Talos Linux is a minimal, immutable Linux distribution for running Kubernetes. It has no SSH, package manager or interactive shell. You configure nodes declaratively with talosctl through an mTLS-secured gRPC API, and upgrades replace the entire OS image. This design reduces the attack surface and configuration drift associated with general-purpose distributions such as Ubuntu and makes each node a replaceable appliance, in the spirit of immutable servers.
One of our teams runs self-managed Kubernetes on Talos across a large bare-metal fleet for an AI cloud platform and found the control plane easy to provision. Most organizations use a managed service such as Amazon EKS and never interact with the node OS, so Talos is primarily for teams that operate their own nodes. Bottlerocket takes a similar approach on AWS, and Flatcar Container Linux also has traction. In 2026, Yardi acquired Sidero Labs, the developer of Talos. Talos remains open source under MPL-2.0, but teams should watch where the new owner takes it.
