Skip to content

LXD

Containers & Orchestration

Container "hypervisor" and a better UX for LXC.

Go Latest v7.1.0 · 6d ago Security brief →

Features

  • Unified management of Linux containers and virtual machines
  • REST API for scalable deployment from single host to full data‑center rack
  • Supports a wide range of official and community Linux distribution images

Recent releases

View all 6 releases →
No immediate action
v7.1.0 Breaking risk

Docs, network, QEMU, S3, TPM, performance

v7.0.0 Breaking risk
Breaking changes
  • Remove CGroup v1 support
  • Deprecate support for older kernels
Security fixes
  • Pre-release security fixes
Notable features
  • Add --reuse flag to incus image copy --copy-aliases
  • Implement core.shutdown_action
  • Replace minio with built‑in S3 endpoint
Full changelog

What's Changed

  • github: format INCUS_VERSION from tag in release workflow by @0xk1f0 in https://github.com/lxc/incus/pull/3098
  • client: Optionally skip blocking for OIDC authentication by @masnax in https://github.com/lxc/incus/pull/3102
  • Keepalive proxy improvements by @stgraber in https://github.com/lxc/incus/pull/3097
  • incus/version: Gracefully fail when server unreachable by @bensmrs in https://github.com/lxc/incus/pull/3104
  • incusd/instance/agent-loader: Use Linux arch names by @bensmrs in https://github.com/lxc/incus/pull/3105
  • qemu: gate SPICE support on incus host via QMP query-spice by @damex in https://github.com/lxc/incus/pull/3103
  • incusd/instances/qemu: Detect 9p support and hide it behind feature flag by @damex in https://github.com/lxc/incus/pull/3109
  • incusd/instance/qemu: Enable SPICE audio feature gating by @damex in https://github.com/lxc/incus/pull/3110
  • incusd: Fix bad type in format strings by @stgraber in https://github.com/lxc/incus/pull/3114
  • qemu: gate virtio audio based on presence of virtio-sound-pci by @damex in https://github.com/lxc/incus/pull/3115
  • Cleanup cmd packages by @stgraber in https://github.com/lxc/incus/pull/3107
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3116
  • incusd/instances/qemu: Rework qemuArchConfig by @stgraber in https://github.com/lxc/incus/pull/3106
  • Delete dependent volumes on instance deletion by @presztak in https://github.com/lxc/incus/pull/3117
  • incusd/response: Make pipeResponse flush headers ASAP by @bensmrs in https://github.com/lxc/incus/pull/3123
  • Improve handling of dependent volumes by @presztak in https://github.com/lxc/incus/pull/3120
  • Rework storage caching logic (performance improvement) by @stgraber in https://github.com/lxc/incus/pull/3121
  • Implement IncusOS update trigger on cluster version mismatch by @stgraber in https://github.com/lxc/incus/pull/3122
  • shared/cliconfig: Avoid treating = as part of a remote name by @bensmrs in https://github.com/lxc/incus/pull/3125
  • incusd/network/state: Use canAccessNetwork by @stgraber in https://github.com/lxc/incus/pull/3126
  • incus-simplestreams: Add flag for overriding product name by @csprl in https://github.com/lxc/incus/pull/3128
  • Support old-style ZFS types by @bensmrs in https://github.com/lxc/incus/pull/3130
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3132
  • Add support for cross-cluster dependent volume migration by @presztak in https://github.com/lxc/incus/pull/3133
  • incusd/storage: Fix race in caching logic by @stgraber in https://github.com/lxc/incus/pull/3134
  • Port to yaml/go-yaml by @stgraber in https://github.com/lxc/incus/pull/3127
  • incusd/storage: Fix potential deadlock by @stgraber in https://github.com/lxc/incus/pull/3136
  • Implement cancel logic on all remaining websocket class operations by @stgraber in https://github.com/lxc/incus/pull/3135
  • Remove stale port UUID by @DarkressX in https://github.com/lxc/incus/pull/3140
  • Support optimized storage for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3141
  • Fix dependent volume flag removal during same-host storage moves by @presztak in https://github.com/lxc/incus/pull/3138
  • Implement a request body limit by @stgraber in https://github.com/lxc/incus/pull/3137
  • Fix mount interception dropping mount data flag on idmapped mount by @stgraber in https://github.com/lxc/incus/pull/3142
  • Use device names for dependent volumes when importing backups by @presztak in https://github.com/lxc/incus/pull/3144
  • Clarify description of oidc.claim option by @yannis2707 in https://github.com/lxc/incus/pull/3145
  • Rework physical NIC device validation by @stgraber in https://github.com/lxc/incus/pull/3143
