Incus v7.3.0

What's Changed

• Fix typo in documented behavior in setting restricted.containers.privilege to isolated by @Hye-Dev in https://github.com/lxc/incus/pull/3548
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3554
• doc: fix config set deprectation warning by @gagath in https://github.com/lxc/incus/pull/3552
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3555
• incus/move: Apply --storage pool to dependent disks by @stgraber in https://github.com/lxc/incus/pull/3550
• github: Build Windows and MacOS native installers. by @stgraber in https://github.com/lxc/incus/pull/3551
• Add timeout for QMP commands by @stgraber in https://github.com/lxc/incus/pull/3559
• github: Add a build workflow by @stgraber in https://github.com/lxc/incus/pull/3562
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3567
• build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in https://github.com/lxc/incus/pull/3566
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3570
• incusd/devices: Allow /32 and /128 for OCI addresses by @stgraber in https://github.com/lxc/incus/pull/3568
• cmd/generate-database/db: Manually specify uuid package by @masnax in https://github.com/lxc/incus/pull/3574
• incusd/operations: Fix nil deref race in Cancel by @stgraber in https://github.com/lxc/incus/pull/3573
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3575
• incusd/instance/qemu/qmp: Bump timeout for block commands by @stgraber in https://github.com/lxc/incus/pull/3576
• incusd/instance/qemu/qmp: Bump timeout for slow synchronous commands by @stgraber in https://github.com/lxc/incus/pull/3577
• incus: Avoid double-close warning on export and file pull by @stgraber in https://github.com/lxc/incus/pull/3580
• doc/incus-cli: reword docs for configuration file path by @abiosoft in https://github.com/lxc/incus/pull/3581
• incusd/device/disk: Use resolved project for Ceph ISO RBD names by @47star in https://github.com/lxc/incus/pull/3583
• Fallback to sending agent state data through vserial ringbuffer by @masnax in https://github.com/lxc/incus/pull/3582
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3588
• incusd/storage: Honor btrfs.compression on instances from optimized images by @cmspam in https://github.com/lxc/incus/pull/3591
• incusd/storage/s3: Add GetBucketVersioning by @stgraber in https://github.com/lxc/incus/pull/3593
• incusd/instance/qemu: Use a shared memory backend on all architectures by @stgraber in https://github.com/lxc/incus/pull/3589
• Add support for ipvX.gateway=none for OCI containers by @stgraber in https://github.com/lxc/incus/pull/3586
• Use persistent Logical Switch Ports with OVN by @stgraber in https://github.com/lxc/incus/pull/3587
• Fix concurrent image unpacking on ceph by @DarkressX in https://github.com/lxc/incus/pull/3579
• Add support for BGP unnumbered peers by @stgraber in https://github.com/lxc/incus/pull/3600
• incusd/forknet: Wait up to 5s for initial DHCP configuration by @stgraber in https://github.com/lxc/incus/pull/3595
• incusd/instance/qemu: Handle missing kvm64 by @glowf1sh in https://github.com/lxc/incus/pull/3605
• client: Only pass device overrides to sources supporting them by @stgraber in https://github.com/lxc/incus/pull/3607
• Fix handling of CPU pinning during live migration by @stgraber in https://github.com/lxc/incus/pull/3608
• Support persistent bitmaps for raw-format block devices by @presztak in https://github.com/lxc/incus/pull/3609
• incusd/network/ovn: Fix NAT for network forward default targets by @0xk1f0 in https://github.com/lxc/incus/pull/3596
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3611
• Implement security.nesting for virtual machines by @stgraber in https://github.com/lxc/incus/pull/3612
• Move all the authorization related keys within one central authorization.XYZ namespace by @presztak in https://github.com/lxc/incus/pull/3619
• Add mention fo cgroup2 limitations by @stgraber in https://github.com/lxc/incus/pull/3616
• incusd/dev_incus: Fix race in ConnPidMapper access by @stgraber in https://github.com/lxc/incus/pull/3621
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3615
