24 Commits

Author SHA256 Message Date
28cd0480e0 Accepting request 1320613 from home:cyphar:lxc
- Update to Incus 6.19.1. See upstream changelog online at
  <https://discuss.linuxcontainers.org/t/incus-6-19-has-been-released/25405>
  + Initial SELinux support
  * Improved Windows agent support
  + Serial devices in the resources API
  + Bandwidth limits on OVN NICs
  + Support for multi-object deletion in most CLI commands
  + Ability to turn off passthrough of PCI firmware to VM
  + PKCS12 generation in the CLI
  + Option for raw units in CLI CSV output
- Remove upstreamed patches:
  - hotfix-apparmor-runc-nesting.patch

OBS-URL: https://build.opensuse.org/request/show/1320613
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=41
2025-11-30 01:32:13 +00:00
deae6bcb0f Accepting request 1319015 from home:OrvilleQ:Server
- Update to Incus 6.18. See upstream changelog online at
  <https://discuss.linuxcontainers.org/t/incus-6-18-has-been-released/25091>
 + Systemd credentials
 + Storage volume file operations
 + Export of ISO volumes
 + BPF token delegation
 + MacOS support for the Incus agent
 + VirtIO sound card in VMs
 + Support for detaching USB devices without removing them
 + dns.mode for OVN network
 + Configurable MAC address patterns
 + Extended IncusOS CLI

OBS-URL: https://build.opensuse.org/request/show/1319015
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=39
2025-11-25 04:21:41 +00:00
bdc7fc0d82 Accepting request 1316592 from home:cyphar:lxc
- Backport workaround for runc's CVE-2025-52881 mitigation breaking under
  AppArmor with nesting under Incus. <https://github.com/lxc/incus/pull/2624>
  + hotfix-apparmor-runc-nesting.patch

OBS-URL: https://build.opensuse.org/request/show/1316592
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=37
2025-11-08 15:46:36 +00:00
310610b63f Accepting request 1310992 from home:OrvilleQ:Server
- Update to Incus 6.17. See upstream changelog online at
  <https://discuss.linuxcontainers.org/t/incus-6-17-has-been-released/24862>
 + IncusOS management commands
 + Tunnel support on OVN networks
 + Control over out-of-memory priority
 + Override-able configuration and devices on backup import
 + database-client cluster role
 + Support for parent=none on OVN uplink networks
 + Cluster groups in configuration preseed

OBS-URL: https://build.opensuse.org/request/show/1310992
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=35
2025-10-18 13:03:54 +00:00
441b310643 Accepting request 1297391 from home:cyphar:lxc
- Update to Incus 6.15. See upstream changelog online at
  <https://discuss.linuxcontainers.org/t/incus-6-15-has-been-released/24333>

 + Authentication support for OCI registries
 + Webhook as a logging target
 + More control over memory hotplug behavior
 + Persistent CD-ROM ejection in VMs
 + Configurable WWN for VM disk devices
 + Dynamic IPv6 network address
 + Configurable keepalive mode in the CLI
 + Markdown support as an output format in the CLI
 + More server-side filtering
 * Switched to using netlink for network configuration

OBS-URL: https://build.opensuse.org/request/show/1297391
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=33
2025-08-04 06:59:06 +00:00
3a7972d055 Accepting request 1290805 from home:cyphar:lxc
- Update to Incus 6.14. See upstream changelog online at
  <https://discuss.linuxcontainers.org/t/incus-6-14-has-been-released/24092>
  * This release fixes two security issues reported by Olivier BAL-PETRE of
	ANSSI (French Cybersecurity Agency):
    - CVE-2025-52889 bsc#1245365
    - CVE-2025-52890 bsc#1245367
  + S3 upload of instance and volume backups
  + Customizable expiry on snapshot creation
  + Alternative default expiry for manually created snapshots
  + Live migration tweaks and progress reporting
  + Reporting of CPU address sizes in the resources API
  * Database logic moved to our code generator

OBS-URL: https://build.opensuse.org/request/show/1290805
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=30
2025-07-05 16:37:36 +00:00
d849b21dd9 Accepting request 1284289 from home:cyphar:lxc
- Update to Incus 6.13. See upstream changelog online at
  <https://github.com/lxc/incus/releases/tag/v6.13.0>
- Remove upstreamed patches:
  + 0001-incusd-forkproxy-join-the-correct-mntns-for-listen.patch

