# Incus changelog

> A next-generation system container and virtual machine manager, forked from LXD.

- Vendor: LinuxContainers
- Category: Developer Tools
- Platforms: Linux
- Official site: https://linuxcontainers.org/incus/
- Tracked by: What's New (https://whatsnew.fyi/product/incus)
- Harvested from: GitHub (lxc/incus)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### v7.3.0 — Incus 7.3

- Date: 2026-07-31
- Version: v7.3.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.3.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.3.0
- Labels: Platforms: Linux

- **fixed** — Fix typo in documented behavior in setting restricted.containers.privilege to isolated
- **fixed** — Fix config set deprecation warning
- **fixed** — Various bugfixes
- **changed** — Apply --storage pool to dependent disks in incus move
- **added** — Add timeout for QMP commands
- **added** — Build Windows and MacOS native installers
- **added** — Allow /32 and /128 for OCI addresses
- **fixed** — Fix nil deref race in Cancel operation
- **changed** — Bump timeout for block commands in QEMU QMP
- **changed** — Bump timeout for slow synchronous commands in QEMU QMP
- **fixed** — Avoid double-close warning on export and file pull
- **fixed** — Use resolved project for Ceph ISO RBD names
- **added** — Fallback to sending agent state data through vserial ringbuffer
- **fixed** — Honor btrfs.compression on instances from optimized images
- **added** — Add GetBucketVersioning to S3 storage
- **changed** — Use a shared memory backend on all architectures for QEMU instances
- **added** — Add support for ipvX.gateway=none for OCI containers
- **changed** — Use persistent Logical Switch Ports with OVN
- **fixed** — Fix concurrent image unpacking on Ceph
- **added** — Add support for BGP unnumbered peers

##### What's Changed
* Fix typo in documented behavior in setting `restricted.containers.privilege` to `isolated` by @Hye-Dev in https://github.com/lxc/incus/pull/3548
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3554
* doc: fix `config set` deprectation warning by @gagath in https://github.com/lxc/incus/pull/3552
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3555
* incus/move: Apply --storage pool to dependent disks by @stgraber in https://github.com/lxc/incus/pull/3550
* github: Build Windows and MacOS native installers. by @stgraber in https://github.com/lxc/incus/pull/3551
* Add timeout for QMP commands by @stgraber in https://github.com/lxc/incus/pull/3559
* github: Add a build workflow by @stgraber in https://github.com/lxc/incus/pull/3562
* build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3567
* build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in https://github.com/lxc/incus/pull/3566
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3570
* incusd/devices: Allow /32 and /128 for OCI addresses by @stgraber in https://github.com/lxc/incus/pull/3568
* cmd/generate-database/db: Manually specify uuid package by @masnax in https://github.com/lxc/incus/pull/3574
* incusd/operations: Fix nil deref race in Cancel by @stgraber in https://github.com/lxc/incus/pull/3573
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3575
* incusd/instance/qemu/qmp: Bump timeout for block commands by @stgraber in https://github.com/lxc/incus/pull/3576
* incusd/instance/qemu/qmp: Bump timeout for slow synchronous commands by @stgraber in https://github.com/lxc/incus/pull/3577
* incus: Avoid double-close warning on export and file pull by @stgraber in https://github.com/lxc/incus/pull/3580
* doc/incus-cli: reword docs for configuration file path by @abiosoft in https://github.com/lxc/incus/pull/3581
* incusd/device/disk: Use resolved project for Ceph ISO RBD names by @47star in https://github.com/lxc/incus/pull/3583
* Fallback to sending agent state data through vserial ringbuffer by @masnax in https://github.com/lxc/incus/pull/3582
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3588
* incusd/storage: Honor btrfs.compression on instances from optimized images by @cmspam in https://github.com/lxc/incus/pull/3591
* incusd/storage/s3: Add GetBucketVersioning by @stgraber in https://github.com/lxc/incus/pull/3593
* incusd/instance/qemu: Use a shared memory backend on all architectures by @stgraber in https://github.com/lxc/incus/pull/3589
* Add support for ipvX.gateway=none for OCI containers by @stgraber in https://github.com/lxc/incus/pull/3586
* Use persistent Logical Switch Ports with OVN by @stgraber in https://github.com/lxc/incus/pull/3587
* Fix concurrent image unpacking on ceph by @DarkressX in https://github.com/lxc/incus/pull/3579
* Add support for BGP unnumbered peers by @stgraber in https://github.com/lxc/incus/pull/3600
* incusd/forknet: Wait up to 5s for initial DHCP configuration by @stgraber in https://github.com/lxc/incus/pull/3595
* incusd/instance/qemu: Handle missing kvm64 by @glowf1sh in https://github.com/lxc/incus/pull/3605
* client: Only pass device overrides to sources supporting them by @stgraber in https://github.com/lxc/incus/pull/3607
* Fix handling of CPU pinning during live migration by @stgraber in https://github.com/lxc/incus/pull/3608
* Support persistent bitmaps for raw-format block devices by @presztak in https://github.com/lxc/incus/pull/3609
* incusd/network/ovn: Fix NAT for network forward default targets by @0xk1f0 in https://github.com/lxc/incus/pull/3596
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3611
* Implement security.nesting for virtual machines by @stgraber in https://github.com/lxc/incus/pull/3612
* Move all the authoriz

