Incus 7.3

What's Changed

• Fix typo in documented behavior in setting restricted.containers.privilege to isolated by @Hye-Dev in #3548
• Translations update from Hosted Weblate by @weblate in #3554
• doc: fix config set deprectation warning by @gagath in #3552
• Various bugfixes by @stgraber in #3555
• incus/move: Apply --storage pool to dependent disks by @stgraber in #3550
• github: Build Windows and MacOS native installers. by @stgraber in #3551
• Add timeout for QMP commands by @stgraber in #3559
• github: Add a build workflow by @stgraber in #3562
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #3567
• build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #3566
• Various bugfixes by @stgraber in #3570
• incusd/devices: Allow /32 and /128 for OCI addresses by @stgraber in #3568
• cmd/generate-database/db: Manually specify uuid package by @masnax in #3574
• incusd/operations: Fix nil deref race in Cancel by @stgraber in #3573
• Translations update from Hosted Weblate by @weblate in #3575
• incusd/instance/qemu/qmp: Bump timeout for block commands by @stgraber in #3576
• incusd/instance/qemu/qmp: Bump timeout for slow synchronous commands by @stgraber in #3577
• incus: Avoid double-close warning on export and file pull by @stgraber in #3580
• doc/incus-cli: reword docs for configuration file path by @abiosoft in #3581
• incusd/device/disk: Use resolved project for Ceph ISO RBD names by @47star in #3583
• Fallback to sending agent state data through vserial ringbuffer by @masnax in #3582
• Various bugfixes by @stgraber in #3588
• incusd/storage: Honor btrfs.compression on instances from optimized images by @cmspam in #3591
• incusd/storage/s3: Add GetBucketVersioning by @stgraber in #3593
• incusd/instance/qemu: Use a shared memory backend on all architectures by @stgraber in #3589
• Add support for ipvX.gateway=none for OCI containers by @stgraber in #3586
• Use persistent Logical Switch Ports with OVN by @stgraber in #3587
• Fix concurrent image unpacking on ceph by @DarkressX in #3579
• Add support for BGP unnumbered peers by @stgraber in #3600
• incusd/forknet: Wait up to 5s for initial DHCP configuration by @stgraber in #3595
• incusd/instance/qemu: Handle missing kvm64 by @glowf1sh in #3605
• client: Only pass device overrides to sources supporting them by @stgraber in #3607
• Fix handling of CPU pinning during live migration by @stgraber in #3608
• Support persistent bitmaps for raw-format block devices by @presztak in #3609
• incusd/network/ovn: Fix NAT for network forward default targets by @0xk1f0 in #3596
• Translations update from Hosted Weblate by @weblate in #3611
• Implement security.nesting for virtual machines by @stgraber in #3612
• Move all the authorization related keys within one central authorization.XYZ namespace by @presztak in #3619
• Add mention fo cgroup2 limitations by @stgraber in #3616
• incusd/dev_incus: Fix race in ConnPidMapper access by @stgraber in #3621
• Various bugfixes by @stgraber in #3615
• Implement network allocations summary by @MarcosDaNight in #3620
• incusd/storage/ceph: Concurrent Deletion Adjustments by @0xk1f0 in #3622
• Translations update from Hosted Weblate by @weblate in #3624
• Various bugfixes by @stgraber in #3623
• Add a native-context GPU type for VMs (virtio-gpu DRM native context) by @cmspam in #3564
• Various bugfixes by @stgraber in #3629
• Add storage pool usage metrics by @MarcosDaNight in #3628
• incusd/storage/zfs: Restore volume quota on refresh error by @stgraber in #3631
• Add support for port forwarding (CLI connects to inside instance) by @stgraber in #3633
• Translations update from Hosted Weblate by @weblate in #3634
• incusd/metrics: Rename incus_storage_pool_total_bytes to incus_storag… by @stgraber in #3636
• Translations update from Hosted Weblate by @weblate in #3640
• Various bugfixes by @stgraber in #3641
• shared/tls: Use first successful connection in RFC3493Dialer by @stgraber in #3644
• Various bugfixes by @stgraber in #3645
• network/ovn: Tolerate stop failures during network deletion by @0xk1f0 in #3635
• Fix forwarding of NBD volume requests by @stgraber in #3647
• incus/console: Escape spaces in SPICE console socket URI by @SudhanshuMatrix in #3650
• Various bugfixes by @stgraber in #3656
• Prevent using the Incus daemon directory as a storage pool by @stgraber in #3659
• Fix progress reporting when dealing with stdin by @bensmrs in #3664
• Change assign subcommands separator by @bensmrs in #3663
• incusd/network/zone: Return a single SOA record on plain SOA queries by @stgraber in #3666
• incusd/storage: Fix races in connectOfflineNBD by @stgraber in #3668
• More NBD fixes by @stgraber in #3670
• Translations update from Hosted Weblate by @weblate in #3673
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #3675
• device: Add I/O limits for unix-block devices by @fivetime in #3648
• Fix LVM cluster size calculation on migration by @stgraber in #3677
• Better handle stale OVN connections by @stgraber in #3676
• Add support for multiple authorizers by @presztak in #3639
• Translations update from Hosted Weblate by @weblate in #3683
• Add NVRAM inspection by @bensmrs in #3662
• seccomp: Use namespace credentials for FUSE mounts by @fivetime in #3686
• incusd: Detect LXC monitors from cgroup v2 by @fivetime in #3684
• Add storage note about loop devices on COW fs by @johnmaguire in #3680
• Translations update from Hosted Weblate by @weblate in #3697
• Fix instance copy for non-block volumes by @presztak in #3698
• shared/ask, cmd/incus: fix password prompt loop on Windows by @SudhanshuMatrix in #3700
• Allow both IOps and byte limits by @stgraber in #3690
• Various bugfixes by @stgraber in #3689
• Various bugfixes by @stgraber in #3702
• Add support for '--refresh' for instances with dependent disks by @presztak in #3701
• incusd/instance/lxc: Use project-qualified CRIU restore name by @fivetime in #3692
• incusd/instance/lxc: Clean devices after failed CRIU restore by @fivetime in #3693
• incusd/seccomp: Report FUSE mount helper failures by @fivetime in #3694
• incusd/instance/lxc: Fix OCI entrypoint escaping by @stgraber in #3704
• Fix volume activation of filesystem snapshots by @presztak in #3706
• Various bugfixes by @stgraber in #3705
• Translations update from Hosted Weblate by @weblate in #3709
• incusd/instance/qmp: Bump blockdev-add/del timeouts by @stgraber in #3712
• incusd/storage: Allow expected symlinks in instance metadata by @stgraber in #3711
• Fix server-side filtering by @stgraber in #3714
• Add a "network" column to "incus network list-allocations" by @stgraber in #3718
• Translations update from Hosted Weblate by @weblate in #3719
• Allow certificate updates with offline nodes on same-key renewals by @SudhanshuMatri...

