mastodon 4.7.3Creators of Talos Linux and Omni
Join the slack channel for discussion
https://slack.dev.talos-systems.io/
File issues on GitHub
https://github.com/siderolabs/talos
Join our newsletter
https://bit.ly/4oelhW2
New in Talos Linux:
Out-of-memory handling can proactively identify and evict the relevant, resource-heavy application before it destabilizes the host. This reduces avoidable downtime and ensures the control plane and critical services remain operational.
#TalosLinux #Kubernetes #K8s #BareMetal #PlatformEngineering #DevOps #InfrastructureAsCode #GitOps #SRE #EdgeComputing #CloudNative #BareMetalK8s
Our community loves Talos Linux because it’s built differently: No SSH. No shell. < 50 binaries. Now, we’re looking for a Senior Software Engineer to help us scale the Talos Platform and change the standard for K8s fleet management.
If you want to work with us and make a big impact, check it out.
🛠️ Go, cloud native, K8s, etcd
🌍 100% Remote (EU time zones preferred)
Apply here: https://www.siderolabs.com/careers/senior-software-engineer/?utm_source=mastodon&utm_medium=social
New in Talos Linux: image cache serve simplifies air-gapped & edge cluster bring-up
You can now pre-seed images and bring up clusters without deploying and managing a registry. No need to stand up and manage a full registry infrastructure just to move images via USB or local network.
#K8s #BareMetal #PlatformEngineering #DevOps #InfrastructureAsCode #GitOps #SRE #EdgeComputing
Wondering how France’s national railway uses Talos Linux? Their recent #KubeCon talk has the answer. → https://www.youtube.com/watch?v=rEcTzLdjmJA
We’re back at Booth 484 today — and it is busy!
Our team is here to walk through demos, answer architectural questions, or just chat about making Kubernetes operations a bit more predictable, so be sure to stop by.
See you on the floor.
New in Omni: On-ramp for Talos Linux clusters.
Centralizing infrastructure management shouldn't require a total rebuild of your current environment.
You can now bring established Talos Linux clusters into Omni via a single CLI command and immediately gain visibility and remote management capabilities while reducing the operational risk of manual cluster rebuilds.
Read about this update and more → https://www.siderolabs.com/blog/talos-omni-q4-2025-updates?utm_source=linkedin&utm_medium=social&utm_campaign=q4-2025&utm_content=on_ramp
We love this capability, but not everyone knows about it. So here's how Talos Linux can be remotely configured using a simple HTTP endpoint.
→ https://www.youtube.com/watch?v=DaCuzgrQvhU&feature=youtu.be
What’s the difference between Talos Linux and K3s? In short: a lot.
Talos = a Linux distribution that installs Kubernetes.
K3s = a Kubernetes distribution.
Keep reading about the differences and insights on when to use each →
https://www.siderolabs.com/blog/talos-linux-vs-k3s?utm_source=mastodon&utm_medium=social
And the winner of InfoWorld’s 2025 Technology of the Year Award (Application Management) is....
Omni!→ https://www.infoworld.com/article/4104098/infoworlds-2025-technology-of-the-year-award-winners.html
New in Talos: Multi-doc config for networking. No more bricking a remote server just because there’s a single typo in a 200-line configuration file.
New in Talos Linux: OS-level signature verification with Cosign
Admission controllers don't protect the node. Talos Linux now enforces signature verification at the OS level for the entire boot set (Kubelet, CNI, etc.).
Keep reading → https://www.siderolabs.com/blog/talos-omni-q1-2026-updates/?utm_source=mastodon&utm_medium=social&utm_content=signatureverification
Running air-gapped Kubernetes? Don't miss this #KubeCon talk.
🎙 Declarative Edge Kubernetes: Immutable Clusters with Talos + Zarf
🗓️ Tuesday, March 24 | 17:00 - 17:30
📍 Hall 8 | Room D
If youwant to talk more about air-gapped Kubernetes, come find us at booth 484.
#EdgeComputing #AirGapped #TalosLinux #CyberSecurity #CloudNative
Thanks for all the stars! ⭐
Talos Linux just passed the 10k mark on GitHub. Happy Friday to all the Talos Linux users out there.
If you’re managing air-gapped Kubernetes, here's a #KubeCon talk to add to your list.
Declarative Edge Kubernetes: Immutable Clusters with Talos + Zarf
🗓️ Tuesday, March 24 | 17:00 - 17:30
#EdgeComputing #AirGapped #TalosLinux #CyberSecurity #CloudNative
How can you compare today's immutable distros?
Join @jgarr@mastodon.social as he dives into the topic of Immutable Linux, covering: Flatcar, Bottlerocket, Fedora CoreOS, NixOS, Talos Linux, MicroOS, and Kairos.
📍 Read: https://www.socallinuxexpo.org/scale/23x/presentations/state-immutable-linux
🖥️ Watch: https://www.youtube.com/socallinuxexpo
When you run a modern stack, you rely on dozens of interacting tools - each built by a different brilliant engineer, refined over years of effort.
So how do you manage that level complexity at scale?
You strip away the noise until you can see what matters.
New in #TalosLinux & Omni
→ Multi-doc configs for networking
→ Talos Linux cluster imports for Omni
→ Pre-seeded images
→ Built-in OOM handling
Happy new year bare metal Kubernetes enthusiasts 🎉
We’re starting off the year with a gift 🎁
Repost ♻️ and like ❤️ this post and we’ll pick 10 people to give a free year of Omni SaaS ($120 value)
Follow us on other platforms for more chances to win
Winners will be announced on Jan 2nd
Traditionally, your machine config is one giant YAML file. Everything about the OS goes into that file, which is applied during provisioning to install the machine and bring up #Kubernetes.