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.3.0]_

### v7.0.1 — Incus 7.0.1 LTS

- Date: 2026-07-10
- Version: v7.0.1
- Original notes: https://github.com/lxc/incus/releases/tag/v7.0.1
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.0.1
- Labels: Platforms: Linux

**Full Changelog**: https://github.com/lxc/incus/compare/v7.0.0...v7.0.1

### v7.2.0 — Incus 7.2

- Date: 2026-06-26
- Version: v7.2.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.2.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.2.0
- Labels: Platforms: Linux

- **changed** — Make unset commands accept several keys
- **added** — Add migration-compatible hv flags with migration.stateful=true
- **fixed** — Fix block backup issues
- **removed** — Remove LXD to Incus logic
- **fixed** — Fix storage migration and recovery related issues
- **fixed** — Fix OVS and OVN related issues
- **changed** — Improve cluster evacuation
- **changed** — Replace gorilla/mux with http.ServeMux
- **changed** — Improve low level backup API
- **added** — Implement a filtered version of the Server struct
- **added** — Add logging helper for deferred functions
- **added** — Implement server.crt update through internal API
- **fixed** — Shrink Ceph images to minimal size after unpacking
- **changed** — Handle concurrent NBD connections on instance endpoint
- **added** — Implement per-instance BGP
- **changed** — Add core.https_allowed_websocket_origin configuration option
- **fixed** — Close web UI probe response body
- **fixed** — Allow cached shared image to grow
- **added** — Add btrfs.compression volume option
- **changed** — Use virtiofsd --posix-acl=auto if supported

#### Announcement
https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3428
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3433
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3432
* shared/tls: Detect Lego version/behavior based on help by @stgraber in https://github.com/lxc/incus/pull/3435
* doc/cloud-init: Clarify VM behavior by @stgraber in https://github.com/lxc/incus/pull/3436
* Fix Github Actions java setup by @stgraber in https://github.com/lxc/incus/pull/3438
* incus: Make unset commands accept several keys by @bensmrs in https://github.com/lxc/incus/pull/3439
* Add migration-compatible hv flags with migration.stateful=true by @masnax in https://github.com/lxc/incus/pull/3442
* Generate-database `joinas` tag by @masnax in https://github.com/lxc/incus/pull/3443
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3444
* Align node specific network config by @breml in https://github.com/lxc/incus/pull/3441
* Fix block backup issues by @stgraber in https://github.com/lxc/incus/pull/3448
* Remove LXD to Incus logic by @stgraber in https://github.com/lxc/incus/pull/3451
* Storage migration/recovery related fixes by @stgraber in https://github.com/lxc/incus/pull/3452
* OVS/OVN related fixes by @stgraber in https://github.com/lxc/incus/pull/3453
* Cluster evacuation improvements by @stgraber in https://github.com/lxc/incus/pull/3455
* global: Clean latest gofumpt by @stgraber in https://github.com/lxc/incus/pull/3456
* incusd: Replace gorilla/mux with http.ServeMux by @stgraber in https://github.com/lxc/incus/pull/3458
* Improve low level backup API by @stgraber in https://github.com/lxc/incus/pull/3457
* Implement a filtered version of the Server struct by @stgraber in https://github.com/lxc/incus/pull/3462
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3461
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3465
* Add logging helper for deferred functions and use in all packages by @stgraber in https://github.com/lxc/incus/pull/3464
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3466
* Implement server.crt update through internal API by @stgraber in https://github.com/lxc/incus/pull/3463
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3474
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3475
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3481
* doc: Improve incus alias docs by @augustodsgv in https://github.com/lxc/incus/pull/3479
* Update debug.go by @kazan417 in https://github.com/lxc/incus/pull/3469
* incus/server/storage/driver/ceph: Shrink images to minimal size after unpacking by @DarkressX in https://github.com/lxc/incus/pull/3486
* Handle concurrent NBD connections on instance endpoint by @stgraber in https://github.com/lxc/incus/pull/3482
* doc/incus-cli: Add CLI configuration file reference by @augustodsgv in https://github.com/lxc/incus/pull/3483
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3489
* doc: Update preseed description to match with reality by @stgraber in https://github.com/lxc/incus/pull/3490
* doc: Ignore criu.org link checking by @bensmrs in https://github.com/lxc/incus/pull/3493
* incus/utils_copy: Fix wrong error returned by @bensmrs in https://github.com/lxc/incus/pull/3492
* Implement per-instance BGP by @stgraber in https://github.com/lxc/incus/pull/3491
* Incus/add remote set keepalive by @augustodsgv in https://github.com/lxc/incus/pull/3495
* Add core.https_allowed_websocket_origin by @stgraber in https://github.com/lxc/incus/pull/3496
* incus: Close web UI probe response body by @fw

