diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
index 1d0e13e..0552f42 100644
--- a/.terraform.lock.hcl
+++ b/.terraform.lock.hcl
@@ -74,24 +74,24 @@ provider "registry.terraform.io/rgl/kustomizer" {
 }
 
 provider "registry.terraform.io/siderolabs/talos" {
-  version     = "0.5.0"
-  constraints = "0.5.0"
+  version     = "0.6.0-alpha.2"
+  constraints = "0.6.0-alpha.2"
   hashes = [
-    "h1:xogkLLCrJJmd278E+vNMnmQgaMD05Gd1QXN914xgVec=",
-    "zh:0f71f2624576224c9bc924b136b601b734243efa7a7ad8280dfd8bd583e4afa5",
+    "h1:95kDZvAVjidDmaFevU2ozs8PxY6tmTKyFwi1zmmOlKs=",
+    "zh:0a5ddf3bf1379db86be47385144f939deec591ef19c89ff0a10d41a463c02b74",
     "zh:0fa82a384b25a58b65523e0ea4768fa1212b1f5cfc0c9379d31162454fedcc9d",
-    "zh:33c50dacc5029fa20caed702001fb1439899c94f203b1f37dccb970f504bca45",
-    "zh:3c97a6e2692b88d3f4631a3f8769146f602c210e881b46fa1b3b82c545e51cd1",
-    "zh:44077a137613bcfe29eef00315b5aa50d83390c3c727580a4ff0f4b87f22d228",
-    "zh:5bd02f278aec5567f94dd057d1c758363998ce581ff17b0869515bb682c02186",
-    "zh:80f40939bc3b55f0005c03b77122ceea86ec4deb82f5557950a97ad96fbb1557",
-    "zh:94c1b17f25bc30eacde926e46f196f1f135032674730d9f50c986ef6b7a854f0",
-    "zh:95ad665b2fdeed38180f5c471164833a34d07c1ef0470c1652565fe8cf4e9c4a",
-    "zh:a50ef6088afcb129c176dd4ba86c345e9be7b14358bb3b21c34f06930d8f39ef",
-    "zh:aa71da1da00ed66f1dddf1b69c10b829f24ac89e207de07d32c455dd04482096",
-    "zh:abb7eeb2b089081b4814ed80a295673e1a92f82ce092dde37b5bc92e75efec2c",
-    "zh:db9b9b54a0db5ae151376d5a73e0d28497c3e06181840e71ef8349213ac03e50",
-    "zh:e50ed8aa90b736508fce63680e8339240cecb74709ab9563d34d2c2ce7bc8445",
-    "zh:f3a279723ff31a095d7bfff21857abfcc9a2cfdeeea8521d179630ae6565d581",
+    "zh:118b006b63380513b51b0c0238eb5da01e40983a3a18a37a397aa93ca12988ab",
+    "zh:1c52287309e706de6917e5b0f6cbbe05fe3bdf499a6ea61bd3ef7d7cc995da33",
+    "zh:296fcfda1725e63fa3686d7faf0c5714d2ac6a3f9b8e9c36e6a4e3776f1a49d5",
+    "zh:5979b80c1d2b9df6f79cec3ac24e16deb69c035c89f59ac8d3dec623177ae187",
+    "zh:614b781108ab8e293bb1eba6c13e8e223f4a37ceda03be2471e6a6e515fa5b77",
+    "zh:666caf0532c1ab6fc8c70070e041cd78944f13611d823c43b7d7ade48cc63027",
+    "zh:8ec040faf491594afddbdca03006e5ec7eeaaa3df2214affd40aa35c4d9f5bcf",
+    "zh:947f2046f424d7620838d6efea4678b5a60268034a9c999c3930073bb620e33c",
+    "zh:9f58f4eb59eb42fa7a93c0ca6d636e2faea757d45d94a378e762a112c638dd27",
+    "zh:dfc10e4d88acf59bcb41f42445278d1c2495a239dab4c6f32fdda029716f01c9",
+    "zh:f82f3559c6053b99472dff99efc2750ef93c5d3dbd814626ee0fe79714de0fea",
+    "zh:fca352a7cb18ff6dbedfb4ee47d5e8d4a0ede23f77d54954e3a1cdd6ff2c02d0",
+    "zh:fcb49909455c2c93fb93e591313bd73cf1734fa9b6be816084ae3007bb0199d6",
   ]
 }
diff --git a/README.md b/README.md
index 53c6c43..409c111 100644
--- a/README.md
+++ b/README.md
@@ -83,7 +83,7 @@ Install talosctl:
 ```bash
 # see https://github.com/siderolabs/talos/releases
 # renovate: datasource=github-releases depName=siderolabs/talos
-talos_version='1.7.6'
+talos_version='1.8.0-alpha.2'
 wget https://github.com/siderolabs/talos/releases/download/v$talos_version/talosctl-linux-amd64
 sudo install talosctl-linux-amd64 /usr/local/bin/talosctl
 rm talosctl-linux-amd64
@@ -439,7 +439,7 @@ Update the talos extensions to match the talos version:
 Talos:
 