Incus 7.0.1 LTS

Full Changelog: v7.0.0...v7.0.1

Incus 7.2

Announcement

https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879

What's Changed

• Translations update from Hosted Weblate by @weblate in #3428
• Translations update from Hosted Weblate by @weblate in #3433
• Various bugfixes by @stgraber in #3432
• shared/tls: Detect Lego version/behavior based on help by @stgraber in #3435
• doc/cloud-init: Clarify VM behavior by @stgraber in #3436
• Fix Github Actions java setup by @stgraber in #3438
• incus: Make unset commands accept several keys by @bensmrs in #3439
• Add migration-compatible hv flags with migration.stateful=true by @masnax in #3442
• Generate-database joinas tag by @masnax in #3443
• Translations update from Hosted Weblate by @weblate in #3444
• Align node specific network config by @breml in #3441
• Fix block backup issues by @stgraber in #3448
• Remove LXD to Incus logic by @stgraber in #3451
• Storage migration/recovery related fixes by @stgraber in #3452
• OVS/OVN related fixes by @stgraber in #3453
• Cluster evacuation improvements by @stgraber in #3455
• global: Clean latest gofumpt by @stgraber in #3456
• incusd: Replace gorilla/mux with http.ServeMux by @stgraber in #3458
• Improve low level backup API by @stgraber in #3457
• Implement a filtered version of the Server struct by @stgraber in #3462
• Various bugfixes by @stgraber in #3461
• Translations update from Hosted Weblate by @weblate in #3465
• Add logging helper for deferred functions and use in all packages by @stgraber in #3464
• Translations update from Hosted Weblate by @weblate in #3466
• Implement server.crt update through internal API by @stgraber in #3463
• Translations update from Hosted Weblate by @weblate in #3474
• Various bugfixes by @stgraber in #3475
• Translations update from Hosted Weblate by @weblate in #3481
• doc: Improve incus alias docs by @augustodsgv in #3479
• Update debug.go by @kazan417 in #3469
• incus/server/storage/driver/ceph: Shrink images to minimal size after unpacking by @DarkressX in #3486
• Handle concurrent NBD connections on instance endpoint by @stgraber in #3482
• doc/incus-cli: Add CLI configuration file reference by @augustodsgv in #3483
• Various bugfixes by @stgraber in #3489
• doc: Update preseed description to match with reality by @stgraber in #3490
• doc: Ignore criu.org link checking by @bensmrs in #3493
• incus/utils_copy: Fix wrong error returned by @bensmrs in #3492
• Implement per-instance BGP by @stgraber in #3491
• Incus/add remote set keepalive by @augustodsgv in #3495
• Add core.https_allowed_websocket_origin by @stgraber in #3496
• incus: Close web UI probe response body by @fwerkor in #3497
• ci: authenticate OpenFGA release lookups by @fwerkor in #3502
• Translations update from Hosted Weblate by @weblate in #3503
• Translations update from Hosted Weblate by @weblate in #3509
• Fix allow cached shared image to grow by @DarkressX in #3504
• Update AI/LLM policy by @stgraber in #3506
• Authentication / connection bugfixes by @stgraber in #3505
• storage/zfs: avoid raw send for snapshot copies by @fwerkor in #3501
• incusd/storage/drivers: Add "btrfs.compression" volume option by @cmspam in #3511
• incusd/device/disk: Use virtiofsd --posix-acl=auto if supported by @germag in #3468
• incus/server/storage/driver/ceph: Don't return error if image size is larger than cached image size by @DarkressX in #3516
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #3518
• doc/cloud-init: Change YAML spec domain by @bensmrs in #3524
• incusd/storage/btrfs: Fix daemon dir prefix check by @bensmrs in #3523
• Allow static network configuration for OCI containers by @stgraber in #3522
• Various bugfixes by @stgraber in #3527
• incusd/endpoints: Fix infinite loop in network error log writer by @stgraber in #3531
• Fix missing QCOW2 overhead on LVM cluster LVs by @stgraber in #3537
• Use OS-specific CLI paths by @stgraber in #3534
• Various bugfixes by @stgraber in #3539
• Add version specific QEMU args according to image.os and image.release by @masnax in #3529
• incusd: Skip NVRAM setup for unified AMD SEV firmware by @stgraber in #3538
• incusd/storage/zfs: Batch snapshot GUID lookups by @stgraber in #3530
• incusd/storage/drivers: Fix btrfs.compression=none and pool-wide default by @cmspam in #3540
• Configurable port_guid/node_guid for SR-IOV infiniband by @stgraber in #3533
• Use instance IP detection mechanism for proxy devices by @stgraber in #3528
• incus: Add default command by @augustodsgv in #3499
• Improve and extend SELinux support by @mschiff in #3216
• Security fixes by @stgraber in #3542
• incusd/storage: Recreate missing snapshot config subvolume by @stgraber in #3546
• Translations update from Hosted Weblate by @weblate in #3544
• Fix typo in documented behavior in setting restricted.containers.privilege to isolated by @Hye-Dev in #3545

