Talos Linux | v1.14.0

Talos Linux v1.14.0 released on 03-09-2026


Talos Linux v1.14.0 is out now. It delivers native BGP via embedded GoBGP instances, stronger DNS and time privacy (DoT/DoH and NTS), and a substantial set of storage, CRI and workload-isolation improvements that matter for host and cluster operators.

Find binaries, full release notes and the issue tracker on the project GitHub release page for v1.14.0.

What’s in this release

  • Native BGP with embedded GoBGP servers: repeatable, named BGPInstanceConfig documents, isolated per-instance RIBs, support for numbered and unnumbered peering (including IPv6 link‑local and RFC‑8950 cross‑family next‑hops), ECMP/multipath next‑hops, per‑neighbor hold‑time and BFD settings, importRoutes selectors and an installRoutes flag to control automatic route installation.
  • Secure DNS, time and probes: DNS over TLS (DoT) and DNS over HTTPS (DoH) configurable per nameserver in ResolverConfig; DHCPv4 now applies search domains and supports ignoreRoutes; Host DNS forwarding moved into ResolverConfig; Network Time Security (NTS) is enabled by default for time.cloudflare.com and TimeServerConfig.useNTS is configurable; adds HTTP probes (HTTP 200–399 treated as success).
  • Storage and filesystem controls: btrfs support for user and existing volumes, declarative LVM (LVMLogicalVolumeConfig and LVMVolumeGroupConfig) with status resources and talosctl wipe lv/vg/pv, RAIDArrayConfig with additive reconciliation and bootable RAID1 metadata 1.0, FilesystemTrimConfig for scheduled fstrim, XFS tuning (minAllocationGroupSize) and xfs_scrub support, plus dedicated system volumes for ETCD/CRI/KUBELET/LOG.

Upgrade notes

  • etcd compatibility and networking: Talos now targets etcd v3.6.x only (default bumped to 3.7.0+). etcd serves HTTP endpoints (metrics, health, gRPC‑gateway) on port 2383 while 2379 is gRPC‑only — update scrapes and firewalls to use 2383.
  • If you need to undo storage changes, Talos provides metadata wipe commands: use talosctl wipe lv/vg/pv for LVM and talosctl wipe md <device> for MD RAID devices.

If you try v1.14.0, please share how it behaves for you — file issues on GitHub or report peer observations through the Talos community channels.

Related posts

Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...

Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.