# Install talosctl CLI for out-of-band management of Kubernetes nodes created by Talos. Version 1.13.4 via Homebrew; verified 2026-06-09. ## Install ```sh sudo av install brew:talosctl ``` ## Agent safety answer talosctl manages Talos Linux clusters and node configuration. - **Credential access:** Reads Talos config, cluster endpoints, and administrative credentials. - **Remote mutation:** Can reboot nodes, apply machine config, and change cluster state. - **Publish/artifact risk:** Can roll out machine configuration that affects workloads. - **Recommended control:** Gate config apply, reset, reboot, and destructive cluster commands. - **Agent-use guidance:** Allow health and config inspection; require approval for node or cluster mutations. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install talosctl ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#talosctl ``` Evidence: nixpkgs package indexes: pkgs/by-name/ta/talosctl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S talosctl ``` Evidence: Arch Linux sync databases: talosctl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install talosctl ``` Evidence: openSUSE Tumbleweed package metadata: talosctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/talosctl ``` Evidence: Scoop official bucket manifest trees: bucket/talosctl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id Sidero.talosctl -e ``` Evidence: Windows Package Manager source index: Sidero.talosctl from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:talosctl - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.13.4 - **Source summary:** CLI for out-of-band management of Kubernetes nodes created by Talos - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MPL-2.0 - **Source archive:** - **Last updated:** 2026-06-09T19:19:20Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - talosctl (cli) - talosctl (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.13.4 - Package-manager updated: 2026-06-09 - Local data status: ok - Upstream repository: https://github.com/siderolabs/talos - Upstream latest detected: v1.13.4 (current) ## Sicherheitshinweise infrastructure mutation or orchestration signal. - **Protected-tool coverage:** Plain Text Talos Client Config - **Geiger risk:** orange / medium - infrastructure mutation or orchestration signal ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** talosctl - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - talosctl: normalized package name match | nixpkgs package indexes: pkgs/by-name/ta/talosctl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman - talosctl - 1.13.2-1: normalized package name match | Arch Linux sync databases: talosctl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | CLI for Talos - A modern OS for Kubernetes | https://github.com/siderolabs/talos - zypper - talosctl - 1.13.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: talosctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | CLI to interact with Talos Linux | https://github.com/siderolabs/talos - zypper - talosctl-bash-completion - 1.13.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: talosctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Bash Completion for talosctl | https://github.com/siderolabs/talos - zypper - talosctl-fish-completion - 1.13.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: talosctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Fish Completion for talosctl | https://github.com/siderolabs/talos - zypper - talosctl-zsh-completion - 1.13.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: talosctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | Zsh Completion for talosctl | https://github.com/siderolabs/talos - Scoop - main/talosctl: normalized package name match | Scoop official bucket manifest trees: bucket/talosctl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - Sidero.talosctl: normalized package name match | Windows Package Manager source index: Sidero.talosctl from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Cloud CLI packages](https://www.automicvault.com/de/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Secret-risk packages](https://www.automicvault.com/de/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/de/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/de/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [go](https://www.automicvault.com/de/pkg/brew/go/) - Build dependency declared by Homebrew. - [k9s](https://www.automicvault.com/de/pkg/brew/k9s/) - Shares av.db curated category or tags: cli, cloud-infrastructure, cluster-management, kubernetes. - [talhelper](https://www.automicvault.com/de/pkg/brew/talhelper/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes, talos. - [clusterctl](https://www.automicvault.com/de/pkg/brew/clusterctl/) - Shares av.db curated category or tags: cli, cloud-infrastructure, cluster-management, kubernetes. - [kops](https://www.automicvault.com/de/pkg/brew/kops/) - Shares av.db curated category or tags: cli, cloud-infrastructure, cluster-management, kubernetes. - [rke](https://www.automicvault.com/de/pkg/brew/rke/) - Shares av.db curated category or tags: cli, cloud-infrastructure, cluster-management, kubernetes. - [mcp-server-kubernetes](https://www.automicvault.com/de/pkg/brew/mcp-server-kubernetes/) - Shares av.db curated category or tags: cli, cloud-infrastructure, cluster-management, kubernetes. - [talm](https://www.automicvault.com/de/pkg/brew/talm/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes, talos. - [helm](https://www.automicvault.com/de/pkg/brew/helm/) - Shares av.db curated category or tags: cli, cloud-infrastructure, kubernetes. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer