LoginSign Up
← Back to all sparks
T

Talos Linux

INFRA · APIS
Velocity6.3

Immutable API-managed Linux distribution for Kubernetes

www.talos.dev ↗

Talos 1.14 reaches its release candidate with routing and DNS pulled into the OS

kubernetesimmutable-osbgpdns-privacyrelease-candidatebare-metal
◆Current state
Talos is running two streams at once: a 1.14 pre-release line that has now reached rc.1, and a 1.12 maintenance line shipping kernel bumps and race fixes. The 1.14 feature set is settled — embedded GoBGP routing instances, DNS over TLS and DNS over HTTPS per name server, a noexec default on the EPHEMERAL /var volume, and apply-config dropping its reboot mode. rc.1 restates that set rather than adding to it.
◆Where it's heading
The direction is consolidation: capabilities that used to require a system extension or an in-cluster DaemonSet are becoming machine-config documents inside the OS. BGP is the clearest case — a fabric-facing router configured through BGPInstanceConfig removes the reason to ship FRR alongside. Meanwhile the 1.12 line has narrowed to component updates and stability fixes, which is what a branch does as its successor approaches GA.
◆Prediction
1.14.0 GA is the next step, likely with no new features over rc.1 — followed by a 1.12.12 maintenance tag, since that branch has kept a roughly two-week cadence throughout the pre-release run.

◆Recent moves

  1. 4d ago

    1.14 hits rc.1 with the BGP and encrypted-DNS set frozen

    The release candidate carries the same 1.14 feature set the betas introduced — embedded GoBGP instances, DoT/DoH per name server, apply-config without a reboot — now frozen for GA. It moves the cycle forward without changing what 1.14 is.

    View source ↗
  2. 13d ago

    1.12.11 patches etcd locks, volume races and OOM protection

    Twelve commits of fixes on the maintenance branch: etcd lock contexts, a third pass at the volume mount race, OOM podruntime protection, kernel to 6.18.42. Housekeeping on the outgoing line while 1.14 takes the feature work.

    View source ↗
  3. 18d ago

    1.14 beta.1 reworks BGP into named, VRF-aware instances

    beta.1 refines rather than extends: BGP becomes repeatable named instances with optional Linux VRF, and the noexec EPHEMERAL default is documented with named opt-outs. A hardening pass over what beta.0 introduced.

    View source ↗
  4. 26d ago

    Talos 1.14 beta.0: native BGP, encrypted DNS, noexec /var

    ⚡ SPARK

    This is the release that defines the 1.14 cycle and the clearest expression of the arc above: routing, DNS privacy and CRI configuration all move into the machine config surface, while the EPHEMERAL volume default tightens. Everything the later beta and the rc do is a refinement of what lands here.

    View source ↗
  5. 1mo ago

    1.12.10 bumps the kernel and fixes a stuck kubelet restart

    Kernel to 6.18.38, the ifb module brought in, a QoS trigger cooldown and a stuck kubelet restart fixed. Routine maintenance-branch upkeep with no change to the 1.14 story.

    View source ↗