Incus v7.4.0

What's Changed

• docs: Clarify the sentence about Incus owning the ZFS pool/dataset by @ldesgoui in https://github.com/lxc/incus/pull/3755
• incus/low-level: Fix naming inconsistency by @stgraber in https://github.com/lxc/incus/pull/3756
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3757
• shared/api: Hide additional sensitive config keys by @stgraber in https://github.com/lxc/incus/pull/3758
• Various fixes by @stgraber in https://github.com/lxc/incus/pull/3760
• Client-side near-live migration by @presztak in https://github.com/lxc/incus/pull/3754
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3762
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3766
• incusd/cluster: Stop instances in place when evacuation has no target by @stgraber in https://github.com/lxc/incus/pull/3767
• Implement security.protect.start by @stgraber in https://github.com/lxc/incus/pull/3768
• Fix resolv.conf generation in forknet dhcp by @stgraber in https://github.com/lxc/incus/pull/3769
• Preserve client state across derived clients by @jochumdev in https://github.com/lxc/incus/pull/3771
• Various NVRAM-related improvements by @bensmrs in https://github.com/lxc/incus/pull/3770
• Allow live update of ipv4/ipv6.address.external by @0xk1f0 in https://github.com/lxc/incus/pull/3772
• Fix storage bucket handling in clusters by @stgraber in https://github.com/lxc/incus/pull/3774
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3776
• Move OVN tests to Github Actions by @stgraber in https://github.com/lxc/incus/pull/3777
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3779
• incusd/storage/lvm: Wipe source device rather than VG name by @stgraber in https://github.com/lxc/incus/pull/3782
• client: Handle unmanaged networks in preseed by @stgraber in https://github.com/lxc/incus/pull/3780
• Use proxy ARP rather than NAT rules for OVN l2proxy by @stgraber in https://github.com/lxc/incus/pull/3775
• Fix event ordering by @jochumdev in https://github.com/lxc/incus/pull/3785
• client: Event connection liveness and Disconnect fixes by @jochumdev in https://github.com/lxc/incus/pull/3784
• Server-side near-live migration by @presztak in https://github.com/lxc/incus/pull/3730
• incusd/storage/lvm: Detect block type in ListVolumes by @stgraber in https://github.com/lxc/incus/pull/3791
• Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots by @stgraber in https://github.com/lxc/incus/pull/3792
• Optimize network loading by @stgraber in https://github.com/lxc/incus/pull/3761
• Expose image location in cluster by @stgraber in https://github.com/lxc/incus/pull/3790
• Add configurable multicast snopping and relaying on OVN by @stgraber in https://github.com/lxc/incus/pull/3789
• incusd/instance/qemu: Use temporary data-file when growing metadata i… by @stgraber in https://github.com/lxc/incus/pull/3796
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3799
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3801
• Move more Jenkins daily tests to Github by @stgraber in https://github.com/lxc/incus/pull/3800
• doc: Document instance-migrated lifecycle event by @fohnwind in https://github.com/lxc/incus/pull/3807
• Fix for various recent test failures by @stgraber in https://github.com/lxc/incus/pull/3806
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3811
• Add multiple --environment-file args by @AJRepo in https://github.com/lxc/incus/pull/3805
• instance: Derive process start time from proc stat by @fivetime in https://github.com/lxc/incus/pull/3810
• Update swagger specification by @stgraber in https://github.com/lxc/incus/pull/3813
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3812
• incusd: Fix authorization for inherited storage volumes by @47star in https://github.com/lxc/incus/pull/3817
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3823
• Fix PATCH on cluster groups by @stgraber in https://github.com/lxc/incus/pull/3822
