backports: for v1.13.0-beta.1#1498
Conversation
It was enabled for arm64 already, so enable just for amd64. See siderolabs/talos#12995 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com> (cherry picked from commit bdc239e)
Call the machined API with a dedicated image verifier role (to limit the available scope). This matches the PR siderolabs/talos#13025 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com> (cherry picked from commit 03680ae)
Also bump CNI to 1.9.1, and fix commit ref for runc. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com> (cherry picked from commit 22fa669)
This is new production now:
```json
"595": {
"type": "production branch",
"driver_info": [
{
"release_version": "595.58.03",
"release_date": "2026-03-24",
"release_notes": "https://docs.nvidia.com/datacenter/tesla/tesla-release-notes-595-58-03/index.html",
"architectures": [
"x86_64",
"aarch64"
],
"runfile_url" : {
"x86_64": "https://us.download.nvidia.com/tesla/595.58.03/NVIDIA-Linux-x86_64-595.58.03.run",
"aarch64": "https://us.download.nvidia.com/tesla/595.58.03/NVIDIA-Linux-aarch64-595.58.03.run"
}
}
]
},
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
(cherry picked from commit 9142603)
Pull in new tools/toolchain. Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com> (cherry picked from commit e4d0113)
There was a problem hiding this comment.
Pull request overview
Backports a set of features/version bumps targeting the v1.13.0-beta.1 release line, including kernel/config updates, containerd image verification role adjustments, and tooling/component version refreshes.
Changes:
- Bump Linux stable kernel inputs to
6.18.19and update generated kernel configs (including clang/LLVM tool versions). - Enable
CONFIG_CHECKPOINT_RESTORE=yfor amd64 kernel config. - Update build inputs in
Pkgfile(musl toolchain/tools revs, CNI tov1.9.1, NVIDIA production driver to595.58.03, andrunc_ref).
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| kernel/build/config-arm64 | Regenerated arm64 kernel config header/tool versions for Linux 6.18.19 / clang 22.1.2. |
| kernel/build/config-amd64 | Regenerated amd64 kernel config, enables checkpoint/restore, and updates/normalizes some config entries. |
| containerd/patches/image-verify.patch | Adjusts the Talos role used for the machined image verification call. |
| Pkgfile | Bumps kernel/CNI/NVIDIA/toolchain inputs and updates runc commit ref. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| CONFIG_HAVE_SETUP_PER_CPU_AREA=y | ||
| # CONFIG_CMA is not set | ||
| CONFIG_PAGE_BLOCK_MAX_ORDER=10 | ||
| # CONFIG_MEM_SOFT_DIRTY is not set |
There was a problem hiding this comment.
CONFIG_CHECKPOINT_RESTORE was enabled for amd64, but the config explicitly disables CONFIG_MEM_SOFT_DIRTY. Soft-dirty tracking is commonly required for checkpoint/restore tooling (e.g., CRIU), so leaving it off can result in checkpoint/restore not working as expected. Consider enabling CONFIG_MEM_SOFT_DIRTY (or confirm why it must remain disabled for Talos’ use-case).
| # CONFIG_MEM_SOFT_DIRTY is not set | |
| CONFIG_MEM_SOFT_DIRTY=y |
|
/m |
PRs backported: