Resources

This section contains information about the resources created by Talos Linux to manage volumes on the machine. This information is useful for understanding how Talos Linux manages volumes and how to debug issues related to volumes.

Volumes

The configuration of volumes is defined using the VolumeConfig resource, while the current state of volumes is stored in the VolumeStatus resource.

Volume configuration

The volume configuration is managed by Talos Linux based on machine configuration. To see configured volumes, use the following command:

$ talosctl get volumeconfigs
NODE         NAMESPACE   TYPE           ID                                  VERSION
20.0.2   runtime     VolumeConfig   /etc/cni                            2
20.0.2   runtime     VolumeConfig   /var/run                            2
20.0.2   runtime     VolumeConfig   EPHEMERAL                           2
20.0.2   runtime     VolumeConfig   ETCD                                2
20.0.2   runtime     VolumeConfig   META                                2
20.0.2   runtime     VolumeConfig   STATE                               3
20.0.2   runtime     VolumeConfig   u-extra                             2
20.0.2   runtime     VolumeConfig   u-p1                                2
20.0.2   runtime     VolumeConfig   u-p2                                2

In the provided output, the volumes EPHEMERAL, META, and STATE are system volumes managed by Talos, while u-extra, u-p1 and u-p2 are user configured volumes. To get details about a specific volume configuration, use the following command:

# talosctl get volumeconfig STATE -o yaml
node: 172.20.0.5
metadata:
    namespace: runtime
    type: VolumeConfigs.block.talos.dev
    id: STATE
    version: 4
    owner: block.VolumeConfigController
    phase: running
    created: 2024-08-29T13:22:04Z
    updated: 2024-08-29T13:22:17Z
    finalizers:
        - block.VolumeManagerController
spec:
    type: partition
    provisioning:
        wave: -1
        diskSelector:
            match: system_disk
        partitionSpec:
            minSize: 104857600
            maxSize: 104857600
            grow: false
            label: STATE
            typeUUID: 0FC63DAF-8483-4772-8E79-3D69D8477DE4
        filesystemSpec:
            type: xfs
            label: STATE
    encryption:
        provider: luks2
        keys:
            - slot: 0
              type: nodeID
    locator:
        match: volume.partition_label == "STATE"
    mount:
        targetPath: /system/state

Volume status

Current volume status can be obtained using the following command:

$ talosctl get volumestatus
NODE         NAMESPACE   TYPE           ID                                  VERSION   TYPE        PHASE   LOCATION    SIZE
20.0.2   runtime     VolumeStatus   /etc/cni                            3         overlay     ready
20.0.2   runtime     VolumeStatus   EPHEMERAL                           6         partition   ready   /dev/vda4   5.2 GB
20.0.2   runtime     VolumeStatus   ETCD                                2         directory   ready
20.0.2   runtime     VolumeStatus   META                                3         partition   ready   /dev/vda2   1.0 MB
20.0.2   runtime     VolumeStatus   STATE                               6         partition   ready   /dev/vda3   105 MB
20.0.2   runtime     VolumeStatus   u-extra                             2         partition   ready   /dev/sda1   350 MB
20.0.2   runtime     VolumeStatus   u-p1                                2         partition   ready   /dev/sdb1   350 MB
20.0.2   runtime     VolumeStatus   u-p2                                2         partition   ready   /dev/sdb2   350 MB

Each volume goes through different phases during its lifecycle:

waiting: the volume is waiting to be provisioned
missing: all disks have been discovered, but the volume cannot be found
located: the volume is found without prior provisioning
provisioned: the volume has been provisioned (e.g., partitioned, resized if necessary)
prepared: the encrypted volume is open
ready: the volume is formatted and ready to be mounted
closed: the encrypted volume is closed, and ready to be unmounted

Mounts

Volumes are mounted when they are ready to be used, mounts are tracked in two resources: MountRequest describes the desired mount, while MountStatus describes the current state of the mount.

Mount request

Mount requests are created automatically by Talos Linux based on the volume configuration, service configuration, etc. To see the current mount requests, you can use the following command:

