Incus 7.6

Announcement

https://discuss.linuxcontainers.org/t/incus-7-6-has-been-released/27462

What's Changed

• devcontainer: bump Go to 1.26 by @0xk1f0 in #4073
• Dont interpret ErrNonReusuableSucceeded as failure on instance delete by @DarkressX in #4076
• doc: Move warning for macOS in howto/insntances_create by @hnakamur in #4077
• incusd/instance/qemu: Report disk usage for all disk devices in state by @stgraber in #4078
• Fix cluster certificate chain handling by @stgraber in #4079
• Various bugfixes by @stgraber in #4084
• Fix NetBSD build by @bensmrs in #4075
• Translations update from Hosted Weblate by @weblate in #4086
• Allow incus admin update-certificate on remote servers by @stgraber in #4085
• Various bugfixes by @stgraber in #4087
• incusd/instance/qemu: Report disk I/O counters in instance state by @speijnik in #4092
• chore: allow setting parent of existing networks by @0xk1f0 in #4091
• Loadbalancer health lifecycle events by @DarkressX in #4074
• Expose TPM EK through state API by @stgraber in #4083
• Various bugfixes by @stgraber in #4096
• Implement NIC security options on OVN by @stgraber in #4097
• Translations update from Hosted Weblate by @weblate in #4100
• incusd/network/ovn: Restrict the IC southbound monitor to used tables by @reel in #4099
• ZFS fixes by @stgraber in #4104
• incusd/apparmor: Don't allow reading everything when LD_LIBRARY_PATH … by @stgraber in #4106
• incusd/network: Fix OVN network creation retries by @jovermier in #4105
• fix: use hashed block node name when live resizing attached volume by @DarkressX in #4107
• Use go-cowsql cluster package by @masnax in #4072
• Various bugfixes by @stgraber in #4110
• Add request data to the details field of the authorization scriptlet by @bensmrs in #4116
• Fix race in OVN reparenting test by @presztak in #4119
• Improve boot priority handling by @bensmrs in #4118
• incusd/instance/agent-loader: Make macOS agent drive non-browsable by @bensmrs in #4114
• Fix online state locking and offline handling by @presztak in #4113
• Add ipvX.nat.address support for ingress_mode=l2proxy by @0xk1f0 in #4103
• Improve memory performance in nested VMs by @stgraber in #4130
• Copy dependent volumes from the snapshot when copying an instance snapshot by @presztak in #4131
• incusd/storage/s3: Return NoSuchKey for missing objects by @stgraber in #4136
• Fix various OVN bugs by @stgraber in #4138
• Fix importing into a restricted project by @stgraber in #4139
• Fix ACME wildcard handling by @stgraber in #4135
• File-related commands bug squashing by @bensmrs in #4132
• Translations update from Hosted Weblate by @weblate in #4141
• Fix some dependent volume issues by @stgraber in #4137
• incusd/storage/lvm: Run report commands in silent mode by @stgraber in #4154
• Fix S3 migration issues by @stgraber in #4152
• Improve exec connection speed and reliability by @stgraber in #4151
• Fix comment for defaultConsoleSpiceCommand by @hnakamur in #4160
• Add support for OIDC opaque tokens by @stgraber in #4153
• Rename dependent volume snapshots with instance snapshots by @presztak in #4156
• incus: Fix recursive keepalive proxy startup by @davidchrisr in #4162
• Don't panic on marshaling uuid.UUID and other non-addressable arrays by @masnax in #4163
• storage: Avoid nested transactions during snapshot record recovery by @jovermier in #4165
• Various VM bugfixes by @stgraber in #4159
• Various bugfixes by @stgraber in #4161
• Various LVM fixes by @stgraber in #4158
• Fix qcow2 volume size after live snapshot by @presztak in #4167
• incus: Enable persistent hook traversal by @davidchrisr in #4166
• Various OVN bugfixes by @stgraber in #4157
• Various ZFS snapshot handling fixes by @stgraber in #4173
• Various bugfixes by @stgraber in #4177
• internal/server/db/query: Report canceled transactions by @jovermier in #4168
• test/clustering: Wait for returning member readiness by @jovermier in #4170
• internal/server/bgp: Preserve shared peer counts by @jovermier in #4169
• Clarify CA behavior by @stgraber in #4178
• Forward ACME HTTP in the cluster by @stgraber in #4180
• oss-scanner: Add build and threat model for Anthropic's OSS Scanner by @stgraber in #4187
• Add preliminary loongarch64 support by @bensmrs in #4182
• Add Community-Scripts in third_party tools by @MickLesk in #4186
• Fix snapshot timestamp comparison logic by @stgraber in #4189
• Translations update from Hosted Weblate by @weblate in #4195
• Fix port selection race in mini-oidc by @breml in #4194
• Use the virtual size of qcow2 volumes on copy and migration by @presztak in #4193
• incusd/storage/drivers: Delete conflicting subvolume on btrfs refresh by @stgraber in #4191
• Allow adding CAs to the trust store by @stgraber in #4192
• Fix flaky tests by @stgraber in #4197
• incusd/firewall/nftables: Skip UDP checksum rules in user namespaces by @stgraber in #4200
• incusd/instance/qemu: Use the custom volume content type on live move by @stgraber in #4201
• incusd/instances/lxc: Use a different environment for hooks and the container by @jochumdev in #4128
• incusd/network/ovn: Keep changed uplink addresses on uplink change by @0xk1f0 in #4203
• internal/server/bgp/server: Don't error if removePrefixByUUID cant fi… by @DarkressX in #4202
