Skip to content

chore: backports for v1.11.4#12140

Merged
talos-bot merged 12 commits intosiderolabs:release-1.11from
shanduur:backports/v1.11.4
Nov 5, 2025
Merged

chore: backports for v1.11.4#12140
talos-bot merged 12 commits intosiderolabs:release-1.11from
shanduur:backports/v1.11.4

Conversation

@shanduur
Copy link
Copy Markdown
Member

@shanduur shanduur commented Nov 5, 2025

No description provided.

smira and others added 7 commits November 5, 2025 11:39
The problem is that ports 50000 and 50001 are part of the ephemeral port
range, so they might be occupied by outgoing connections before
`apid`/`trustd` has a chance to bind to it.

So ensure these two ports are always excluded from the ephemeral port
range.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 4adcda0)
Otherwise we push latest from `release-*` branches which makes it
confusing and broken, as it jumps between versions.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 77d8cc7)
Use `image-signer` to sign images.

Signed-off-by: Noel Georgi <git@frezbo.dev>
(cherry picked from commit 7e498fa)
Fixes siderolabs#12052

Don't pull amd64 libraries into arm64.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 28fd239)
Set a global timeout for SideroLink Provision API calls to ensure we can
retry failures.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 4c09528)
Allows for NVIDIA kernel modules to load on arm arch

Signed-off-by: Justin Garrison <justin.garrison@siderolabs.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit e3cbc92)
When the buffer Writer is request, code unconditionally started all
senders (in our case, this was always JSON network senders).

This resulted in log duplication on service restart - each time service
is started, the senders goroutine was recreated.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 75e4c4a)
@github-project-automation github-project-automation bot moved this to To Do in Planning Nov 5, 2025
@shanduur shanduur changed the title backports/v1.11.4 chore: backports for v1.11.4 Nov 5, 2025
This is a fix for the wrong fix in siderolabs#11204, which was wrong in two ways:

* the ldflags -X override had a wrong variable name, so it had no effect
* but the above even if it worked, only covered "mamangement" part of
  things, while `wgctrl-go` which configures things still has a
  hardcoded location of `/var/run/`.

So the fix is two ways:

* replace the location where the socket is created properly
* use updated forked wgctrl-go which looks in both locations

This keeps all fixes of siderolabs#11204 - `talosctl cluster create` siderolink
agent works properly with `wg` on the host, and Talos uses proper
location.

Before the fix the location was actually `/var/run` and it randomly
failed depending on the race condition of Talos booting up and managing
`/var`.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit d69305a)
shanduur and others added 3 commits November 5, 2025 19:55
Update selected dependencies.

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>
Use the `image-signer` cli since we cannot pass in docker login credentials saved in keychain to `docker` container.

Signed-off-by: Noel Georgi <git@frezbo.dev>
(cherry picked from commit ee5fee7)
Fixes siderolabs#12097

This is same change as siderolabs#12134, but adapted to release-1.11 code around
platform network config.

Revert "fix: provide nocloud metadata with missing network config"

This reverts commit 0fbb0b0.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
@smira smira force-pushed the backports/v1.11.4 branch from a33cabf to ac27129 Compare November 5, 2025 15:55
@smira smira marked this pull request as ready for review November 5, 2025 16:12
@talos-bot talos-bot moved this from To Do to In Review in Planning Nov 5, 2025
@smira smira added the integration/release-gate Builds required to pass for a release label Nov 5, 2025
This commit just copy/paste merges the VolumeConfig and UserVolumeConfig
controllers, which addresses the race between system volume and user
volume config creation.

Signed-off-by: Laura Brehm <laurabrehm@hey.com>
@smira smira added integration/qemu-encrypted-vip and removed integration/release-gate Builds required to pass for a release labels Nov 5, 2025
@github-project-automation github-project-automation bot moved this from In Review to Approved in Planning Nov 5, 2025
@smira
Copy link
Copy Markdown
Member

smira commented Nov 5, 2025

/m

@talos-bot talos-bot merged commit 9c27f9e into siderolabs:release-1.11 Nov 5, 2025
101 of 102 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

6 participants