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.2.0]_

### v7.1.0 — Incus 7.1

- Date: 2026-05-29
- Version: v7.1.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.1.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.1.0
- Labels: Platforms: Linux

- **fixed** — Fix broken link in disk device documentation
- **fixed** — Fix initial 7.0 issues
- **fixed** — Fix network issues
- **fixed** — Fix reference to old manager relation in authorization documentation
- **fixed** — Fix project targeting on project delete
- **fixed** — Fix issue with instances in different projects in network ACLs
- **removed** — Remove deprecated QEMU flag
- **fixed** — Fix NBD swagger
- **fixed** — Skip operation creation on shutdown evacuate in cluster
- **added** — Implement bridge.multicast_snooping
- **added** — Add lock handling for NBD operations
- **fixed** — Restore config volume as part of VM block restoration for LVM storage
- **fixed** — Use correct host:port format for ClusterAddress
- **added** — Implement S3 CopyObject
- **added** — Allow volume creation on attach
- **fixed** — Add workaround for lvmcluster pool removal
- **fixed** — Fix forward duplicate IP check
- **added** — Add virtio VGA feature gating for QEMU instances
- **added** — Add support for block.create_options
- **added** — Allow setting up a TPM certificate authority

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3296
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3298
* doc/devices/disk: Fix broken link by @stgraber in https://github.com/lxc/incus/pull/3297
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3309
* Fix some initial 7.0 issues by @stgraber in https://github.com/lxc/incus/pull/3311
* Fix some network issues by @stgraber in https://github.com/lxc/incus/pull/3312
* doc/authorization: Fix reference to old "manager" relation by @stgraber in https://github.com/lxc/incus/pull/3313
* incusd/projects: Fix targeting on project delete by @stgraber in https://github.com/lxc/incus/pull/3315
* incusd/network/acl: Fix issue with instances in different project tha… by @stgraber in https://github.com/lxc/incus/pull/3314
* incusd/instance/qemu: Remove deprecated QEMU flag by @stgraber in https://github.com/lxc/incus/pull/3318
* Fix NBD swagger by @stgraber in https://github.com/lxc/incus/pull/3317
* incusd/cluster: Skip operation creation on shutdown evacuate by @stgraber in https://github.com/lxc/incus/pull/3320
* Fix some simple bugs by @stgraber in https://github.com/lxc/incus/pull/3325
* Implement bridge.multicast_snooping by @stgraber in https://github.com/lxc/incus/pull/3327
* Add lock handling for NBD operations by @presztak in https://github.com/lxc/incus/pull/3331
* devcontainer: fix golangci-lint install source by @breml in https://github.com/lxc/incus/pull/3336
* build(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in https://github.com/lxc/incus/pull/3338
* Restore config volume as part of VM block restoration (LVM storage) by @presztak in https://github.com/lxc/incus/pull/3343
* Update Ansible section with incus-client details by @chrisjsimpson in https://github.com/lxc/incus/pull/3345
* Update list of Ubuntu LTS releases that get pre-built Incus packages by @meeque in https://github.com/lxc/incus/pull/3346
* Use correct host:port format for ClusterAddress by @stephendotcarter in https://github.com/lxc/incus/pull/3349
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3352
* doc/storage_volume: Fix outdated information by @bensmrs in https://github.com/lxc/incus/pull/3360
* test: Disable volume shrinking with LINSTOR by @bensmrs in https://github.com/lxc/incus/pull/3354
* incusd/storage/s3: Implement S3 CopyObject by @stgraber in https://github.com/lxc/incus/pull/3365
* Allow volume creation on attach by @stgraber in https://github.com/lxc/incus/pull/3363
* Add workaround for lvmcluster pool removal by @presztak in https://github.com/lxc/incus/pull/3369
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3370
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3362
* Performance improvements by @stgraber in https://github.com/lxc/incus/pull/3372
* Fix forward duplicate ip check by @DarkressX in https://github.com/lxc/incus/pull/3373
* doc: Extend description for OCI-compliant remotes by @UweKrause in https://github.com/lxc/incus/pull/3374
* incus/operation: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3347
* Fix another set of explanation typos. by @kazan417 in https://github.com/lxc/incus/pull/3299
* incusd/instance/qemu: add virtio vga feature gating by @damex in https://github.com/lxc/incus/pull/3305
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3376
* Add support for `block.create_options` by @stgraber in https://github.com/lxc/incus/pull/3377
* incus/utils: Tweak environment file handling to strip matching outer … by @stgraber in https://github.com/lxc/incus/pull/3378
* shared/archive: Improved ENOSPC detection by @stgraber in https://github.com/lxc/incus/pull/3379
* Allow setting up a TPM certificate authority by @stgraber in https://git

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.1.0]_

### v7.0.0 — Incus 7.0.0 LTS

- Date: 2026-05-01
- Version: v7.0.0
- Original notes: https://github.com/lxc/incus/releases/tag/v7.0.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v7.0.0
- Labels: Platforms: Linux

