# Incus: what changed from 6 to 7

- Product: Incus (https://whatsnew.fyi/product/incus)
- Vendor: LinuxContainers
- Range: changelog entries numbered after v6.23.0 up to and including v7.4.0, stable releases only
- Entries below: 6 releases (newest first)
- Resolved: 6 is v6.23.0 and 7 is v7.4.0, the newest stable release of each major we track
- Carrying security changes: 1 · CVEs mentioned: 0 · Mentioning breaking changes: 0 · Removing or deprecating something: 2
- Page: https://whatsnew.fyi/product/incus/compare/6...7

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## What changed (103 changes, grouped by kind)

### Added

#### v7.4.0 (2026-08-27)

- Add client-side near-live migration
- Add server-side near-live migration
- Implement security.protect.start
- Add NVRAM-related improvements
- Expose image location in cluster
- Add configurable multicast snooping and relaying on OVN

#### v7.3.0 (2026-07-31)

- Add timeout for QMP commands
- Build Windows and MacOS native installers
- Allow /32 and /128 for OCI addresses
- Fallback to sending agent state data through vserial ringbuffer
- Add GetBucketVersioning to S3 storage
- Add support for ipvX.gateway=none for OCI containers
- Add support for BGP unnumbered peers

#### v7.2.0 (2026-06-26)

- Add migration-compatible hv flags with migration.stateful=true
- Implement a filtered version of the Server struct
- Add logging helper for deferred functions
- Implement server.crt update through internal API
- Implement per-instance BGP
- Add btrfs.compression volume option

#### v7.1.0 (2026-05-29)

- Implement bridge.multicast_snooping
- Add lock handling for NBD operations
- Implement S3 CopyObject
- Allow volume creation on attach
- Add virtio VGA feature gating for QEMU instances
- Add support for block.create_options
- Allow setting up a TPM certificate authority

#### v7.0.0 (2026-05-01)

- Optionally skip blocking for OIDC authentication
- Add support for cross-cluster dependent volume migration
- Implement cancel logic on all remaining websocket class operations
- Implement a request body limit
- Add a NBD based backup API
- Add support for exposing dirty bitmaps

### Changed

#### v7.4.0 (2026-08-27)

- Preserve client state across derived clients
- Allow live update of ipv4/ipv6.address.external
- Use proxy ARP rather than NAT rules for OVN l2proxy
- Stop instances in place when evacuation has no target
- Optimize network loading

#### v7.3.0 (2026-07-31)

- Apply --storage pool to dependent disks in incus move
- Bump timeout for block commands in QEMU QMP
- Bump timeout for slow synchronous commands in QEMU QMP
- Use a shared memory backend on all architectures for QEMU instances
- Use persistent Logical Switch Ports with OVN

#### v7.2.0 (2026-06-26)

- Make unset commands accept several keys
- Improve cluster evacuation
- Replace gorilla/mux with http.ServeMux
- Improve low level backup API
- Handle concurrent NBD connections on instance endpoint
- Add core.https_allowed_websocket_origin configuration option
- Use virtiofsd --posix-acl=auto if supported

#### v7.0.0 (2026-05-01)

- Keepalive proxy improvements
- Rework qemuArchConfig
- Rework storage caching logic for performance improvement
- Port to yaml/go-yaml
- Rework physical NIC device validation
- Scale SCSI queues with CPUs

### Fixed

#### v7.4.0 (2026-08-27)

- Fix naming inconsistency in incus/low-level
- Fix resolv.conf generation in forknet dhcp
- Fix storage bucket handling in clusters
- Fix event ordering
- Fix event connection liveness and Disconnect issues
- Wipe source device rather than VG name in incusd/storage/lvm
- Handle unmanaged networks in client preseed
- Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots

#### v7.3.0 (2026-07-31)

- Fix typo in documented behavior in setting restricted.containers.privilege to isolated
- Fix config set deprecation warning
- Various bugfixes
- Fix nil deref race in Cancel operation
- Avoid double-close warning on export and file pull
- Use resolved project for Ceph ISO RBD names
- Honor btrfs.compression on instances from optimized images
- Fix concurrent image unpacking on Ceph

#### v7.2.0 (2026-06-26)

- Fix block backup issues
- Fix storage migration and recovery related issues
- Fix OVS and OVN related issues
- Shrink Ceph images to minimal size after unpacking
- Close web UI probe response body
- Allow cached shared image to grow

