7 ms·
Talos – A modern Linux distribution for Kubernetes
- nfrankel 8y ago> License: unknown
- jcastro 8y agoThe LICENSE file in the repo mentions that it's MPL 2.0.
- vervas 8y agoYou only have to click https://github.com/autonomy/talos/blob/master/LICENSE https://github.com/autonomy/talos/blob/master/LICENSE
- markphip 8y agoGuessing the commenter was looking at the badge at bottom of README which does say unknown, though it links to the license.
- blakesterz 8y agoNot to be confused with the Cisco Talos security people. I thought maybe they had released a distro when I read this headline.
- geocar 8y agoOr the Talos workstation[1]. I was hoping maybe this was a Power port of kubernates. [1]: https://www.raptorcs.com/TALOSII/ https://www.raptorcs.com/TALOSII/
- fortytw2 8y agokubernetes should be able to be compiled for power? Go works on POWER no problem. A quick google shows docker working on power too, so there really should be little to no work to run k8s on power.
- pexaizix 8y agoOr the Talos god from Elder Scrolls lore.
- kuwze 8y agoOr the Talos Principle, which along with Soma and the Portal series are some of the worlds best games.
- paulddraper 8y agoOr the Greek mythical defender of Europa, the mother of King Minos.
- michaelmrose 8y agoThere is also talos embedded systems and the talos raptor workstation/servers
- blablabla123 8y agoExactly, which are probably much cooler than the distribution.
- andrewrynhard 8y agoFor anyone interested in joining our slack, feel free to PM me!
- xrd 8y agoHow? By following your GitHub profile to your email?
- andrewrynhard 8y agoFair point :) But that does work. andrew@andrewrynhard.com
- waz0wski 8y agoPlease, not another Slack walled-garden for discussion. Slack is both inaccessible and unsearchable, as well as a privacy concern. Suggest to use already available open source discussion networks such as freenode and open software with accessible medium such as mailing lists powered by mailman and its archives. If you insist on using a javascript-tainted webui for community discussions, use open forum software such as discourse ensuring it's properly searchable and archived by major search engines.
- noir_lord 8y agoor Matrix. It's gotten really good since the last time I looked at it.
- andrewrynhard 8y agoWe actually had matrix up on running on a cluster built with Talos in AWS. We decided to focus our efforts on Talos instead of maintaining infrastructure. There is a convenience factor for us since it is only three of us.
- noir_lord 8y agoMakes sense. It's just the few times I've used slack as part of an open community it's been suboptimal, honestly a freenode channel was and is better, anyone looking at something like Talos is likely to have an irc client installed :).
- tjfontaine 8y agoI’m all for more people using immutable machine images for their base system images, and think more environments should be built this way. However, I’m not sure what the difference is here from say https://github.com/linuxkit/linuxkit https://github.com/linuxkit/linuxkit which also has an example for how to use LinuxKit to build Kubernetes environments https://github.com/linuxkit/kubernetes https://github.com/linuxkit/kubernetes
- andrewrynhard 8y agoIt is indeed very similar. Talos does a few things differently. The biggest being that it does not allow any host-level access and exposes a gRPC API for things like querying the processes, or restarting a node.
- tjfontaine 8y agoSo essentially you just need to put your gRPC agent in a linuxkit image with access to the containerd socket? That’s how the docker in docker/kubernetes examples already work for LinuxKit. I am not sure what exactly you mean by “does not allow host level access”, the benefit of linuxkit is you can configure the software that needs to run in the root namespace, or not, aside from every process generally having a mount namespace. The real benefit (imo) of LinuxKit is the familiar declarative manifest model for image definition, and container configuration. As a by product, it’s really straight forward to have reproducible builds.
- andrewrynhard 8y agoLinuxKit is really neat. Don't get me wrong. I think each have their benefits. LinuxKit is great if you need that flexibility. With Talos we would rather focus on building a Kubernetes-centric distro.
- coredog64 8y agoSo it’s like osquery over gRPC?
- godojo 8y agoSounds like CoreOS
- ssewell 8y agoRecently started using CoreOS for Docker Swarm, and it seems really promising. I wonder how this compares?
- andrewrynhard 8y agoReally good question. The short version is that CoreOS is a generic container based distro. Talos is not. It is designed with the goal of making a machine a Kubernetes node in a fast and reliable way. We don't use systemd, but a pure Golang init that is Kubernetes aware.
- ofrzeta 8y agoNot sure about the Future of CoreOS, though: "With the acquisition, Container Linux will be reborn as Red Hat CoreOS, a new entry into the Red Hat ecosystem. Red Hat CoreOS will be based on Fedora and Red Hat Enterprise Linux sources and is expected to ultimately supersede Atomic Host as Red Hat’s immutable, container-centric operating system." https://coreos.com/blog/coreos-tech-to-combine-with-red-hat-openshift https://coreos.com/blog/coreos-tech-to-combine-with-red-hat-... The Flatcar project wants to keep the original CoreOS alive, however: https://www.flatcar-linux.org https://www.flatcar-linux.org
- BossingAround 8y agoAt this point, it seems simpler to run OpenShift, which is essentially Kubernetes + extra stuff you don't have to use + nicer console. If you go with Red Hat, you get a number of benefits, such as not being affected by the recent 'Doomsday bug' in docker that wasn't really that doomsday-ish. Does Google actually support self-hosted Kubernetes?
- specto 8y agoThey're going to, it's in private beta apparently https://cloud.google.com/gke-on-prem/ https://cloud.google.com/gke-on-prem/
- shaklee3 8y agoHow are you not affected? https://access.redhat.com/security/vulnerabilities/runcescape https://access.redhat.com/security/vulnerabilities/runcescap...
- BossingAround 8y agoCheck out [1], more specifically: "For many Red Hat end users, it’s unlikely that this flaw gets that far. IT organizations using Red Hat Enterprise Linux to underpin their Linux container and cloud-native deployments are likely protected, thanks to SELinux." [1] https://www.redhat.com/en/blog/it-starts-linux-how-red-hat-helping-counter-linux-container-security-flaws https://www.redhat.com/en/blog/it-starts-linux-how-red-hat-h...
- vertex-four 8y agoSELinux exists in other distros.
- ofrzeta 8y agoIt does, but is it a first-class citizen as it is in RHEL and CentOS? Also OpenShift is finely tuned to run with SELinux. This is something you would have to do yourself on another platform with, say, Kubernetes and SELinux.
- deleted 8y ago[deleted]