I was totally expecting this to be something made by Raptor: https://www.raptorcs.com/TALOSII/
Same. Was expecting polished Debian-based OS for ppc architecture machines. Shucks.
Talos Linux
11–20 of 45 posts
Re: Talos Linux
#12Earlier quoted context omitted.
Did you just read a marketing blurb on their landing page and decide after 5 seconds they don't do unit testing? I guess we can also assume they don't brush their teeth every morning because they didn't mention that either.
Actually I read the entire documentation and browsed the source code. https://www.talos.dev/v1.0/learn-more/philosophy/ "Security" section makes no mention of independent audits. It just boldly claims "There are no passwords in Talos" as if that was a panacea for security. The existing integration tests don't verify any assumptions about security, only that the configuration is valid. Please correct me if I'm wrong o…
They didn’t call it secure as per your initial quote. They say it is designed to have a small attack surface. You missed to acknowledge that security means different things for different contexts. Besides, it’s a free offering, clearing issues with insecurities other offerings have. If you want something to be more secure, you can point out flaws you find in the intended way (filing issues) which might help improve the situation. Calling it out the way you did (probably without trying the tool and even more likely without having substantial knowledge of better approachable alternatives in the space) doesn’t help at all.
Re: Talos Linux
#13I was totally expecting this to be something made by Raptor: https://www.raptorcs.com/TALOSII/
I had somewhat of a weird moment here as well. I was expecting this to be related to Cisco Talos.
And so I opened your link to find out what it was about. Only to find it mentioning CAPI 2.0 which I only know from the ISDN days (https://en.wikipedia.org/wiki/Common_ISDN_Application_Progra...) and not as some form of I/O interface accelerator.
Re: Talos Linux
#14> Ephemeral > Talos runs in memory from a SquashFS, and persists nothing, leaving the primary disk entirely to Kubernetes. Hmm so if the entire disk is unused where is /boot in this configuration?
... so it wastes memory instead of disk?
Unless we are talking about, like, a 100MB ramdisk, why is that a good thing?
And really, I'd prefer a 10MB ramdisk.
Re: Talos Linux
#15So.. it's CoreOS all over again?
Or Ubuntu Eucalyptus?
(Neither is still with us. wonder why..)
Re: Talos Linux
#16> Ephemeral > Talos runs in memory from a SquashFS, and persists nothing, leaving the primary disk entirely to Kubernetes. Hmm so if the entire disk is unused where is /boot in this configuration?
... so it wastes memory instead of disk? Unless we are talking about, like, a 100MB ramdisk, why is that a good thing? And really, I'd prefer a 10MB ramdisk.
Diskless servers are not uncommon
Re: Talos Linux
#17So.. it's CoreOS all over again? Or Ubuntu Eucalyptus? (Neither is still with us. wonder why..)
CoreOS has a lot of children including Flatcar, RHEL CoreOS, and Fedora CoreOS. Then you have Ubuntu whatever, Google Container-Optimized OS, Amazon Bottlerocket, Talos, and probably a few more. The market is flooded.
Re: Talos Linux
#18> Ephemeral > Talos runs in memory from a SquashFS, and persists nothing, leaving the primary disk entirely to Kubernetes. Hmm so if the entire disk is unused where is /boot in this configuration?
... so it wastes memory instead of disk? Unless we are talking about, like, a 100MB ramdisk, why is that a good thing? And really, I'd prefer a 10MB ramdisk.
It is a 50MB squashfs.
Re: Talos Linux
#19So.. it's CoreOS all over again? Or Ubuntu Eucalyptus? (Neither is still with us. wonder why..)
The same spirit as CoreOS but it is something entirely different. Written from PID1 up solely for the purposes of running Kubernetes.
Re: Talos Linux
#20Can anybody help explain when organizations should use Talos instead of cloud-vendor-managed Kubernetes offerings (EKS/AKS/GKE)? Especially considering that the managed offerings now fit most regulatory requirements (e.g. EKS is FedRAMP-High Authorized)? Or does Talos see most of its use in on-prem environments?
For folks who are all in on a single cloud provider it might not make sense, but if you run Kubernetes in multiple clouds, on-premise, edge, etc. then it starts to make a lot of sense since you get consistency.