#### v7.1.0 (2026-05-29)

- Fix broken link in disk device documentation
- Fix initial 7.0 issues
- Fix network issues
- Fix reference to old manager relation in authorization documentation
- Fix project targeting on project delete
- Fix issue with instances in different projects in network ACLs
- Fix NBD swagger
- Skip operation creation on shutdown evacuate in cluster
- Restore config volume as part of VM block restoration for LVM storage
- Use correct host:port format for ClusterAddress
- Add workaround for lvmcluster pool removal
- Fix forward duplicate IP check

#### v7.0.0 (2026-05-01)

- Gracefully fail when server unreachable in version command
- Use Linux arch names in instance agent-loader
- Detect 9p support and hide it behind feature flag
- Enable SPICE audio feature gating
- Gate virtio audio based on presence of virtio-sound-pci
- Fix bad type in format strings
- Delete dependent volumes on instance deletion
- Fix race in storage caching logic
- Fix potential deadlock in storage
- Fix mount interception dropping mount data flag on idmapped mount
- Fix stateful snapshots for qcow2 volumes

### Removed

#### v7.2.0 (2026-06-26)

- Remove LXD to Incus logic

#### v7.1.0 (2026-05-29)

- Remove deprecated QEMU flag

### Security

#### v7.4.0 (2026-08-27)

- Hide additional sensitive config keys in shared/api

_One release carries no categorized changes yet: v7.0.1._

## Release notes

### v7.4.0 — Incus 7.4

- Date: 2026-08-27
- Version: v7.4.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.4.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.4.0
- Labels: Platforms: Linux

- **fixed** — Fix naming inconsistency in incus/low-level
- **security** — Hide additional sensitive config keys in shared/api
- **added** — Add client-side near-live migration
- **added** — Add server-side near-live migration
- **added** — Implement security.protect.start
- **fixed** — Fix resolv.conf generation in forknet dhcp
- **changed** — Preserve client state across derived clients
- **added** — Add NVRAM-related improvements
- **changed** — Allow live update of ipv4/ipv6.address.external
- **fixed** — Fix storage bucket handling in clusters
- **changed** — Use proxy ARP rather than NAT rules for OVN l2proxy
- **fixed** — Fix event ordering
- **fixed** — Fix event connection liveness and Disconnect issues
- **changed** — Stop instances in place when evacuation has no target
- **fixed** — Wipe source device rather than VG name in incusd/storage/lvm
- **fixed** — Handle unmanaged networks in client preseed
- **fixed** — Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots
- **changed** — Optimize network loading
- **added** — Expose image location in cluster
- **added** — Add configurable multicast snooping and relaying on OVN

