v6.23.0Linux
Incus 6.23
Added 13
- Allow custom volume snapshot create/delete when attached to running instance
- Add OVN ipv4.dhcp.gateway option and allow none value
- Add /usr/bin/init to OCI PID1 list
- Add an instance repair API
- Implement new parser for CLI client
- Add support for instance-agent events
- Add FreeBSD agent
- Add initial support for dependent volumes
- Add support for migrating dependent volumes with instances
- Add colors to the CLI client
- Add LZ4 compression
- Add project resource and limit metrics
- Allow importing OVAs from URLs
Changed 5
- Increase node-exporter timeout to 5 seconds
- Simplify config subvolume naming by using static instance prefix
- NIC improvements
- Defer remote connection in incus usage
- Few tweaks around CLI colors
Fixed 9
- Add lock to shared/cliconfig to prevent panic
- Report correct ServerName in incusd/endpoints/starttls
- Fix missing Unlock in incusd/operations
- Print newly-created snapshot name if unspecified
- Fix issues with logs volume
- Fix OVA handling within os.Root in incus-migrate
- Fix edge case in incus usage
- Harden certificate updates
- Allow internal and os API during daemon startup
Security 4
- HTTP hardening
- Limit the new mount API system calls we block in incusd/seccomp
- Cleanup and harden the OIDC allowed_subnets claim
- Restrict security.shared to raw custom block volumes on lvmcluster
Announcement
https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447
What's Changed
- Allow custom volume snapshot create/delete when attached to running instance by @presztak in https://github.com/lxc/incus/pull/2989
- shared/cliconfig: Add lock to prevent panic by @stgraber in https://github.com/lxc/incus/pull/2991
- incusd/endpoints/starttls: Report correct ServerName by @stgraber in https://github.com/lxc/incus/pull/2993
- generate-database: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2995
- build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/2996
- firewall: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2997
- OVN add
ipv4.dhcp.gateway+ allownonevalue by @JulesdeCube in https://github.com/lxc/incus/pull/2990 - server sys: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2999
- server project: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2998
- server util: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3000
- incusd/instance/lxc: Add /usr/bin/init to OCI PID1 list by @stgraber in https://github.com/lxc/incus/pull/3001
- server seccomp: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3002
- server migration: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3003
- server task: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3004
- Add an instance repair API by @stgraber in https://github.com/lxc/incus/pull/3008
- Implement new parser for CLI client by @bensmrs in https://github.com/lxc/incus/pull/3007
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3009
- incusd/operations: Fix missing Unlock by @stgraber in https://github.com/lxc/incus/pull/3012
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3013
- incusd/metrics: Increase node-exporter timeout to 5s by @stgraber in https://github.com/lxc/incus/pull/3015
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3019
- Mixed bugfixes by @stgraber in https://github.com/lxc/incus/pull/3020
- Add support for instance-agent events by @0xk1f0 in https://github.com/lxc/incus/pull/3026
- NIC improvements by @bensmrs in https://github.com/lxc/incus/pull/3024
- incus/usage: Defer remote connection by @bensmrs in https://github.com/lxc/incus/pull/3028
- Fix linter reported issues by @stgraber in https://github.com/lxc/incus/pull/3022
- Add FreeBSD agent by @bensmrs in https://github.com/lxc/incus/pull/3029
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3031
- Fix ZFS test failures by @stgraber in https://github.com/lxc/incus/pull/3027
- incus: fix log in sftpRecursiveMkdir by @J0nasDotDev in https://github.com/lxc/incus/pull/3032
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3034
- devcontainer: update Go version and pipx install command by @0xk1f0 in https://github.com/lxc/incus/pull/3035
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3038
- incus/cluster: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3041
- incus: Fix indent on --sub-commands by @stgraber in https://github.com/lxc/incus/pull/3042
- Add initial support for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3025
- Introduce goreleaser by @stgraber in https://github.com/lxc/incus/pull/3044
- incusd/daemon: Allow internal and os API during startup by @stgraber in https://github.com/lxc/incus/pull/3045
- Diverse agent fixes by @bensmrs in https://github.com/lxc/incus/pull/3051
- Restrict
security.sharedto raw custom block volumes onlvmclusterby @presztak in https://github.com/lxc/incus/pull/3053 - incus: Print newly-created snapshot name if unspecified by @J0nasDotDev in https://github.com/lxc/incus/pull/3039
- incus/info: Allow querying alternative log files by @stgraber in https://github.com/lxc/incus/pull/3052
- Simplify config subvolume naming by using static "instance" prefix by @presztak in https://github.com/lxc/incus/pull/3050
- Add colors to the CLI client by @bensmrs in https://github.com/lxc/incus/pull/3058
- HTTP hardening by @stgraber in https://github.com/lxc/incus/pull/3067
- Add support for migrating dependent volumes with instances by @presztak in https://github.com/lxc/incus/pull/3057
- Fix issues with logs volume by @stgraber in https://github.com/lxc/incus/pull/3063
- Harden certificate updates by @stgraber in https://github.com/lxc/incus/pull/3068
- Few tweaks around CLI colors by @bensmrs in https://github.com/lxc/incus/pull/3065
- Add LZ4 compression by @bensmrs in https://github.com/lxc/incus/pull/3071
- Add project resource and limit metrics by @Adevixxx in https://github.com/lxc/incus/pull/3021
- incus-migrate: Fix OVA handling within os.Root by @stgraber in https://github.com/lxc/incus/pull/3072
- incus-migrate: Allow importing OVAs from URLs by @bensmrs in https://github.com/lxc/incus/pull/3073
- incusd/seccomp: Limit the new mount API system calls we block by @stgraber in https://github.com/lxc/incus/pull/3070
- incus/usage: Fix edge case by @bensmrs in https://github.com/lxc/incus/pull/3080
- Update dependencies by @stgraber in https://github.com/lxc/incus/pull/3078
- Cleanup and harden the OIDC allowed_subnets claim by @stgraber in https://github.com/lxc/incus/pull/3079
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3082
- doc: Remove config-options page by @bensmrs in https://github.com/lxc/incus/pull/3083
- Refactor live migration - extract common logic by @presztak in https://github.com/lxc/incus/pull/3085
- Add cp-like flags to pull commands by @bensmrs in https://github.com/lxc/incus/pull/3086
- Prevent setting the 'snapshots.XYZ' keys on dependent volumes by @presztak in https://github.com/lxc/incus/pull/3087
- incusd/instances_post: Add extra validation during backup import by @stgraber in https://github.com/lxc/incus/pull/3088
- Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3090
- Add support for live migration of dependent disks by @presztak in https://github.com/lxc/incus/pull/3089
- Add
image.requirements.cdrom_cloud_initkey by @bensmrs in https://github.com/lxc/incus/pull/3091 - Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3094
- Fix some security issues by @stgraber in https://github.com/lxc/incus/pull/3092
- Small fixes and refactorings by @stgraber in https://github.com/lxc/incus/pull/3095
- Pre-release bugfixes by @stgraber in https://github.com/lxc/incus/pull/3096
New Contributors
- @JulesdeCube made their first contribution in https://github.com/lxc/incus/pull/2990
- @urbalazs made their first contribution in https://github.com/lxc/incus/pull/3041
- @Adevixxx made their first contribution in https://github.com/lxc/incus/pull/3021
Full Changelog: https://github.com/lxc/incus/compare/v6.22.0...v6.23.0