Talos Director is in Limited Availability. Limited Availability customers receive full production support and work directly with Sidero Labs engineering during onboarding. General availability is planned for January 2027, and the console is changing quickly until then, so details on these pages may differ from what you see.To request access, visit siderolabs.com/getdirector.
Converting VMs in waves
For a large estate, migration assessment tooling inventories the vCenter environment and groups its VMs into waves, and mass conversion runs a wave’s jobs together. Each VM in a wave is still its own conversion job, with the stages, cutover modes, and rollback described on this page.Where the conversion runs
A conversion is a job that runs on the Talos Director host you selected in the wizard, the one that will own the converted VM. The control plane dispatches the job and tracks its progress, while the host does the copying and conversion, because it is already attached to the destination storage pool and has the fastest path to it. The conversion tools (the disk copier,qemu-img, the guest customization tooling) do not run on the host directly. Talos Linux hosts are immutable, so nothing is installed on them. Instead, each job runs in its own isolated, unprivileged tool container on the host, started for that job and removed when it finishes. The container can access only that job’s source and its destination pool, cannot read storage credentials, and runs under a resource ceiling so a conversion does not starve the VMs already running on the host.
Requirements
The wizard’s Requirements step checks the source VM before any data is copied. The conversion does not start until all three requirements are met.- Guest credentials: an account in the guest OS, used to read its network configuration and to remove VMware Tools during the conversion.
- No existing vCenter snapshots: the engine creates and removes its own snapshots during a warm conversion and needs a clean chain to do that safely.
- VirtIO drivers and the QEMU guest agent in the guest: on KVM the VM’s disks and network interfaces are VirtIO devices. For Linux the engine also rebuilds the initramfs with VirtIO drivers during customization; for Windows the drivers must be present before conversion, and the step links to the driver ISO.
Conversion stages
The diagram follows a job with scheduled or automatic cutover. Everything up to the cutover happens while the source VM is still serving. With cold cutover, the source is powered off before Downloading begins, so the whole job falls inside the outage. The Conversion Jobs page shows one status per job. Each status corresponds to the following work.Cutover modes
The cutover mode decides when the source VM stops and how much of the copy happens while it is still serving. In other words, it decides the downtime of the migration.Cold
The source VM is powered off before the copy starts and stays off. The engine reads its disks whole, using the fastest path available: directly from the NFS datastore when the host can mount it, through vCenter’s export service, or through VDDK with sparse reads that skip unallocated blocks. Downtime lasts the entire job. Nothing on the source changes during the copy, so this is the simplest and most predictable mode, suited to workloads that tolerate a maintenance window.Scheduled cutover
The source VM keeps running. The engine takes a snapshot of it and copies that as the base. The snapshot is quiesced when VMware Tools is running in the guest, so the guest’s filesystems are consistent, and crash-consistent when it is not. The engine then runs delta passes: take a new snapshot, ask VMware’s changed block tracking which blocks changed since the last one, copy only those. Passes repeat until the copy is in sync, and the job then shows In sync; awaiting scheduled cutover, running further passes as needed to stay in sync. At the scheduled time, or when you trigger it, the engine asks the guest to shut down and waits for it to power off, five minutes by default. If the guest has not powered off by then, or VMware Tools is not running to receive the request, the engine powers the source off hard, the same as pulling its power cable. The final delta then comes from a crash-consistent state. For databases and other workloads that need a clean shutdown, stop the application or the guest yourself before the cutover time. After the source is off, the engine copies the final delta and the job moves through the remaining stages. Two limits bound the wait. The snapshot chain on the source is capped (12 snapshots by default) so redo logs cannot grow without limit while the job waits, and the chain is consolidated once at the end, when no changed-block query depends on it. The engine never consolidates mid-flight, because doing so would corrupt the destination.Automatic cutover
Automatic cutover is the same as scheduled cutover without the wait. Delta passes repeat until the changed data in a pass drops below 1% of the disk, or until 20 passes have run, and then the engine shuts the source down and cuts over immediately, the same way as a scheduled cutover. This mode gives the smallest downtime without an operator present, and suits bulk moves where the exact cutover time does not matter.The base copy is the longest stage and runs at the speed of the storage network. With scheduled or automatic cutover it happens while the source is still serving. The outage runs from the source’s shutdown to the converted VM’s first boot: the final delta, conversion to QCOW2 if you chose it, customization, and VM creation all fall inside it. To keep the outage short, choose raw disks, which skip the conversion. The application inside the VM is not changed.
Failure handling and rollback
Each job writes a checkpoint to the host as it progresses. If the host agent restarts mid-job, it reads the checkpoint, finds the job’s tool container still running, and re-attaches to it rather than starting over. A long copy survives a host agent upgrade. You can cancel a job at any stage before completion. Cancel stops the tool container and removes the partial disks from the destination pool. For scheduled and automatic jobs, the engine removes the snapshots it created on the source and turns changed block tracking back off if it was the one that turned it on. Before cutover, the source VM keeps running throughout. After cutover has started, the source is already powered off, and cancelling does not power it back on. Power it on in vCenter to resume service. Progress is monitored for stalls, so a copy that stops making progress is reported as stalled rather than sitting at the same percentage indefinitely, while a job waiting for a scheduled cutover is reported as waiting. Slow vCenters are tolerated: the login and export lease have their own time budgets with retries, and a download stream that goes silent is closed and resumed from where it stopped. The source VM is never deleted, and its disks and guest operating system are never changed. Customization happens on the converted copy. After cutover it remains in vCenter, powered off, so rolling back means powering it on again. Decommission it once the converted VM is confirmed working.Other migration methods
Conversion from vCenter is the main path, and not the only one.- OVF import brings in a VM exported as an OVF package from any platform.
- Import existing VMs discovers VM disk images already present in a storage pool and defines VMs around them.
- Cross-cluster migration moves a VM between two Talos Director compute clusters, streaming its disks host to host.
- Cross-instance migration moves a VM between two Talos Director deployments, for example between data centers.