#### Announcement
https://discuss.linuxcontainers.org/t/incus-7-4-has-been-released/27169

##### What's Changed
* docs: Clarify the sentence about Incus owning the ZFS pool/dataset by @ldesgoui in https://github.com/lxc/incus/pull/3755
* incus/low-level: Fix naming inconsistency by @stgraber in https://github.com/lxc/incus/pull/3756
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3757
* shared/api: Hide additional sensitive config keys by @stgraber in https://github.com/lxc/incus/pull/3758
* Various fixes by @stgraber in https://github.com/lxc/incus/pull/3760
* Client-side near-live migration by @presztak in https://github.com/lxc/incus/pull/3754
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3762
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3766
* incusd/cluster: Stop instances in place when evacuation has no target by @stgraber in https://github.com/lxc/incus/pull/3767
* Implement security.protect.start by @stgraber in https://github.com/lxc/incus/pull/3768
* Fix resolv.conf generation in forknet dhcp by @stgraber in https://github.com/lxc/incus/pull/3769
* Preserve client state across derived clients by @jochumdev in https://github.com/lxc/incus/pull/3771
* Various NVRAM-related improvements by @bensmrs in https://github.com/lxc/incus/pull/3770
* Allow live update of ipv4/ipv6.address.external by @0xk1f0 in https://github.com/lxc/incus/pull/3772
* Fix storage bucket handling in clusters by @stgraber in https://github.com/lxc/incus/pull/3774
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3776
* Move OVN tests to Github Actions by @stgraber in https://github.com/lxc/incus/pull/3777
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3779
* incusd/storage/lvm: Wipe source device rather than VG name by @stgraber in https://github.com/lxc/incus/pull/3782
* client: Handle unmanaged networks in preseed by @stgraber in https://github.com/lxc/incus/pull/3780
* Use proxy ARP rather than NAT rules for OVN l2proxy by @stgraber in https://github.com/lxc/incus/pull/3775
* Fix event ordering by @jochumdev in https://github.com/lxc/incus/pull/3785
* client: Event connection liveness and Disconnect fixes by @jochumdev in https://github.com/lxc/incus/pull/3784
* Server-side near-live migration by @presztak in https://github.com/lxc/incus/pull/3730
* incusd/storage/lvm: Detect block type in ListVolumes by @stgraber in https://github.com/lxc/incus/pull/3791
* Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots by @stgraber in https://github.com/lxc/incus/pull/3792
* Optimize network loading by @stgraber in https://github.com/lxc/incus/pull/3761
* Expose image location in cluster by @stgraber in https://github.com/lxc/incus/pull/3790
* Add configurable multicast snopping and relaying on OVN by @stgraber in https://github.com/lxc/incus/pull/3789
* incusd/instance/qemu: Use temporary data-file when growing metadata i… by @stgraber in https://github.com/lxc/incus/pull/3796
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3799
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3801
* Move more Jenkins daily tests to Github by @stgraber in https://github.com/lxc/incus/pull/3800
* doc: Document instance-migrated lifecycle event by @fohnwind in https://github.com/lxc/incus/pull/3807
* Fix for various recent test failures by @stgraber in https://github.com/lxc/incus/pull/3806
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3811
* Add multiple --environment-file args by @AJRepo in https://github.com/lxc/incus/pull/3805
* instance: Derive process start time from proc stat by @fivetime in https://github.com/lxc/incus/pull/3810
* Update swagger specification by @stgraber in https://github.com/lxc/incus/pull/3813
* Various bugfixes by @stgraber

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.4.0]_

### v7.3.0 — Incus 7.3

- Date: 2026-07-31
- Version: v7.3.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.3.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.3.0
- Labels: Platforms: Linux

- **fixed** — Fix typo in documented behavior in setting restricted.containers.privilege to isolated
- **fixed** — Fix config set deprecation warning
- **fixed** — Various bugfixes
- **changed** — Apply --storage pool to dependent disks in incus move
- **added** — Add timeout for QMP commands
- **added** — Build Windows and MacOS native installers
- **added** — Allow /32 and /128 for OCI addresses
- **fixed** — Fix nil deref race in Cancel operation
- **changed** — Bump timeout for block commands in QEMU QMP
- **changed** — Bump timeout for slow synchronous commands in QEMU QMP
- **fixed** — Avoid double-close warning on export and file pull
- **fixed** — Use resolved project for Ceph ISO RBD names
- **added** — Fallback to sending agent state data through vserial ringbuffer
- **fixed** — Honor btrfs.compression on instances from optimized images
- **added** — Add GetBucketVersioning to S3 storage
- **changed** — Use a shared memory backend on all architectures for QEMU instances
- **added** — Add support for ipvX.gateway=none for OCI containers
- **changed** — Use persistent Logical Switch Ports with OVN
- **fixed** — Fix concurrent image unpacking on Ceph
- **added** — Add support for BGP unnumbered peers

