> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# What's New in Talos 1.11.0

> Discover the latest features and updates in Talos Linux 1.11.

export const VersionWarningBanner = () => {
  const latestVersion = "v1.13";
  const [latestUrl, setLatestUrl] = useState(null);
  const [currentVersion, setCurrentVersion] = useState(null);
  const [isBeta, setIsBeta] = useState(false);
  const parseVersion = v => v.replace("v", "").split(".").map(Number);
  const isGreaterVersion = (a, b) => {
    const [aMajor, aMinor] = parseVersion(a);
    const [bMajor, bMinor] = parseVersion(b);
    if (aMajor > bMajor) return true;
    if (aMajor === bMajor && aMinor > bMinor) return true;
    return false;
  };
  useEffect(() => {
    if (typeof window === "undefined") return;
    const {pathname, hash, search} = window.location;
    const match = pathname.match(/\/talos\/(v\d+\.\d+)\//);
    if (!match) return;
    const detectedVersion = match[1];
    if (detectedVersion === latestVersion) return;
    setCurrentVersion(detectedVersion);
    if (isGreaterVersion(detectedVersion, latestVersion)) {
      setIsBeta(true);
    }
    const newPath = pathname.replace(`/talos/${detectedVersion}/`, `/talos/${latestVersion}/`);
    setLatestUrl(`${newPath}${search}${hash}`);
  }, []);
  if (!latestUrl || !currentVersion) return null;
  return <div className="not-prose sticky top-6 z-50 my-6">
      <div className="border border-yellow-500/30 bg-yellow-500/10 px-4 py-3 rounded-xl">
        <div className="text-sm">
          {isBeta ? <>
              ⚠️ You are viewing a <strong>beta version</strong> of Talos ({currentVersion}).
              This version may be unstable.
              <a href={latestUrl} className="ml-2 underline text-yellow-400 hover:text-yellow-300 font-medium">
                View latest stable version {latestVersion} →
              </a>
            </> : <>
              ⚠️ You are viewing an older version of Talos ({currentVersion}).
              <a href={latestUrl} className="ml-2 underline text-yellow-400 hover:text-yellow-300 font-medium">
                View the latest version {latestVersion} →
              </a>
            </>}
        </div>
      </div>
    </div>;
};

<VersionWarningBanner />

For critical changes, refer to the [upgrade notes](../configure-your-talos-cluster/lifecycle-management/upgrading-talos).

## Important Changes

### Kubernetes Version Validation

Talos now validates the Kubernetes version in the image specified in the machine configuration for [compatibility](./support-matrix).
Previously this check was performed only on upgrade, but now it is consistently applied to upgrade, initial provisioning, and machine configuration updates.
The default image references have the version tag, e.g. `ghcr.io/siderolabs/kubelet:v1.33.0`, which is used for validation.

This implies that all image references should contain the tag, even if the image is pinned by digest (e.g. `ghcr.io/siderolabs/kubelet:v1.33.0@sha256:0072b6738306b927cb85ad53999c2f9691f2f533cff22f4afc30350c3b9e62bb`).

## Disk Management

### Raw and Existing Volumes

In addition to the existing support for [user volumes](../configure-your-talos-cluster/storage-and-disk-management/disk-management/user), Talos now supports two new types of volumes:

* [raw volumes](../configure-your-talos-cluster/storage-and-disk-management/disk-management/raw) - allows to allocate unformatted disk space as a partition.
* [existing volumes](../configure-your-talos-cluster/storage-and-disk-management/disk-management/existing) - allows to use existing data partitions or disks.

### Swap and Zswap

Talos now supports [swap](../configure-your-talos-cluster/storage-and-disk-management/swap) on block devices, and `zswap`, a compressed cache for swap pages.

### Disk Encryption

[Disk encryption](../configure-your-talos-cluster/storage-and-disk-management/disk-encryption) for system volumes is now managed by the [`VolumeConfig`](../reference/configuration/block/volumeconfig) machine configuration document.
Legacy configuration in `v1alpha1` (`.machine.systemDiskEncryption`) machine configuration is still supported.

New per encryption key option `lockToState` is added to the `VolumeConfig` document, which allows to lock the volume encryption key to the secret salt in the `STATE` volume.
So, if the `STATE` volume is wiped or replaced, the volume encryption key will not be usable anymore.

### Disk Wipe

Talos now supports `talosctl wipe disk` command in maintenance mode (`talosctl wipe disk <disk> --insecure`).

## SBOMs

Talos now publishes [Software Bill of Materials (SBOM)](../advanced-guides/SBOM) in the SPDX format.

## `etcd`

The default version of `etcd` in Talos is now 3.6.4.