New Contributors

• @augustodsgv made their first contribution in #3479
• @fwerkor made their first contribution in #3497
• @germag made their first contribution in #3468

Full Changelog: v7.1.0...v7.2.0

Incus 7.1

What's Changed

• Translations update from Hosted Weblate by @weblate in #3296
• Translations update from Hosted Weblate by @weblate in #3298
• doc/devices/disk: Fix broken link by @stgraber in #3297
• Translations update from Hosted Weblate by @weblate in #3309
• Fix some initial 7.0 issues by @stgraber in #3311
• Fix some network issues by @stgraber in #3312
• doc/authorization: Fix reference to old "manager" relation by @stgraber in #3313
• incusd/projects: Fix targeting on project delete by @stgraber in #3315
• incusd/network/acl: Fix issue with instances in different project tha… by @stgraber in #3314
• incusd/instance/qemu: Remove deprecated QEMU flag by @stgraber in #3318
• Fix NBD swagger by @stgraber in #3317
• incusd/cluster: Skip operation creation on shutdown evacuate by @stgraber in #3320
• Fix some simple bugs by @stgraber in #3325
• Implement bridge.multicast_snooping by @stgraber in #3327
• Add lock handling for NBD operations by @presztak in #3331
• devcontainer: fix golangci-lint install source by @breml in #3336
• build(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in #3338
• Restore config volume as part of VM block restoration (LVM storage) by @presztak in #3343
• Update Ansible section with incus-client details by @chrisjsimpson in #3345
• Update list of Ubuntu LTS releases that get pre-built Incus packages by @meeque in #3346
• Use correct host:port format for ClusterAddress by @stephendotcarter in #3349
• Various bugfixes by @stgraber in #3352
• doc/storage_volume: Fix outdated information by @bensmrs in #3360
• test: Disable volume shrinking with LINSTOR by @bensmrs in #3354
• incusd/storage/s3: Implement S3 CopyObject by @stgraber in #3365
• Allow volume creation on attach by @stgraber in #3363
• Add workaround for lvmcluster pool removal by @presztak in #3369
• Translations update from Hosted Weblate by @weblate in #3370
• Various bugfixes by @stgraber in #3362
• Performance improvements by @stgraber in #3372
• Fix forward duplicate ip check by @DarkressX in #3373
• doc: Extend description for OCI-compliant remotes by @UweKrause in #3374
• incus/operation: Fix default column layout in help text by @urbalazs in #3347
• Fix another set of explanation typos. by @kazan417 in #3299
• incusd/instance/qemu: add virtio vga feature gating by @damex in #3305
• Translations update from Hosted Weblate by @weblate in #3376
• Add support for block.create_options by @stgraber in #3377
• incus/utils: Tweak environment file handling to strip matching outer … by @stgraber in #3378
• shared/archive: Improved ENOSPC detection by @stgraber in #3379
• Allow setting up a TPM certificate authority by @stgraber in #3380
• incusd/devices: Set volatileGet on Refresh by @stgraber in #3381
• Translations update from Hosted Weblate by @weblate in #3384
• Update cluster.go by @kazan417 in #3383
• Update network_forward.go by @kazan417 in #3387
• incus/config: Fix YAML file name in help text by @urbalazs in #3390
• Translations update from Hosted Weblate by @weblate in #3393
• Fix incus-simplestreams issues by @stgraber in #3391
• Fix forkdhcp issues by @stgraber in #3392
• Allow editing raw LINSTOR properties by @bensmrs in #3396
• Implement ranges in network address sets by @stgraber in #3394
• incusd/network/ovn: Use dnat_and_snat for fully mapped external addre… by @stgraber in #3397
• Enable TPM live migration by @presztak in #3398
• Translations update from Hosted Weblate by @weblate in #3399
• Translations update from Hosted Weblate by @weblate in #3400
• Fix push behavior with UID/GID/mode overrides by @bensmrs in #3401
• More bugfixes by @stgraber in #3395
• Fix remaining golangci-lint issues by @stgraber in #3405
• Always return the total disk size on instances by @stgraber in #3402
• More codebase cleanup by @stgraber in #3407
• VLAN filtering fixes by @stgraber in #3408
• incusd/instance/lxc: Use os.Root for templating by @stgraber in #3403
• Implement storage volume rebuild by @stgraber in #3404
• Add support for static round-robin remotes by @bensmrs in #3409
• Implement S3 pre-signed URLs by @stgraber in #3411
• client: handle absolute paths for simplestream files by @breml in #3414
• Translations update from Hosted Weblate by @weblate in #3413
• Translations update from Hosted Weblate by @weblate in #3419
• Fix daemon volume accounting by @bensmrs in #3412
• CLI wording fixes by @kazan417 in #3416
• Allow for specific VM vCPU configuration by @stgraber in #3420
• Push operation follow-up by @bensmrs in #3418
• incusd/devices: Cleanup leftover forkproxy on startup by @stgraber in #3421
• Fix security issues for Incus 7.1 by @stgraber in #3425
• Adjust instance-agent events by @stgraber in #3426
• Fix a couple of issues with instance memory changes by @stgraber in #3427
• Add additional validation to device names by @stgraber in #3423

