# Incus v6.23.0 — Incus 6.23

- Product: Incus (https://whatsnew.fyi/product/incus)
- Vendor: LinuxContainers
- Date: 2026-03-27
- Version: v6.23.0
- Original notes: https://github.com/lxc/incus/releases/tag/v6.23.0
- Permalink: https://whatsnew.fyi/product/incus/releases/v6.23.0
- Labels: Platforms: Linux

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Allow custom volume snapshot create/delete when attached to running instance
- **added** — Add OVN ipv4.dhcp.gateway option and allow none value
- **added** — Add /usr/bin/init to OCI PID1 list
- **added** — Add an instance repair API
- **added** — Implement new parser for CLI client
- **added** — Add support for instance-agent events
- **added** — Add FreeBSD agent
- **added** — Add initial support for dependent volumes
- **added** — Add support for migrating dependent volumes with instances
- **added** — Add colors to the CLI client
- **added** — Add LZ4 compression
- **added** — Add project resource and limit metrics
- **added** — Allow importing OVAs from URLs
- **changed** — Increase node-exporter timeout to 5 seconds
- **changed** — Simplify config subvolume naming by using static instance prefix
- **changed** — NIC improvements
- **changed** — Defer remote connection in incus usage
- **changed** — Few tweaks around CLI colors
- **fixed** — Add lock to shared/cliconfig to prevent panic
- **fixed** — Report correct ServerName in incusd/endpoints/starttls
- **fixed** — Fix missing Unlock in incusd/operations
- **fixed** — Print newly-created snapshot name if unspecified
- **fixed** — Fix issues with logs volume
- **fixed** — Fix OVA handling within os.Root in incus-migrate
- **fixed** — Fix edge case in incus usage
- **fixed** — Harden certificate updates
- **fixed** — Allow internal and os API during daemon startup
- **security** — HTTP hardening
- **security** — Limit the new mount API system calls we block in incusd/seccomp
- **security** — Cleanup and harden the OIDC allowed_subnets claim
- **security** — Restrict security.shared to raw custom block volumes on lvmcluster

#### Announcement
https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447

##### What's Changed
* Allow custom volume snapshot create/delete when attached to running instance by @presztak in https://github.com/lxc/incus/pull/2989
* shared/cliconfig: Add lock to prevent panic by @stgraber in https://github.com/lxc/incus/pull/2991
* incusd/endpoints/starttls: Report correct ServerName by @stgraber in https://github.com/lxc/incus/pull/2993
* generate-database: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2995
* build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/2996
* firewall: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2997
* OVN add `ipv4.dhcp.gateway` + allow `none` value by @JulesdeCube in https://github.com/lxc/incus/pull/2990
* server sys: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2999
* server project: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/2998
* server util: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3000
* incusd/instance/lxc: Add /usr/bin/init to OCI PID1 list by @stgraber in https://github.com/lxc/incus/pull/3001
* server seccomp: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3002
* server migration: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3003
* server task: fix linter complaints by @J0nasDotDev in https://github.com/lxc/incus/pull/3004
* Add an instance repair API by @stgraber in https://github.com/lxc/incus/pull/3008
* Implement new parser for CLI client by @bensmrs in https://github.com/lxc/incus/pull/3007
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3009
* incusd/operations: Fix missing Unlock by @stgraber in https://github.com/lxc/incus/pull/3012
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3013
* incusd/metrics: Increase node-exporter timeout to 5s by @stgraber in https://github.com/lxc/incus/pull/3015
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3019
* Mixed bugfixes by @stgraber in https://github.com/lxc/incus/pull/3020
* Add support for instance-agent events by @0xk1f0 in https://github.com/lxc/incus/pull/3026
* NIC improvements by @bensmrs in https://github.com/lxc/incus/pull/3024
* incus/usage: Defer remote connection by @bensmrs in https://github.com/lxc/incus/pull/3028
* Fix linter reported issues by @stgraber in https://github.com/lxc/incus/pull/3022
* Add FreeBSD agent by @bensmrs in https://github.com/lxc/incus/pull/3029
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3031
* Fix ZFS test failures by @stgraber in https://github.com/lxc/incus/pull/3027
* incus: fix log in sftpRecursiveMkdir by @J0nasDotDev in https://github.com/lxc/incus/pull/3032
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3034
* devcontainer: update Go version and pipx install command by @0xk1f0 in https://github.com/lxc/incus/pull/3035
* Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3038
* incus/cluster: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3041
* incus: Fix indent on --sub-commands by @stgraber in https://github.com/lxc/incus/pull/3042
* Add initial support for dependent volumes by @presztak in https://github.com/lxc/incus/pull/3025
* Introduce goreleaser by @stgraber in https://github.com/lxc/incus/pull/3044
* incusd/daemon: Allow internal and os API during startup by @stgraber in https://github.com/lxc/incus/pull/3045
* Diverse agent fixes by @bensmrs in https://github.com/lxc/incus/pull/3051
* Restrict `security.shared` to raw custom block volumes on `lvmcluster` by @presz

_[Truncated at 4000 characters — full notes: https://github.com/lxc/incus/releases/tag/v6.23.0]_