Incus 7.4

What's Changed

• docs: Clarify the sentence about Incus owning the ZFS pool/dataset by @ldesgoui in #3755
• incus/low-level: Fix naming inconsistency by @stgraber in #3756
• Various bugfixes by @stgraber in #3757
• shared/api: Hide additional sensitive config keys by @stgraber in #3758
• Various fixes by @stgraber in #3760
• Client-side near-live migration by @presztak in #3754
• Various bugfixes by @stgraber in #3762
• Various bugfixes by @stgraber in #3766
• incusd/cluster: Stop instances in place when evacuation has no target by @stgraber in #3767
• Implement security.protect.start by @stgraber in #3768
• Fix resolv.conf generation in forknet dhcp by @stgraber in #3769
• Preserve client state across derived clients by @jochumdev in #3771
• Various NVRAM-related improvements by @bensmrs in #3770
• Allow live update of ipv4/ipv6.address.external by @0xk1f0 in #3772
• Fix storage bucket handling in clusters by @stgraber in #3774
• Various bugfixes by @stgraber in #3776
• Move OVN tests to Github Actions by @stgraber in #3777
• Translations update from Hosted Weblate by @weblate in #3779
• incusd/storage/lvm: Wipe source device rather than VG name by @stgraber in #3782
• client: Handle unmanaged networks in preseed by @stgraber in #3780
• Use proxy ARP rather than NAT rules for OVN l2proxy by @stgraber in #3775
• Fix event ordering by @jochumdev in #3785
• client: Event connection liveness and Disconnect fixes by @jochumdev in #3784
• Server-side near-live migration by @presztak in #3730
• incusd/storage/lvm: Detect block type in ListVolumes by @stgraber in #3791
• Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots by @stgraber in #3792
• Optimize network loading by @stgraber in #3761
• Expose image location in cluster by @stgraber in #3790
• Add configurable multicast snopping and relaying on OVN by @stgraber in #3789
• incusd/instance/qemu: Use temporary data-file when growing metadata i… by @stgraber in #3796
• Translations update from Hosted Weblate by @weblate in #3799
• Translations update from Hosted Weblate by @weblate in #3801
• Move more Jenkins daily tests to Github by @stgraber in #3800
• doc: Document instance-migrated lifecycle event by @fohnwind in #3807
• Fix for various recent test failures by @stgraber in #3806
• Various bugfixes by @stgraber in #3811
• Add multiple --environment-file args by @AJRepo in #3805
• instance: Derive process start time from proc stat by @fivetime in #3810
• Update swagger specification by @stgraber in #3813
• Various bugfixes by @stgraber in #3812
• incusd: Fix authorization for inherited storage volumes by @47star in #3817
• Translations update from Hosted Weblate by @weblate in #3823
• Fix PATCH on cluster groups by @stgraber in #3822
• Port more Jenkins tests to Github Actions (VM) by @stgraber in #3814
• incusd/instance/qemu: Record maxcpus in boot state by @stgraber in #3820
• Add custom columns to incus image list by @stgraber in #3819
• Implement device path formatting by @bensmrs in #3825
• doc/storage: Add TrueNAS to data storage location table by @stgraber in #3827
• lxc: Start live migration action operation before pre-dumps by @fivetime in #3830
• incusd/firewall: Restrict wildcard proxy NAT to local addresses by @jochumdev in #3824
• client: Replace SetOrdered with AddChannel by @jochumdev in #3797
• Allow using external NAT addresses on auto-assigned OVN addresses by @stgraber in #3835
• Extend image locking by @stgraber in #3838
• Improvements to incus remote add by @stgraber in #3839
• Various bugfixes by @stgraber in #3840
• lxc: Make incremental memory migration opt-in by @fivetime in #3828
• storage/ceph: Ignore detached devices during RBD sysfs scan by @fivetime in #3829
• lxc: Normalize received CRIU state ownership by @fivetime in #3831
• Update for modern QEMU by @stgraber in #3842
• incusd/networks: Fix panic when a network fails to start by @speijnik in #3843
• incusd/instance/qemu: Cancel incoming state transfer on source failure by @stgraber in #3852