New Contributors

• @chrisjsimpson made their first contribution in #3345
• @meeque made their first contribution in #3346
• @stephendotcarter made their first contribution in #3349

Full Changelog: v7.0.0...v7.1.0

Incus 7.0.0 LTS

Announcement

https://discuss.linuxcontainers.org/t/incus-7-0-lts-has-been-released/26641

What's Changed

• github: format INCUS_VERSION from tag in release workflow by @0xk1f0 in #3098
• client: Optionally skip blocking for OIDC authentication by @masnax in #3102
• Keepalive proxy improvements by @stgraber in #3097
• incus/version: Gracefully fail when server unreachable by @bensmrs in #3104
• incusd/instance/agent-loader: Use Linux arch names by @bensmrs in #3105
• qemu: gate SPICE support on incus host via QMP query-spice by @damex in #3103
• incusd/instances/qemu: Detect 9p support and hide it behind feature flag by @damex in #3109
• incusd/instance/qemu: Enable SPICE audio feature gating by @damex in #3110
• incusd: Fix bad type in format strings by @stgraber in #3114
• qemu: gate virtio audio based on presence of virtio-sound-pci by @damex in #3115
• Cleanup cmd packages by @stgraber in #3107
• Translations update from Hosted Weblate by @weblate in #3116
• incusd/instances/qemu: Rework qemuArchConfig by @stgraber in #3106
• Delete dependent volumes on instance deletion by @presztak in #3117
• incusd/response: Make pipeResponse flush headers ASAP by @bensmrs in #3123
• Improve handling of dependent volumes by @presztak in #3120
• Rework storage caching logic (performance improvement) by @stgraber in #3121
• Implement IncusOS update trigger on cluster version mismatch by @stgraber in #3122
• shared/cliconfig: Avoid treating = as part of a remote name by @bensmrs in #3125
• incusd/network/state: Use canAccessNetwork by @stgraber in #3126
• incus-simplestreams: Add flag for overriding product name by @csprl in #3128
• Support old-style ZFS types by @bensmrs in #3130
• Translations update from Hosted Weblate by @weblate in #3132
• Add support for cross-cluster dependent volume migration by @presztak in #3133
• incusd/storage: Fix race in caching logic by @stgraber in #3134
• Port to yaml/go-yaml by @stgraber in #3127
• incusd/storage: Fix potential deadlock by @stgraber in #3136
• Implement cancel logic on all remaining websocket class operations by @stgraber in #3135
• Remove stale port UUID by @DarkressX in #3140
• Support optimized storage for dependent volumes by @presztak in #3141
• Fix dependent volume flag removal during same-host storage moves by @presztak in #3138
• Implement a request body limit by @stgraber in #3137
• Fix mount interception dropping mount data flag on idmapped mount by @stgraber in #3142
• Use device names for dependent volumes when importing backups by @presztak in #3144
• Clarify description of oidc.claim option by @yannis2707 in #3145
• Rework physical NIC device validation by @stgraber in #3143
• Fix stateful snapshots for qcow2 volumes by @presztak in #3147
• incusd: Don't expose the API extension list pre-authentication by @stgraber in #3149
• incusd/device/nic_physical: Fix bridge handling by @stgraber in #3150
• incusd/device/nic_physical: Fix inheritance from network by @stgraber in #3152
• incusd/instances/qemu: Skip vmcoreinfo on ppc64le by @stgraber in #3153
• doc/image_format: Update Pongo2 link by @neitsab in #3154
• incusd/device/nic_bridged: Handle physical NICs by @stgraber in #3157
• Fix live migration of instances with snapshots by @presztak in #3158