  • Fix stateful snapshots for qcow2 volumes by @presztak in https://github.com/lxc/incus/pull/3147
  • incusd: Don't expose the API extension list pre-authentication by @stgraber in https://github.com/lxc/incus/pull/3149
  • incusd/device/nic_physical: Fix bridge handling by @stgraber in https://github.com/lxc/incus/pull/3150
  • incusd/device/nic_physical: Fix inheritance from network by @stgraber in https://github.com/lxc/incus/pull/3152
  • incusd/instances/qemu: Skip vmcoreinfo on ppc64le by @stgraber in https://github.com/lxc/incus/pull/3153
  • doc/image_format: Update Pongo2 link by @neitsab in https://github.com/lxc/incus/pull/3154
  • incusd/device/nic_bridged: Handle physical NICs by @stgraber in https://github.com/lxc/incus/pull/3157
  • Fix live migration of instances with snapshots by @presztak in https://github.com/lxc/incus/pull/3158
  • incusd/instance/qemu: Scale SCSI queues with CPUs by @stgraber in https://github.com/lxc/incus/pull/3165
  • Add a NBD based backup API by @stgraber in https://github.com/lxc/incus/pull/3093
  • Fix stateful VM snapshot failure with dependent volumes by @presztak in https://github.com/lxc/incus/pull/3173
  • incus: Enable admin recover and admin sql on all platforms by @stgraber in https://github.com/lxc/incus/pull/3169
  • incusd/apparmor/qemuimg: Expand symlinks by @stgraber in https://github.com/lxc/incus/pull/3175
  • client: Forward skopeo errors by @stgraber in https://github.com/lxc/incus/pull/3172
  • incus: Fix Windows absolute paths by @bensmrs in https://github.com/lxc/incus/pull/3176
  • Return bitmap endpoints by default when listing by @presztak in https://github.com/lxc/incus/pull/3177
  • incusd/instance/qemu: Fix RTC handling on Windows by @stgraber in https://github.com/lxc/incus/pull/3179
  • Add support for exposing dirty bitmaps by @presztak in https://github.com/lxc/incus/pull/3178
  • Improve snapshot creation rollback handling by @presztak in https://github.com/lxc/incus/pull/3180
  • Rework tracking of original VM properties for migration and stateful snapshots/stop by @stgraber in https://github.com/lxc/incus/pull/3181
  • Fix ovn duplicate route by @DarkressX in https://github.com/lxc/incus/pull/3184
  • Improve QCOW2 volume handling by @presztak in https://github.com/lxc/incus/pull/3185
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3182
  • Allow limiting storage pools to project by @pranav767 in https://github.com/lxc/incus/pull/3162
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3189
  • shared/archive: Improve detection and error handling by @stgraber in https://github.com/lxc/incus/pull/3190
  • Use io.CopyN with 4MiB buffer everywhere by @stgraber in https://github.com/lxc/incus/pull/3192
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3194
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3198
  • VM migration tweaks by @stgraber in https://github.com/lxc/incus/pull/3197
  • incus/cluster: Tweak error message by @kazan417 in https://github.com/lxc/incus/pull/3202
  • incus/info: Tweak wording in resources output by @kazan417 in https://github.com/lxc/incus/pull/3203
  • Improve import/export usage consistency by @bensmrs in https://github.com/lxc/incus/pull/3200
  • Wait for BLOCK_JOB_COMPLETED event after block-job-complete by @presztak in https://github.com/lxc/incus/pull/3201
  • shared/archive: Avoid concurrent calls to Wait by @stgraber in https://github.com/lxc/incus/pull/3204
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3206
  • incusd/images: Allow simpler HTTP headers by @stgraber in https://github.com/lxc/incus/pull/3205
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3211
  • Add support for export/import qcow2 in raw format by @presztak in https://github.com/lxc/incus/pull/3208
  • incusd/instance/edk2: Add support for seabios at bios-256k by @stgraber in https://github.com/lxc/incus/pull/3214
  • Add cp-like flags to push commands by @bensmrs in https://github.com/lxc/incus/pull/3209
  • incusd/instance/qemu: Improve OS detection for FreeBSD by @bensmrs in https://github.com/lxc/incus/pull/3215
  • incus-agent: Use psutil for process count by @stgraber in https://github.com/lxc/incus/pull/3218
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3221
  • incusd/instance/qemu: Use timeouts for agent operations by @stgraber in https://github.com/lxc/incus/pull/3222
  • Remove temporary snapshot block device after migration by @presztak in https://github.com/lxc/incus/pull/3224
  • incusd/instances/qemu: Fix crash on nil qmp handler in RunJSON by @stgraber in https://github.com/lxc/incus/pull/3225
