Incus 7.3

What's Changed

• Fix typo in documented behavior in setting restricted.containers.privilege to isolated by @Hye-Dev in #3548
• Translations update from Hosted Weblate by @weblate in #3554
• doc: fix config set deprectation warning by @gagath in #3552
• Various bugfixes by @stgraber in #3555
• incus/move: Apply --storage pool to dependent disks by @stgraber in #3550
• github: Build Windows and MacOS native installers. by @stgraber in #3551
• Add timeout for QMP commands by @stgraber in #3559
• github: Add a build workflow by @stgraber in #3562
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #3567
• build(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #3566
• Various bugfixes by @stgraber in #3570
• incusd/devices: Allow /32 and /128 for OCI addresses by @stgraber in #3568
• cmd/generate-database/db: Manually specify uuid package by @masnax in #3574
• incusd/operations: Fix nil deref race in Cancel by @stgraber in #3573
• Translations update from Hosted Weblate by @weblate in #3575
• incusd/instance/qemu/qmp: Bump timeout for block commands by @stgraber in #3576
• incusd/instance/qemu/qmp: Bump timeout for slow synchronous commands by @stgraber in #3577
• incus: Avoid double-close warning on export and file pull by @stgraber in #3580
• doc/incus-cli: reword docs for configuration file path by @abiosoft in #3581
• incusd/device/disk: Use resolved project for Ceph ISO RBD names by @47star in #3583
• Fallback to sending agent state data through vserial ringbuffer by @masnax in #3582
• Various bugfixes by @stgraber in #3588
• incusd/storage: Honor btrfs.compression on instances from optimized images by @cmspam in #3591
• incusd/storage/s3: Add GetBucketVersioning by @stgraber in #3593
• incusd/instance/qemu: Use a shared memory backend on all architectures by @stgraber in #3589
• Add support for ipvX.gateway=none for OCI containers by @stgraber in #3586
• Use persistent Logical Switch Ports with OVN by @stgraber in #3587
• Fix concurrent image unpacking on ceph by @DarkressX in #3579
• Add support for BGP unnumbered peers by @stgraber in #3600
• incusd/forknet: Wait up to 5s for initial DHCP configuration by @stgraber in #3595
• incusd/instance/qemu: Handle missing kvm64 by @glowf1sh in #3605
• client: Only pass device overrides to sources supporting them by @stgraber in #3607
• Fix handling of CPU pinning during live migration by @stgraber in #3608
• Support persistent bitmaps for raw-format block devices by @presztak in #3609
• incusd/network/ovn: Fix NAT for network forward default targets by @0xk1f0 in #3596
• Translations update from Hosted Weblate by @weblate in #3611
• Implement security.nesting for virtual machines by @stgraber in #3612
• Move all the authorization related keys within one central authorization.XYZ namespace by @presztak in #3619
• Add mention fo cgroup2 limitations by @stgraber in #3616
• incusd/dev_incus: Fix race in ConnPidMapper access by @stgraber in #3621
• Various bugfixes by @stgraber in #3615
• Implement network allocations summary by @MarcosDaNight in #3620
• incusd/storage/ceph: Concurrent Deletion Adjustments by @0xk1f0 in #3622
• Translations update from Hosted Weblate by @weblate in #3624
• Various bugfixes by @stgraber in #3623
• Add a native-context GPU type for VMs (virtio-gpu DRM native context) by @cmspam in #3564
• Various bugfixes by @stgraber in #3629
• Add storage pool usage metrics by @MarcosDaNight in #3628
• incusd/storage/zfs: Restore volume quota on refresh error by @stgraber in #3631
• Add support for port forwarding (CLI connects to inside instance) by @stgraber in #3633
• Translations update from Hosted Weblate by @weblate in #3634
• incusd/metrics: Rename incus_storage_pool_total_bytes to incus_storag… by @stgraber in #3636
• Translations update from Hosted Weblate by @weblate in #3640
• Various bugfixes by @stgraber in #3641
• shared/tls: Use first successful connection in RFC3493Dialer by @stgraber in #3644
• Various bugfixes by @stgraber in #3645
• network/ovn: Tolerate stop failures during network deletion by @0xk1f0 in #3635
• Fix forwarding of NBD volume requests by @stgraber in #3647
• incus/console: Escape spaces in SPICE console socket URI by @SudhanshuMatrix in #3650
• Various bugfixes by @stgraber in #3656
• Prevent using the Incus daemon directory as a storage pool by @stgraber in #3659
• Fix progress reporting when dealing with stdin by @bensmrs in #3664
• Change assign subcommands separator by @bensmrs in #3663