• incusd/instance/qemu: Scale SCSI queues with CPUs by @stgraber in #3165
• Add a NBD based backup API by @stgraber in #3093
• Fix stateful VM snapshot failure with dependent volumes by @presztak in #3173
• incus: Enable admin recover and admin sql on all platforms by @stgraber in #3169
• incusd/apparmor/qemuimg: Expand symlinks by @stgraber in #3175
• client: Forward skopeo errors by @stgraber in #3172
• incus: Fix Windows absolute paths by @bensmrs in #3176
• Return bitmap endpoints by default when listing by @presztak in #3177
• incusd/instance/qemu: Fix RTC handling on Windows by @stgraber in #3179
• Add support for exposing dirty bitmaps by @presztak in #3178
• Improve snapshot creation rollback handling by @presztak in #3180
• Rework tracking of original VM properties for migration and stateful snapshots/stop by @stgraber in #3181
• Fix ovn duplicate route by @DarkressX in #3184
• Improve QCOW2 volume handling by @presztak in #3185
• Various bugfixes by @stgraber in #3182
• Allow limiting storage pools to project by @pranav767 in #3162
• Translations update from Hosted Weblate by @weblate in #3189
• shared/archive: Improve detection and error handling by @stgraber in #3190
• Use io.CopyN with 4MiB buffer everywhere by @stgraber in #3192
• Translations update from Hosted Weblate by @weblate in #3194
• Translations update from Hosted Weblate by @weblate in #3198
• VM migration tweaks by @stgraber in #3197
• incus/cluster: Tweak error message by @kazan417 in #3202
• incus/info: Tweak wording in resources output by @kazan417 in #3203
• Improve import/export usage consistency by @bensmrs in #3200
• Wait for BLOCK_JOB_COMPLETED event after block-job-complete by @presztak in #3201
• shared/archive: Avoid concurrent calls to Wait by @stgraber in #3204
• Translations update from Hosted Weblate by @weblate in #3206
• incusd/images: Allow simpler HTTP headers by @stgraber in #3205
• Translations update from Hosted Weblate by @weblate in #3211
• Add support for export/import qcow2 in raw format by @presztak in #3208
• incusd/instance/edk2: Add support for seabios at bios-256k by @stgraber in #3214
• Add cp-like flags to push commands by @bensmrs in #3209
• incusd/instance/qemu: Improve OS detection for FreeBSD by @bensmrs in #3215
• incus-agent: Use psutil for process count by @stgraber in #3218
• Translations update from Hosted Weblate by @weblate in #3221
• incusd/instance/qemu: Use timeouts for agent operations by @stgraber in #3222
• Remove temporary snapshot block device after migration by @presztak in #3224
• incusd/instances/qemu: Fix crash on nil qmp handler in RunJSON by @stgraber in #3225
• Add support for specifying new names for dependent volumes when copying an instance by @presztak in #3219
• shared/validate: Fix name validation on single character by @stgraber in #3226
• internal/linux: Add logging to ClearBlock by @stgraber in #3227
• Translations update from Hosted Weblate by @weblate in #3228
• Add support for targeting network lists by @stgraber in #3230
• doc: Update benchmark_performance.md with GOPATH details by @UweKrause in #3231
• Report VM error state in /state call by @DarkressX in #3232
• Remove CGroup v1 support by @stgraber in #3235
• Translations update from Hosted Weblate by @weblate in #3238
• incus-agent: Work around issue when built with GO111MODULE=off by @gibmat in #3239
• Bunch of typo fixes in sources strings by @kazan417 in #3234
• Check whether an instance snapshot can be restored by @presztak in #3241
  ...