  • Add support for specifying new names for dependent volumes when copying an instance by @presztak in https://github.com/lxc/incus/pull/3219
  • shared/validate: Fix name validation on single character by @stgraber in https://github.com/lxc/incus/pull/3226
  • internal/linux: Add logging to ClearBlock by @stgraber in https://github.com/lxc/incus/pull/3227
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3228
  • Add support for targeting network lists by @stgraber in https://github.com/lxc/incus/pull/3230
  • doc: Update benchmark_performance.md with GOPATH details by @UweKrause in https://github.com/lxc/incus/pull/3231
  • Report VM error state in /state call by @DarkressX in https://github.com/lxc/incus/pull/3232
  • Remove CGroup v1 support by @stgraber in https://github.com/lxc/incus/pull/3235
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3238
  • incus-agent: Work around issue when built with GO111MODULE=off by @gibmat in https://github.com/lxc/incus/pull/3239
  • Bunch of typo fixes in sources strings by @kazan417 in https://github.com/lxc/incus/pull/3234
  • Check whether an instance snapshot can be restored by @presztak in https://github.com/lxc/incus/pull/3241
  • Improve flags by @bensmrs in https://github.com/lxc/incus/pull/3240
  • Reset LXC feature detection by @stgraber in https://github.com/lxc/incus/pull/3242
  • client: Add bitmap manipulation functions by @presztak in https://github.com/lxc/incus/pull/3248
  • Improve compatibility with cp for pull/push operations by @bensmrs in https://github.com/lxc/incus/pull/3247
  • Deprecate support for older kernels by @stgraber in https://github.com/lxc/incus/pull/3246
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3250
  • Bump minimum versions and remove version checks by @stgraber in https://github.com/lxc/incus/pull/3249
  • Remove xtables support by @stgraber in https://github.com/lxc/incus/pull/3254
  • Help a bit with the slop by @bensmrs in https://github.com/lxc/incus/pull/3257
  • Client deprecations by @bensmrs in https://github.com/lxc/incus/pull/3253
  • incus/storage: Fix typo by @kazan417 in https://github.com/lxc/incus/pull/3262
  • incus/cluster: Fix spelling of YAML by @kazan417 in https://github.com/lxc/incus/pull/3268
  • incus/network_zone: Fix missing example description by @kazan417 in https://github.com/lxc/incus/pull/3267
  • incus/storage_bucket: Fix bad list column help message by @kazan417 in https://github.com/lxc/incus/pull/3265
  • Allow overriding storage pools for dependent volumes during instance migration by @presztak in https://github.com/lxc/incus/pull/3256
  • Prevent duplicate network external ip by @DarkressX in https://github.com/lxc/incus/pull/3271
  • Tune DrbdOptions/Disk/rs-discard-granularity by @bensmrs in https://github.com/lxc/incus/pull/3270
  • Replace minio with built-in S3 endpoint by @stgraber in https://github.com/lxc/incus/pull/3258
  • doc/metrics: Mention Loki requirement by @stgraber in https://github.com/lxc/incus/pull/3272
  • incus/server/network/ovn/driver: Fix duplicate external network ip check on network creation by @DarkressX in https://github.com/lxc/incus/pull/3276
  • Pre-release security fixes by @stgraber in https://github.com/lxc/incus/pull/3273
  • Add missing path parameters in swagger profile by @stgraber in https://github.com/lxc/incus/pull/3277
  • Add --reuse to incus image copy --copy-aliases and fix cluster join bug by @stgraber in https://github.com/lxc/incus/pull/3275
  • Makefile: Add help target and remove tags target by @bensmrs in https://github.com/lxc/incus/pull/3280
  • Implement core.shutdown_action by @stgraber in https://github.com/lxc/incus/pull/3274
  • tests: Use a 5MiB test file for buckets by @stgraber in https://github.com/lxc/incus/pull/3282
  • incusd/instance/qemu: Fix locking around VM reset by @stgraber in https://github.com/lxc/incus/pull/3284
  • Allow scriptlet target selection during cluster re-balance by @stgraber in https://github.com/lxc/incus/pull/3279
  • incusd/device/nic: Set next-hop based on configured IP addresses by @stgraber in https://github.com/lxc/incus/pull/3278
  • incus/storage_bucket/key: Fix incorrect list column description by @stgraber in https://github.com/lxc/incus/pull/3283
  • Create missing sub-paths by @stgraber in https://github.com/lxc/incus/pull/3281
  • VM lifecycle fixes by @stgraber in https://github.com/lxc/incus/pull/3295
  • Update dependencies by @stgraber in https://github.com/lxc/incus/pull/3285