- **added** — Optionally skip blocking for OIDC authentication
- **added** — Add support for cross-cluster dependent volume migration
- **added** — Implement cancel logic on all remaining websocket class operations
- **added** — Implement a request body limit
- **added** — Add a NBD based backup API
- **added** — Add support for exposing dirty bitmaps
- **changed** — Keepalive proxy improvements
- **changed** — Rework qemuArchConfig
- **changed** — Rework storage caching logic for performance improvement
- **changed** — Port to yaml/go-yaml
- **changed** — Rework physical NIC device validation
- **changed** — Scale SCSI queues with CPUs
- **fixed** — Gracefully fail when server unreachable in version command
- **fixed** — Use Linux arch names in instance agent-loader
- **fixed** — Detect 9p support and hide it behind feature flag
- **fixed** — Enable SPICE audio feature gating
- **fixed** — Gate virtio audio based on presence of virtio-sound-pci
- **fixed** — Fix bad type in format strings
- **fixed** — Delete dependent volumes on instance deletion
- **fixed** — Fix race in storage caching logic
- **fixed** — Fix potential deadlock in storage
- **fixed** — Fix mount interception dropping mount data flag on idmapped mount
- **fixed** — Fix stateful snapshots for qcow2 volumes

#### Announcement
https://discuss.linuxcontainers.org/t/incus-7-0-lts-has-been-released/26641

##### What's Changed
* github: format INCUS_VERSION from tag in release workflow by @0xk1f0 in https://github.com/lxc/incus/pull/3098
* client: Optionally skip blocking for OIDC authentication by @masnax in https://github.com/lxc/incus/pull/3102
* Keepalive proxy improvements by @stgraber in https://github.com/lxc/incus/pull/3097
* incus/version: Gracefully fail when server unreachable by @bensmrs in https://github.com/lxc/incus/pull/3104
* incusd/instance/agent-loader: Use Linux arch names by @bensmrs in https://github.com/lxc/incus/pull/3105
* qemu: gate SPICE support on incus host via QMP query-spice by @damex in https://github.com/lxc/incus/pull/3103
* incusd/instances/qemu: Detect 9p support and hide it behind feature flag by @damex in https://github.com/lxc/incus/pull/3109
* incusd/instance/qemu: Enable SPICE audio feature gating by @damex in https://github.com/lxc/incus/pull/3110
* incusd: Fix bad type in format strings by @stgraber in https://github.com/lxc/incus/pull/3114
* qemu: gate virtio audio based on presence of virtio-sound-pci by @damex in https://github.com/lxc/incus/pull/3115
* Cleanup cmd packages by @stgraber in https://github.com/lxc/incus/pull/3107
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3116
* incusd/instances/qemu: Rework qemuArchConfig by @stgraber in https://github.com/lxc/incus/pull/3106
* Delete dependent volumes on instance deletion by @presztak in https://github.com/lxc/incus/pull/3117
* incusd/response: Make pipeResponse flush headers ASAP by @bensmrs in https://github.com/lxc/incus/pull/3123
* Improve handling of dependent volumes by @presztak in https://github.com/lxc/incus/pull/3120
* Rework storage caching logic (performance improvement) by @stgraber in https://github.com/lxc/incus/pull/3121
* Implement IncusOS update trigger on cluster version mismatch by @stgraber in https://github.com/lxc/incus/pull/3122
* shared/cliconfig: Avoid treating `=` as part of a remote name by @bensmrs in https://github.com/lxc/incus/pull/3125
* incusd/network/state: Use canAccessNetwork by @stgraber in https://github.com/lxc/incus/pull/3126
* incus-simplestreams: Add flag for overriding product name by @csprl in https://github.com/lxc/incus/pull/3128
* Support old-style ZFS types by @bensmrs in https://github.com/lxc/incus/pull/3130
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3132
* Add support for cross-cluster dependent volume migration by @presztak in https://github.com/lxc/incus/pull/3133
* incusd/storage: Fix race in caching logic by @stgraber in https://github.com/lxc/incus/pull/3134
* Port to yaml/go-yaml by @stgraber in https://github.com/lxc/incus/pull/3127
* incusd/storage: Fix potential deadlock by @stgraber in https://github.com/lxc/incus/pull/3136
* Implement cancel logic on all remaining websocket class operations by @stgraber in https://github.com/lxc/incus/pull/3135
* Remove stale port UUID by @DarkressX in https://github.com/lxc/incus/pull/3140
* Support optimized storage for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3141
* Fix dependent volume flag removal during same-host storage moves by @presztak in https://github.com/lxc/incus/pull/3138
* Implement a request body limit by @stgraber in https://github.com/lxc/incus/pull/3137
* Fix mount interception dropping mount data flag on idmapped mount by @stgraber in https://github.com/lxc/incus/pull/3142
* Use device names for dependent volumes when importing backups by @presztak in https://github.com/lxc/incus/pull/3144
* Clarify description of oidc.claim option by @yannis2707 in https://github.com/lxc/incus/pull/3145
* Rework physical NIC device validation by @stgraber in https://github.com/lxc/incus/pull/3143
* Fix stateful snapshots for qcow2 volumes by @presztak in https://github.com/lxc/inc