OBS-URL: https://build.opensuse.org/request/show/1284289
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=28
2025-06-10 03:51:16 +00:00
4368d08397 Accepting request 1281343 from home:cyphar:lxc
- Add backport of <https://github.com/lxc/incus/pull/2136> to fix a bug with
  proxy devices using bind=container and listen=unix:... addresses.
  + 0001-incusd-forkproxy-join-the-correct-mntns-for-listen.patch

OBS-URL: https://build.opensuse.org/request/show/1281343
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=26
2025-05-30 09:38:36 +00:00
c9bcee5a81 Accepting request 1273275 from home:rrahl0
- update to 6.12:
  * doc: Fix missing OCI section by @stgraber in #1855
  * doc: Fix config option reference on LINSTOR driver by @luissimas in #1857
  * Add support for server-side filtering by instance name by @presztak in #1856
  * incusd/instance/lxc: Fix max gid when in a privileged container by @stgraber in #1859
  * Fix some static analysis nits by @stgraber in #1860
  * README: Fix typo by @stgraber in #1861
  * Docs: correct restriction on path option by @gwenya in #1862
  * lxd-to-incus: Fix typo in trigger by @stgraber in #1865
  * incusd/instance/edk2: Limit test to UEFI architectures by @stgraber in #1866
  * doc: Tweak ACME documentation by @stgraber in #1868
  * instances/drivers/qemu: update user parameter for QEMU v9.1+ by @dnegreira in #1871
  * OCI improvements by @stgraber in #1873
  * Support server-side filtering by @presztak in #1872
  * Enable filtering with the all-projects flag when listing images by @presztak in #1874
  * Improve migration by @stgraber in #1878
  * incusd/storage: Add missing forwarding on snapshot list by @stgraber in #1882
  * incusd/instance/common: Fix concurrent restarts by @stgraber in #1884
  * Fix all static analysis in client/, shared/ and cmd/incus/ by @stgraber in #1883
  * generate-database: Fix documentation for ignore by @breml in #1885
  * incusd/response: Remove redundant line break in error by @stgraber in #1886
  * RFC 3442 compliance in forknet dhcp client by @gwenya in #1887
  * incus-agent: Retry mounts to avoid kernel races by @stgraber in #1888
  * Address sets for nftables and OVN by @irhndt in #1728
  * incusd/operations: Fix WaitGet on op failure by @stgraber in #1894
  * Update list of compresors by @stgraber in #1892
  * Add snapshot pre-fetching support by @stgraber in #1891
  * incusd/instance/lxc: Use pre-existing PATH when not overridden by @stgraber in #1895
  * incusd/acme: Include CA in generate certificate by @stgraber in #1897
  * Usability improvements to incus-migrate by @stgraber in #1898

OBS-URL: https://build.opensuse.org/request/show/1273275
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=24
2025-04-29 15:26:55 +00:00
35fe0fa9cf Accepting request 1269240 from home:rrahl0
- update to 6.11:
  * Allow ICMP and low ports for unprivileged users in OCI containers by @gwenya in #1706
  * doc: Clarify virtiofsd requirements by @stgraber in #1718
  * Fix generate-database usage for incusd/db by @breml in #1719
  * Do not allow mounting of custom block volume snapshots by @presztak in #1720
  * generate-database: Abstract db connection / db transaction by @breml in #1721
  * Fix snapshot size handling in cross-pool copy/move by @presztak in #1717
  * generate-database: Accept interface in PrepareStmts by @breml in #1725
  * Simplify evaluateShorthandFilter by reducing nesting levels by @presztak in #1727
  * incusd/storage: Don't use sparse writer on thick LVM by @stgraber in #1729
  * generate-database: Add support for marshal to JSON by @breml in #1731
  * Fixed incus edk2 path overwrite issue by @nanjj in #1726
  * Do not download instance types if cache loadable by @nanjj in #1732
  * Clarify security.secureboot setting by @gwenya in #1740
  * Fix DNS for isolated OVN networks by @gwenya in #1738
  * Allow announcing extra routes through DHCPv4 by @gwenya in #1734
  * Fix link parsing failure on non-ethernet devices by @stgraber in #1742
  * Fix revert on OCI container creation failure by @gwenya in #1744
  * generate-database: Handle non tx DB connections by @breml in #1745
  * incus file edit extension by @gwenya in #1746
  * Cleanup internal API endpoints by @stgraber in #1747
  * Tweak help message for rebuild by @stgraber in #1754
  * Use lego binary for DNS-01 challenge by @accuser in #1753
  * incusd/storage/zfs: Fix ZFS CreateVolume deletes pre-existing data on failure by @mrstux in #1749
  * incus/file: Always use 1MB chunks for SFTP by @stgraber in #1758
  * Use the correct path for ingesting DNS-01 challenge certificate outputs by @accuser in #1759
  * incusd/bgp: Rework start/stop logic by @stgraber in #1761
  * incusd/network/ovn: Skip existing static routes by @stgraber in #1762
  * incusd/instance/qemu: Set caching-mode with intel-iommu by @stgraber in #1772
  * incus-agent: Improve SFTP performance by @stgraber in #1773