New Contributors

  • @damex made their first contribution in https://github.com/lxc/incus/pull/3103
  • @csprl made their first contribution in https://github.com/lxc/incus/pull/3128
  • @yannis2707 made their first contribution in https://github.com/lxc/incus/pull/3145
  • @neitsab made their first contribution in https://github.com/lxc/incus/pull/3154
  • @pranav767 made their first contribution in https://github.com/lxc/incus/pull/3162
  • @kazan417 made their first contribution in https://github.com/lxc/incus/pull/3202
  • @UweKrause made their first contribution in https://github.com/lxc/incus/pull/3231

Full Changelog: https://github.com/lxc/incus/compare/v6.23.0...v7.0.0

v6.23.0 Bug fix
Security fixes
  • Fix some security issues
Full changelog

Announcement

https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447

What's Changed

  • Allow custom volume snapshot create/delete when attached to running instance by @presztak in https://github.com/lxc/incus/pull/2989
  • shared/cliconfig: Add lock to prevent panic by @stgraber in https://github.com/lxc/incus/pull/2991
  • incusd/endpoints/starttls: Report correct ServerName by @stgraber in https://github.com/lxc/incus/pull/2993
  • generate-database: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2995
  • build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/2996
  • firewall: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2997
  • OVN add ipv4.dhcp.gateway + allow none value by @JulesdeCube in https://github.com/lxc/incus/pull/2990
  • server sys: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2999
  • server project: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2998
  • server util: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3000
  • incusd/instance/lxc: Add /usr/bin/init to OCI PID1 list by @stgraber in https://github.com/lxc/incus/pull/3001
  • server seccomp: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3002
  • server migration: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3003
  • server task: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3004
  • Add an instance repair API by @stgraber in https://github.com/lxc/incus/pull/3008
  • Implement new parser for CLI client by @bensmrs in https://github.com/lxc/incus/pull/3007
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3009
  • incusd/operations: Fix missing Unlock by @stgraber in https://github.com/lxc/incus/pull/3012
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3013
  • incusd/metrics: Increase node-exporter timeout to 5s by @stgraber in https://github.com/lxc/incus/pull/3015
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3019
  • Mixed bugfixes by @stgraber in https://github.com/lxc/incus/pull/3020
  • Add support for instance-agent events by @0xk1f0 in https://github.com/lxc/incus/pull/3026
  • NIC improvements by @bensmrs in https://github.com/lxc/incus/pull/3024
  • incus/usage: Defer remote connection by @bensmrs in https://github.com/lxc/incus/pull/3028
  • Fix linter reported issues by @stgraber in https://github.com/lxc/incus/pull/3022
  • Add FreeBSD agent by @bensmrs in https://github.com/lxc/incus/pull/3029
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3031
  • Fix ZFS test failures by @stgraber in https://github.com/lxc/incus/pull/3027
  • incus: fix log in sftpRecursiveMkdir by @J0nasDotDev in https://github.com/lxc/incus/pull/3032
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3034
  • devcontainer: update Go version and pipx install command by @0xk1f0 in https://github.com/lxc/incus/pull/3035
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3038
  • incus/cluster: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3041
  • incus: Fix indent on --sub-commands by @stgraber in https://github.com/lxc/incus/pull/3042
  • Add initial support for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3025