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v7.0.0]_

### v6.23.0 — Incus 6.23

- Date: 2026-03-27
- Version: v6.23.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.23.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.23.0
- Labels: Platforms: Linux

- **added** — Allow custom volume snapshot create/delete when attached to running instance
- **added** — Add OVN ipv4.dhcp.gateway option and allow none value
- **added** — Add /usr/bin/init to OCI PID1 list
- **added** — Add an instance repair API
- **added** — Implement new parser for CLI client
- **added** — Add support for instance-agent events
- **added** — Add FreeBSD agent
- **added** — Add initial support for dependent volumes
- **added** — Add support for migrating dependent volumes with instances
- **added** — Add colors to the CLI client
- **added** — Add LZ4 compression
- **added** — Add project resource and limit metrics
- **added** — Allow importing OVAs from URLs
- **changed** — Increase node-exporter timeout to 5 seconds
- **changed** — Simplify config subvolume naming by using static instance prefix
- **changed** — NIC improvements
- **changed** — Defer remote connection in incus usage
- **changed** — Few tweaks around CLI colors
- **fixed** — Add lock to shared/cliconfig to prevent panic
- **fixed** — Report correct ServerName in incusd/endpoints/starttls
- **fixed** — Fix missing Unlock in incusd/operations
- **fixed** — Print newly-created snapshot name if unspecified
- **fixed** — Fix issues with logs volume
- **fixed** — Fix OVA handling within os.Root in incus-migrate
- **fixed** — Fix edge case in incus usage
- **fixed** — Harden certificate updates
- **fixed** — Allow internal and os API during daemon startup
- **security** — HTTP hardening
- **security** — Limit the new mount API system calls we block in incusd/seccomp
- **security** — Cleanup and harden the OIDC allowed_subnets claim
- **security** — Restrict security.shared to raw custom block volumes on lvmcluster

#### Announcement
https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447

##### What's Changed
* Allow custom volume snapshot create/delete when attached to running instance by @presztak in https://github.com/lxc/incus/pull/2989
* shared/cliconfig: Add lock to prevent panic by @stgraber in https://github.com/lxc/incus/pull/2991
* incusd/endpoints/starttls: Report correct ServerName by @stgraber in https://github.com/lxc/incus/pull/2993
* generate-database: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2995
* build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/2996
* firewall: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2997
* OVN add `ipv4.dhcp.gateway` + allow `none` value by @JulesdeCube in https://github.com/lxc/incus/pull/2990
* server sys: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2999
* server project: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2998
* server util: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3000
* incusd/instance/lxc: Add /usr/bin/init to OCI PID1 list by @stgraber in https://github.com/lxc/incus/pull/3001
* server seccomp: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3002
* server migration: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3003
* server task: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3004
* Add an instance repair API by @stgraber in https://github.com/lxc/incus/pull/3008
* Implement new parser for CLI client by @bensmrs in https://github.com/lxc/incus/pull/3007
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3009
* incusd/operations: Fix missing Unlock by @stgraber in https://github.com/lxc/incus/pull/3012
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3013
* incusd/metrics: Increase node-exporter timeout to 5s by @stgraber in https://github.com/lxc/incus/pull/3015
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3019
* Mixed bugfixes by @stgraber in https://github.com/lxc/incus/pull/3020
* Add support for instance-agent events by @0xk1f0 in https://github.com/lxc/incus/pull/3026
* NIC improvements by @bensmrs in https://github.com/lxc/incus/pull/3024
* incus/usage: Defer remote connection by @bensmrs in https://github.com/lxc/incus/pull/3028
* Fix linter reported issues by @stgraber in https://github.com/lxc/incus/pull/3022
* Add FreeBSD agent by @bensmrs in https://github.com/lxc/incus/pull/3029
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3031
* Fix ZFS test failures by @stgraber in https://github.com/lxc/incus/pull/3027
* incus: fix log in sftpRecursiveMkdir by @J0nasDotDev in https://github.com/lxc/incus/pull/3032
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3034
* devcontainer: update Go version and pipx install command by @0xk1f0 in https://github.com/lxc/incus/pull/3035
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3038
* incus/cluster: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3041
* incus: Fix indent on --sub-commands by @stgraber in https://github.com/lxc/incus/pull/3042
* Add initial support for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3025
* Introduce goreleaser by @stgraber in https://github.com/lxc/incus/pull/3044
* incusd/daemon: Allow internal and os API during startup by @stgraber in https://github.com/lxc/incus/pull/3045
* Diverse agent fixes by @bensmrs in https://github.com/lxc/incus/pull/3051
* Restrict `security.shared` to raw custom block volumes on `lvmcluster` by @presz

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.23.0]_

### v6.0.6 — Incus 6.0.6 LTS

- Date: 2026-03-16
- Version: v6.0.6
- Original notes: https://github.com/lxc/incus/releases/tag/v6.0.6
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.0.6
- Labels: Platforms: Linux

