Correctly propagate errors back. Drop ARM templates and use native APIs.
Correctly handle restarted runs for creating image versions. fixes siderolabs#7512.

Signed-off-by: Christian Rolland <[email protected]>
(cherry picked from commit ac2aff5)

Update cilium instructions to skip mounting `bpffs`.

Also fix the TPM example in release notes.

Signed-off-by: Noel Georgi <[email protected]>
(cherry picked from commit 76fa45a)

Fixes siderolabs#7558

I see no reason to keep old behavior (removing all partitions on the
disk), as it's only compatible with Talos itself.

Signed-off-by: Andrey Smirnov <[email protected]>
(cherry picked from commit 793dced)

Fixes siderolabs#7080

The real bug was off-by-one in `log2i` implementation, other changes are
cleanups as `x/sys/unix` package now contains all the constants we need.

Signed-off-by: Andrey Smirnov <[email protected]>
(cherry picked from commit 4eab301)

These assets are required to build a UKI, so publish them as part of the
release.

Signed-off-by: Andrey Smirnov <[email protected]>
(cherry picked from commit 7c86a36)

Fixes: siderolabs#7515

Rename `Kind` to `Provider` in the `v1alpha1_provider`.

Signed-off-by: Artem Chernyshev <[email protected]>
(cherry picked from commit 7d688cc)

There are two changes here:

* build `machined` binary with `tcell_minimal` tag (which disables
  loading some parts of the terminfo database), which also affects
  `apid`, `trustd` and `dashboard` processes, as they run from the same
  executable; in `dashboard` explicitly import `linux` terminal we're
  using when the `dashboard` runs on the machine
* pass `TCELL_MINIMIZE=1` environment variable to each Talos process
  which removes 0.5MiB of runewdith allocation for a lookup table

See siderolabs#7578

Signed-off-by: Andrey Smirnov <[email protected]>
(cherry picked from commit fb536af)

Use `Progress`, and options to pass around the way messages are written.

Fixed some tiny issues in the code, but otherwise no functional changes.

To make colored output work with `docker run`, switched back image
generation to use volume mount for output (old mode is still
functioning, but it's not the default, and it works when docker is not
running on the same host).

Signed-off-by: Andrey Smirnov <[email protected]>
(cherry picked from commit e0f3835)

Backport PRs.

Signed-off-by: Andrey Smirnov <[email protected]>

Contains mitigations for the most recent CPU vulnerabilities.

Signed-off-by: Andrey Smirnov <[email protected]>