OBS-URL: https://build.opensuse.org/request/show/1269240
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=22
2025-04-15 10:16:31 +00:00
6b9fb3f06d Accepting request 1240298 from home:maciek_borzecki:branches:Virtualization:containers
- update to 6.9:
  * Translations update from Hosted Weblate by @weblate in #1506
  * Refactor scriptlet loader and improve checks by @bensmrs in #1507
  * Translations update from Hosted Weblate by @weblate in #1511
  * incusd/storage/drivers: Force blkdiscard and ignore errors by @stgraber in #1513
  * incusd/auth: fix FGA online data race by @breml in #1515
  * incusd/storage/drivers: Log on blkdiscard failure by @stgraber in #1517
  * Fix issue with live-migration between storage pools by @presztak in #1518
  * Add uplink addresses for OVN network by @winiciusallan in #1512
  * Add --description flag to create type CLI commands by @luissimas in #1498
  * client: Propagate HTTP TLS dialer to websocket by @stgraber in #1519
  * Fix QEMU scriptlet parameter name by @bensmrs in #1524
  * Add shell.nix by @MadnessASAP in #1526
  * client: add proxy host to skopoe inspect by @winiciusallan in #1525
  * incusd/cluster: Add missing error handling by @stgraber in #1528
  * incusd/instance/qemu: Fix QMP arguments typing by @bensmrs in #1531
  * Encode mc alias for storage buckets to match allowed characters by @monkz in #1535
  * doc: Contributing section restructuring by @bensmrs in #1534
  * internal/server: allow creation of OVN network with no uplink by @winiciusallan in #1533
  * Translations update from Hosted Weblate by @weblate in #1540
  * Translations update from Hosted Weblate by @weblate in #1541
  * lxd-to-incus: Clear volatile.uuid from instances by @stgraber in #1546
  * Translations update from Hosted Weblate by @weblate in #1548
  * Translations update from Hosted Weblate by @weblate in #1550
  * Translations update from Hosted Weblate by @weblate in #1551
  * Translations update from Hosted Weblate by @weblate in #1553
  * Tweak Github Actions and add arm64 tests by @stgraber in #1555
  * Translations update from Hosted Weblate by @weblate in #1556
  * incusd/networks: Tweak dnsmasq startup condition by @alex14641 in #1544
  * Tweak namespace attach logic in forkproxy and forkfile by @stgraber in #1557
  * Expand block reset logic by @stgraber in #1560
  * Discard blocks on LVM resize by @stgraber in #1561
  * incusd/storage/lvm: Run ClearBlock on all new thick block volumes by @stgraber in #1565
  * Improve format flag by @breml in #1564
  * devcontainer: initial version by @breml in #1566
  * incusd/network/ovn: Skip remote peers when iterating peer networks by @stgraber in #1568
  * Fix discard logic on LVM resize and optimize image unpacking by @stgraber in #1569
  * incusd/main_cluster: Tweak to have help refer to correct command name by @stgraber in #1576
  * Docs: Fixed link to point to correct manpage. by @foxtrotcz in #1581
  * incusd/device/disk: Better handle partitions by @stgraber in #1578
  * incusd/storage/drivers: Handle 4k sector sizes by @stgraber in #1585
  * lxd-to-incus: Be more lenient on database changes by @stgraber in #1582
  * incusd/dnsmasq: Don't put the project name in the DNS record by @stgraber in #1586
  * Remove virtfs-proxy-helper dependency by @bensmrs in #1547
  * Add new config hook by @bensmrs in #1577
  * github: Switch to Github's hosted arm64 runners by @stgraber in #1589
  * Support for ACLs for bridge NIC device when using nftables driver by @stgraber in #1587
  * doc: typo by @eebssk1 in #1591
  * Added unit for minimum ZFS blocksize by @Spitfireap in #1593
  * incus/file/pull: Port to SFTP by @HassanAlsamahi in #1592
  * incusd/device/disk: Update correct mount options by @stgraber in #1594
  * doc: Force white background for swagger API by @stgraber in #1599
  * Implement a VM memory dump API by @SpiffyEight77 in #1596
  * gomod: Update dependencies by @stgraber in #1600
  * incus/init: Add support for storage volumes in preseed init by @megheaiulian in #1595
  * incusd/instance/qemu: Fix device_id warning on 9.2.x by @stgraber in #1601
  * incus: Fix example description for debug dump-memory command by @SpiffyEight77 in #1602

