Stéphane Graber, the leader of the Linux Containers project and former technical lead of the LXD project, announced the release of Incus 7.0 LTS, a fork of the container and virtual machine management system LXD, created by the community after the original project came under Canonical's control and changed its license. The project's code is distributed under the Apache 2.0 license. An online demonstration is available for review.
Incus 7.0 LTS will be supported until June 2031. The first two years will include corrective updates with bug fixes and minor improvements, after which the project will transition to a support phase focused only on critical vulnerabilities. The current branch, Incus 6.0 LTS, has been moved to maintenance mode, where only security-related fixes will be published.
Main changes and innovations:
- The S3 object storage handler based on Minio has been replaced with a proprietary built-in implementation.
- A 'core.shutdown_action' option has been added to define actions during shutdown. server.
- A low-level API for creating backups has been implemented.
- A 'restricted.storage-pools.access' setting has been added to limit the storage pools available for the project.
- Scriptlets for managing instance placement during cluster rebalancing have been added.
- The behavior of the 'incus file push' and 'incus file pull' commands has been aligned with the 'cp' utility.
- Nine vulnerabilities have been fixed, including seven of moderate severity (including CVE-2026-35527 and CVE-2026-40195) and two of low severity.
- Support for cgroupv1 and iptables/ip6tables/ebtables has been discontinued (migration to nftables is recommended).
- Minimum system requirements for the environment have been increased.
- Improvements over the LTS branch Incus 6.0 include full support for containers in OCI format, implementation of dependent storage volumes, support for Network address sets, new drivers for Linstor and TrueNAS storage, and the ability to define a baseline CPU level for cluster groups.
Source: opennet.ru