 ```bash
-# see https://www.talos.dev/v1.7/advanced/troubleshooting-control-plane/
+# see https://www.talos.dev/v1.8/advanced/troubleshooting-control-plane/
 talosctl -n $all support && rm -rf support && 7z x -osupport support.zip && code support
 talosctl -n $c0 service ext-qemu-guest-agent status
 talosctl -n $c0 service etcd status
diff --git a/cilium.tf b/cilium.tf
index d20b626..1bdab49 100644
--- a/cilium.tf
+++ b/cilium.tf
@@ -44,7 +44,7 @@ locals {
   cilium_external_lb_manifest = join("---\n", [for d in local.cilium_external_lb_manifests : yamlencode(d)])
 }
 
-// see https://www.talos.dev/v1.7/kubernetes-guides/network/deploying-cilium/#method-4-helm-manifests-inline-install
+// see https://www.talos.dev/v1.8/kubernetes-guides/network/deploying-cilium/#method-4-helm-manifests-inline-install
 // see https://docs.cilium.io/en/stable/network/servicemesh/ingress/
 // see https://docs.cilium.io/en/stable/gettingstarted/hubble_setup/
 // see https://docs.cilium.io/en/stable/gettingstarted/hubble/
diff --git a/do b/do
index a177d64..55753a9 100755
--- a/do
+++ b/do
@@ -3,20 +3,20 @@ set -euo pipefail
 
 # see https://github.com/siderolabs/talos/releases
 # renovate: datasource=github-releases depName=siderolabs/talos
-talos_version="1.7.6"
+talos_version="1.8.0-alpha.2"
 
 # see https://github.com/siderolabs/extensions/pkgs/container/qemu-guest-agent
 # see https://github.com/siderolabs/extensions/tree/main/guest-agents/qemu-guest-agent
-talos_qemu_guest_agent_extension_tag="8.2.2@sha256:e8020f513f891896fd3bb506c7af8a763a3c70b063e4901caaad073b5e6e0815"
+talos_qemu_guest_agent_extension_tag="9.0.2@sha256:f54ef0bf911e6ed0f01982f620ce6d32f6bc16a1220020345696a562d59346e2"
 
 # see https://github.com/siderolabs/extensions/pkgs/container/drbd
 # see https://github.com/siderolabs/extensions/tree/main/storage/drbd
 # see https://github.com/LINBIT/drbd
-talos_drbd_extension_tag="9.2.8-v1.7.6@sha256:acd871c1367ce94121689d069fd563c54ca0edac8698325f34a41dd3456eceea"
+talos_drbd_extension_tag="9.2.11-v1.8.0-alpha.2@sha256:90b09ab323bbb0294ca6596826f22f59fa76d29f9dc9539187d0e1e2f3907f0b"
 
 # see https://github.com/siderolabs/extensions/pkgs/container/spin
 # see https://github.com/siderolabs/extensions/tree/main/container-runtime/spin
-talos_spin_extension_tag="v0.15.0@sha256:0ec7613913960c95413699a46745a788d4c22776942c2d24ebd0457f11e6be33"
+talos_spin_extension_tag="v0.15.1@sha256:87c9f352e5763440df7fc27f76ea4045ca6e049023496db01a2d17ac627e0e0e"
 