• Port more Jenkins tests to Github Actions (VM) by @stgraber in https://github.com/lxc/incus/pull/3814
• incusd/instance/qemu: Record maxcpus in boot state by @stgraber in https://github.com/lxc/incus/pull/3820
• Add custom columns to incus image list by @stgraber in https://github.com/lxc/incus/pull/3819
• Implement device path formatting by @bensmrs in https://github.com/lxc/incus/pull/3825
• doc/storage: Add TrueNAS to data storage location table by @stgraber in https://github.com/lxc/incus/pull/3827
• lxc: Start live migration action operation before pre-dumps by @fivetime in https://github.com/lxc/incus/pull/3830
• incusd/firewall: Restrict wildcard proxy NAT to local addresses by @jochumdev in https://github.com/lxc/incus/pull/3824
• client: Replace SetOrdered with AddChannel by @jochumdev in https://github.com/lxc/incus/pull/3797
• Allow using external NAT addresses on auto-assigned OVN addresses by @stgraber in https://github.com/lxc/incus/pull/3835
• Extend image locking by @stgraber in https://github.com/lxc/incus/pull/3838
• Improvements to incus remote add by @stgraber in https://github.com/lxc/incus/pull/3839
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3840
• lxc: Make incremental memory migration opt-in by @fivetime in https://github.com/lxc/incus/pull/3828
• storage/ceph: Ignore detached devices during RBD sysfs scan by @fivetime in https://github.com/lxc/incus/pull/3829
• lxc: Normalize received CRIU state ownership by @fivetime in https://github.com/lxc/incus/pull/3831
• Update for modern QEMU by @stgraber in https://github.com/lxc/incus/pull/3842
• incusd/networks: Fix panic when a network fails to start by @speijnik in https://github.com/lxc/incus/pull/3843
• incusd/instance/qemu: Cancel incoming state transfer on source failure by @stgraber in https://github.com/lxc/incus/pull/3852
• incusd/images: Surface write errors from compression pipeline by @stgraber in https://github.com/lxc/incus/pull/3851
• incusd/networks: Notify cluster members before local deletion by @stgraber in https://github.com/lxc/incus/pull/3845
• Improve cluster response times by @stgraber in https://github.com/lxc/incus/pull/3849
• Fix LVM cluster deletion issue when deleting the initial pool by @stgraber in https://github.com/lxc/incus/pull/3841
• doc: explain how to resize virtual-machine/* volumes by @gagath in https://github.com/lxc/incus/pull/3854
• Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3857
• Storage quota fixes by @stgraber in https://github.com/lxc/incus/pull/3856
• More NVRAM improvements by @bensmrs in https://github.com/lxc/incus/pull/3858
• incusd/storage: Fix source snapshot project on same-pool custom volum… by @stgraber in https://github.com/lxc/incus/pull/3863
• incus/server/device/nic/ovn: hot-reloadable ovn nic limits by @DarkressX in https://github.com/lxc/incus/pull/3865
• Alter config.json from umoci to strip volumes by @stgraber in https://github.com/lxc/incus/pull/3860
• client: Reconnect operation event listener on connection failure by @stgraber in https://github.com/lxc/incus/pull/3853
• Fix some shared-storage live-migration gaps by @stgraber in https://github.com/lxc/incus/pull/3862
• Sync filesystem instead of freezing it before snapshots by @presztak in https://github.com/lxc/incus/pull/3866
• Add support for dependent disks during in-cluster near-live migration by @presztak in https://github.com/lxc/incus/pull/3794
• Secure Boot key management and assorted fixes by @bensmrs in https://github.com/lxc/incus/pull/3867
• cmd/incus: add --data-file flag for query command by @breml in https://github.com/lxc/incus/pull/3871
• Add incus start --boot-next=xxx and more NVRAM improvements by @bensmrs in https://github.com/lxc/incus/pull/3869
• incusd/device: Fix address set project scope on bridged NIC start by @ahall in https://github.com/lxc/incus/pull/3872
