Incus 7.5.1

Announcement

https://discuss.linuxcontainers.org/t/incus-7-5-has-been-released/27273

What's Changed

• incusd: Validate OCI config.json before use by @stgraber in #3919
• Fix VM startup when using scriptlets with CSM or SEV by @stgraber in #3918
• Various bugfixes by @stgraber in #3920
• Fix discard alignment issue in VM due to QCOW2 bitmap layer by @stgraber in #3922
• incus/cluster: Don't use unix socket URL as the join address by @stgraber in #3924
• Implement -a for incus file push/pull by @stgraber in #3923
• Implement interactive sessions on Windows by @stgraber in #3915
• Fix backup import with dependent volumes and snapshots by @stgraber in #3921
• Add NetBSD support by @bensmrs in #3925
• Translations update from Hosted Weblate by @weblate in #3930
• incusd/instance: Mention images available for other instance types by @stgraber in #3931
• incusd/images: Check source instance access on publish by @stgraber in #3934
• Cluster evacuation/restoration fixes by @stgraber in #3929
• QEMU/QMP fixes by @stgraber in #3937
• incus/image: Don't warn on already closed files during import by @stgraber in #3938
• Set PKCE challenge and verifier values by @stephendotcarter in #3939
• cmd/generate-database/db: Add nullable field support by @masnax in #3941
• Add dns.include_hosts by @stgraber in #3947
• Various bugfixes by @stgraber in #3946
• Fix clustering bugs by @stgraber in #3950
• doc: Mention FreeBSD client by @bensmrs in #3953
• Fix librbd handling by @stgraber in #3954
• Various bugfixes by @stgraber in #3949
• incus: Remove url escape for spice socket path. by @abiosoft in #3956
• Diverse BSD agent improvements by @bensmrs in #3958
• More libceph fixes by @stgraber in #3957
• incusd/storage/zfs: Delete target volume before full transfer on refresh by @stgraber in #3966
• incusd/rsync: Only transfer xattrs settable without CAP_SYS_ADMIN by @stgraber in #3965
• incusd/api: Exclude node-local config from untargeted cluster ETag by @stgraber in #3969
• More evacuation and live-migration fixes by @stgraber in #3967
• incusd/cluster: Reject internal rebalance/handover requests during st… by @stgraber in #3971
• incus/device: Set NVIDIA device UUIDs for physical GPUs by @Lochnair in #3973
• Handle concurrent console access / log retrieval by @stgraber in #3974
• Add more storage property caching by @stgraber in #3964
• Translations update from Hosted Weblate by @weblate in #3984
• Fixes to migration error handling by @stgraber in #3980
• incusd/instance/qemu: Don't pass nil exec streams to the agent client by @stgraber in #3991
• Network fixes by @stgraber in #3988
• internal/server/instance/drivers: Unmount residual Unix devices during cleanup by @fivetime in #3979
• internal/server/util: Recognize named unconfined AppArmor profiles by @fivetime in #3977
• internal/server/storage/drivers: Handle dotted Ceph client IDs by @fivetime in #3976
• Various bugfixes by @stgraber in #3982
• Fix handling of volatile keys during snapshot restore by @stgraber in #3994
• tests: Cover OVN peering with several peers on one network by @sandroden in #3995
• Prevent concurrent onStop calls by @stgraber in #3997
• Implement NVIDIA GPU clique by @stgraber in #4001
• Fix project change dropped on cross-member moves by @presztak in #4003
• client: Don't attempt reconnection on websocket operations by @stgraber in #4004
• incusd/storage/zfs: Clean up parent dataset on failed migration by @stgraber in #4009
• Fix race in nvram mirroring by @stgraber in #4011
• Pass OIDC claims to auth scriptlet by @stgraber in #4010
• Remove loadbalancer BGP prefix when network is deleted by @DarkressX in #4014
• incusd/instance/lxc: Reuse exact-sized ID map gaps by @fivetime in #3998
• incusd/instance/lxc: Reserve ID maps until persisted by @fivetime in #3999
• Add support for live migration between projects by @presztak in #4005
• client: Fail clearly when OIDC provider has no device authorization e… by @stgraber in #4018
• Various bugfixes by @stgraber in #4015
• incusd/network/ovn: Match IPv6 load balancer health monitors by @stgraber in #4020
• Reject live migration of filesystem dependent volumes by @presztak in #4023
• Fix dependent volumes in projects that share storage volumes by @presztak in #4024
• Prevent getting blocked during daemon shutdown by @stgraber in #4017
• Extra validation and improved reverting of ACL changes by @stgraber in #4016
• Rework OCI environment management by @stgraber in #4021
• Various bugfixes by @stgraber in #4032
• Limit zfs inherit calls by @stgraber in #4036
• Add missing DNS NOTIFY calls by @stgraber in #4039
• Fix project quota issues by @stgraber in #4037
• incusd/cluster: Don't run update trigger under the gateway lock by @stgraber in #4038
• Implement cluster metrics by @stgraber in #4042
• Diverse remote parsing improvements by @bensmrs in #4046
• Translations update from Hosted Weblate by @weblate in #4047
• Added incant to the list of third party software by @stappersg in #4045
• Add support for security.tags and exposure to OpenFGA by @stgraber in #4049
• More ACL fixes by @stgraber in #4035
• Rework handling of idmap.base/idmap.size/idmap.isolated by @stgraber in #4048
• incusd/storage: Fix custom volume usage always reporting zero total size by @speijnik in #4052
• incusd/instance/qemu: Abort snapshot transfer on failed live migration by @stgraber in #4054
• Improve performance of extremely busy clusters by @stgraber in #4050
• Add support for creating multiple internal subnets by @presztak in #4033
• incusd/seccomp: Retry pidfd_open with PIDFD_THREAD on ENOENT by @stgraber in #4060
• incus/server/storage/driver/ceph: Flatten image in background during instance creation by @DarkressX in #4053
• incusd/network/ovn: Don't load a self-referencing parent by @stgraber in #4062
• Implement initial.copy on custom volumes by @stgraber in #4061
• Expose OCI image properties by @stgraber in #4064
• incusd/profiles: Check project restrictions on profile creation by @stgraber in #4065
• Fix peering with child networks and allow per-child NAT addresses by @stgraber in #4066
• Add pprof debug route to main API listener by @stgraber in #4067
• Fix cluster leaks and large memory allocations by @stgraber in #4068
• Security fixes for Incus 7.5 by @stgraber in #4071
• Update gomod by @stgraber in #4069

New Contributors

• @Lochnair made their first contribution in #3973
• @sandroden made their first contribution in #3995
• @stappersg made their first contribution in #4045

Full Changelog: v7.4.0...v7.5.1