TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Talos: Secure, immutable, and minimal Linux OS for running Kubernetes

179 点作者 sea-gold10 个月前

14 条评论

amluto10 个月前
I considered deploying Talos a few weeks ago, and I ran into this:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;siderolabs&#x2F;talos&#x2F;issues&#x2F;8367">https:&#x2F;&#x2F;github.com&#x2F;siderolabs&#x2F;talos&#x2F;issues&#x2F;8367</a><p>Unless I’ve missed something, this isn’t a big deal in an AWS-style cloud where extra storage volumes (EBS, etc) have essentially no incremental cost, and maybe it’s okay on bare metal if the bare metal is explicitly designed with a completely separate boot disk (this includes Raspberry Pi using SD for boot and some other device for actual storage), but it seemed like a mostly showstopping issue for an average server that was specced with the intent to boot off a partition.<p>I suppose one could fudge it with NVMe namespaces if the hardware cooperates. (I’ve never personally tried setting up a nontrivial namespace setup.)<p>Has anyone set up Talos in a useful way on a server with a single disk or a single RAID array?
评论 #40958991 未加载
评论 #40959624 未加载
评论 #40959636 未加载
评论 #40960620 未加载
评论 #40959328 未加载
JustinGarrison10 个月前
Thanks for the interest in Talos Linux! I work at Sidero (creators of Talos) and there are lots of “secure, immutable, and minimal” Linux distos out there.<p>Something that Talos does differently is everything is an API. Machine configuration, upgrades, debugging…it’s all APIs. This helps with maintaining systems way beyond the usual cloud-init and systemd wrappers in other “minimal” distros.<p>The second big change is Talos Linux is only designed for Kubernetes. It’s not a generic Linux kernel+container runtime. The init system was designed to run the kubelet and publish an API that feels like a Kubernetes native component.<p>This drastically reduces the Linux knowledge required to run, scale, and maintain a complex system like Kubernetes.<p>I’ve been doing a set of live streams called Talos Linux install fest walking new users through setting up their first cluster on Talos. Each install is in a new environment so please check it out.<p><a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;siderolabs&#x2F;streams" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;siderolabs&#x2F;streams</a>
Veraticus10 个月前
We use Talos really extensively in production. It’s been an amazing solution for our Kubernetes clusters. Highly recommended for a really smart, really directed Linux distro.
PhilipJFry10 个月前
Previously on Hacker News:<p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=37846995">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=37846995</a><p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=31798362">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=31798362</a><p><a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=31486815">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=31486815</a>
philips10 个月前
This team has a pretty active YouTube channel that is worth checking out too.<p><a href="https:&#x2F;&#x2F;youtube.com&#x2F;@siderolabs" rel="nofollow">https:&#x2F;&#x2F;youtube.com&#x2F;@siderolabs</a>
ksec10 个月前
Around 90MB when downloaded compress. Not Sure am I the only one who is interested in its size when I see the word minimal.
评论 #40961657 未加载
评论 #40959642 未加载
splix10 个月前
We&#x27;ve been using it for a while, and I&#x27;m absolutely happy with the project.<p>Before that, we had a Kubespray based setup. It&#x27;s a bunch of Ansible script and it allows to make any custom setup, like absolutely anything as you in control of the machines. But the other side of this is that it&#x27;s extremely easy to break everything. Which we did a couple of times. And so any upgrade is a risk of loosing the whole cluster, so we decided it must be run in VM with full backup before each upgrade. Another problem that it takes about an hour to apply a change, because Ansible has to apply all the scripts each time.<p>Then we migrated to Talos, and it&#x27;s a day and night. The initial setup took like an hour, including reading the docs and a tutorial. Easy to setup, easy to maintain, easy to upgrade (and it takes minutes). Note that we run the nodes as VMs in Proxmox, so the disk and network setup are outside of Talos scope, as well as backups, and it&#x27;s actually simplifies everything. So it &quot;just works&quot; and we can focus on your app not the cluster setup.
评论 #40961641 未加载
mrbluecoat10 个月前
A related insightful read: <a href="https:&#x2F;&#x2F;www.siderolabs.com&#x2F;blog&#x2F;there-are-only-12-binaries-in-talos-linux&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.siderolabs.com&#x2F;blog&#x2F;there-are-only-12-binaries-i...</a>
apexalpha10 个月前
I think a word is missing from the front page:<p><i>Talos improves security further by mounting the root filesystem as read-only and removing any host-level such as a shell and SSH.</i><p>After host-level, probably &#x27;access&#x27;.
rompledorph10 个月前
The documentation seems to be lacking. I am specifically interested in gvisor and kata support, but cannot find information on installing additional runtimes
评论 #40959798 未加载
评论 #40961675 未加载
russfink10 个月前
Can you install a shell? Does it work with MS Secure Boot? If not, what small distro might do that?
评论 #40959011 未加载
评论 #40959335 未加载
dtx110 个月前
Is this available and usable on a raspberry pi?
评论 #40961769 未加载
评论 #40958467 未加载
Sparkyte10 个月前
I&#x27;m comfortable with using alpine, is this another one of the many container solutions for tiny containers?
评论 #40961681 未加载
breadwinner10 个月前
If you can&#x27;t login to it then it is not good for development. If it is not good for development it is not good for production because ideally your dev and production environment should be the same.
评论 #40958820 未加载
评论 #40959867 未加载
评论 #40959025 未加载
评论 #40959054 未加载
评论 #40959862 未加载
评论 #40959352 未加载
评论 #40960474 未加载
评论 #40959003 未加载