##### What's Changed
* Fix typo in documented behavior in setting `restricted.containers.privilege` to `isolated` by @Hye-Dev in https://github.com/lxc/incus/pull/3548
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3554
* doc: fix `config set` deprectation warning by @gagath in https://github.com/lxc/incus/pull/3552
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3555
* incus/move: Apply --storage pool to dependent disks by @stgraber in https://github.com/lxc/incus/pull/3550
* github: Build Windows and MacOS native installers. by @stgraber in https://github.com/lxc/incus/pull/3551
* Add timeout for QMP commands by @stgraber in https://github.com/lxc/incus/pull/3559
* github: Add a build workflow by @stgraber in https://github.com/lxc/incus/pull/3562
* build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3567
* build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in https://github.com/lxc/incus/pull/3566
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3570
* incusd/devices: Allow /32 and /128 for OCI addresses by @stgraber in https://github.com/lxc/incus/pull/3568
* cmd/generate-database/db: Manually specify uuid package by @masnax in https://github.com/lxc/incus/pull/3574
* incusd/operations: Fix nil deref race in Cancel by @stgraber in https://github.com/lxc/incus/pull/3573
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3575
* incusd/instance/qemu/qmp: Bump timeout for block commands by @stgraber in https://github.com/lxc/incus/pull/3576
* incusd/instance/qemu/qmp: Bump timeout for slow synchronous commands by @stgraber in https://github.com/lxc/incus/pull/3577
* incus: Avoid double-close warning on export and file pull by @stgraber in https://github.com/lxc/incus/pull/3580
* doc/incus-cli: reword docs for configuration file path by @abiosoft in https://github.com/lxc/incus/pull/3581
* incusd/device/disk: Use resolved project for Ceph ISO RBD names by @47star in https://github.com/lxc/incus/pull/3583
* Fallback to sending agent state data through vserial ringbuffer by @masnax in https://github.com/lxc/incus/pull/3582
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3588
* incusd/storage: Honor btrfs.compression on instances from optimized images by @cmspam in https://github.com/lxc/incus/pull/3591
* incusd/storage/s3: Add GetBucketVersioning by @stgraber in https://github.com/lxc/incus/pull/3593
* incusd/instance/qemu: Use a shared memory backend on all architectures by @stgraber in https://github.com/lxc/incus/pull/3589
* Add support for ipvX.gateway=none for OCI containers by @stgraber in https://github.com/lxc/incus/pull/3586
* Use persistent Logical Switch Ports with OVN by @stgraber in https://github.com/lxc/incus/pull/3587
* Fix concurrent image unpacking on ceph by @DarkressX in https://github.com/lxc/incus/pull/3579
* Add support for BGP unnumbered peers by @stgraber in https://github.com/lxc/incus/pull/3600
* incusd/forknet: Wait up to 5s for initial DHCP configuration by @stgraber in https://github.com/lxc/incus/pull/3595
* incusd/instance/qemu: Handle missing kvm64 by @glowf1sh in https://github.com/lxc/incus/pull/3605
* client: Only pass device overrides to sources supporting them by @stgraber in https://github.com/lxc/incus/pull/3607
* Fix handling of CPU pinning during live migration by @stgraber in https://github.com/lxc/incus/pull/3608
* Support persistent bitmaps for raw-format block devices by @presztak in https://github.com/lxc/incus/pull/3609
* incusd/network/ovn: Fix NAT for network forward default targets by @0xk1f0 in https://github.com/lxc/incus/pull/3596
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3611
* Implement security.nesting for virtual machines by @stgraber in https://github.com/lxc/incus/pull/3612
* Move all the authoriz

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.3.0]_

### v7.0.1 — Incus 7.0.1 LTS

- Date: 2026-07-10
- Version: v7.0.1
- Original notes: https://github.com/lxc/incus/releases/tag/v7.0.1
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.0.1
- Labels: Platforms: Linux

**Full Changelog**: https://github.com/lxc/incus/compare/v7.0.0...v7.0.1

### v7.2.0 — Incus 7.2

- Date: 2026-06-26
- Version: v7.2.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.2.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.2.0
- Labels: Platforms: Linux

- **changed** — Make unset commands accept several keys
- **added** — Add migration-compatible hv flags with migration.stateful=true
- **fixed** — Fix block backup issues
- **removed** — Remove LXD to Incus logic
- **fixed** — Fix storage migration and recovery related issues
- **fixed** — Fix OVS and OVN related issues
- **changed** — Improve cluster evacuation
- **changed** — Replace gorilla/mux with http.ServeMux
- **changed** — Improve low level backup API
- **added** — Implement a filtered version of the Server struct
- **added** — Add logging helper for deferred functions
- **added** — Implement server.crt update through internal API
- **fixed** — Shrink Ceph images to minimal size after unpacking
- **changed** — Handle concurrent NBD connections on instance endpoint
- **added** — Implement per-instance BGP
- **changed** — Add core.https_allowed_websocket_origin configuration option
- **fixed** — Close web UI probe response body
- **fixed** — Allow cached shared image to grow
- **added** — Add btrfs.compression volume option
- **changed** — Use virtiofsd --posix-acl=auto if supported

