What's Changed
- docs: Clarify the sentence about Incus owning the ZFS pool/dataset by @ldesgoui in #3755
- incus/low-level: Fix naming inconsistency by @stgraber in #3756
- Various bugfixes by @stgraber in #3757
- shared/api: Hide additional sensitive config keys by @stgraber in #3758
- Various fixes by @stgraber in #3760
- Client-side near-live migration by @presztak in #3754
- Various bugfixes by @stgraber in #3762
- Various bugfixes by @stgraber in #3766
- incusd/cluster: Stop instances in place when evacuation has no target by @stgraber in #3767
- Implement security.protect.start by @stgraber in #3768
- Fix resolv.conf generation in forknet dhcp by @stgraber in #3769
- Preserve client state across derived clients by @jochumdev in #3771
- Various NVRAM-related improvements by @bensmrs in #3770
- Allow live update of ipv4/ipv6.address.external by @0xk1f0 in #3772
- Fix storage bucket handling in clusters by @stgraber in #3774
- Various bugfixes by @stgraber in #3776
- Move OVN tests to Github Actions by @stgraber in #3777
- Translations update from Hosted Weblate by @weblate in #3779
- incusd/storage/lvm: Wipe source device rather than VG name by @stgraber in #3782
- client: Handle unmanaged networks in preseed by @stgraber in #3780
- Use proxy ARP rather than NAT rules for OVN l2proxy by @stgraber in #3775
- Fix event ordering by @jochumdev in #3785
- client: Event connection liveness and Disconnect fixes by @jochumdev in #3784
- Server-side near-live migration by @presztak in #3730
- incusd/storage/lvm: Detect block type in ListVolumes by @stgraber in #3791
- Avoid synchronization issues between instance snapshots, volume snapshots and on-disk snapshots by @stgraber in #3792
- Optimize network loading by @stgraber in #3761
- Expose image location in cluster by @stgraber in #3790
- Add configurable multicast snopping and relaying on OVN by @stgraber in #3789
- incusd/instance/qemu: Use temporary data-file when growing metadata i… by @stgraber in #3796
- Translations update from Hosted Weblate by @weblate in #3799
- Translations update from Hosted Weblate by @weblate in #3801
- Move more Jenkins daily tests to Github by @stgraber in #3800
- doc: Document instance-migrated lifecycle event by @fohnwind in #3807
- Fix for various recent test failures by @stgraber in #3806
- Various bugfixes by @stgraber in #3811
- Add multiple --environment-file args by @AJRepo in #3805
- instance: Derive process start time from proc stat by @fivetime in #3810
- Update swagger specification by @stgraber in #3813
- Various bugfixes by @stgraber in #3812
- incusd: Fix authorization for inherited storage volumes by @47star in #3817
- Translations update from Hosted Weblate by @weblate in #3823
- Fix PATCH on cluster groups by @stgraber in #3822
- Port more Jenkins tests to Github Actions (VM) by @stgraber in #3814
- incusd/instance/qemu: Record maxcpus in boot state by @stgraber in #3820
- Add custom columns to
incus image listby @stgraber in #3819 - Implement device path formatting by @bensmrs in #3825
- doc/storage: Add TrueNAS to data storage location table by @stgraber in #3827
- lxc: Start live migration action operation before pre-dumps by @fivetime in #3830
- incusd/firewall: Restrict wildcard proxy NAT to local addresses by @jochumdev in #3824
- client: Replace SetOrdered with AddChannel by @jochumdev in #3797
- Allow using external NAT addresses on auto-assigned OVN addresses by @stgraber in #3835
- Extend image locking by @stgraber in #3838
- Improvements to
incus remote addby @stgraber in #3839 - Various bugfixes by @stgraber in #3840
- lxc: Make incremental memory migration opt-in by @fivetime in #3828
- storage/ceph: Ignore detached devices during RBD sysfs scan by @fivetime in #3829
- lxc: Normalize received CRIU state ownership by @fivetime in #3831
- Update for modern QEMU by @stgraber in #3842
- incusd/networks: Fix panic when a network fails to start by @speijnik in #3843
- incusd/instance/qemu: Cancel incoming state transfer on source failure by @stgraber in #3852
