Talos Linux v1.14.0 released on 03-09-2026
Talos Linux v1.14.0 is out now. It delivers substantial networking improvements — encrypted DNS (DoT/DoH) per name-server, native host BGP, Flannel on nftables — alongside major storage and multi-document configuration work that matters for operators and on-host routing.
See the full release notes and download the binaries on the project release page on GitHub: siderolabs/talos v1.14.0.
What’s in this release
- DNS over TLS (DoT) and DNS over HTTPS (DoH) support configured per name server via the new ResolverConfig document (HostDNS moved into ResolverConfig).
- Native host BGP using embedded GoBGP with repeatable, named BGPInstanceConfig documents (supports numbered/unnumbered peers, ECMP, BFD, VRFs, selective route imports and peer status via BGPPeerStatus).
- Storage and filesystem features: btrfs support for user/existing volumes, declarative LVM (LVMVolumeGroupConfig, LVMLogicalVolumeConfig) and RAID array creation/reconciliation via RAIDArrayConfig, plus dedicated system partitions and filesystem trim/scrub controls.
Upgrade notes
- etcd compatibility is now v3.6.x-only and the default is 3.7.0+. etcd serves HTTP endpoints (metrics/health/gRPC-gateway) on port 2383 while gRPC remains on 2379 — update Prometheus scrape targets and firewall rules to pull metrics from 2383.
- Many v1alpha1 fields have moved to multi-document kinds (kernel, sysctl, sysfs, CRI customization, kube configs, VethConfig, FilesystemTrimConfig, etc). New multi-docs take precedence over legacy fields; follow the migration guidance in the release notes when converting configs.
If you try the upgrade, share your experience or any issues on the GitHub issue tracker or the project community channels so maintainers and other users can follow up. If you need to revert, previous releases (for example v1.13.0) are available from the releases page.