• incusd/network/zone: Return a single SOA record on plain SOA queries by @stgraber in #3666
• incusd/storage: Fix races in connectOfflineNBD by @stgraber in #3668
• More NBD fixes by @stgraber in #3670
• Translations update from Hosted Weblate by @weblate in #3673
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #3675
• device: Add I/O limits for unix-block devices by @fivetime in #3648
• Fix LVM cluster size calculation on migration by @stgraber in #3677
• Better handle stale OVN connections by @stgraber in #3676
• Add support for multiple authorizers by @presztak in #3639
• Translations update from Hosted Weblate by @weblate in #3683
• Add NVRAM inspection by @bensmrs in #3662
• seccomp: Use namespace credentials for FUSE mounts by @fivetime in #3686
• incusd: Detect LXC monitors from cgroup v2 by @fivetime in #3684
• Add storage note about loop devices on COW fs by @johnmaguire in #3680
• Translations update from Hosted Weblate by @weblate in #3697
• Fix instance copy for non-block volumes by @presztak in #3698
• shared/ask, cmd/incus: fix password prompt loop on Windows by @SudhanshuMatrix in #3700
• Allow both IOps and byte limits by @stgraber in #3690
• Various bugfixes by @stgraber in #3689
• Various bugfixes by @stgraber in #3702
• Add support for '--refresh' for instances with dependent disks by @presztak in #3701
• incusd/instance/lxc: Use project-qualified CRIU restore name by @fivetime in #3692
• incusd/instance/lxc: Clean devices after failed CRIU restore by @fivetime in #3693
• incusd/seccomp: Report FUSE mount helper failures by @fivetime in #3694
• incusd/instance/lxc: Fix OCI entrypoint escaping by @stgraber in #3704
• Fix volume activation of filesystem snapshots by @presztak in #3706
• Various bugfixes by @stgraber in #3705
• Translations update from Hosted Weblate by @weblate in #3709
• incusd/instance/qmp: Bump blockdev-add/del timeouts by @stgraber in #3712
• incusd/storage: Allow expected symlinks in instance metadata by @stgraber in #3711
• Fix server-side filtering by @stgraber in #3714
• Add a "network" column to "incus network list-allocations" by @stgraber in #3718
• Translations update from Hosted Weblate by @weblate in #3719
• Allow certificate updates with offline nodes on same-key renewals by @SudhanshuMatrix in #3717
• incusd: Keep cluster listener when core.https_address changes by @stgraber in #3723
• Simplify cross-network NAT skip by @stgraber in #3724
• build(deps): bump KineticCafe/actions-dco from 3.1.0 to 3.2.0 by @dependabot[bot] in #3725
• build(deps): bump actions/labeler from 6 to 7 by @dependabot[bot] in #3726
• Split memory and swap cgroup2 checks and tweak validation by @stgraber in #3727
• Translations update from Hosted Weblate by @weblate in #3731
• Add support for ACME EAB by @stgraber in #3728
• Fix crash on root disk reconfig by @stgraber in #3729
• Handle updated instance type data by @stgraber in #3737
• Update swagger response codes by @stgraber in #3739
• Storage fixes by @stgraber in #3740
• Fix SFTP connections by @jochumdev in #3742
• internal/linux: detect initial user namespace by inode by @aleivag in #3736
• incus/launch: Link to the supported instance types by @gagath in #3734
• storage: Bound Ceph RBD unmap operations by @fivetime in #3715
• More speed for compression/decompression with pigz by @jochumdev in #3743
• incus/list: Add --all-remotes by @tapiab in #3733
• Add NVRAM setters by @bensmrs in #3744
• Add bitmap operations and instance repair actions to the CLI by @stgraber in #3746
• incusd/firewall/nftables: Fix template race in applyNftConfig by @stgraber in #3745
• Fix resource leak, deadlock and bulk query performance by @stgraber in #3747
• Add NVRAM rebuild by @bensmrs in #3748
• Translations update from Hosted Weblate by @weblate in #3749
• Security fixes for Incus 7.3 by @stgraber in #3750
• Translations update from Hosted Weblate by @weblate in #3751
• Add more formats for incus low-level nvram get/set by @bensmrs in #3752
• Update gomod by @stgraber in #3753

New Contributors

• @gagath made their first contribution in #3552
• @glowf1sh made their first contribution in #3605
• @SudhanshuMatrix made their first contribution in #3650
• @fivetime made their first contribution in #3648
• @johnmaguire made their first contribution in #3680
• @jochumdev made their first contribution in #3742
• @aleivag made their first contribution in #3736
• @tapiab made their first contribution in #3733

Full Changelog: v7.2.0...v7.3.0