• Add a system test for VMs on a cluster by @stgraber in #4205
• incusd/instance/qemu: Keep direct I/O on the metadata image data file by @stgraber in #4208
• Tweaks to dirty bitmap / backup handling by @stgraber in #4206
• incusd/project: Allow local images with restricted.images.servers by @LucaCappelletti94 in #4196
• fix: avoid deadlocking transactions in Forward/LoadBlanacer Create functions by @DarkressX in #4209
• Fix recent golangci-lint failures by @stgraber in #4210
• feat: Add support for bgp communities in ovn/bridge networks by @DarkressX in #4207
• incusd/storage/s3: Fix object listing pagination by @drkpkg in #4216
• Fix OCI crash for containers with no idmap by @stgraber in #4220
• Improve OVN error handling by @stgraber in #4218
• Context backed prepared DB statements by @breml in #4226
• Fix copying an instance snapshot with dependent volumes to another server by @presztak in #4212
• Issue warnings after an instance shutdown timeout by @stgraber in #4215
• Add more optimizations to the keepalive proxy by @stgraber in #4225
• Implement compression for block volumes by @stgraber in #4214
• oss-scanner: Note the capability-dependent test by @stgraber in #4229
• Github workflow improvements and fixes by @stgraber in #4233
• Prevent QCOW2 layer from growing past backing device by @stgraber in #4232
• incus: Add certificate generation output paths and key encryption by @davidchrisr in #4171
• Restrict device names by @stgraber in #4230
• Various VM improvements (live-migration throughput and memory balloon reporting) by @stgraber in #4234
• internal/server/device/disk: don't block migration for NVMe disks by @mihalicyn in #4240
• Fix qcow2 snapshots of running VMs on lvmcluster by @presztak in #4238
• incus-agent: Stop the Windows service when the HTTP server fails by @rubas in #4237
• client: Fall back to verification_uri for OIDC device login by @ap-1 in #4236
• incusd/acme: Only forward genuine HTTP-01 challenge paths by @stgraber in #4248
• Fix image cleanup during refresh by @stgraber in #4247
• Allow providing an S3 region during backup by @stgraber in #4253
• Implement multifd for VM live migration by @stgraber in #4243
• Reduce netlink calls by @stgraber in #4252
• Implement SR-IOV NIC live migration by @bensmrs in #4242
• incus/console: Prevent splitting on socket path by @bensmrs in #4257
• client, incusd: Centralize Unix socket resolution and support /run/incus by @AlD in #4190
• Refresh unmodified OCI config on rebuild by @stgraber in #4262
• Various bugfixes by @stgraber in #4259
• Allow login/logout using JWT (stores as cookie) by @stgraber in #4260
• Use temporary snapshots during cephfs export by @stgraber in #4264
• Keep and validate VM boot state on migrate in restricted projects by @stgraber in #4261
• Add new lifecycle event and config option for cluster healing by @stgraber in #4265
• Fix dirty bitmap query with ongoing NBD by @stgraber in #4267
• incusd/cluster: Retry starting healed instances by @stgraber in #4271
• Fix shared storage cluster instance copy by @stgraber in #4272
• tests: Cover more snapshot deletes and stateful snapshots on lvmcluster by @presztak in #4274
• incusd/device: Keep mount flags when remounting disks read-only by @initd-it in #4270
• incus-simplestreams: Add --image-version by @nanjj in #4269
• incusd/migrate: Fix goroutine leak in controlChannel by @alien43 in #4275
• Fix race during start/restart by @stgraber in #4268
• cmd/generate-database/db: Fix type parsing on go 1.27+ by @masnax in #4276
• Allow moving of existing LBs and Forwards when parent is set. by @0xk1f0 in #4227
• Single instance local volume follow migrate by @DarkressX in #4228
• incus-agent: Load configuration when running as a Windows service by @presztak in #4278
• Linstor bugfixes by @stgraber in #4282
• Various bugfixes by @stgraber in #4281
• incusd/storage/btrfs: Skip quotas on ISO volumes by @stgraber in #4283
• Implement native SR-IOV NIC live migration by @bensmrs in #4277
• Translations update from Hosted Weblate by @weblate in #4286
• incus-simplestreams: Fix remove when several products share the metadata by @nanjj in #4285
• Various bugfixes by @stgraber in #4288
• VM I/O performance improvements by @stgraber in #4287
• Diverse fixes by @bensmrs in #4290
• lvmcluster/qcow2 fixes for containers by @stgraber in #4292
• Initial switchdev support for SR-IOV NICs by @bensmrs in #4289
• Translations update from Hosted Weblate by @weblate in #4294
• Switch to dynamic NBD devices by @stgraber in #4291
• Security fixes for Incus 7.6 by @stgraber in #4293
• Fix force stop being stuck on shutdown by @stgraber in #4296

New Contributors

• @reel made their first contribution in #4099
• @jovermier made their first contribution in #4105
• @davidchrisr made their first contribution in #4162
• @MickLesk made their first contribution in #4186
• @LucaCappelletti94 made their first contribution in #4196
• @drkpkg made their first contribution in #4216
• @mihalicyn made their first contribution in #4240
• @rubas made their first contribution in #4237
• @ap-1 made their first contribution in #4236
• @AlD made their first contribution in #4190
• @initd-it made their first contribution in #4270
• @alien43 made their first contribution in #4275

Full Changelog: v7.5.1...v7.6.0