• Implement network allocations summary by @MarcosDaNight in https://github.com/lxc/incus/pull/3620
• incusd/storage/ceph: Concurrent Deletion Adjustments by @0xk1f0 in https://github.com/lxc/incus/pull/3622
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3624
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3623
• Add a native-context GPU type for VMs (virtio-gpu DRM native context) by @cmspam in https://github.com/lxc/incus/pull/3564
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3629
• Add storage pool usage metrics by @MarcosDaNight in https://github.com/lxc/incus/pull/3628
• incusd/storage/zfs: Restore volume quota on refresh error by @stgraber in https://github.com/lxc/incus/pull/3631
• Add support for port forwarding (CLI connects to inside instance) by @stgraber in https://github.com/lxc/incus/pull/3633
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3634
• incusd/metrics: Rename incus_storage_pool_total_bytes to incus_storag… by @stgraber in https://github.com/lxc/incus/pull/3636
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3640
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3641
• shared/tls: Use first successful connection in RFC3493Dialer by @stgraber in https://github.com/lxc/incus/pull/3644
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3645
• network/ovn: Tolerate stop failures during network deletion by @0xk1f0 in https://github.com/lxc/incus/pull/3635
• Fix forwarding of NBD volume requests by @stgraber in https://github.com/lxc/incus/pull/3647
• incus/console: Escape spaces in SPICE console socket URI by @SudhanshuMatrix in https://github.com/lxc/incus/pull/3650
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3656
• Prevent using the Incus daemon directory as a storage pool by @stgraber in https://github.com/lxc/incus/pull/3659
• Fix progress reporting when dealing with stdin by @bensmrs in https://github.com/lxc/incus/pull/3664
• Change assign subcommands separator by @bensmrs in https://github.com/lxc/incus/pull/3663
• incusd/network/zone: Return a single SOA record on plain SOA queries by @stgraber in https://github.com/lxc/incus/pull/3666
• incusd/storage: Fix races in connectOfflineNBD by @stgraber in https://github.com/lxc/incus/pull/3668
• More NBD fixes by @stgraber in https://github.com/lxc/incus/pull/3670
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3673
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3675
• device: Add I/O limits for unix-block devices by @fivetime in https://github.com/lxc/incus/pull/3648
• Fix LVM cluster size calculation on migration by @stgraber in https://github.com/lxc/incus/pull/3677
• Better handle stale OVN connections by @stgraber in https://github.com/lxc/incus/pull/3676
• Add support for multiple authorizers by @presztak in https://github.com/lxc/incus/pull/3639
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3683
• Add NVRAM inspection by @bensmrs in https://github.com/lxc/incus/pull/3662
• seccomp: Use namespace credentials for FUSE mounts by @fivetime in https://github.com/lxc/incus/pull/3686
• incusd: Detect LXC monitors from cgroup v2 by @fivetime in https://github.com/lxc/incus/pull/3684
• Add storage note about loop devices on COW fs by @johnmaguire in https://github.com/lxc/incus/pull/3680
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3697
• Fix instance copy for non-block volumes by @presztak in https://github.com/lxc/incus/pull/3698
• shared/ask, cmd/incus: fix password prompt loop on Windows by @SudhanshuMatrix in https://github.com/lxc/incus/pull/3700
• Allow both IOps and byte limits by @stgraber in https://github.com/lxc/incus/pull/3690
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3689
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3702
• Add support for '--refresh' for instances with dependent disks by @presztak in https://github.com/lxc/incus/pull/3701
• incusd/instance/lxc: Use project-qualified CRIU restore name by @fivetime in https://github.com/lxc/incus/pull/3692
• incusd/instance/lxc: Clean devices after failed CRIU restore by @fivetime in https://github.com/lxc/incus/pull/3693
• incusd/seccomp: Report FUSE mount helper failures by @fivetime in https://github.com/lxc/incus/pull/3694