As `etcd` 3.6.x introduce a new storage format, Talos now supports the `etcd` [downgrade API](../build-and-extend-talos/cluster-operations-and-maintenance/etcd-maintenance#downgrade-v36-to-v35) to allow downgrading the `etcd` cluster (storage format) to a previous version
if downgrading to 3.5.x is required.

## Platform Updates

### Azure

Talos on Azure now defaults to MTU of 1400 bytes for the `eth0` interface to avoid packet fragmentation issues.
The default MTU can be overridden via machine configuration.

### VMware

Talos VMWare platform now supports `arm64` architecture in addition to `amd64`.

## `talosctl cluster create` with QEMU on macOS

When using Apple Silicon, Talos now supports running the [`talosctl cluster create` command with the QEMU provisioner on macOS](../platform-specific-installations/local-platforms/qemu).
This was previously only supported on Linux.
This feature allows to create a test Talos cluster on macOS using QEMU virtual machines, and use it to verify Talos configuration and features.

## Miscellaneous Changes

### Bootloader

Talos boot partition size increased to 2 GiB to accommodate large images (with many system extensions included).
On UEFI systems with `systemd-boot` (default since Talos 1.10), Talos now installs itself correctly into the UEFI boot order.

### New Resources

Talos Linux now provides several new resources for inspecting the system state:

* the kernel command line as a `KernelCmdline` resource (`talosctl get cmdline`);
* the list of loaded modules as a `LoadedKernelModule` resource (`talosctl get modules`);
* the booted entry (for `systemd-boot`) as a `BootedEntry` resource (`talosctl get bootedentry`).

### IMA support removed

Talos now drops the IMA (Integrity Measurement Architecture) support.
This feature was not used in Talos for any meaningful security purpose
and has historically caused performance issues.

### Early Inline Configuration

Talos now supports passing early inline configuration via the `talos.config.early` [kernel parameter](../reference/kernel#talosconfigearly-and-talosconfiginline).
This allows to pass the configuration before the platform config source is probed, which is useful for early boot configuration.
The value of this parameter has the same format as the `talos.config.inline` parameter, i.e. it should be base64 encoded and zstd-compressed.

## Component Updates

The following sections list component version updates introduced in Talos v1.11 and its patch releases.

### v1.11.5

Updated components:

* containerd: 2.1.5

### v1.11.4

Updated components:

* runc: 1.3.3
* Linux: 6.12.57
* linux-firmware: 20251021

### v1.11.3

Updated components:

* runc: 1.3.2
* Kubernetes: 1.34.1
* Linux: 6.12.52
* linux-firmware: 20251011
* CoreDNS: 1.12.4
* etcd: 3.6.5
* Flannel: 0.27.4

### v1.11.2

Updated components:

* runc: 1.3.1
* Kubernetes: 1.34.1
* Linux: 6.12.48
* linux-firmware: 20250917

### v1.11.1

Updated components:

* Linux: 6.12.45
* CoreDNS: 1.12.3

### v1.11.0

Updated components:

* Linux: 6.12.43
* Kubernetes: 1.34.0
* runc: 1.3.0
* etcd: 3.6.4
* containerd: 2.1.4
* Flannel CNI plugin: 1.7.1-flannel1
* Flannel: 0.27.2
* CoreDNS: 1.12.2
* xfsprogs: 6.15.0
* systemd-udevd and systemd-boot: 257.7
* lvm2: 2.03.33
* cryptsetup: 2.8.0

Talos is built with Go 1.24.6.

## Contributors

* Andrey Smirnov
* Noel Georgi
* Dmitrii Sharshakov
* Orzelius
* Mateusz Urbanek
* Orzelius
* Justin Garrison
* Spencer Smith
* Steve Francis
* Till Hoffmann
* Utku Ozdemir
* Andrew Longwill
* Artem Chernyshev
* Michael Robbins
* Alexandre GV
* Marat Bakeev
* Oguz Kilcan
* Olav Thoresen
* Thibault VINCENT
* 459below
* Alvaro "Chamo" Linares Cabre
* Amarachi Iheanacho
* Brian Brookman
* Bryan Mora
* Clément Nussbaumer
* Damien
* David R
* Dennis Marttinen
* Dmitriy Matrenichev
* Joakim Nohlgård
* Jorik Jonker
* Justin Seely
* Luke Cousins
* Marco Mihai Condrache
* Markus Reiter
* Martyn Ranyard
* Michael Moerz
* Mike
* Misha Aksenov
* Tan Siewert
* Tom
* Tom Keur
* jvanthienen-gluo
* killcity
* yashutanu