Skip to main content
Talos Enterprise Linux is Sidero’s commercial distribution of Talos Linux, delivered through Enterprise Image Factory at factory.siderolabs.com. It adds compliance and supply chain artifacts that are not available in the open-source distribution: FIPS-enabled builds, per-schematic SBOMs, VEX data, and vulnerability scan reports.

​
Features included in Talos Enterprise Linux

Every build served from Enterprise Image Factory includes the following:
  • FIPS-enabled builds: Every image is built with the Go Cryptographic Module, validated under FIPS 140-3 (CMVP certificate #5247). No opt-in or separate build is required. This is a property of every build from Talos 1.13 onwards.
  • Per-schematic SBOM: Enterprise Image Factory generates a Software Bill of Materials in SPDX 2.3 format for each schematic and Talos version. The SBOM covers the exact image a node runs, including the base OS and every configured extension. This is different from the release SBOMs published on GitHub, which cover only the unmodified base.
  • VEX data: Sidero publishes Vulnerability Exploitability eXchange statements that identify which CVEs actually apply to Talos as built. Used with the SBOM, VEX data lets scanners filter out non-applicable findings rather than relying on blanket waivers.
  • Vulnerability scan reports: Enterprise Image Factory can run and return a completed vulnerability scan report on demand, combining the schematic’s SBOM with VEX data and a live vulnerability database. Reports are available in .json, .table, .sarif, and .cdx formats.
For a full breakdown of features and how Enterprise Image Factory differs from the public Image Factory at factory.talos.dev, see Enterprise Image Factory.

​
Access

Talos Enterprise Linux is available as a standalone entitlement and includes Omni. Talos Enterprise Linux customers who do not use Omni authenticate to Enterprise Image Factory directly.