• Support for disk burst limits by @presztak in https://github.com/lxc/incus/pull/3868
• Support disabling IPv6 RA on Incus managed networks by @stgraber in https://github.com/lxc/incus/pull/3874
• Fix MAC address bindings on deletion (OVN L3) by @stgraber in https://github.com/lxc/incus/pull/3879
• Add NVRAM support in QEMU scriptlet by @bensmrs in https://github.com/lxc/incus/pull/3878
• Allow sharing specific networks with restricted projects by @stgraber in https://github.com/lxc/incus/pull/3875
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3882
• Allow "none" ipv4.address/ipv6.address for OCI by @stgraber in https://github.com/lxc/incus/pull/3880
• Support for nic burst limits by @presztak in https://github.com/lxc/incus/pull/3876
• Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3887
• Allow limited pool recovery in clusters by @stgraber in https://github.com/lxc/incus/pull/3886
• incusd/instance/qmp: Set a write deadline on monitor commands by @stgraber in https://github.com/lxc/incus/pull/3883
• shared/cmd: Fix progress rendering on non-terminals by @KiaraGrouwstra in https://github.com/lxc/incus/pull/3888
• incusd/events: Don't warn when the peer closed the connection first by @KiaraGrouwstra in https://github.com/lxc/incus/pull/3889
• Implement completion of project names by @stgraber in https://github.com/lxc/incus/pull/3891
• Allow image architectures filters to apply to both Incus architecture and the property by @stgraber in https://github.com/lxc/incus/pull/3885
• Various migration/evacuation fixes by @stgraber in https://github.com/lxc/incus/pull/3893
• Add support for using librbd for all Ceph interactions by @stgraber in https://github.com/lxc/incus/pull/3884
• Manipulate NVRAM through initial keys by @bensmrs in https://github.com/lxc/incus/pull/3892
• Implement DNS NOTIFY by @stgraber in https://github.com/lxc/incus/pull/3896
• Bump baseline to Go 1.26 (and fix/modernize) by @stgraber in https://github.com/lxc/incus/pull/3902
• Move cephobject to not relying on local files by @stgraber in https://github.com/lxc/incus/pull/3901
• Fix bad folder idmapping for root user by @stgraber in https://github.com/lxc/incus/pull/3898
• Fix Linstor concurent unpack by @stgraber in https://github.com/lxc/incus/pull/3903
• Reverse enforcement logic for cross-network OVN rules (internal/external) by @stgraber in https://github.com/lxc/incus/pull/3897
• Validate PEM blobs by @bensmrs in https://github.com/lxc/incus/pull/3900
• More Secure Boot commands by @bensmrs in https://github.com/lxc/incus/pull/3905
• Fix DHCPv6 with security.ipv6_filtering by @stgraber in https://github.com/lxc/incus/pull/3906
• Support setting qdisc for virtual NICs by @presztak in https://github.com/lxc/incus/pull/3904
• shared/uefi: Correctly handle padded VARS files by @bensmrs in https://github.com/lxc/incus/pull/3911
• shared/cmd: Modernize table look by @bensmrs in https://github.com/lxc/incus/pull/3907
• Various bugfixes from the forum by @stgraber in https://github.com/lxc/incus/pull/3909
• incus/query: Add custom header support by @breml in https://github.com/lxc/incus/pull/3912
• OCI fix and dependency bump by @stgraber in https://github.com/lxc/incus/pull/3913
• Fix issue with delegated ZFS and host systemd by @stgraber in https://github.com/lxc/incus/pull/3914
• Incus 7.4 security fixes by @stgraber in https://github.com/lxc/incus/pull/3916

New Contributors

• @ldesgoui made their first contribution in https://github.com/lxc/incus/pull/3755
• @fohnwind made their first contribution in https://github.com/lxc/incus/pull/3807
• @speijnik made their first contribution in https://github.com/lxc/incus/pull/3843
• @ahall made their first contribution in https://github.com/lxc/incus/pull/3872
• @KiaraGrouwstra made their first contribution in https://github.com/lxc/incus/pull/3888

Full Changelog: https://github.com/lxc/incus/compare/v7.3.0...v7.4.0