#### Announcement
https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3428
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3433
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3432
* shared/tls: Detect Lego version/behavior based on help by @stgraber in https://github.com/lxc/incus/pull/3435
* doc/cloud-init: Clarify VM behavior by @stgraber in https://github.com/lxc/incus/pull/3436
* Fix Github Actions java setup by @stgraber in https://github.com/lxc/incus/pull/3438
* incus: Make unset commands accept several keys by @bensmrs in https://github.com/lxc/incus/pull/3439
* Add migration-compatible hv flags with migration.stateful=true by @masnax in https://github.com/lxc/incus/pull/3442
* Generate-database `joinas` tag by @masnax in https://github.com/lxc/incus/pull/3443
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3444
* Align node specific network config by @breml in https://github.com/lxc/incus/pull/3441
* Fix block backup issues by @stgraber in https://github.com/lxc/incus/pull/3448
* Remove LXD to Incus logic by @stgraber in https://github.com/lxc/incus/pull/3451
* Storage migration/recovery related fixes by @stgraber in https://github.com/lxc/incus/pull/3452
* OVS/OVN related fixes by @stgraber in https://github.com/lxc/incus/pull/3453
* Cluster evacuation improvements by @stgraber in https://github.com/lxc/incus/pull/3455
* global: Clean latest gofumpt by @stgraber in https://github.com/lxc/incus/pull/3456
* incusd: Replace gorilla/mux with http.ServeMux by @stgraber in https://github.com/lxc/incus/pull/3458
* Improve low level backup API by @stgraber in https://github.com/lxc/incus/pull/3457
* Implement a filtered version of the Server struct by @stgraber in https://github.com/lxc/incus/pull/3462
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3461
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3465
* Add logging helper for deferred functions and use in all packages by @stgraber in https://github.com/lxc/incus/pull/3464
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3466
* Implement server.crt update through internal API by @stgraber in https://github.com/lxc/incus/pull/3463
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3474
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3475
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3481
* doc: Improve incus alias docs by @augustodsgv in https://github.com/lxc/incus/pull/3479
* Update debug.go by @kazan417 in https://github.com/lxc/incus/pull/3469
* incus/server/storage/driver/ceph: Shrink images to minimal size after unpacking by @DarkressX in https://github.com/lxc/incus/pull/3486
* Handle concurrent NBD connections on instance endpoint by @stgraber in https://github.com/lxc/incus/pull/3482
* doc/incus-cli: Add CLI configuration file reference by @augustodsgv in https://github.com/lxc/incus/pull/3483
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3489
* doc: Update preseed description to match with reality by @stgraber in https://github.com/lxc/incus/pull/3490
* doc: Ignore criu.org link checking by @bensmrs in https://github.com/lxc/incus/pull/3493
* incus/utils_copy: Fix wrong error returned by @bensmrs in https://github.com/lxc/incus/pull/3492
* Implement per-instance BGP by @stgraber in https://github.com/lxc/incus/pull/3491
* Incus/add remote set keepalive by @augustodsgv in https://github.com/lxc/incus/pull/3495
* Add core.https_allowed_websocket_origin by @stgraber in https://github.com/lxc/incus/pull/3496
* incus: Close web UI probe response body by @fw

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.2.0]_

### v7.1.0 — Incus 7.1

- Date: 2026-05-29
- Version: v7.1.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.1.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.1.0
- Labels: Platforms: Linux

- **fixed** — Fix broken link in disk device documentation
- **fixed** — Fix initial 7.0 issues
- **fixed** — Fix network issues
- **fixed** — Fix reference to old manager relation in authorization documentation
- **fixed** — Fix project targeting on project delete
- **fixed** — Fix issue with instances in different projects in network ACLs
- **removed** — Remove deprecated QEMU flag
- **fixed** — Fix NBD swagger
- **fixed** — Skip operation creation on shutdown evacuate in cluster
- **added** — Implement bridge.multicast_snooping
- **added** — Add lock handling for NBD operations
- **fixed** — Restore config volume as part of VM block restoration for LVM storage
- **fixed** — Use correct host:port format for ClusterAddress
- **added** — Implement S3 CopyObject
- **added** — Allow volume creation on attach
- **fixed** — Add workaround for lvmcluster pool removal
- **fixed** — Fix forward duplicate IP check
- **added** — Add virtio VGA feature gating for QEMU instances
- **added** — Add support for block.create_options
- **added** — Allow setting up a TPM certificate authority

