Sidero
@siderolabs.com
Makers of Talos Linux and Omni. We help platform teams run Kubernetes without the operational heroics.
TalosCon 2026 is calling for speakers 🎤 Got a war story, a hard-won lesson, or a system you're proud of? We want to hear it. October 15–16 · AMS 📝 Submit a talk → taloscon-microsite.vercel.app #TalosCon2025 #Kubernetes #CloudNative #DevOps #TalosLinux
We're back at Edgecase this September! Come see @justingarrison.com's talk, "Gotta build 'em all," covering what he's learned by pushing Kubernetes into places it was never designed for. 📅 Sept. 24 | 📍 Netherlands Tickets --> www.truefullstaq.com/en/events/ed...
Save the date because TalosCon is back! October 15–16, 2026 · Amsterdam Join us for two days packed with talks from people running Talos in production. Full details and agenda coming soon. Get your name on the list here → www.siderolabs.com/taloscon #TalosCon2026 #kubernetes #TalosLinux
In Berlin? Or kind of nearby? Come say "Hi" to your fellow Talos users at our meetup next week. 🗓 May 27, 18:00 📍 Berlin, DE Sign up to join → luma.com/mk0ik8dh #KubernetesBerlin #BerlinTech #ITDeutschland #OpenSourceDE
All in Kubernetes - Berlin Edition · Luma
Details This is another event from the "All in Kubernetes" event series. This group is focused on using Kubernetes for everything. All in Kubernetes. Data,…
luma.com
Debug the host without a shell. talosctl debug is live. Spin up an ephemeral, privileged container with your own toolkit (tcpdump, gdb, etc.). www.siderolabs.com/blog/talos-o...
From image integrity to zero-trust clusters: What’s new in Q1 2026 - Sidero Labs
📌 TL;DR
siderolabs.com
Stop guessing why a node is acting up. Say hello to config diffs in Omni. Keep reading → www.siderolabs.com/blog/talos-o...
Systems rarely get less complex, and exploits always get better. Patching will remain necessary, but we believe there's a better way. → www.siderolabs.com/blog/patchin...
Patching Won't Save You - Sidero Labs
Your patch windows and testing process is going to get your hacked. It's time to move from reactive vulnerability management to proactive software curation.
siderolabs.com
talosctl debug, Container Image Signature Verification, NVIDIA GPU Support, and more. Join @justingarrison.com at 10:30 PDT / 19:30 CEST to get a look at Talos Linux 1.13 updates. www.youtube.com/watch?v=yoXc...
Talos Linux 1.13 features and upgrade process
Review some of the new Talos 1.13 features. Ask questions, and perform a live Kubernetes upgrade.
youtube.com
New in Omni: Automated CA rotation for imported clusters Imported clusters shouldn't keep their old secrets. Omni now automates a full cryptographic re-key of Talos and K8s CAs during the import process. Keep reading → www.siderolabs.com/blog/talos-o...
We know Talos Linux is secure. But don't take our word for it. Go run the benchmarks. oneuptime.com/blog/post/20... #kubernetes #platformengineering #CloudNative #DevOp
How to Run CIS Benchmarks Against Talos Linux
A practical guide to running CIS benchmarks against Talos Linux clusters to verify compliance and identify security hardening opportunities.
oneuptime.com
New in Talos Linux: OS-level signature verification with Cosign Admission controllers don't protect the node. Talos Linux now enforces signature verification at the OS level for the entire boot set (Kubelet, CNI, etc.). Keep reading → www.siderolabs.com/blog/talos-o...
Talos Platform updates incoming. These updates make it easier to achieve hardened, immutable infrastructure in production, through: → Image signature verification → Improved OS upgrades → talosctl debug → Omni CA rotation → And more www.siderolabs.com/blog/talos-o...
From image integrity to zero-trust clusters: What’s new in Q1 2026
📌 TL;DR We reduced the security risk of running Kubernetes at scale by fully rotating cluster trust when importing clusters into Omni. We strengthened the supply chain security posture by enforcing…
siderolabs.com
💡 Feature Spotlight: Omni Infrastructure Providers Provision across any environment without the glue code. Unify your lifecycle across libvirt, Proxmox, vSphere, Oxide, Bare metal, and KubeVirt from a single, centralized control plane.
Omni Infrastructure Providers
Infrastructure Providers allow you to connect static or dynamic infrastructure to Omni for automatic provisioning and management. What infrastructure provider do you want? Read the full blog post…
youtube.com
Wondering how France’s national railway uses Talos Linux? Their recent #KubeCon talk has the answer. → www.youtube.com/watch?v=rEcT...
Keynote: Keeping Sovereignty on Track: Kubernetes Powering a Nationa... Thomas Comtet & Yann Rotilio
Don't miss out! Join us at our next KubeCon + CloudNativeCon events in Mumbai, India (18-19 June, 2026), Yokohama, Japan (29-30 July, 2026), and Shanghai, China (8-9 September, 2026). Connect with…
youtube.com
Did you miss @justingarrison.com's talk at SCALE? You can check out his talk on the state of immutable Linux distros here → www.youtube.com/watch?v=jvdP...
The State of Immutable Linux
Talk by Justin Garrison https://www.socallinuxexpo.org/scale/23x/presentations/state-immutable-linux Linux has evolved a lot over the past 30 years. Distributions were created as opinionated…
youtube.com
Spotlight: Eliminate insecure exposure for internal services with Omni Workload Proxy. Workload Proxy creates a secure, automated tunnel from the cluster directly to the Omni control plane, so you can achieve a more auditable and reliable management plane. www.youtube.com/watch?v=N9qp...