 # see https://github.com/piraeusdatastore/piraeus-operator/releases
 # renovate: datasource=github-releases depName=piraeusdatastore/piraeus-operator
@@ -59,9 +59,9 @@ function update-talos-extensions {
 }
 
 function build_talos_image {
-  # see https://www.talos.dev/v1.7/talos-guides/install/boot-assets/
-  # see https://www.talos.dev/v1.7/advanced/metal-network-configuration/
-  # see Profile type at https://github.com/siderolabs/talos/blob/v1.7.6/pkg/imager/profile/profile.go#L22-L45
+  # see https://www.talos.dev/v1.8/talos-guides/install/boot-assets/
+  # see https://www.talos.dev/v1.8/advanced/metal-network-configuration/
+  # see Profile type at https://github.com/siderolabs/talos/blob/v1.8.0-alpha.2/pkg/imager/profile/profile.go#L24-L47
   local talos_version_tag="v$talos_version"
   rm -rf tmp/talos
   mkdir -p tmp/talos
@@ -158,7 +158,7 @@ function piraeus-install {
   # see https://linbit.com/drbd-user-guide/linstor-guide-1_0-en/#ch-kubernetes
   # see 5.7.1. Available Parameters in a Storage Class at https://linbit.com/drbd-user-guide/linstor-guide-1_0-en/#s-kubernetes-sc-parameters
   # see https://linbit.com/drbd-user-guide/drbd-guide-9_0-en/
-  # see https://www.talos.dev/v1.7/kubernetes-guides/configuration/storage/#piraeus--linstor
+  # see https://www.talos.dev/v1.8/kubernetes-guides/configuration/storage/#piraeus--linstor
   step 'piraeus install'
   kubectl apply --server-side -k "https://github.com/piraeusdatastore/piraeus-operator//config/default?ref=v$piraeus_operator_version"
   step 'piraeus wait'
diff --git a/providers.tf b/providers.tf
index 1164325..ceb955c 100644
--- a/providers.tf
+++ b/providers.tf
@@ -18,7 +18,7 @@ terraform {
     # see https://github.com/siderolabs/terraform-provider-talos
     talos = {
       source  = "siderolabs/talos"
-      version = "0.5.0"
+      version = "0.6.0-alpha.2"
     }
     # see https://registry.terraform.io/providers/hashicorp/helm
     # see https://github.com/hashicorp/terraform-provider-helm
diff --git a/renovate.sh b/renovate.sh
index 7514200..d9c6dad 100755
--- a/renovate.sh
+++ b/renovate.sh
@@ -17,7 +17,7 @@ gitea_version='1.22.1'
 
 # see https://hub.docker.com/r/renovate/renovate/tags
 # renovate: datasource=docker depName=renovate/renovate
-renovate_version='38.25.0'
+renovate_version='38.55.4'
 