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3296
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3298
* doc/devices/disk: Fix broken link by @stgraber in https://github.com/lxc/incus/pull/3297
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3309
* Fix some initial 7.0 issues by @stgraber in https://github.com/lxc/incus/pull/3311
* Fix some network issues by @stgraber in https://github.com/lxc/incus/pull/3312
* doc/authorization: Fix reference to old "manager" relation by @stgraber in https://github.com/lxc/incus/pull/3313
* incusd/projects: Fix targeting on project delete by @stgraber in https://github.com/lxc/incus/pull/3315
* incusd/network/acl: Fix issue with instances in different project tha… by @stgraber in https://github.com/lxc/incus/pull/3314
* incusd/instance/qemu: Remove deprecated QEMU flag by @stgraber in https://github.com/lxc/incus/pull/3318
* Fix NBD swagger by @stgraber in https://github.com/lxc/incus/pull/3317
* incusd/cluster: Skip operation creation on shutdown evacuate by @stgraber in https://github.com/lxc/incus/pull/3320
* Fix some simple bugs by @stgraber in https://github.com/lxc/incus/pull/3325
* Implement bridge.multicast_snooping by @stgraber in https://github.com/lxc/incus/pull/3327
* Add lock handling for NBD operations by @presztak in https://github.com/lxc/incus/pull/3331
* devcontainer: fix golangci-lint install source by @breml in https://github.com/lxc/incus/pull/3336
* build(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in https://github.com/lxc/incus/pull/3338
* Restore config volume as part of VM block restoration (LVM storage) by @presztak in https://github.com/lxc/incus/pull/3343
* Update Ansible section with incus-client details by @chrisjsimpson in https://github.com/lxc/incus/pull/3345
* Update list of Ubuntu LTS releases that get pre-built Incus packages by @meeque in https://github.com/lxc/incus/pull/3346
* Use correct host:port format for ClusterAddress by @stephendotcarter in https://github.com/lxc/incus/pull/3349
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3352
* doc/storage_volume: Fix outdated information by @bensmrs in https://github.com/lxc/incus/pull/3360
* test: Disable volume shrinking with LINSTOR by @bensmrs in https://github.com/lxc/incus/pull/3354
* incusd/storage/s3: Implement S3 CopyObject by @stgraber in https://github.com/lxc/incus/pull/3365
* Allow volume creation on attach by @stgraber in https://github.com/lxc/incus/pull/3363
* Add workaround for lvmcluster pool removal by @presztak in https://github.com/lxc/incus/pull/3369
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3370
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3362
* Performance improvements by @stgraber in https://github.com/lxc/incus/pull/3372
* Fix forward duplicate ip check by @DarkressX in https://github.com/lxc/incus/pull/3373
* doc: Extend description for OCI-compliant remotes by @UweKrause in https://github.com/lxc/incus/pull/3374
* incus/operation: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3347
* Fix another set of explanation typos. by @kazan417 in https://github.com/lxc/incus/pull/3299
* incusd/instance/qemu: add virtio vga feature gating by @damex in https://github.com/lxc/incus/pull/3305
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3376
* Add support for `block.create_options` by @stgraber in https://github.com/lxc/incus/pull/3377
* incus/utils: Tweak environment file handling to strip matching outer … by @stgraber in https://github.com/lxc/incus/pull/3378
* shared/archive: Improved ENOSPC detection by @stgraber in https://github.com/lxc/incus/pull/3379
* Allow setting up a TPM certificate authority by @stgraber in https://git

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.1.0]_

### v7.0.0 — Incus 7.0.0 LTS

- Date: 2026-05-01
- Version: v7.0.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.0.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.0.0
- Labels: Platforms: Linux

- **added** — Optionally skip blocking for OIDC authentication
- **added** — Add support for cross-cluster dependent volume migration
- **added** — Implement cancel logic on all remaining websocket class operations
- **added** — Implement a request body limit
- **added** — Add a NBD based backup API
- **added** — Add support for exposing dirty bitmaps
- **changed** — Keepalive proxy improvements
- **changed** — Rework qemuArchConfig
- **changed** — Rework storage caching logic for performance improvement
- **changed** — Port to yaml/go-yaml
- **changed** — Rework physical NIC device validation
- **changed** — Scale SCSI queues with CPUs
- **fixed** — Gracefully fail when server unreachable in version command
- **fixed** — Use Linux arch names in instance agent-loader
- **fixed** — Detect 9p support and hide it behind feature flag
- **fixed** — Enable SPICE audio feature gating
- **fixed** — Gate virtio audio based on presence of virtio-sound-pci
- **fixed** — Fix bad type in format strings
- **fixed** — Delete dependent volumes on instance deletion
- **fixed** — Fix race in storage caching logic
- **fixed** — Fix potential deadlock in storage
- **fixed** — Fix mount interception dropping mount data flag on idmapped mount
- **fixed** — Fix stateful snapshots for qcow2 volumes