• incusd/images: Surface write errors from compression pipeline by @stgraber in #3851
• incusd/networks: Notify cluster members before local deletion by @stgraber in #3845
• Improve cluster response times by @stgraber in #3849
• Fix LVM cluster deletion issue when deleting the initial pool by @stgraber in #3841
• doc: explain how to resize virtual-machine/* volumes by @gagath in #3854
• Various bugfixes by @stgraber in #3857
• Storage quota fixes by @stgraber in #3856
• More NVRAM improvements by @bensmrs in #3858
• incusd/storage: Fix source snapshot project on same-pool custom volum… by @stgraber in #3863
• incus/server/device/nic/ovn: hot-reloadable ovn nic limits by @DarkressX in #3865
• Alter config.json from umoci to strip volumes by @stgraber in #3860
• client: Reconnect operation event listener on connection failure by @stgraber in #3853
• Fix some shared-storage live-migration gaps by @stgraber in #3862
• Sync filesystem instead of freezing it before snapshots by @presztak in #3866
• Add support for dependent disks during in-cluster near-live migration by @presztak in #3794
• Secure Boot key management and assorted fixes by @bensmrs in #3867
• cmd/incus: add --data-file flag for query command by @breml in #3871
• Add incus start --boot-next=xxx and more NVRAM improvements by @bensmrs in #3869
• incusd/device: Fix address set project scope on bridged NIC start by @ahall in #3872
• Support for disk burst limits by @presztak in #3868
• Support disabling IPv6 RA on Incus managed networks by @stgraber in #3874
• Fix MAC address bindings on deletion (OVN L3) by @stgraber in #3879
• Add NVRAM support in QEMU scriptlet by @bensmrs in #3878
• Allow sharing specific networks with restricted projects by @stgraber in #3875
• Translations update from Hosted Weblate by @weblate in #3882
• Allow "none" ipv4.address/ipv6.address for OCI by @stgraber in #3880
• Support for nic burst limits by @presztak in #3876
• Translations update from Hosted Weblate by @weblate in #3887
• Allow limited pool recovery in clusters by @stgraber in #3886
• incusd/instance/qmp: Set a write deadline on monitor commands by @stgraber in #3883
• shared/cmd: Fix progress rendering on non-terminals by @KiaraGrouwstra in #3888
• incusd/events: Don't warn when the peer closed the connection first by @KiaraGrouwstra in #3889
• Implement completion of project names by @stgraber in #3891
• Allow image architectures filters to apply to both Incus architecture and the property by @stgraber in #3885
• Various migration/evacuation fixes by @stgraber in #3893
• Add support for using librbd for all Ceph interactions by @stgraber in #3884
• Manipulate NVRAM through initial keys by @bensmrs in #3892
• Implement DNS NOTIFY by @stgraber in #3896
• Bump baseline to Go 1.26 (and fix/modernize) by @stgraber in #3902
• Move cephobject to not relying on local files by @stgraber in #3901
• Fix bad folder idmapping for root user by @stgraber in #3898
• Fix Linstor concurent unpack by @stgraber in #3903
• Reverse enforcement logic for cross-network OVN rules (internal/external) by @stgraber in #3897
• Validate PEM blobs by @bensmrs in #3900
• More Secure Boot commands by @bensmrs in #3905
• Fix DHCPv6 with security.ipv6_filtering by @stgraber in #3906
• Support setting qdisc for virtual NICs by @presztak in #3904
• shared/uefi: Correctly handle padded VARS files by @bensmrs in #3911
• shared/cmd: Modernize table look by @bensmrs in #3907
• Various bugfixes from the forum by @stgraber in #3909
• incus/query: Add custom header support by @breml in #3912
• OCI fix and dependency bump by @stgraber in #3913
• Fix issue with delegated ZFS and host systemd by @stgraber in #3914
• Incus 7.4 security fixes by @stgraber in #3916

New Contributors

• @ldesgoui made their first contribution in #3755
• @fohnwind made their first contribution in #3807
• @speijnik made their first contribution in #3843
• @ahall made their first contribution in #3872
• @KiaraGrouwstra made their first contribution in #3888

Full Changelog: v7.3.0...v7.4.0