  • Introduce goreleaser by @stgraber in https://github.com/lxc/incus/pull/3044
  • incusd/daemon: Allow internal and os API during startup by @stgraber in https://github.com/lxc/incus/pull/3045
  • Diverse agent fixes by @bensmrs in https://github.com/lxc/incus/pull/3051
  • Restrict security.shared to raw custom block volumes on lvmcluster by @presztak in https://github.com/lxc/incus/pull/3053
  • incus: Print newly-created snapshot name if unspecified by @J0nasDotDev in https://github.com/lxc/incus/pull/3039
  • incus/info: Allow querying alternative log files by @stgraber in https://github.com/lxc/incus/pull/3052
  • Simplify config subvolume naming by using static "instance" prefix by @presztak in https://github.com/lxc/incus/pull/3050
  • Add colors to the CLI client by @bensmrs in https://github.com/lxc/incus/pull/3058
  • HTTP hardening by @stgraber in https://github.com/lxc/incus/pull/3067
  • Add support for migrating dependent volumes with instances by @presztak in https://github.com/lxc/incus/pull/3057
  • Fix issues with logs volume by @stgraber in https://github.com/lxc/incus/pull/3063
  • Harden certificate updates by @stgraber in https://github.com/lxc/incus/pull/3068
  • Few tweaks around CLI colors by @bensmrs in https://github.com/lxc/incus/pull/3065
  • Add LZ4 compression by @bensmrs in https://github.com/lxc/incus/pull/3071
  • Add project resource and limit metrics by @Adevixxx in https://github.com/lxc/incus/pull/3021
  • incus-migrate: Fix OVA handling within os.Root by @stgraber in https://github.com/lxc/incus/pull/3072
  • incus-migrate: Allow importing OVAs from URLs by @bensmrs in https://github.com/lxc/incus/pull/3073
  • incusd/seccomp: Limit the new mount API system calls we block by @stgraber in https://github.com/lxc/incus/pull/3070
  • incus/usage: Fix edge case by @bensmrs in https://github.com/lxc/incus/pull/3080
  • Update dependencies by @stgraber in https://github.com/lxc/incus/pull/3078
  • Cleanup and harden the OIDC allowed_subnets claim by @stgraber in https://github.com/lxc/incus/pull/3079
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3082
  • doc: Remove config-options page by @bensmrs in https://github.com/lxc/incus/pull/3083
  • Refactor live migration - extract common logic by @presztak in https://github.com/lxc/incus/pull/3085
  • Add cp-like flags to pull commands by @bensmrs in https://github.com/lxc/incus/pull/3086
  • Prevent setting the 'snapshots.XYZ' keys on dependent volumes by @presztak in https://github.com/lxc/incus/pull/3087
  • incusd/instances_post: Add extra validation during backup import by @stgraber in https://github.com/lxc/incus/pull/3088
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3090
  • Add support for live migration of dependent disks by @presztak in https://github.com/lxc/incus/pull/3089
  • Add image.requirements.cdrom_cloud_init key by @bensmrs in https://github.com/lxc/incus/pull/3091
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3094
  • Fix some security issues by @stgraber in https://github.com/lxc/incus/pull/3092
  • Small fixes and refactorings by @stgraber in https://github.com/lxc/incus/pull/3095
  • Pre-release bugfixes by @stgraber in https://github.com/lxc/incus/pull/3096

New Contributors

  • @JulesdeCube made their first contribution in https://github.com/lxc/incus/pull/2990
  • @urbalazs made their first contribution in https://github.com/lxc/incus/pull/3041
  • @Adevixxx made their first contribution in https://github.com/lxc/incus/pull/3021

Full Changelog: https://github.com/lxc/incus/compare/v6.22.0...v6.23.0

v6.22.0 Bug fix
Notable features
  • Add `incus image generate-metadata` command and update `incus-migrate` documentation
  • Support live migration of qcow2 volumes including instances with snapshots
  • Implement direct backup exports and disk-only snapshot restore
Full changelog