#### Announcement
https://discuss.linuxcontainers.org/t/incus-7-0-lts-has-been-released/26641

##### What's Changed
* github: format INCUS_VERSION from tag in release workflow by @0xk1f0 in https://github.com/lxc/incus/pull/3098
* client: Optionally skip blocking for OIDC authentication by @masnax in https://github.com/lxc/incus/pull/3102
* Keepalive proxy improvements by @stgraber in https://github.com/lxc/incus/pull/3097
* incus/version: Gracefully fail when server unreachable by @bensmrs in https://github.com/lxc/incus/pull/3104
* incusd/instance/agent-loader: Use Linux arch names by @bensmrs in https://github.com/lxc/incus/pull/3105
* qemu: gate SPICE support on incus host via QMP query-spice by @damex in https://github.com/lxc/incus/pull/3103
* incusd/instances/qemu: Detect 9p support and hide it behind feature flag by @damex in https://github.com/lxc/incus/pull/3109
* incusd/instance/qemu: Enable SPICE audio feature gating by @damex in https://github.com/lxc/incus/pull/3110
* incusd: Fix bad type in format strings by @stgraber in https://github.com/lxc/incus/pull/3114
* qemu: gate virtio audio based on presence of virtio-sound-pci by @damex in https://github.com/lxc/incus/pull/3115
* Cleanup cmd packages by @stgraber in https://github.com/lxc/incus/pull/3107
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3116
* incusd/instances/qemu: Rework qemuArchConfig by @stgraber in https://github.com/lxc/incus/pull/3106
* Delete dependent volumes on instance deletion by @presztak in https://github.com/lxc/incus/pull/3117
* incusd/response: Make pipeResponse flush headers ASAP by @bensmrs in https://github.com/lxc/incus/pull/3123
* Improve handling of dependent volumes by @presztak in https://github.com/lxc/incus/pull/3120
* Rework storage caching logic (performance improvement) by @stgraber in https://github.com/lxc/incus/pull/3121
* Implement IncusOS update trigger on cluster version mismatch by @stgraber in https://github.com/lxc/incus/pull/3122
* shared/cliconfig: Avoid treating `=` as part of a remote name by @bensmrs in https://github.com/lxc/incus/pull/3125
* incusd/network/state: Use canAccessNetwork by @stgraber in https://github.com/lxc/incus/pull/3126
* incus-simplestreams: Add flag for overriding product name by @csprl in https://github.com/lxc/incus/pull/3128
* Support old-style ZFS types by @bensmrs in https://github.com/lxc/incus/pull/3130
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3132
* Add support for cross-cluster dependent volume migration by @presztak in https://github.com/lxc/incus/pull/3133
* incusd/storage: Fix race in caching logic by @stgraber in https://github.com/lxc/incus/pull/3134
* Port to yaml/go-yaml by @stgraber in https://github.com/lxc/incus/pull/3127
* incusd/storage: Fix potential deadlock by @stgraber in https://github.com/lxc/incus/pull/3136
* Implement cancel logic on all remaining websocket class operations by @stgraber in https://github.com/lxc/incus/pull/3135
* Remove stale port UUID by @DarkressX in https://github.com/lxc/incus/pull/3140
* Support optimized storage for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3141
* Fix dependent volume flag removal during same-host storage moves by @presztak in https://github.com/lxc/incus/pull/3138
* Implement a request body limit by @stgraber in https://github.com/lxc/incus/pull/3137
* Fix mount interception dropping mount data flag on idmapped mount by @stgraber in https://github.com/lxc/incus/pull/3142
* Use device names for dependent volumes when importing backups by @presztak in https://github.com/lxc/incus/pull/3144
* Clarify description of oidc.claim option by @yannis2707 in https://github.com/lxc/incus/pull/3145
* Rework physical NIC device validation by @stgraber in https://github.com/lxc/incus/pull/3143
* Fix stateful snapshots for qcow2 volumes by @presztak in https://github.com/lxc/inc

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.0.0]_