 # clean.
 echo 'Deleting existing Gitea...'
diff --git a/talos.tf b/talos.tf
index cb48566..9fa7a4a 100644
--- a/talos.tf
+++ b/talos.tf
@@ -18,7 +18,7 @@ locals {
       #    talos image, which is created in the installed state.
       #install = {}
       features = {
-        # see https://www.talos.dev/v1.7/kubernetes-guides/configuration/kubeprism/
+        # see https://www.talos.dev/v1.8/kubernetes-guides/configuration/kubeprism/
         # see talosctl -n $c0 read /etc/kubernetes/kubeconfig-kubelet | yq .clusters[].cluster.server
         # NB if you use a non-default CNI, you must configure it to use the
         #    https://localhost:7445 kube-apiserver endpoint.
@@ -43,8 +43,8 @@ locals {
       }
     }
     cluster = {
-      # see https://www.talos.dev/v1.7/talos-guides/discovery/
-      # see https://www.talos.dev/v1.7/reference/configuration/#clusterdiscoveryconfig
+      # see https://www.talos.dev/v1.8/talos-guides/discovery/
+      # see https://www.talos.dev/v1.8/reference/configuration/#clusterdiscoveryconfig
       discovery = {
         enabled = true
         registries = {
@@ -68,12 +68,12 @@ locals {
   }
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/resources/machine_secrets
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/resources/machine_secrets
 resource "talos_machine_secrets" "talos" {
   talos_version = "v${var.talos_version}"
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/data-sources/machine_configuration
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/data-sources/machine_configuration
 data "talos_machine_configuration" "controller" {
   cluster_name       = var.cluster_name
   cluster_endpoint   = var.cluster_endpoint
@@ -89,7 +89,7 @@ data "talos_machine_configuration" "controller" {
       machine = {
         network = {
           interfaces = [
-            # see https://www.talos.dev/v1.7/talos-guides/network/vip/
+            # see https://www.talos.dev/v1.8/talos-guides/network/vip/
             {
               interface = "eth0"
               dhcp      = true
@@ -167,7 +167,7 @@ data "talos_machine_configuration" "controller" {
   ]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/data-sources/machine_configuration
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/data-sources/machine_configuration
 data "talos_machine_configuration" "worker" {
   cluster_name       = var.cluster_name
   cluster_endpoint   = var.cluster_endpoint
@@ -182,14 +182,14 @@ data "talos_machine_configuration" "worker" {
   ]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/data-sources/client_configuration
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/data-sources/client_configuration
 data "talos_client_configuration" "talos" {
   cluster_name         = var.cluster_name
   client_configuration = talos_machine_secrets.talos.client_configuration
   endpoints            = [for node in local.controller_nodes : node.address]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/data-sources/cluster_kubeconfig
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/data-sources/cluster_kubeconfig
 data "talos_cluster_kubeconfig" "talos" {
   client_configuration = talos_machine_secrets.talos.client_configuration
   endpoint             = local.controller_nodes[0].address
@@ -199,7 +199,7 @@ data "talos_cluster_kubeconfig" "talos" {
   ]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/resources/machine_configuration_apply
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/resources/machine_configuration_apply
 resource "talos_machine_configuration_apply" "controller" {
   count                       = var.controller_count
   client_configuration        = talos_machine_secrets.talos.client_configuration
@@ -220,7 +220,7 @@ resource "talos_machine_configuration_apply" "controller" {
   ]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/resources/machine_configuration_apply
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/resources/machine_configuration_apply
 resource "talos_machine_configuration_apply" "worker" {
   count                       = var.worker_count
   client_configuration        = talos_machine_secrets.talos.client_configuration
@@ -241,7 +241,7 @@ resource "talos_machine_configuration_apply" "worker" {
   ]
 }
 
-// see https://registry.terraform.io/providers/siderolabs/talos/0.5.0/docs/resources/machine_bootstrap
+// see https://registry.terraform.io/providers/siderolabs/talos/0.6.0-alpha.2/docs/resources/machine_bootstrap
 resource "talos_machine_bootstrap" "talos" {
   client_configuration = talos_machine_secrets.talos.client_configuration
   endpoint             = local.controller_nodes[0].address
diff --git a/variables.tf b/variables.tf
index 1fe7dbc..881f924 100644
--- a/variables.tf
+++ b/variables.tf
@@ -1,9 +1,9 @@
 # see https://github.com/siderolabs/talos/releases
-# see https://www.talos.dev/v1.7/introduction/support-matrix/
+# see https://www.talos.dev/v1.8/introduction/support-matrix/
 variable "talos_version" {
   type = string
   # renovate: datasource=github-releases depName=siderolabs/talos
-  default = "1.7.6"
+  default = "1.8.0-alpha.2"
   validation {
     condition     = can(regex("^\\d+(\\.\\d+)+", var.talos_version))
     error_message = "Must be a version number."
@@ -11,7 +11,7 @@ variable "talos_version" {
 }
 
 # see https://github.com/siderolabs/kubelet/pkgs/container/kubelet
-# see https://www.talos.dev/v1.7/introduction/support-matrix/
+# see https://www.talos.dev/v1.8/introduction/support-matrix/
 variable "kubernetes_version" {
   type = string
   # renovate: datasource=github-releases depName=siderolabs/kubelet
@@ -102,7 +102,7 @@ variable "worker_count" {
 
 variable "talos_libvirt_base_volume_name" {
   type    = string
-  default = "talos-1.7.6.qcow2"
+  default = "talos-1.8.0-alpha.2.qcow2"
   validation {
     condition     = can(regex(".+\\.qcow2+$", var.talos_libvirt_base_volume_name))
     error_message = "Must be a name with a .qcow2 extension."