$ talosctl get mountrequests
NODE         NAMESPACE   TYPE           ID                                  VERSION   VOLUME                              PARENT                     REQUESTERS
20.0.5   runtime     MountRequest   /etc/cni                            2         /etc/cni                                                       ["service/cri"]
20.0.5   runtime     MountRequest   /etc/kubernetes                     2         /etc/kubernetes                                                ["service/cri"]
20.0.5   runtime     MountRequest   /opt                                2         /opt                                                           ["service/cri"]
20.0.5   runtime     MountRequest   /usr/libexec/kubernetes             2         /usr/libexec/kubernetes                                        ["service/cri"]
20.0.5   runtime     MountRequest   /var/lib                            3         /var/lib                            EPHEMERAL                  ["service/cri","service/kubelet"]
20.0.5   runtime     MountRequest   /var/lib/cni                        2         /var/lib/cni                        /var/lib                   ["service/cri"]
20.0.5   runtime     MountRequest   /var/lib/containerd                 2         /var/lib/containerd                 /var/lib                   ["service/cri"]
20.0.5   runtime     MountRequest   /var/lib/kubelet                    2         /var/lib/kubelet                    /var/lib                   ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/lib/kubelet/seccomp            2         /var/lib/kubelet/seccomp            /var/lib/kubelet           ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/lib/kubelet/seccomp/profiles   2         /var/lib/kubelet/seccomp/profiles   /var/lib/kubelet/seccomp   ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/log                            2         /var/log                            EPHEMERAL                  ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/log/audit                      2         /var/log/audit                      /var/log                   ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/log/audit/kube                 2         /var/log/audit/kube                 /var/log/audit             ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/log/containers                 2         /var/log/containers                 /var/log                   ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/log/pods                       2         /var/log/pods                       /var/log                   ["service/kubelet"]
20.0.5   runtime     MountRequest   /var/mnt                            3         /var/mnt                            EPHEMERAL                  ["block.UserVolumeConfigController","service/kubelet"]
20.0.5   runtime     MountRequest   /var/run                            2         /var/run                                                       ["service/cri"]
20.0.5   runtime     MountRequest   /var/run/lock                       2         /var/run/lock                       /var/run                   ["service/cri"]
20.0.5   runtime     MountRequest   EPHEMERAL                           2         EPHEMERAL                                                      ["sequencer"]

Mount status

As the volumes are mounted, the status of the mounts is updated in the MountStatus resource:

$ talosctl get mountstatus
NODE         NAMESPACE   TYPE          ID                                  VERSION   SOURCE      TARGET                              FILESYSTEM   VOLUME
20.0.5   runtime     MountStatus   /etc/cni                            2                     /etc/cni                            none         /etc/cni
20.0.5   runtime     MountStatus   /etc/kubernetes                     2                     /etc/kubernetes                     none         /etc/kubernetes
20.0.5   runtime     MountStatus   /opt                                2                     /opt                                none         /opt
20.0.5   runtime     MountStatus   /usr/libexec/kubernetes             2                     /usr/libexec/kubernetes             none         /usr/libexec/kubernetes
20.0.5   runtime     MountStatus   /var/lib                            6                     /var/lib                            none         /var/lib
20.0.5   runtime     MountStatus   /var/lib/cni                        2                     /var/lib/cni                        none         /var/lib/cni
20.0.5   runtime     MountStatus   /var/lib/containerd                 2                     /var/lib/containerd                 none         /var/lib/containerd
20.0.5   runtime     MountStatus   /var/lib/kubelet                    3                     /var/lib/kubelet                    none         /var/lib/kubelet
20.0.5   runtime     MountStatus   /var/lib/kubelet/seccomp            3                     /var/lib/kubelet/seccomp            none         /var/lib/kubelet/seccomp
20.0.5   runtime     MountStatus   /var/lib/kubelet/seccomp/profiles   2                     /var/lib/kubelet/seccomp/profiles   none         /var/lib/kubelet/seccomp/profiles
20.0.5   runtime     MountStatus   /var/log                            5                     /var/log                            none         /var/log
20.0.5   runtime     MountStatus   /var/log/audit                      3                     /var/log/audit                      none         /var/log/audit
20.0.5   runtime     MountStatus   /var/log/audit/kube                 2                     /var/log/audit/kube                 none         /var/log/audit/kube
20.0.5   runtime     MountStatus   /var/log/containers                 2                     /var/log/containers                 none         /var/log/containers
20.0.5   runtime     MountStatus   /var/log/pods                       2                     /var/log/pods                       none         /var/log/pods
20.0.5   runtime     MountStatus   /var/mnt                            3                     /var/mnt                            none         /var/mnt
20.0.5   runtime     MountStatus   /var/run                            3                     /var/run                            none         /var/run
20.0.5   runtime     MountStatus   /var/run/lock                       2                     /var/run/lock                       none         /var/run/lock
20.0.5   runtime     MountStatus   EPHEMERAL                           5         /dev/vda4   /var                                xfs          EPHEMERAL

Overview

Getting Started

Platform specific installation

Deploying and managing workloads

Networking

Security

Build and extend Talos

Configure your Talos cluster

Advanced guides

Reference

Troubleshooting and support

Learn more

Volumes

Volume configuration

Volume status

Mounts

Mount request

Mount status

​Volumes

​Volume configuration

​Volume status

​Mounts

​Mount request

​Mount status

Volumes

Volume configuration

Volume status

Mounts

Mount request

Mount status