• incusd/instance/lxc: Fix OCI entrypoint escaping by @stgraber in https://github.com/lxc/incus/pull/3704
• Fix volume activation of filesystem snapshots by @presztak in https://github.com/lxc/incus/pull/3706
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3705
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3709
• incusd/instance/qmp: Bump blockdev-add/del timeouts by @stgraber in https://github.com/lxc/incus/pull/3712
• incusd/storage: Allow expected symlinks in instance metadata by @stgraber in https://github.com/lxc/incus/pull/3711
• Fix server-side filtering by @stgraber in https://github.com/lxc/incus/pull/3714
• Add a "network" column to "incus network list-allocations" by @stgraber in https://github.com/lxc/incus/pull/3718
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3719
• Allow certificate updates with offline nodes on same-key renewals by @SudhanshuMatrix in https://github.com/lxc/incus/pull/3717
• incusd: Keep cluster listener when core.https_address changes by @stgraber in https://github.com/lxc/incus/pull/3723
• Simplify cross-network NAT skip by @stgraber in https://github.com/lxc/incus/pull/3724
• build(deps): bump KineticCafe/actions-dco from 3.1.0 to 3.2.0 by @dependabot[bot] in https://github.com/lxc/incus/pull/3725
• build(deps): bump actions/labeler from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3726
• Split memory and swap cgroup2 checks and tweak validation by @stgraber in https://github.com/lxc/incus/pull/3727
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3731
• Add support for ACME EAB by @stgraber in https://github.com/lxc/incus/pull/3728
• Fix crash on root disk reconfig by @stgraber in https://github.com/lxc/incus/pull/3729
• Handle updated instance type data by @stgraber in https://github.com/lxc/incus/pull/3737
• Update swagger response codes by @stgraber in https://github.com/lxc/incus/pull/3739
• Storage fixes by @stgraber in https://github.com/lxc/incus/pull/3740
• Fix SFTP connections by @jochumdev in https://github.com/lxc/incus/pull/3742
• internal/linux: detect initial user namespace by inode by @aleivag in https://github.com/lxc/incus/pull/3736
• incus/launch: Link to the supported instance types by @gagath in https://github.com/lxc/incus/pull/3734
• storage: Bound Ceph RBD unmap operations by @fivetime in https://github.com/lxc/incus/pull/3715
• More speed for compression/decompression with pigz by @jochumdev in https://github.com/lxc/incus/pull/3743
• incus/list: Add --all-remotes by @tapiab in https://github.com/lxc/incus/pull/3733
• Add NVRAM setters by @bensmrs in https://github.com/lxc/incus/pull/3744
• Add bitmap operations and instance repair actions to the CLI by @stgraber in https://github.com/lxc/incus/pull/3746
• incusd/firewall/nftables: Fix template race in applyNftConfig by @stgraber in https://github.com/lxc/incus/pull/3745
• Fix resource leak, deadlock and bulk query performance by @stgraber in https://github.com/lxc/incus/pull/3747
• Add NVRAM rebuild by @bensmrs in https://github.com/lxc/incus/pull/3748
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3749
• Security fixes for Incus 7.3 by @stgraber in https://github.com/lxc/incus/pull/3750
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3751
• Add more formats for incus low-level nvram get/set by @bensmrs in https://github.com/lxc/incus/pull/3752
• Update gomod by @stgraber in https://github.com/lxc/incus/pull/3753

New Contributors

• @gagath made their first contribution in https://github.com/lxc/incus/pull/3552
• @glowf1sh made their first contribution in https://github.com/lxc/incus/pull/3605
• @SudhanshuMatrix made their first contribution in https://github.com/lxc/incus/pull/3650
• @fivetime made their first contribution in https://github.com/lxc/incus/pull/3648
• @johnmaguire made their first contribution in https://github.com/lxc/incus/pull/3680
• @jochumdev made their first contribution in https://github.com/lxc/incus/pull/3742
• @aleivag made their first contribution in https://github.com/lxc/incus/pull/3736
• @tapiab made their first contribution in https://github.com/lxc/incus/pull/3733

Full Changelog: https://github.com/lxc/incus/compare/v7.2.0...v7.3.0