# Incus v6.21.0 — Incus 6.21

- Product: Incus (https://whatsnew.fyi/product/incus)
- Vendor: LinuxContainers
- Date: 2026-01-23
- Version: v6.21.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.21.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.21.0
- Labels: Platforms: Linux

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add custom OIDC claim to restrict access to specific subnet
- **added** — Add vlan.tagged to physical networks
- **added** — Add support for nic SR-IOV selection by vendorid, productid and pci
- **added** — Add `incus wait` command
- **added** — Add `attached` and `connected` keys to NIC devices
- **added** — Add several more environment variables
- **changed** — Parallelize instance startup on daemon start
- **changed** — Allow parent re-use for bridges in physical networks
- **changed** — Tweak boot.autostart behavior
- **changed** — Use proxy protocol package with v2 support
- **changed** — Allow setting 'vg_name' for non-clustered LVM during init
- **changed** — Pass firmware opt from device/pci to instance/qemu
- **changed** — Tweak dnsmasq startup condition
- **changed** — Use the standard DNS SOA format
- **fixed** — Fix SetVolumeQuota issue when growing FS volumes in TrueNAS storage
- **fixed** — Don't reset incus-user setup if user has access
- **fixed** — Implement forced deletion in legacy file API
- **fixed** — Add qcow2 resize support and respect specified disk size
- **fixed** — Fix adding disk with a device name longer than 31 bytes
- **fixed** — Fix required=false with custom volumes
- **fixed** — Fix some potential race conditions
- **fixed** — Hash serial value if it exceeds the maximum length
- **fixed** — Remove automatic increasing of SR-IOV VF count
- **removed** — Drop now obsolete DNS check from OVN network
- **security** — Further restrict API names character set and prevent shell expansion
- **security** — Security fixes ahead of Incus 6.21

#### Announcement
https://discuss.linuxcontainers.org/t/incus-6-21-has-been-released/26005

##### What's Changed
* doc/openfga: Improve required config keys by @tibeer in https://github.com/lxc/incus/pull/2779
* incusd/network/ovn: Drop now obsolete DNS check by @stgraber in https://github.com/lxc/incus/pull/2782
* incusd/storage/truenas: Fix SetVolumeQuota issue when growing FS volumes by @mrstux in https://github.com/lxc/incus/pull/2783
* incus-user: Don't reset setup if user has access by @MarcosDaNight in https://github.com/lxc/incus/pull/2784
* Add custom OIDC claim to restrict access to specific subnet by @stgraber in https://github.com/lxc/incus/pull/2789
* Tweak boot.autostart by @stgraber in https://github.com/lxc/incus/pull/2791
* incusd/network/physical: Allow parent re-use for bridges by @stgraber in https://github.com/lxc/incus/pull/2793
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2794
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2796
* Add vlan.tagged to physical networks by @stgraber in https://github.com/lxc/incus/pull/2802
* Implement forced deletion in legacy file API by @stgraber in https://github.com/lxc/incus/pull/2801
* doc/network_ovn: Add note about advanced external_interfaces syntax by @stgraber in https://github.com/lxc/incus/pull/2805
* Parallelize instance startup on daemon start by @presztak in https://github.com/lxc/incus/pull/2809
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2813
* generate-database: Respect "primary" config for Identifier in mappings by @breml in https://github.com/lxc/incus/pull/2815
* Add qcow2 resize support and respect specified disk size by @presztak in https://github.com/lxc/incus/pull/2811
* Added a few more environment variables by @MOBergeron in https://github.com/lxc/incus/pull/2816
* Use proxy protocol package with v2 support by @masnax in https://github.com/lxc/incus/pull/2817
* generate-database: fix import type for association tables by @breml in https://github.com/lxc/incus/pull/2818
* Fix adding disk with a device name longer than 31 bytes by @presztak in https://github.com/lxc/incus/pull/2819
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2826
* Further restrict API names character set and prevent shell expansion by @stgraber in https://github.com/lxc/incus/pull/2827
* Fix required=false with custom volumes by @stgraber in https://github.com/lxc/incus/pull/2829
* Fix some potential race conditions by @stgraber in https://github.com/lxc/incus/pull/2832
* Allow setting 'vg_name' for non-clustered LVM during init by @presztak in https://github.com/lxc/incus/pull/2838
* Add support for nic SR-IOV selection by vendorid, productid and pci by @presztak in https://github.com/lxc/incus/pull/2828
* incusd: pass firmware opt from device/pci to instance/qemu by @stek29 in https://github.com/lxc/incus/pull/2837
* Add `incus wait` by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2834
* Hash serial value if it exceeds the maximum length by @presztak in https://github.com/lxc/incus/pull/2841
* doc/linstor: Add documentation for `source` parameter. by @tibeer in https://github.com/lxc/incus/pull/2795
* Update Rocky Linux instructions by @neelchauhan in https://github.com/lxc/incus/pull/2804
* Tweak dnsmasq startup condition by @Mujib-Ahasan in https://github.com/lxc/incus/pull/2840
* Use the standard DNS SOA format by @dankm in https://github.com/lxc/incus/pull/2843
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/2844
* Remove automatic increasing of SR-IOV VF count by @presztak in https://github.com/lxc/incus/pull/2845
* doc: Add warning about long device names by @presztak in https://github.com/lxc/incus/pull/2846
* Security fixes ahead of Incus 6.21 by @stgraber in https://github.com/lxc/incus/pull/2848
* Ad

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.21.0]_