- incusd/images: Surface write errors from compression pipeline by @stgraber in #3851
- incusd/networks: Notify cluster members before local deletion by @stgraber in #3845
- Improve cluster response times by @stgraber in #3849
- Fix LVM cluster deletion issue when deleting the initial pool by @stgraber in #3841
- doc: explain how to resize virtual-machine/* volumes by @gagath in #3854
- Various bugfixes by @stgraber in #3857
- Storage quota fixes by @stgraber in #3856
- More NVRAM improvements by @bensmrs in #3858
- incusd/storage: Fix source snapshot project on same-pool custom volum… by @stgraber in #3863
- incus/server/device/nic/ovn: hot-reloadable ovn nic limits by @DarkressX in #3865
- Alter config.json from umoci to strip volumes by @stgraber in #3860
- client: Reconnect operation event listener on connection failure by @stgraber in #3853
- Fix some shared-storage live-migration gaps by @stgraber in #3862
- Sync filesystem instead of freezing it before snapshots by @presztak in #3866
- Add support for dependent disks during in-cluster near-live migration by @presztak in #3794
- Secure Boot key management and assorted fixes by @bensmrs in #3867
- cmd/incus: add --data-file flag for query command by @breml in #3871
- Add incus start --boot-next=xxx and more NVRAM improvements by @bensmrs in #3869
- incusd/device: Fix address set project scope on bridged NIC start by @ahall in #3872
- Support for disk burst limits by @presztak in #3868
- Support disabling IPv6 RA on Incus managed networks by @stgraber in #3874
- Fix MAC address bindings on deletion (OVN L3) by @stgraber in #3879
- Add NVRAM support in QEMU scriptlet by @bensmrs in #3878
- Allow sharing specific networks with restricted projects by @stgraber in #3875
- Translations update from Hosted Weblate by @weblate in #3882
- Allow "none" ipv4.address/ipv6.address for OCI by @stgraber in #3880
- Support for nic burst limits by @presztak in #3876
- Translations update from Hosted Weblate by @weblate in #3887
- Allow limited pool recovery in clusters by @stgraber in #3886
- incusd/instance/qmp: Set a write deadline on monitor commands by @stgraber in #3883
- shared/cmd: Fix progress rendering on non-terminals by @KiaraGrouwstra in #3888
- incusd/events: Don't warn when the peer closed the connection first by @KiaraGrouwstra in #3889
- Implement completion of project names by @stgraber in #3891
- Allow image architectures filters to apply to both Incus architecture and the property by @stgraber in #3885
- Various migration/evacuation fixes by @stgraber in #3893
- Add support for using librbd for all Ceph interactions by @stgraber in #3884
- Manipulate NVRAM through initial keys by @bensmrs in #3892
- Implement DNS NOTIFY by @stgraber in #3896
- Bump baseline to Go 1.26 (and fix/modernize) by @stgraber in #3902
- Move cephobject to not relying on local files by @stgraber in #3901
- Fix bad folder idmapping for root user by @stgraber in #3898
- Fix Linstor concurent unpack by @stgraber in #3903
- Reverse enforcement logic for cross-network OVN rules (internal/external) by @stgraber in #3897
- Validate PEM blobs by @bensmrs in #3900
- More Secure Boot commands by @bensmrs in #3905
- Fix DHCPv6 with security.ipv6_filtering by @stgraber in #3906
- Support setting qdisc for virtual NICs by @presztak in #3904
- shared/uefi: Correctly handle padded VARS files by @bensmrs in #3911
- shared/cmd: Modernize table look by @bensmrs in #3907
- Various bugfixes from the forum by @stgraber in #3909
- incus/query: Add custom header support by @breml in #3912
- OCI fix and dependency bump by @stgraber in #3913
- Fix issue with delegated ZFS and host systemd by @stgraber in #3914
- Incus 7.4 security fixes by @stgraber in #3916
New Contributors
- @ldesgoui made their first contribution in #3755
- @fohnwind made their first contribution in #3807
- @speijnik made their first contribution in #3843
- @ahall made their first contribution in #3872
- @KiaraGrouwstra made their first contribution in #3888
Full Changelog: v7.3.0...v7.4.0