{"id":147713,"date":"2025-11-08T17:11:54","date_gmt":"2025-11-08T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos"},"modified":"2025-11-08T17:11:54","modified_gmt":"2025-11-08T15:11:55","slug":"proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-linux-containers-predstavil-atomarno-obnovlyaemyj-distributiv-incusos","title":{"rendered":"The Linux Containers project introduced the atomically updatable distribution IncusOS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

St\u00e9phane Graber, the leader of the Linux Containers project and one of the creators of the LXC toolkit, a member of the Ubuntu Technical Board, and participant in the release teams of Ubuntu, has introduced a new Linux distribution called IncusOS. IncusOS provides an atomically updatable system image for creating servers, which are centrally managed using the Incus toolkit (a fork of LXD). The distribution is developed under the auspices of the Linux Containers project, which is responsible for the development of the LXC and Incus tools. The project\u2019s codebase is written in Go and is distributed under the Apache 2.0 license. <\/p>\n

The system images are provided for x86_64 and ARM64 architectures and are based on a stripped-down environment of Debian 13, utilizing a Linux kernel from the Zabbly repository, which forms packages with 'vanilla' kernel versions for Debian and Ubuntu, supplemented with patches and configuration changes to optimize container startup in an environment based on the Incus toolkit. ZFS is used as the filesystem. <\/p>\n

The builds are created using the mkosi toolkit developed by Lennart Poettering. The base system environment is mounted in read-only mode. To install additional applications, the systemd-sysext utility is used, allowing applications to be distributed as system extension images, the contents of which overlay the \/usr\/ hierarchy using OverlayFS. Backup and restoration of the main system settings and individual application data are supported, as well as a factory reset for the entire OS or selected applications. <\/p>\n

For system updates, the systemd-sysupdate component is employed, utilizing the atomic partition replacement mechanism \u2014 there are two independent partitions, one of which contains the running system, while the other installs the latest update, after which the partitions are swapped. To ensure the integrity of the boot environment, booting is done using UEFI Secure Boot and full disk encryption (LUKS), with decryption key information stored in TPM 2.0 (Trusted Platform Module). <\/p>\n

The system environment is minimized and contains only the components necessary for running Incus. There is no command shell or traditional command line management options or SSH remote access. Instead, all management and configuration operations are performed solely through the Incus system's REST API using client TLS certificate authentication or via OIDC (OpenID Connect). Management of all servers is centralized through the Operations Center web interface or the Incus CLI interface. A Migration Manager is provided to transfer containers and virtual machines from other systems such as VMware vCenter.

\"The<\/center> <\/p>\n

An online generator is used to create the boot image, allowing for image preparation based on specified parameters and setting a seed archive with configurations such as TLS certificate<\/a> for client access, the identifier of the block device for installation and network configuration (by default, the network is configured via DHCPv4 or SLAAC (Stateless Address Autoconfiguration)). Interactive installation mode is not supported \u2014 all parameters for installation and initial configuration are defined through a built-in configuration block passed during the first boot. The IncusOS image supports installation both on physical hardware and in virtual machines running on libvirt, Incus, Proxmox, VirtualBox, and VMware platforms. <\/p>\n

Storage-related capabilities: <\/p>\n