Using Omni Workload Service Proxy
You’ve got a Kubernetes cluster... now what? You use our built-in workload proxy to securely expose internal services in your Kubernetes cluster. For example, this will help you if you're running…
youtube.com
No one wants to be on call for that 2:00 AM incident, whose solution requires knowledge of a years-old manual tweak. Here’s why heroics lose to predictability every time. siderolabs.com/blog/kubernetes-requires-predictability-not-heroic-intervention?utm_source=bluesky&utm_medium=social
Kubernetes requires predictability, not heroic intervention
At five nodes, brilliant engineering can keep an infrastructure going. At five hundred nodes, teams will need more than heroics.
siderolabs.com
We’re back at Booth 484 today — and it is busy! Our team is here to walk through demos, answer architectural questions, or just chat about making Kubernetes operations a bit more predictable, so be sure to stop by. See you there. #KubeCon #Kubernetes #CloudNative
Running air-gapped k8s? Don't miss this #KubeCon talk. 🎙 Declarative Edge Kubernetes: Immutable Clusters with Talos + Zarf 🗓️ Tuesday, March 24 | 17:00 - 17:30 📍 Hall 8 | Room D To talk more about #airgapped, find us at booth 484. 🔗 kccnceu2026.sched.com/event/2CW0J/... #EdgeComputing
KubeCon + CloudNativeCon Europe 2026: Declarative Edge Kubernetes: Immutable C...
View more about this event at KubeCon + CloudNativeCon Europe 2026
kccnceu2026.sched.com
New in Omni: On-ramp for Talos Linux clusters. You can now bring established Talos clusters into Omni via a single CLI command and immediately gain visibility and remote management capabilities while reducing the operational risk of manual cluster rebuilds. → www.siderolabs.com/blog/talos-o...
We love this capability, but not everyone knows about it. So here's how Talos Linux can be remotely configured using a simple HTTP endpoint. → www.youtube.com/watch?v=DaCu... #TalosLinux
Remotely configure Talos Linux with HTTP
Let's talk about how Talos Linux can be remotely configured using a simple HTTP endpoint. We love this capability, but not everyone knows about it. So here's how you can send a machine configuration…
youtube.com
CPO Jeff Behl & Solutions architect Kevin Tijssen are going to sit down with The New Stack to talk about the patterns that are stalling your roadmap and slowing delivery and how to build a foundation that supports you at scale. 🗓 April 9, 9AM PT Join us ➡️ thenewstack.io/webinar/scal...
Scaling Kubernetes with Systemic Certainty, Not Operational Heroics
Stop Kubernetes firefighting. Learn how an API-driven, immutable foundation eliminates drift, simplifies upgrades, and gives platform teams systemic control at scale.
thenewstack.io
Do you think security should be a property of the system and not a checklist of operational add-ons? Come meet us at booth 484 at #KubeCon. Our team will be there to give you the perspective you need, from TCO deep-dives to architectural insights and more. #PlatformEngineering
New in Talos Linux: Out-of-memory handling can proactively identify and evict the relevant, resource-heavy application before it destabilizes the host. This reduces avoidable downtime and ensures the control plane and critical services remain operational. → www.siderolabs.com/blog/talos-o...
Thanks for all the stars! ⭐ Talos Linux just passed the 10k mark on GitHub. Happy Friday to all the Talos Linux users out there. Proof: github.com/siderolabs/t...
If you’re managing air-gapped Kubernetes, here's a #KubeCon talk to add to your schedule this March. Declarative Edge Kubernetes: Immutable Clusters with Talos + Zarf 🗓️ Tues, March 24 | 17:00 - 17:30 → kccnceu2026.sched.com/event/2CW0J/... #EdgeComputing #AirGapped #CyberSecurity #CloudNative
KubeCon + CloudNativeCon Europe 2026: Declarative Edge Kubernetes: Immutable C...
View more about this event at KubeCon + CloudNativeCon Europe 2026
kccnceu2026.sched.com
How can you compare today's immutable distros? Join @justingarrison.com as he dives into the topic of Immutable Linux, covering: Flatcar, Bottlerocket, Fedora CoreOS, NixOS, Talos Linux, MicroOS, and Kairos. 📍 Read: www.socallinuxexpo.org/scale/23x/pr... 🖥️ Watch: www.youtube.com/socallinuxexpo
The State of Immutable Linux | SCALE
The Southern California Linux Expo (SCALE) is North America’s largest community-run open source conference.
socallinuxexpo.org
When you run a modern stack, you rely on dozens of interacting tools - each built by a different brilliant engineer, refined over years of effort. So how do you manage that level complexity at scale? You strip away the noise until you can see what matters. www.siderolabs.com/blog/why-fle...
Why fleet management is basically rocket science x100
How can you master every tool in your stack when each one is brilliant and unique? At scale, the answer is: you don't.
siderolabs.com
We’re looking for a Senior Software Engineer to help scale #taloslinux and Omni. Join us in changing the standard for fleet management. 🛠️ Go, #K8s 🌍 100% Remote (EU time zones preferred) 🙌 Help us change how the world runs K8s Apply here: www.siderolabs.com/careers/seni... #cloudnative
Senior Software Engineer
Sidero Labs is a small but growing company revolutionizing Kubernetes with our innovative SaaS and Kubernetes focussed Linux Operating System. We’re on a mission to make Kubernetes easy, secure and…
siderolabs.com
