HYPERVISOR

Your own metal, same control plane.

BETA

Proxmox and libvirt virtual machines managed with the same jobs, permissions and audit trail as everything else — and a VM you create can become a managed Talos server in one step.

Install itSee the security model
Proxmox VE·libvirt / KVM·QEMU·noVNC

THE MANUAL WAY

The gap between the rack and everything else.

THE SEPARATE TOOL

The Proxmox web UI is a different login, a different permission model and a different audit trail from everything else you run. Access to it is all-or-nothing.

THE TWO-STEP

Creating a VM and then making it a managed server is two disconnected processes, so the inventory is only as current as the last time someone remembered.

THE SNAPSHOT NOBODY TOOK

A change goes badly on a VM that had no snapshot, because taking one was a manual step in a runbook rather than part of the operation.

WHAT TALOS DOES

Virtual machines as tracked jobs.

Proxmox and libvirt

Two adapters behind one interface. Nodes, storage, networks and VMs inventoried from the hypervisor itself.

Lifecycle operations

Create, clone, start, stop and migrate VMs as jobs, each with live output and an audit entry.

Snapshots as part of the operation

Snapshot before a risky change as a step in the job rather than a line in a runbook someone skips.

Browser console

Reach a VM console without a separate hypervisor login or a VPN into the management network.

ISO and template management

Upload images and build from templates so the tenth VM of a shape matches the first.

VM to managed server

A VM you just created becomes a Talos-managed host in one action, with discovery run against it immediately.

talos.internal/hypervisor/nodes
Servers
Kubernetes
Frappe
Docker
Databases
Pipelines
Monitoring
Virtual machines3 nodes · 27 VMs
pve-01 · erp-prodRUNNING
8 vCPU · 32 GB · running
pve-01 · build-01RUNNING
4 vCPU · 8 GB · running
pve-02 · stagingSNAPSHOT
4 vCPU · 16 GB · snapshotting
kvm-03 · legacySTOPPED
2 vCPU · 4 GB · stopped
$ vm clone erp-prod --to erp-test
→ snapshot taken before clone
→ copying 240 GB · thin provisioned
✓ clone complete · erp-test stopped
→ register as managed server? one action

HOW IT RUNS

Every action is a tracked job.

Requestyou, API or schedule
Queuegated if required
the Sentinelbackground worker
AdapterSSH · Ansible · Terraform · API
Your infrastructurelogs stream back live

WHAT MAKES THIS DIFFERENT

The VM you just made is already a managed server.

On-premise virtualisation usually sits outside whatever tool manages everything else, so the inventory is stale by construction: a VM exists in the hypervisor for weeks before anything else knows about it. Talos closes that loop — creating a VM and registering it as a managed host is one flow, and discovery runs against it as soon as it boots.

Hypervisor credentials are encrypted and scoped per connection, not shared with everyone who needs console access.
Console access is a permission like any other, rather than a hypervisor admin login.
Every VM operation lands in the same ledger as your cloud and server actions.
vm → managed server
erp-test created
pve-01 · 8 vCPU · 32 GB
DONE
registered as server
ssh key attached · no manual step
DONE
discovery run
ubuntu 24.04 · docker 27.3
READY
!
untested against live hosts
built and typechecked, not yet field-proven
BETA

RELATED CAPABILITIES

Servers

Where a registered VM continues its life.

explore →

Monitoring

Node pressure, VM health and live logs.

explore →

Cloud

The same model, applied to four public providers.

explore →

Connect one hypervisor, read-only.

This capability is new and has not been exercised against a wide range of hosts. Inventory first, changes later.

Install in one commandSee every capability →