What's Changed

  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2854
  • incusd/device/nic: Fix connected logic for non-NIC QEMU devices by @bensmrs in https://github.com/lxc/incus/pull/2855
  • Fix typo: Supported cConditions to Supported Conditions by @hnakamur in https://github.com/lxc/incus/pull/2858
  • incusd/storage/zfs: Set IncusOS storage usage property by @stgraber in https://github.com/lxc/incus/pull/2857
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2861
  • shared/util: Fix SingleQuote to actually quote by @stgraber in https://github.com/lxc/incus/pull/2863
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2867
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2869
  • incus: Fix get-client-certificate ignoring per-remote certs by @MarcosDaNight in https://github.com/lxc/incus/pull/2866
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2870
  • incusd/storage/lvm: Move IncusOS check to pool creation by @stgraber in https://github.com/lxc/incus/pull/2871
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2874
  • Improvements to incus-migrate by @stgraber in https://github.com/lxc/incus/pull/2883
  • tests: Fix SR-IOV attached key test by @Shaderbug in https://github.com/lxc/incus/pull/2882
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/2891
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2901
  • Add support for QCOW2 migration whether the instance is stopped by @presztak in https://github.com/lxc/incus/pull/2896
  • Assorted bugfixes by @stgraber in https://github.com/lxc/incus/pull/2902
  • incusd: Search OVS switch external_interfaces by @dankm in https://github.com/lxc/incus/pull/2898
  • SR-IOV: Implement support for trust property by @Shaderbug in https://github.com/lxc/incus/pull/2903
  • MarkdownLint fixes, fix nonstandard {Important} by @AJRepo in https://github.com/lxc/incus/pull/2885
  • Manual pattern snapshots maintain uniqueness with pongo-pattern. by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2880
  • Propagate error when adding qcow2 backing block device by @presztak in https://github.com/lxc/incus/pull/2908
  • Implement direct backup exports by @bensmrs in https://github.com/lxc/incus/pull/2899
  • Implement disk-only snapshot restore by @stgraber in https://github.com/lxc/incus/pull/2912
  • Skip special disk devices in metrics by @stgraber in https://github.com/lxc/incus/pull/2911
  • Prevent moving shared storage volumes by @presztak in https://github.com/lxc/incus/pull/2914
  • Add incus image generate-metadata and update incus-migratedocumentation by @stgraber in https://github.com/lxc/incus/pull/2916
  • Support live migration of qcow2 volumes by @presztak in https://github.com/lxc/incus/pull/2917
  • Pass live migration flag and skip final filesystem sync for VMs by @presztak in https://github.com/lxc/incus/pull/2925
  • Add QCOW2 live migration support for instances with snapshots by @presztak in https://github.com/lxc/incus/pull/2923
  • doc/requirements: Bump minimal requirements by @stgraber in https://github.com/lxc/incus/pull/2926
  • Validate requested storage pool during instance migration by @presztak in https://github.com/lxc/incus/pull/2931
  • Implement VM fast reboot by @stgraber in https://github.com/lxc/incus/pull/2933
  • Improve live migration handling by @stgraber in https://github.com/lxc/incus/pull/2934
  • incus-migrate: Fix URL detection by @stgraber in https://github.com/lxc/incus/pull/2935
  • Remove instance volume on revert after failed live migration by @presztak in https://github.com/lxc/incus/pull/2937
  • Fix source hang when target migration fails by @presztak in https://github.com/lxc/incus/pull/2938
