41–50 of 79 posts
Security wise sounds a bit light. I like the idea but I'd be more comfortable with a more security-first approach instead of "we are infra people" as we know how that usually ends. I'll be following the project closely as I think the idea is good.
I think you might be pleasantly surprised about our approach to security. Security is very machine a priority and built into the OS.
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
https://hub.docker.com/r/nvidia/driver
I build slightly customized images using a process derived from the one in the NVIDIA repo:
https://gitlab.com/nvidia/container-images/driver/blob/maste... https://gitlab.com/nvidia/container-images/driver/blob/maste...
The automation here is predicated on CoreOS distributing matching { kernel, headers, toolchain } artifacts for each release, and in particular how specific OS releases get promoted from the alpha -> beta -> stable channels without modification. This lets me build new drivers automatically for each alpha release, validate the drivers on the beta channel, and have no surprises on the stable channel. Does Talos intend to do something similar?
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
Generally seems like a great offering! I see immutable, but also upgradable? Is that via in-place upgrades or do upgrades require a reboot? Example: severe bug or vulnerability in kubelet or containerd/docker. Can I use the API to roll out a fix to existing nodes such that running workloads have no disruption?
So this is more like terraform, just automatic. This is basically an implementation of the cluster API sig (which is also being promoted by VMWARE).
We indeed integrate with CAPI, but the OS itself is not a CAPI implementation. We have a CAPI provider that works hand-in-hand with the OS.
I am not sure that you want to call it an OS per se, since kubernetes itself is the OS (manage memory, schedule processes, etc).
So there is no default CAPI provider?
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
One thing which I would need to switch from CoreOS to Talos is GPU drivers. My current setup uses the NVIDIA driver containers: https://hub.docker.com/r/nvidia/driver I build slightly customized images using a process derived from the one in the NVIDIA repo: https://gitlab.com/nvidia/container-images/driver/blob/maste... https://gitlab.com/nvidia/container-images/driver/blob/maste... The automation here is predicated…
Since Talos is built entirely in containers and we control the entire toolchain, I believe you could achieve the same with Talos.
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
Generally seems like a great offering! I see immutable, but also upgradable? Is that via in-place upgrades or do upgrades require a reboot? Example: severe bug or vulnerability in kubelet or containerd/docker. Can I use the API to roll out a fix to existing nodes such that running workloads have no disruption?
Earlier quoted context omitted.
Generally seems like a great offering! I see immutable, but also upgradable? Is that via in-place upgrades or do upgrades require a reboot? Example: severe bug or vulnerability in kubelet or containerd/docker. Can I use the API to roll out a fix to existing nodes such that running workloads have no disruption?
The whole point of Kubernetes is that you don't think this way. Replacing a node is not an impactful event if you're using K8S correctly.
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
2) What about GPU? Can you support the nividia gpu containers?
Earlier quoted context omitted.
We indeed integrate with CAPI, but the OS itself is not a CAPI implementation. We have a CAPI provider that works hand-in-hand with the OS.
Yes, I read the code. I am not sure that you want to call it an OS per se, since kubernetes itself is the OS (manage memory, schedule processes, etc). So there is no default CAPI provider?
Perhaps OS isn't the right thing to call, but I don't know a better alternative :D
Hey folks, Talos creator here. Happy to answer any questions you guys may have. Sounds like some confusion about exactly what Talos is. A lot of good feedback here that we will take and improve our documentation. Talos is a Linux distribution built specifically for Kubernetes. The short version is that we have stripped out absolutely everything that is not required to make a machine a Kubernetes node, including SSH a…
1) So how do you support storage volumes? Can you mount for example EBS into a container. 2) What about GPU? Can you support the nividia gpu containers?