Announcement: https://discuss.linuxcontainers.org/t/incus-6-0-6-lts-has-been-released/26380

**Full Changelog**: https://github.com/lxc/incus/compare/v6.0.5...v6.0.6

### v6.22.0 — Incus 6.22

- Date: 2026-02-27
- Version: v6.22.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.22.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.22.0
- Labels: Platforms: Linux

- **fixed** — Fix connected logic for non-NIC QEMU devices
- **fixed** — Fix SingleQuote to actually quote
- **fixed** — Fix get-client-certificate ignoring per-remote certs
- **changed** — Set IncusOS storage usage property in ZFS storage
- **changed** — Move IncusOS check to pool creation in LVM storage
- **added** — Add support for QCOW2 migration whether the instance is stopped
- **added** — Implement support for trust property in SR-IOV
- **added** — Implement direct backup exports
- **added** — Implement disk-only snapshot restore
- **fixed** — Propagate error when adding qcow2 backing block device
- **fixed** — Skip special disk devices in metrics
- **fixed** — Prevent moving shared storage volumes
- **added** — Add incus image generate-metadata command
- **added** — Support live migration of qcow2 volumes
- **added** — Add QCOW2 live migration support for instances with snapshots
- **added** — Implement VM fast reboot
- **fixed** — Remove instance volume on revert after failed live migration
- **fixed** — Fix source hang when target migration fails
- **fixed** — Prevent concurrent QCOW2 snapshot deletions
- **fixed** — Prevent concurrent snapshot deletions

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2854
* incusd/device/nic: Fix connected logic for non-NIC QEMU devices by @bensmrs in https://github.com/lxc/incus/pull/2855
* Fix typo: Supported cConditions to Supported Conditions by @hnakamur in https://github.com/lxc/incus/pull/2858
* incusd/storage/zfs: Set IncusOS storage usage property by @stgraber in https://github.com/lxc/incus/pull/2857
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2861
* shared/util: Fix SingleQuote to actually quote by @stgraber in https://github.com/lxc/incus/pull/2863
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2867
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2869
* incus: Fix get-client-certificate ignoring per-remote certs by @MarcosDaNight in https://github.com/lxc/incus/pull/2866
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2870
* incusd/storage/lvm: Move IncusOS check to pool creation by @stgraber in https://github.com/lxc/incus/pull/2871
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2874
* Improvements to incus-migrate by @stgraber in https://github.com/lxc/incus/pull/2883
* tests: Fix SR-IOV attached key test by @Shaderbug in https://github.com/lxc/incus/pull/2882
* Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/2891
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2901
* Add support for QCOW2 migration whether the instance is stopped by @presztak in https://github.com/lxc/incus/pull/2896
* Assorted bugfixes by @stgraber in https://github.com/lxc/incus/pull/2902
* incusd: Search OVS switch external_interfaces by @dankm in https://github.com/lxc/incus/pull/2898
* SR-IOV: Implement support for trust property by @Shaderbug in https://github.com/lxc/incus/pull/2903
* MarkdownLint fixes, fix nonstandard {Important} by @AJRepo in https://github.com/lxc/incus/pull/2885
* Manual pattern snapshots maintain uniqueness with pongo-pattern. by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2880
* Propagate error when adding qcow2 backing block device by @presztak in https://github.com/lxc/incus/pull/2908
* Implement direct backup exports by @bensmrs in https://github.com/lxc/incus/pull/2899
* Implement disk-only snapshot restore by @stgraber in https://github.com/lxc/incus/pull/2912
* Skip special disk devices in metrics by @stgraber in https://github.com/lxc/incus/pull/2911
* Prevent moving shared storage volumes by @presztak in https://github.com/lxc/incus/pull/2914
* Add `incus image generate-metadata` and update `incus-migrate`documentation by @stgraber in https://github.com/lxc/incus/pull/2916
* Support live migration of qcow2 volumes  by @presztak in https://github.com/lxc/incus/pull/2917
* Pass live migration flag and skip final filesystem sync for VMs by @presztak in https://github.com/lxc/incus/pull/2925
* Add QCOW2 live migration support for instances with snapshots by @presztak in https://github.com/lxc/incus/pull/2923
* doc/requirements: Bump minimal requirements by @stgraber in https://github.com/lxc/incus/pull/2926
* Validate requested storage pool during instance migration by @presztak in https://github.com/lxc/incus/pull/2931
* Implement VM fast reboot by @stgraber in https://github.com/lxc/incus/pull/2933
* Improve live migration handling by @stgraber in https://github.com/lxc/incus/pull/2934
* incus-migrate: Fix URL detection by @stgraber in https://github.com/lxc/incus/pull/2935
* Remove instance volume on revert after failed live migration by @presztak in https://github.com/lxc/incus/pull/2937
* Fix source hang when target migration fails by @presztak in https://github.com/lxc/incus/pull/2938
* Prevent concurrent QCOW2 snapshot deletions by @p

