release can be found at v1.9.4

Images

ghcr.io/siderolabs/flannel:v0.26.5
registry.k8s.io/coredns/coredns:v1.12.0
gcr.io/etcd-development/etcd:v3.5.19
registry.k8s.io/kube-apiserver:v1.32.3
registry.k8s.io/kube-controller-manager:v1.32.3
registry.k8s.io/kube-scheduler:v1.32.3
registry.k8s.io/kube-proxy:v1.32.3
ghcr.io/siderolabs/kubelet:v1.32.3
ghcr.io/siderolabs/installer:v1.9.5
registry.k8s.io/pause:3.10

---

This discussion was created from the release v1.9.5.

[wkchong1]

I boot up from Talos metal_amd64_secureboot ISO. After I uploaded PK, KEK and DB into SecureBoot in EFI, the kernel is able to boot in SecureBoot mode. However, the kernel keeps spewing "time query error with server "207.46.232.182" NTP server. This is Microsoft NTP server that's not active. When I try to change the NTP server to "149.28.200.179" and save the setting. The saved network setting didn't seem to activate. There are only two tty available, and none allows me to restart the systemctl. Do you have any idea what could be wrong?
Attached is my screenshot.

Thanks
Chris

[smira]

There is no systemctl in Talos, but hard to say what is wrong unless you specify exactly how you change the NTP servers.