Incus 6.23

Announcement

https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447

What's Changed

• Allow custom volume snapshot create/delete when attached to running instance by @presztak in #2989
• shared/cliconfig: Add lock to prevent panic by @stgraber in #2991
• incusd/endpoints/starttls: Report correct ServerName by @stgraber in #2993
• generate-database: fix linter complaints by @J0nasDotDev in #2995
• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #2996
• firewall: fix linter complaints by @J0nasDotDev in #2997
• OVN add ipv4.dhcp.gateway + allow none value by @JulesdeCube in #2990
• server sys: fix linter complaints by @J0nasDotDev in #2999
• server project: fix linter complaints by @J0nasDotDev in #2998
• server util: fix linter complaints by @J0nasDotDev in #3000
• incusd/instance/lxc: Add /usr/bin/init to OCI PID1 list by @stgraber in #3001
• server seccomp: fix linter complaints by @J0nasDotDev in #3002
• server migration: fix linter complaints by @J0nasDotDev in #3003
• server task: fix linter complaints by @J0nasDotDev in #3004
• Add an instance repair API by @stgraber in #3008
• Implement new parser for CLI client by @bensmrs in #3007
• Translations update from Hosted Weblate by @weblate in #3009
• incusd/operations: Fix missing Unlock by @stgraber in #3012
• Translations update from Hosted Weblate by @weblate in #3013
• incusd/metrics: Increase node-exporter timeout to 5s by @stgraber in #3015
• Translations update from Hosted Weblate by @weblate in #3019
• Mixed bugfixes by @stgraber in #3020
• Add support for instance-agent events by @0xk1f0 in #3026
• NIC improvements by @bensmrs in #3024
• incus/usage: Defer remote connection by @bensmrs in #3028
• Fix linter reported issues by @stgraber in #3022
• Add FreeBSD agent by @bensmrs in #3029
• Translations update from Hosted Weblate by @weblate in #3031
• Fix ZFS test failures by @stgraber in #3027
• incus: fix log in sftpRecursiveMkdir by @J0nasDotDev in #3032
• Translations update from Hosted Weblate by @weblate in #3034
• devcontainer: update Go version and pipx install command by @0xk1f0 in #3035
• Translations update from Hosted Weblate by @weblate in #3038
• incus/cluster: Fix default column layout in help text by @urbalazs in #3041
• incus: Fix indent on --sub-commands by @stgraber in #3042
• Add initial support for dependent volumes by @presztak in #3025
• Introduce goreleaser by @stgraber in #3044
• incusd/daemon: Allow internal and os API during startup by @stgraber in #3045
• Diverse agent fixes by @bensmrs in #3051
• Restrict security.shared to raw custom block volumes on lvmcluster by @presztak in #3053
• incus: Print newly-created snapshot name if unspecified by @J0nasDotDev in #3039
• incus/info: Allow querying alternative log files by @stgraber in #3052
• Simplify config subvolume naming by using static "instance" prefix by @presztak in #3050
• Add colors to the CLI client by @bensmrs in #3058
• HTTP hardening by @stgraber in #3067
• Add support for migrating dependent volumes with instances by @presztak in #3057
• Fix issues with logs volume by @stgraber in #3063
• Harden certificate updates by @stgraber in #3068
• Few tweaks around CLI colors by @bensmrs in #3065
• Add LZ4 compression by @bensmrs in #3071
• Add project resource and limit metrics by @Adevixxx in #3021
• incus-migrate: Fix OVA handling within os.Root by @stgraber in #3072
• incus-migrate: Allow importing OVAs from URLs by @bensmrs in #3073
• incusd/seccomp: Limit the new mount API system calls we block by @stgraber in #3070
• incus/usage: Fix edge case by @bensmrs in #3080
• Update dependencies by @stgraber in #3078
• Cleanup and harden the OIDC allowed_subnets claim by @stgraber in #3079
• Translations update from Hosted Weblate by @weblate in #3082
• doc: Remove config-options page by @bensmrs in #3083
• Refactor live migration - extract common logic by @presztak in #3085
• Add cp-like flags to pull commands by @bensmrs in #3086
• Prevent setting the 'snapshots.XYZ' keys on dependent volumes by @presztak in #3087
• incusd/instances_post: Add extra validation during backup import by @stgraber in #3088
• Translations update from Hosted Weblate by @weblate in #3090
• Add support for live migration of dependent disks by @presztak in #3089
• Add image.requirements.cdrom_cloud_init key by @bensmrs in #3091
• Translations update from Hosted Weblate by @weblate in #3094
• Fix some security issues by @stgraber in #3092
• Small fixes and refactorings by @stgraber in #3095
• Pre-release bugfixes by @stgraber in #3096

New Contributors

• @JulesdeCube made their first contribution in #2990
• @urbalazs made their first contribution in #3041
• @Adevixxx made their first contribution in #3021

Full Changelog: v6.22.0...v6.23.0

Incus 6.0.6 LTS

Announcement: https://discuss.linuxcontainers.org/t/incus-6-0-6-lts-has-been-released/26380