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.22.0]_

### v6.21.0 — Incus 6.21

- Date: 2026-01-23
- Version: v6.21.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.21.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.21.0
- Labels: Platforms: Linux

- **added** — Add custom OIDC claim to restrict access to specific subnet
- **added** — Add vlan.tagged to physical networks
- **added** — Add support for nic SR-IOV selection by vendorid, productid and pci
- **added** — Add `incus wait` command
- **added** — Add `attached` and `connected` keys to NIC devices
- **added** — Add several more environment variables
- **changed** — Parallelize instance startup on daemon start
- **changed** — Allow parent re-use for bridges in physical networks
- **changed** — Tweak boot.autostart behavior
- **changed** — Use proxy protocol package with v2 support
- **changed** — Allow setting 'vg_name' for non-clustered LVM during init
- **changed** — Pass firmware opt from device/pci to instance/qemu
- **changed** — Tweak dnsmasq startup condition
- **changed** — Use the standard DNS SOA format
- **fixed** — Fix SetVolumeQuota issue when growing FS volumes in TrueNAS storage
- **fixed** — Don't reset incus-user setup if user has access
- **fixed** — Implement forced deletion in legacy file API
- **fixed** — Add qcow2 resize support and respect specified disk size
- **fixed** — Fix adding disk with a device name longer than 31 bytes
- **fixed** — Fix required=false with custom volumes
- **fixed** — Fix some potential race conditions
- **fixed** — Hash serial value if it exceeds the maximum length
- **fixed** — Remove automatic increasing of SR-IOV VF count
- **removed** — Drop now obsolete DNS check from OVN network
- **security** — Further restrict API names character set and prevent shell expansion
- **security** — Security fixes ahead of Incus 6.21

#### Announcement
https://discuss.linuxcontainers.org/t/incus-6-21-has-been-released/26005

##### What's Changed
* doc/openfga: Improve required config keys by @tibeer in https://github.com/lxc/incus/pull/2779
* incusd/network/ovn: Drop now obsolete DNS check by @stgraber in https://github.com/lxc/incus/pull/2782
* incusd/storage/truenas: Fix SetVolumeQuota issue when growing FS volumes by @mrstux in https://github.com/lxc/incus/pull/2783
* incus-user: Don't reset setup if user has access by @MarcosDaNight in https://github.com/lxc/incus/pull/2784
* Add custom OIDC claim to restrict access to specific subnet by @stgraber in https://github.com/lxc/incus/pull/2789
* Tweak boot.autostart by @stgraber in https://github.com/lxc/incus/pull/2791
* incusd/network/physical: Allow parent re-use for bridges by @stgraber in https://github.com/lxc/incus/pull/2793
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2794
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2796
* Add vlan.tagged to physical networks by @stgraber in https://github.com/lxc/incus/pull/2802
* Implement forced deletion in legacy file API by @stgraber in https://github.com/lxc/incus/pull/2801
* doc/network_ovn: Add note about advanced external_interfaces syntax by @stgraber in https://github.com/lxc/incus/pull/2805
* Parallelize instance startup on daemon start by @presztak in https://github.com/lxc/incus/pull/2809
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2813
* generate-database: Respect "primary" config for Identifier in mappings by @breml in https://github.com/lxc/incus/pull/2815
* Add qcow2 resize support and respect specified disk size by @presztak in https://github.com/lxc/incus/pull/2811
* Added a few more environment variables by @MOBergeron in https://github.com/lxc/incus/pull/2816
* Use proxy protocol package with v2 support by @masnax in https://github.com/lxc/incus/pull/2817
* generate-database: fix import type for association tables by @breml in https://github.com/lxc/incus/pull/2818
* Fix adding disk with a device name longer than 31 bytes by @presztak in https://github.com/lxc/incus/pull/2819
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2826
* Further restrict API names character set and prevent shell expansion by @stgraber in https://github.com/lxc/incus/pull/2827
* Fix required=false with custom volumes by @stgraber in https://github.com/lxc/incus/pull/2829
* Fix some potential race conditions by @stgraber in https://github.com/lxc/incus/pull/2832
* Allow setting 'vg_name' for non-clustered LVM during init by @presztak in https://github.com/lxc/incus/pull/2838
* Add support for nic SR-IOV selection by vendorid, productid and pci by @presztak in https://github.com/lxc/incus/pull/2828
* incusd: pass firmware opt from device/pci to instance/qemu by @stek29 in https://github.com/lxc/incus/pull/2837
* Add `incus wait` by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2834
* Hash serial value if it exceeds the maximum length by @presztak in https://github.com/lxc/incus/pull/2841
* doc/linstor: Add documentation for `source` parameter. by @tibeer in https://github.com/lxc/incus/pull/2795
* Update Rocky Linux instructions by @neelchauhan in https://github.com/lxc/incus/pull/2804
* Tweak dnsmasq startup condition by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2840
* Use the standard DNS SOA format by @dankm in https://github.com/lxc/incus/pull/2843
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2844
* Remove automatic increasing of SR-IOV VF count by @presztak in https://github.com/lxc/incus/pull/2845
* doc: Add warning about long device names by @presztak in https://github.com/lxc/incus/pull/2846
* Security fixes ahead of Incus 6.21 by @stgraber in https://github.com/lxc/incus/pull/2848
* Ad

