v1.12.2

[smira]

Talos 1.12.2 (2026-01-22)

Welcome to the v1.12.2 release of Talos!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/talos/issues.

talosctl images talos-bundle can ignore reaching to the registry

The talosctl images talos-bundle command now accepts optional --ovelays and --extensions flags.
If those are set to false, the command will not attempt to reach out to the container registry to fetch the latest versions and digests of the overlays and extensions.

Component Updates

Linux: 6.18.5

Talos is built with Go 1.25.6.

Contributors

• Andrey Smirnov
• Dmitrii Sharshakov
• Andras BALI
• Artem Chernyshev
• Jonas Lammler
• Mateusz Urbanek
• Max Makarov
• Noel Georgi

Changes

21 commits

• 54e5b438d release(v1.12.2): prepare release
• 30da0bc19 fix: oracle platform file format
• 7ddb37b1f fix: make OOM expression a bit less sensitive
• e438ec23e fix: marshal of FailOverMac property
• 717ed7265 fix: check if the device is not mounted when wiping
• c95c9fd06 fix: wipe the first/last 1MiB in addition to wiping by signatures
• 52bed358d fix: add talos version to Hetzner Cloud client user agent
• 0e447a431 fix: make OOM controller more precise by considering separate cgroup PSI
• 3b974b99e fix: sort mirrors and tls configs when generating the machine config
• 8b16fe50b feat: add VLAN support to OpenStack platform
• eb8480c4c fix: panic in configpatcher when the whole section is missing
• 4d44306dd fix: wipe disk by signatures
• cca4cd269 feat: add it87 hwmon module
• d9480eef2 fix: resolve SideroLink Wireguard endpoint on reconnect
• e16c2d5bb fix: handle correctly incomplete RegistryTLSConfig
• dedd273df fix: bond config via platform
• f527cff23 fix: allow HostnameConfig to be used with incomplete machine config
• 10918136c fix: lock down etcd listen address to IPv4 localhost
• 9f8d938db fix: print talosctl images to release notes
• 95433c167 fix: update VIP config example
• 919394fee feat: update Go to 1.25.6

Changes from siderolabs/pkgs

7 commits

• siderolabs/pkgs@4f8efaf fix: enable pinctrl for Raspberry Pi 5
• siderolabs/pkgs@3a36a01 feat: update NVIDIA LTS and production driver versions
• siderolabs/pkgs@d364d04 feat: update Linux to 6.18.5
• siderolabs/pkgs@a3d6cc4 feat: update Linux firmware to 20260110
• siderolabs/pkgs@40fa324 feat: enable IT87 hwmon module
• siderolabs/pkgs@8b8f314 feat: enable IPV6_MROUTE
• siderolabs/pkgs@3571127 feat: update Go to 1.25.6

Changes from siderolabs/tools

1 commit

• siderolabs/tools@31959f4 feat: update Go to 1.25.6

Dependency Changes

• github.com/klauspost/compress v1.18.2 -> v1.18.3
• github.com/siderolabs/go-blockdevice/v2 v2.0.22 -> v2.0.23
• github.com/siderolabs/pkgs v1.12.0-25-g90ff196 -> v1.12.0-32-g4f8efaf
• github.com/siderolabs/talos/pkg/machinery v1.12.1 -> v1.12.2
• github.com/siderolabs/tools v1.12.0-3-g5df8bae -> v1.12.0-4-g31959f4
• go.uber.org/zap v1.27.0 -> v1.27.1
• golang.org/x/net v0.47.0 -> v0.48.0
• golang.org/x/oauth2 v0.33.0 -> v0.34.0
• golang.org/x/sync v0.18.0 -> v0.19.0
• golang.org/x/sys v0.38.0 -> v0.40.0
• golang.org/x/term v0.37.0 -> v0.38.0
• golang.org/x/text v0.31.0 -> v0.33.0

Previous release can be found at v1.12.1

Images

ghcr.io/siderolabs/flannel:v0.27.4
registry.k8s.io/coredns/coredns:v1.13.2
registry.k8s.io/etcd:v3.6.7
registry.k8s.io/kube-apiserver:v1.35.0
registry.k8s.io/kube-controller-manager:v1.35.0
registry.k8s.io/kube-scheduler:v1.35.0
registry.k8s.io/kube-proxy:v1.35.0
ghcr.io/siderolabs/kubelet:v1.35.0
registry.k8s.io/pause:3.10
ghcr.io/siderolabs/installer:v1.12.2
ghcr.io/siderolabs/installer-base:v1.12.2
ghcr.io/siderolabs/imager:v1.12.2
ghcr.io/siderolabs/talos:v1.12.2
ghcr.io/siderolabs/talosctl-all:v1.12.2
ghcr.io/siderolabs/overlays:v1.12.2
ghcr.io/siderolabs/extensions:v1.12.2

---

This discussion was created from the release v1.12.2.

[alagoutte]

Small typo on changelog it is —overlay ? (And not —ovelay)

[smira]

Important

There is a known issue with etcd on IPv6-only hosts: #12646 (comment)

[lynh7]

Hello, I'm using this version on Raspberry Pi4. But I'm having this error: exec /usr/local/bin/kubelet: exec format error. Do this version ghcr.io/siderolabs/kubelet:v1.35.0 support arm64?

[smira]

yes, it does support arm64, it's a lingering bug we haven't been able to track down so far - sometimes containerd pulls wrong arch for the image, and it's random.

[lynh7]

Do we have any workaround to avoid this randomness?

[smira]

You can re-provision the machine/wipe EPHEMERAL for 1.12.

For Talos v1.13 - you can remove an image with talosctl.