  • Prevent concurrent QCOW2 snapshot deletions by @presztak in https://github.com/lxc/incus/pull/2941
  • incusd/instance/qemu: Require full restart for agent drive by @stgraber in https://github.com/lxc/incus/pull/2942
  • Prevent concurrent snapshot deletions by @presztak in https://github.com/lxc/incus/pull/2943
  • incus: Refactor CLI usage strings by @bensmrs in https://github.com/lxc/incus/pull/2945
  • incusd/instance/qemu: Force a real reboot after applying templates by @stgraber in https://github.com/lxc/incus/pull/2946
  • incusd/storage/ceph: Use the standard error for unsupported disk usage by @stgraber in https://github.com/lxc/incus/pull/2949
  • Allow filtering unix-hotplug by USB controller PCI address by @stgraber in https://github.com/lxc/incus/pull/2950
  • incusd/storage/qcow2: Wait for qemu-nbd to be ready by @stgraber in https://github.com/lxc/incus/pull/2953
  • Fix backing block device ordering when fetching from QEMU by @presztak in https://github.com/lxc/incus/pull/2954
  • Remove mount paths when deleting snapshots by @presztak in https://github.com/lxc/incus/pull/2957
  • Windows agent over vsock by @masnax in https://github.com/lxc/incus/pull/2958
  • doc/instance_units: Mention common units by @stgraber in https://github.com/lxc/incus/pull/2962
  • incusd/fsmonitor: Read multiple fanotify events by @zgttotev in https://github.com/lxc/incus/pull/2961
  • Tweak CPU and memory hotplug errors by @stgraber in https://github.com/lxc/incus/pull/2965
  • Incus guest uptime metrics by @tlusser in https://github.com/lxc/incus/pull/2906
  • Introduce evacuating and restoring cluster member states by @stgraber in https://github.com/lxc/incus/pull/2967
  • Fix preseed struct by @stgraber in https://github.com/lxc/incus/pull/2968
  • incusd/device/nic_ovn: Fix nested NIC state by @stgraber in https://github.com/lxc/incus/pull/2969
  • Add snapshot support for qcow2 custom volumes by @presztak in https://github.com/lxc/incus/pull/2966
  • incusd/storage/linstor: Propagate error when volume filler fails by @luissimas in https://github.com/lxc/incus/pull/2971
  • Additional validation and project restrictions by @stgraber in https://github.com/lxc/incus/pull/2972
  • Add support for expanding an existing lvmcluster storage pool by @presztak in https://github.com/lxc/incus/pull/2975
  • Expose certificate data in authorization scriptlet by @bensmrs in https://github.com/lxc/incus/pull/2973
  • incusd/images: Simplify image URL check by @stgraber in https://github.com/lxc/incus/pull/2978
  • Add lvmcluster.remove_snapshots config key by @presztak in https://github.com/lxc/incus/pull/2977
  • incus: Add checks before starting sshSFTPserver by @J0nasDotDev in https://github.com/lxc/incus/pull/2974
  • Add logs volume config by @hlloreda in https://github.com/lxc/incus/pull/2839
  • Automatically update ovn ranges by @DarkressX in https://github.com/lxc/incus/pull/2979
  • incusd/api_cluster: Fix database-client count logic by @bensmrs in https://github.com/lxc/incus/pull/2982
  • incusd/instances: Properly instruct to reset NVRAM when changing secure boot config by @bensmrs in https://github.com/lxc/incus/pull/2983
  • incus/server/network/ovn/nb: Fix static gateway hwaddr update by @DarkressX in https://github.com/lxc/incus/pull/2981
  • Use 'allow-related' instead of 'allow' for default egress action by @presztak in https://github.com/lxc/incus/pull/2985
  • Logs volume fixes by @stgraber in https://github.com/lxc/incus/pull/2984
  • Cluster migration/evacuation fixes by @stgraber in https://github.com/lxc/incus/pull/2986
  • Network related bugfixes by @stgraber in https://github.com/lxc/incus/pull/2987