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.21.0]_

### v6.20.0 — Incus 6.20

- Date: 2025-12-19
- Version: v6.20.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.20.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.20.0
- Labels: Platforms: Linux

- **fixed** — Fix SELinux issue with agent run path
- **fixed** — Fix cat order bug in selinuxContext()
- **added** — Add default environment variables for the Windows Agent
- **added** — Add new Windows environment variable 'SystemDrive'
- **changed** — Generate a stable MAC for managed physical bridge interfaces
- **fixed** — Fix VLAN for VMs on physical devices
- **added** — Allow reading Ephemeral flag from stdin in instance creation
- **changed** — Network bridge no longer listens for incoming Router Advertisements
- **changed** — Allow trailing dot in NS records for network zones
- **added** — Allow live-migration of bridged physical NICs
- **changed** — Improve VM state handling
- **fixed** — Return a copy of the metadata in operations to avoid concurrent modification issues
- **fixed** — Fix regression in reported state for QEMU instances
- **changed** — Implement Happy Eyeballs (RFC 8305) in TLS RFC3493Dialer
- **changed** — Make TPM device incompatible with live-migration
- **added** — Add support for QCOW2 formatted volumes on lvmcluster
- **fixed** — Fix storage related issues
- **changed** — Take project into account during QCOW2 operations
- **added** — Implement standalone `incus cluster join` command
- **added** — Implement agent feature restriction from the guest

#### Announcement
https://discuss.linuxcontainers.org/t/incus-6-20-has-been-released/25635

##### What's Changed
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2718
* agent-loader/install-linux.sh Fix SELinux issue with agent run path by @rgerardi in https://github.com/lxc/incus/pull/2719
* doc: fix instances-limit-units reference links by @hnakamur in https://github.com/lxc/incus/pull/2716
* instance/drivers/driver_common: Fix cat order bug in selinuxContext() by @mschiff in https://github.com/lxc/incus/pull/2721
* Add Default Environment Variables for the Windows Agent by @MOBergeron in https://github.com/lxc/incus/pull/2720
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2722
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2723
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2724
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2729
* Added new Windows environment variable 'SystemDrive' by @MOBergeron in https://github.com/lxc/incus/pull/2730
* incusd/instance/lxc: Generate a stable MAC for managed physical bridg… by @stgraber in https://github.com/lxc/incus/pull/2727
* incusd/device/nic_physical: Fix VLAN for VMs by @stgraber in https://github.com/lxc/incus/pull/2732
* incus/create: Allow reading Ephemeral flag from stdin by @stgraber in https://github.com/lxc/incus/pull/2731
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2735
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2742
* incusd/network/bridge: Don't listen for incoming RAs by @stgraber in https://github.com/lxc/incus/pull/2743
* incusd/network/zone: Allow trailing dot in NS records by @stgraber in https://github.com/lxc/incus/pull/2744
* incusd/device/physical: Allow live-migration of bridged physical NICs by @stgraber in https://github.com/lxc/incus/pull/2745
* Move ACME challenge logic to `shared` by @masnax in https://github.com/lxc/incus/pull/2746
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2750
* Improve VM state handling by @stgraber in https://github.com/lxc/incus/pull/2747
* incusd/operations: Return a copy of the metadata to avoid concurrent … by @stgraber in https://github.com/lxc/incus/pull/2752
* incusd/instance/qemu: Fix regression in reported state by @stgraber in https://github.com/lxc/incus/pull/2756
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2758
* Update dependencies by @stgraber in https://github.com/lxc/incus/pull/2759
* build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/lxc/incus/pull/2762
* incus/io: #2636 fix linter complaints in `internal/io` by @dector in https://github.com/lxc/incus/pull/2763
* internal/jmap: Refactor Map methods and add comprehensive tests by @dector in https://github.com/lxc/incus/pull/2765
* incusd/storage_volumes: Fix state handling in getVolumeFull by @stgraber in https://github.com/lxc/incus/pull/2766
* Attempt to make the Incus Agent on Windows better integrated. by @MOBergeron in https://github.com/lxc/incus/pull/2749
* generate-database: Allow overwriting the target column for a join by @breml in https://github.com/lxc/incus/pull/2761
* shared/tls: implement Happy Eyeballs (RFC 8305) in RFC3493Dialer by @johnae in https://github.com/lxc/incus/pull/2753
* incusd/devices/tpm: Make incompatible with live-migration by @stgraber in https://github.com/lxc/incus/pull/2767
* incus/network_load_balancer: Fix typo in cmd info description by @positiveEV in https://github.com/lxc/incus/pull/2768
* incus/util: #2636 fix linter complaints in `internal/filter` by @dector in https://github.com/lxc/incus/pull/2764
* Add support for QCOW2 formatted volumes o

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.20.0]_