Full Changelog: v6.0.5...v6.0.6

Incus 6.22

What's Changed

• Translations update from Hosted Weblate by @weblate in #2854
• incusd/device/nic: Fix connected logic for non-NIC QEMU devices by @bensmrs in #2855
• Fix typo: Supported cConditions to Supported Conditions by @hnakamur in #2858
• incusd/storage/zfs: Set IncusOS storage usage property by @stgraber in #2857
• Translations update from Hosted Weblate by @weblate in #2861
• shared/util: Fix SingleQuote to actually quote by @stgraber in #2863
• Translations update from Hosted Weblate by @weblate in #2867
• Translations update from Hosted Weblate by @weblate in #2869
• incus: Fix get-client-certificate ignoring per-remote certs by @MarcosDaNight in #2866
• Translations update from Hosted Weblate by @weblate in #2870
• incusd/storage/lvm: Move IncusOS check to pool creation by @stgraber in #2871
• Translations update from Hosted Weblate by @weblate in #2874
• Improvements to incus-migrate by @stgraber in #2883
• tests: Fix SR-IOV attached key test by @Shaderbug in #2882
• Various bugfixes by @stgraber in #2891
• Translations update from Hosted Weblate by @weblate in #2901
• Add support for QCOW2 migration whether the instance is stopped by @presztak in #2896
• Assorted bugfixes by @stgraber in #2902
• incusd: Search OVS switch external_interfaces by @dankm in #2898
• SR-IOV: Implement support for trust property by @Shaderbug in #2903
• MarkdownLint fixes, fix nonstandard {Important} by @AJRepo in #2885
• Manual pattern snapshots maintain uniqueness with pongo-pattern. by @Mujib-Ahasan in #2880
• Propagate error when adding qcow2 backing block device by @presztak in #2908
• Implement direct backup exports by @bensmrs in #2899
• Implement disk-only snapshot restore by @stgraber in #2912
• Skip special disk devices in metrics by @stgraber in #2911
• Prevent moving shared storage volumes by @presztak in #2914
• Add incus image generate-metadata and update incus-migratedocumentation by @stgraber in #2916
• Support live migration of qcow2 volumes by @presztak in #2917
• Pass live migration flag and skip final filesystem sync for VMs by @presztak in #2925
• Add QCOW2 live migration support for instances with snapshots by @presztak in #2923
• doc/requirements: Bump minimal requirements by @stgraber in #2926
• Validate requested storage pool during instance migration by @presztak in #2931
• Implement VM fast reboot by @stgraber in #2933
• Improve live migration handling by @stgraber in #2934
• incus-migrate: Fix URL detection by @stgraber in #2935
• Remove instance volume on revert after failed live migration by @presztak in #2937
• Fix source hang when target migration fails by @presztak in #2938
• Prevent concurrent QCOW2 snapshot deletions by @presztak in #2941
• incusd/instance/qemu: Require full restart for agent drive by @stgraber in #2942
• Prevent concurrent snapshot deletions by @presztak in #2943
• incus: Refactor CLI usage strings by @bensmrs in #2945
• incusd/instance/qemu: Force a real reboot after applying templates by @stgraber in #2946
• incusd/storage/ceph: Use the standard error for unsupported disk usage by @stgraber in #2949
• Allow filtering unix-hotplug by USB controller PCI address by @stgraber in #2950
• incusd/storage/qcow2: Wait for qemu-nbd to be ready by @stgraber in #2953
• Fix backing block device ordering when fetching from QEMU by @presztak in #2954
• Remove mount paths when deleting snapshots by @presztak in #2957
• Windows agent over vsock by @masnax in #2958
• doc/instance_units: Mention common units by @stgraber in #2962
• incusd/fsmonitor: Read multiple fanotify events by @zgttotev in #2961
• Tweak CPU and memory hotplug errors by @stgraber in #2965
• Incus guest uptime metrics by @tlusser in #2906
• Introduce evacuating and restoring cluster member states by @stgraber in #2967
• Fix preseed struct by @stgraber in #2968
• incusd/device/nic_ovn: Fix nested NIC state by @stgraber in #2969
• Add snapshot support for qcow2 custom volumes by @presztak in #2966
• incusd/storage/linstor: Propagate error when volume filler fails by @luissimas in #2971
• Additional validation and project restrictions by @stgraber in #2972
• Add support for expanding an existing lvmcluster storage pool by @presztak in #2975
• Expose certificate data in authorization scriptlet by @bensmrs in #2973
• incusd/images: Simplify image URL check by @stgraber in #2978
• Add lvmcluster.remove_snapshots config key by @presztak in #2977
• incus: Add checks before starting sshSFTPserver by @J0nasDotDev in #2974
• Add logs volume config by @hlloreda in #2839
• Automatically update ovn ranges by @DarkressX in #2979
• incusd/api_cluster: Fix database-client count logic by @bensmrs in #2982
• incusd/instances: Properly instruct to reset NVRAM when changing secure boot config by @bensmrs in #2983
• incus/server/network/ovn/nb: Fix static gateway hwaddr update by @DarkressX in #2981
• Use 'allow-related' instead of 'allow' for default egress action by @presztak in #2985
• Logs volume fixes by @stgraber in #2984
• Cluster migration/evacuation fixes by @stgraber in #2986
• Network related bugfixes by @stgraber in #2987

New Contributors

• @Shaderbug made their first contribution in #2882
• @tlusser made their first contribution in #2906
• @J0nasDotDev made their first contribution in #2974
• @hlloreda made their first contribution in #2839