New Contributors

  • @Shaderbug made their first contribution in https://github.com/lxc/incus/pull/2882
  • @tlusser made their first contribution in https://github.com/lxc/incus/pull/2906
  • @J0nasDotDev made their first contribution in https://github.com/lxc/incus/pull/2974
  • @hlloreda made their first contribution in https://github.com/lxc/incus/pull/2839

Full Changelog: https://github.com/lxc/incus/compare/v6.21.0...v6.22.0

v6.21.0 Security relevant
Notable features
  • Add custom OIDC claim to restrict access to specific subnet
  • Allow parent re-use for bridges in physical networks
  • Add vlan.tagged support for physical networks
Full changelog

Announcement

https://discuss.linuxcontainers.org/t/incus-6-21-has-been-released/26005

What's Changed

  • doc/openfga: Improve required config keys by @tibeer in https://github.com/lxc/incus/pull/2779
  • incusd/network/ovn: Drop now obsolete DNS check by @stgraber in https://github.com/lxc/incus/pull/2782
  • incusd/storage/truenas: Fix SetVolumeQuota issue when growing FS volumes by @mrstux in https://github.com/lxc/incus/pull/2783
  • incus-user: Don't reset setup if user has access by @MarcosDaNight in https://github.com/lxc/incus/pull/2784
  • Add custom OIDC claim to restrict access to specific subnet by @stgraber in https://github.com/lxc/incus/pull/2789
  • Tweak boot.autostart by @stgraber in https://github.com/lxc/incus/pull/2791
  • incusd/network/physical: Allow parent re-use for bridges by @stgraber in https://github.com/lxc/incus/pull/2793
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2794
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2796
  • Add vlan.tagged to physical networks by @stgraber in https://github.com/lxc/incus/pull/2802
  • Implement forced deletion in legacy file API by @stgraber in https://github.com/lxc/incus/pull/2801
  • doc/network_ovn: Add note about advanced external_interfaces syntax by @stgraber in https://github.com/lxc/incus/pull/2805
  • Parallelize instance startup on daemon start by @presztak in https://github.com/lxc/incus/pull/2809
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2813
  • generate-database: Respect "primary" config for Identifier in mappings by @breml in https://github.com/lxc/incus/pull/2815
  • Add qcow2 resize support and respect specified disk size by @presztak in https://github.com/lxc/incus/pull/2811
  • Added a few more environment variables by @MOBergeron in https://github.com/lxc/incus/pull/2816
  • Use proxy protocol package with v2 support by @masnax in https://github.com/lxc/incus/pull/2817
  • generate-database: fix import type for association tables by @breml in https://github.com/lxc/incus/pull/2818
  • Fix adding disk with a device name longer than 31 bytes by @presztak in https://github.com/lxc/incus/pull/2819
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2826
  • Further restrict API names character set and prevent shell expansion by @stgraber in https://github.com/lxc/incus/pull/2827
  • Fix required=false with custom volumes by @stgraber in https://github.com/lxc/incus/pull/2829
  • Fix some potential race conditions by @stgraber in https://github.com/lxc/incus/pull/2832
  • Allow setting 'vg_name' for non-clustered LVM during init by @presztak in https://github.com/lxc/incus/pull/2838
  • Add support for nic SR-IOV selection by vendorid, productid and pci by @presztak in https://github.com/lxc/incus/pull/2828
  • incusd: pass firmware opt from device/pci to instance/qemu by @stek29 in https://github.com/lxc/incus/pull/2837
  • Add incus wait by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2834
  • Hash serial value if it exceeds the maximum length by @presztak in https://github.com/lxc/incus/pull/2841
  • doc/linstor: Add documentation for source parameter. by @tibeer in https://github.com/lxc/incus/pull/2795
  • Update Rocky Linux instructions by @neelchauhan in https://github.com/lxc/incus/pull/2804
  • Tweak dnsmasq startup condition by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2840
  • Use the standard DNS SOA format by @dankm in https://github.com/lxc/incus/pull/2843
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2844
  • Remove automatic increasing of SR-IOV VF count by @presztak in https://github.com/lxc/incus/pull/2845
  • doc: Add warning about long device names by @presztak in https://github.com/lxc/incus/pull/2846
  • Security fixes ahead of Incus 6.21 by @stgraber in https://github.com/lxc/incus/pull/2848
  • Add attached and connected keys to NIC devices by @bensmrs in https://github.com/lxc/incus/pull/2847
  • Fix some issues before 6.21 release by @stgraber in https://github.com/lxc/incus/pull/2849

New Contributors

  • @MarcosDaNight made their first contribution in https://github.com/lxc/incus/pull/2784
  • @stek29 made their first contribution in https://github.com/lxc/incus/pull/2837
  • @dankm made their first contribution in https://github.com/lxc/incus/pull/2843

Full Changelog: https://github.com/lxc/incus/compare/v6.20.0...v6.21.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
5,464
Forks
444
Languages
Go Shell C

Community & Support

Alternative to

LXD

Beta — feedback welcome: [email protected]