thisago's blog

Learning Talos

Table of Contents

Writing this before going to bed because I want to post something today.

The Goals

With the inspiration from a work pal, I started my journey in Kubernetes, and before it become natural to me, I want to write down some transient thoughts of this adaption.

I intentionally complicated my life again, so the goal of my first K8s infra is:

  • Fully offline, air-gapped environment1.
  • GitOps, because I am lazy and sometimes unreliable for trusting in myself.
  • Hardened and simple as possible. KISS.
  • No closed-source and proprietary blobs. (still investigating, low priority for now)
  • Lightweight yet scalable.
  • Completely reproducible, easy re-installation and treat software as disposable.
  • Full disk encryption for data. (finally freeing me from writing the password of my LUKS via SSH!)

So I ended with Talos. And it feels perfect for this use case, I am passionated with it.

Current Status

Until now, my progress with K8s and Talos is:

Now, the next steps are clear:

  • Migrate Helmfile to Flux and figure out how bootstrap it without network.
  • Learn how to use the awesome tool called Hauler ↗ (GitHub).
  • Install the charts. Mainly Forgejo, but this time with actions runners!
  • Figure out how persist data and backup with Borg efficiently. (because running tar and then 7z monthly via SSH is not nice)

Last Words

And for motivation, stick your eyes to this beautiful landscape!

talosctl.svg

Figure 1: talosctl dashboard in the Raspberry PI installation.

Thanks for reading.

I am glad that I like YAML syntax.

Footnotes:

1

The first time I had hear this term was in this bubble :)

See the source code here.
Generated at 2025-11-02 Sun 21:38 by Emacs 29.4 (Org mode 9.6.15)