Full Changelog: v6.21.0...v6.22.0

Incus 6.21

Announcement

https://discuss.linuxcontainers.org/t/incus-6-21-has-been-released/26005

What's Changed

• doc/openfga: Improve required config keys by @tibeer in #2779
• incusd/network/ovn: Drop now obsolete DNS check by @stgraber in #2782
• incusd/storage/truenas: Fix SetVolumeQuota issue when growing FS volumes by @mrstux in #2783
• incus-user: Don't reset setup if user has access by @MarcosDaNight in #2784
• Add custom OIDC claim to restrict access to specific subnet by @stgraber in #2789
• Tweak boot.autostart by @stgraber in #2791
• incusd/network/physical: Allow parent re-use for bridges by @stgraber in #2793
• Translations update from Hosted Weblate by @weblate in #2794
• Translations update from Hosted Weblate by @weblate in #2796
• Add vlan.tagged to physical networks by @stgraber in #2802
• Implement forced deletion in legacy file API by @stgraber in #2801
• doc/network_ovn: Add note about advanced external_interfaces syntax by @stgraber in #2805
• Parallelize instance startup on daemon start by @presztak in #2809
• Translations update from Hosted Weblate by @weblate in #2813
• generate-database: Respect "primary" config for Identifier in mappings by @breml in #2815
• Add qcow2 resize support and respect specified disk size by @presztak in #2811
• Added a few more environment variables by @MOBergeron in #2816
• Use proxy protocol package with v2 support by @masnax in #2817
• generate-database: fix import type for association tables by @breml in #2818
• Fix adding disk with a device name longer than 31 bytes by @presztak in #2819
• Translations update from Hosted Weblate by @weblate in #2826
• Further restrict API names character set and prevent shell expansion by @stgraber in #2827
• Fix required=false with custom volumes by @stgraber in #2829
• Fix some potential race conditions by @stgraber in #2832
• Allow setting 'vg_name' for non-clustered LVM during init by @presztak in #2838
• Add support for nic SR-IOV selection by vendorid, productid and pci by @presztak in #2828
• incusd: pass firmware opt from device/pci to instance/qemu by @stek29 in #2837
• Add incus wait by @Mujib-Ahasan in #2834
• Hash serial value if it exceeds the maximum length by @presztak in #2841
• doc/linstor: Add documentation for source parameter. by @tibeer in #2795
• Update Rocky Linux instructions by @neelchauhan in #2804
• Tweak dnsmasq startup condition by @Mujib-Ahasan in #2840
• Use the standard DNS SOA format by @dankm in #2843
• Translations update from Hosted Weblate by @weblate in #2844
• Remove automatic increasing of SR-IOV VF count by @presztak in #2845
• doc: Add warning about long device names by @presztak in #2846
• Security fixes ahead of Incus 6.21 by @stgraber in #2848
• Add attached and connected keys to NIC devices by @bensmrs in #2847
• Fix some issues before 6.21 release by @stgraber in #2849

New Contributors

• @MarcosDaNight made their first contribution in #2784
• @stek29 made their first contribution in #2837
• @dankm made their first contribution in #2843

Full Changelog: v6.20.0...v6.21.0

Incus 6.20

Announcement

https://discuss.linuxcontainers.org/t/incus-6-20-has-been-released/25635

What's Changed

• Translations update from Hosted Weblate by @weblate in #2718
• agent-loader/install-linux.sh Fix SELinux issue with agent run path by @rgerardi in #2719
• doc: fix instances-limit-units reference links by @hnakamur in #2716
• instance/drivers/driver_common: Fix cat order bug in selinuxContext() by @mschiff in #2721
• Add Default Environment Variables for the Windows Agent by @MOBergeron in #2720
• Translations update from Hosted Weblate by @weblate in #2722
• Translations update from Hosted Weblate by @weblate in #2723
• Translations update from Hosted Weblate by @weblate in #2724
• Translations update from Hosted Weblate by @weblate in #2729
• Added new Windows environment variable 'SystemDrive' by @MOBergeron in #2730
• incusd/instance/lxc: Generate a stable MAC for managed physical bridg… by @stgraber in #2727
• incusd/device/nic_physical: Fix VLAN for VMs by @stgraber in #2732
• incus/create: Allow reading Ephemeral flag from stdin by @stgraber in #2731
• Translations update from Hosted Weblate by @weblate in #2735
• Translations update from Hosted Weblate by @weblate in #2742
• incusd/network/bridge: Don't listen for incoming RAs by @stgraber in #2743
• incusd/network/zone: Allow trailing dot in NS records by @stgraber in #2744
• incusd/device/physical: Allow live-migration of bridged physical NICs by @stgraber in #2745
• Move ACME challenge logic to shared by @masnax in #2746
• Translations update from Hosted Weblate by @weblate in #2750
• Improve VM state handling by @stgraber in #2747
• incusd/operations: Return a copy of the metadata to avoid concurrent … by @stgraber in #2752
• incusd/instance/qemu: Fix regression in reported state by @stgraber in #2756
• Translations update from Hosted Weblate by @weblate in #2758
• Update dependencies by @stgraber in #2759
• build(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #2762
• incus/io: #2636 fix linter complaints in internal/io by @dector in #2763
• internal/jmap: Refactor Map methods and add comprehensive tests by @dector in #2765
• incusd/storage_volumes: Fix state handling in getVolumeFull by @stgraber in #2766
• Attempt to make the Incus Agent on Windows better integrated. by @MOBergeron in #2749
• generate-database: Allow overwriting the target column for a join by @breml in #2761
• shared/tls: implement Happy Eyeballs (RFC 8305) in RFC3493Dialer by @johnae in #2753
• incusd/devices/tpm: Make incompatible with live-migration by @stgraber in #2767
• incus/network_load_balancer: Fix typo in cmd info description by @positiveEV in #2768
• incus/util: #2636 fix linter complaints in internal/filter by @dector in #2764
• Add support for QCOW2 formatted volumes on lvmcluster by @presztak in #2693
• Fix storage related issues by @stgraber in #2769
• Take project into account during qcow2 operation by @presztak in #2770
• Translations update from Hosted Weblate by @weblate in #2772
• shared/api: add comprehensive unit tests for URL builder by @baconYao in #2771
• Implement standalone incus cluster join by @presztak in #2755
• Feature: restrict agent features from the guest by @Mujib-Ahasan in #2736
• Various fixes for Incus 6.20 by @stgraber in #2774

New Contributors

• @rgerardi made their first contribution in #2719
• @mschiff made their first contribution in #2721
• @johnae made their first contribution in #2753
• @positiveEV made their first contribution in #2768

Full Changelog: v6.19.1...v6.20.0