What if you need to configure certificates or a file system before installing Kubernetes?
Then, there’s a lot of work to be done.
Talos Linux uses multi-doc configuration to simplify this process. With the release of Talos Linux v1.12, this extends to network configuration.
Looking for some light reading? We have something.
No Terraform, No Problem: How Sidero Omni Streamlines Kubernetes on Proxmox → https://medium.com/@PlanB./no-terraform-no-problem-how-sidero-omni-streamlines-kubernetes-on-proxmox-0e40b4e45699
There comes a moment in every cloud engineer's career when they have to deal with it
Test test. Is this thing on?
exec /sbin/init
We found out what makes the cloud work!
Running Kubernetes on-prem? Want a managed control plane with your own workers? 🖥️
Let us know what you you think 👇👇
https://docs.google.com/forms/d/e/1FAIpQLScm91m8irH8hexAHSidPJ2mnTx6KBD3LGs8NXNyhzRa0SzHSw/viewform
So you wanna run Talos Stack air-gapped.
There’s a tutorial for that, featuring every component you need to know (and @jgarr@mastodon.social)
Every Kubernetes environment is unique... but for those accountable for risk, "unique" isn't always a good thing.
We’re going to #KubeCon because we know infra can be secure & compliant by design. Visit us and see how we’re helping leaders move beyond reactive security to a system that is reliable by default.
More home lab inspiration for you today. This one is using Flux and Rook.
Check it out ➡️ https://blog.nerdz.cloud/2025/talos-dr-reset/
What are we doing this Friday? Checking out the community-made Talos TUI for real-time node monitoring, log streaming, etcd health, and diagnostics
Here's your Monday morning home lab!
6-Node HA Kubernetes Cluster with Talos Linux → https://www.youtube.com/watch?v=EhH-bP1GrTM
You wouldn't vibe code an Omni provider. Unless you're @jgarr@mastodon.social
→ https://www.youtube.com/live/y-VySAqJ66M?si=6jZILhuDVGDVXZFd
Talos Linux + Hetzner + video format → Here’s a little throwback to Alex Oprisan’s TalosCon talk.
https://www.youtube.com/watch?v=hJueAIb2AHQ&list=PLSgt7RkT67ffjzZ4dXDYXVU_mmiBvNQ5s&index=4
💡 Feature Spotlight: Omni Infrastructure Providers
Provision across any environment without the glue code. Unify your lifecycle across libvirt, Proxmox, vSphere, Oxide, Bare metal, and KubeVirt from a single, centralized control plane.
Did you miss @jgarr@mastodon.social's talk at SCALE?
You can check out his talk on the state of immutable Linux distros here → https://www.youtube.com/watch?v=jvdPuTcdGXs
Spotlight: Eliminate insecure exposure for internal services with Omni Workload Proxy.
Workload Proxy creates a secure, automated tunnel from the cluster directly to the Omni control plane, so you can achieve a more auditable and reliable management plane.
Are you attending KubeCon this November?
Join us for a casual hang with the Oxide Computer team! Plus, @jgarr@mastodon.social and @sudomateo@mastodon.online will be there to discuss why Sidero on Oxide beats k8s + KubeVirt on bare metal.
📍STATS Brewpub
🗓Wednesday, November 12
⏰ 4:00 - 7:00 PM
Sign up here: https://www.eventbrite.com/e/oxidesidero-at-kubecon-north-america-2025-tickets-1538869282449
Get ready for TALOS LINUX INSTALL FEST!!! 🐧
July 7-18 🗓️ Live streams of Talos Linux with new users in new environments every day
Bring Your Own Compute and follow along
youtube.com/siderolabs
Last quarter’s updates make it easier to achieve hardened, immutable infrastructure in production.
Here's how:
→ Image signature verification enforces cryptographic integrity at the OS level.
→ Improved OS upgrades decouple updates from reboots to maximize fleet availability.
→ talosctl secures nodes while providing a reliable break-glass entry point.
→ Omni CA Rotation eliminates legacy trust to establish an exclusive source of authority.
Read more about the updates: https://www.siderolabs.com/blog/talos-omni-q1-2026-updates/?utm_source=mastodon&utm_medium=social&utm_content=product_roundup_q1_2026
When a system breaks or a new requirement emerges, the reflex is to add another layer.
If we can commit to an API-driven infrastructure, why are we still building complex, fragile networks just to talk to them?
Predictability requires ruthless minimalism → https://www.siderolabs.com/blog/how-radical-subtraction-simplifies-the-kubernetes-lifecycle?utm_source=mastodon&utm_medium=social
No one wants to be on call for that 2:00 AM incident, whose solution requires knowledge of a years-old manual tweak.
Here’s why heroics lose to predictability every time.
CPO Jeff Behl & Solutions architect Kevin Tijssen are going to sit down with The New Stack to talk about the patterns that are stalling your roadmap and slowing delivery and how to build a foundation that supports you at scale.
🗓 April 9, 9AM PT
Join us ➡️ https://thenewstack.io/webinar/scaling-kubernetes-with-systemic-certainty-not-operational-heroics/
Do you think security should be a property of the system and not a checklist of operational add-ons?
Come meet us at booth 484 at #KubeCon.
Our team will be there to give you the perspective you need, from TCO deep-dives to architectural insights and more.
