[altlinux-announce-en] ALT Orchestra 11.0

[Мария Фоканова]

Good afternoon!

ALT Orchestra 11.0 is now available. This release is based on the stable 
Platform 11 repository branch (p11 Salvia).

The build is prepared for x86_64 and AArch64 architectures, based on 
kernel 6.18 (LTS).

The ALT Orchestra image is available for download at:
https://altlinux.space/alt-orchestra/-/packages/generic/alt-orchestra/v11.0

Image generator:
https://factory.altlinux.space/

ALT Orchestra is a specialized operating system for orchestrating 
Kubernetes clusters and building container infrastructure, registered in 
the Russian Software Registry. The distribution is developed by BaseALT 
LLC based on Talos OS and is focused on ensuring security, 
predictability, and efficiency in Kubernetes environments.


Features

* Immutable Architecture
The root filesystem is mounted in read-only mode. All changes are 
applied exclusively through atomic updates. The operating system 
architecture is minimalistic: it contains only the components necessary 
for Kubernetes operation, which reduces the attack surface and resource 
consumption (CPU, memory, disk space) — the majority of capacities are 
made available for user workloads.

* API-Driven Management, No SSH
SSH access is disabled by default. Administration is performed via the 
talosctl CLI utility and a secure gRPC API (mutual TLS, mTLS). The 
desired system state is described in a YAML file. The node verifies the 
authenticity of the request and either applies the changes or schedules 
an atomic update. This approach enables automation of administrative 
tasks and simplifies cluster management.

* Security by Default
Built-in features include: TPM (for boot integrity measurements), full 
disk encryption, and Secure Boot. Multi-layered protection — from 
hardware to management — prevents compromise at every stage.

* Key Features
** Deployment in any environment (bare-metal, virtualization, cloud, 
PXE, offline).
** Flexible cluster management: node addition/removal, rolling updates 
with zero downtime, and selectable K8s version.
** Autoscaling (Cluster Autoscaler, HPA), self-healing control-plane, HA 
mode.
** Security: NetworkPolicy, external IDPs, RBAC, Pod Security Standards, 
auditing, vulnerability scanning.
** Extensible with modules such as drivers, firmware, container 
runtimes, agents, and more.


Additional Information

Knowledge Base (in Russian):
https://alt-orchestra.altlinux.team/docs/

Eleventh Platform Release Announcement:
https://lists.altlinux.org/pipermail/altlinux-announce-en/2024/000039.html

devel-newbies mailing list — for those who want to learn how to build 
packages for ALT, get help from community members, and join development:
https://lists.altlinux.org/mailman/listinfo/devel-newbies

ALT Linux Space — a platform for community interaction, collaborative 
development, and project work:
https://altlinux.space

Explore other products and download distributions:
https://getalt.org/en/