Are You Using Cozystack Independently?
As part of the CNCF Incubation review, the TOC is speaking with Cozystack adopters — especially teams and individuals running it outside any commercial engagement with Ænix.
Article type: Announcement
Security Advisory — CVE-2026-53359 ("Januscape"): KVM Guest-to-Host Escape
CVE-2026-53359 (“Januscape”) is a KVM guest-to-host escape affecting all current Talos kernels. Cozystack clusters that run VMs or tenant Kubernetes should disable nested virtualization now.
Article types:
Topics:
Cozystack 1.5: Gateway API, Default Backups, Flux Sharding, TLS for Managed Services, and GPU Passthrough
Cozystack v1.5.0 adds opt-in Gateway API ingress via Cilium, TLS for managed databases, out-of-the-box backups, Flux v2.8, GPU passthrough, and dashboard improvements.
Article types:
Cozystack 1.4: New Dashboard UI, Persistent Tenant Workers, Backup Strategies, and Fractional GPU Sharing
Cozystack v1.4.0 brings a schema-driven dashboard, persistent worker-node storage for tenant Kubernetes, cloud-style resource presets, declarative backups for managed applications, HAMi-based fractional GPU sharing, a one-switch PROXY-protocol and hairpin-NAT fix, and operational improvements for upgrades, scheduling, and observability.
Article types:
Introducing /cozystack:wizard — a Guided Cozystack Installer
/cozystack:wizard is a new guided installer that orchestrates a full Cozystack deployment end-to-end across Talos, Ubuntu, and existing clusters — handling cert-SAN traps on NAT’d clouds, ZFS provisioning, LINSTOR registration races, and more.