OBS-URL: https://build.opensuse.org/request/show/1240298
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=20
2025-02-05 16:18:18 +00:00
4db7698c2f Accepting request 1233396 from home:gmbr3:Active
- Migrate to single LXD/Incus OVMF handling (lxd-ovmf-setup):
  * Allow aarch64 arch_vm_support
  * Remove OVMF symlinks
  * Require the new lxd-ovmf-setup packages

OBS-URL: https://build.opensuse.org/request/show/1233396
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=19
2025-02-05 16:15:22 +00:00
31a7dd3f09 Accepting request 1235889 from home:cyphar:lxc
- Add missing Requires for OCI support. bsc#1234300

OBS-URL: https://build.opensuse.org/request/show/1235889
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=17
2025-01-09 01:45:37 +00:00
77bc95f501 Accepting request 1230734 from home:ojkastl_buildservice:Branch_Virtualization_containers
update to 6.8

OBS-URL: https://build.opensuse.org/request/show/1230734
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=15
2024-12-13 14:28:31 +00:00
0706501baa Accepting request 1225837 from home:cyphar:lxc
- Remove the incus.sysctl drop-in file. This setting file overlaps with lxd's
  sysctl settings, and setting these sysctls on boot even if you aren't running
  containers is suboptimal.
  We could come up with a complicated scheme for loading the rules once Incus
  starts, as suggested in bsc#1233410, but ultimately these settings are only
  really useful for production servers with >100 containers, at which point
  admins are expected to tune their servers anyway.
  So we can just remove it.

OBS-URL: https://build.opensuse.org/request/show/1225837
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=13
2024-11-22 13:45:25 +00:00
11ade03c3b Accepting request 1225834 from home:cyphar:lxc
- Backport patches to fix encrypted ZFS datasets having their keys be unloaded
  on Incus daemon restarts. <https://github.com/lxc/incus/pull/1384>
  + 0001-incusd-storage-zfs-Fix-deletion-of-unavailable-pools.patch
  + 0002-zfs-load-keys-for-encrypted-datasets-during-pool-imp.patch
- Fix secureboot VMs by switching to passing the correct environment variable
  (INCUS_EDK2_PATH) and updating the ovmf symlinks to point to the correct
  blobs. There is an upstream bug here, so we will need to fix this again later
  once <https://github.com/lxc/incus/pull/1406> is merged.

OBS-URL: https://build.opensuse.org/request/show/1225834
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=12
2024-11-22 13:36:13 +00:00
cf524cb2e7 Accepting request 1225607 from home:cmspam:branches:Virtualization:containers
This includes changes which fix secureboot vms.

OBS-URL: https://build.opensuse.org/request/show/1225607
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=11
2024-11-22 04:19:19 +00:00
1dc5d59af9 Accepting request 1224509 from home:jfkw:branches:Virtualization:containers
- Update to version 6.7:
  * fix live update VM's limits.memory configuration when use a percentage value #1287
  * fix: fix slice init length #1285
  * incusd/instance/lxc: Remove restrictions on /run #1288
  * Correct macvlan mode names #1284
  * Translations update from Hosted Weblate #1290
  * Translations update from Hosted Weblate #1295
  * Translations update from Hosted Weblate #1304
  * incus-simplestreams: Fix list -f json #1310
  * Profile performance improvements #1314
  * incus-agent: Add timeout for DNS query #1313
  * incusd/instance/qemu: Don't fail on console retrival issue #1316
  * Allow changing the parent value on physical networks #1317
  * incus: Fix display of current project in projects list #1318
  * Add --format to incus admin sql #1319
  * incusd/internal/server/instance/drivers: support for Chimera Linux (qemu/edk2) pkg layout #1298
  * incusd/instance/common: Cleanup volatile on device add failure #1323
  * incusd/network/bgp: Only advertise networks with BGP configuration #1325
  * Make revert library shared #1326
  * Fix to the cluster resources caching mechanism #1324
  * Fix idmap issues #1327
  * Make ask library shared #1329
  * doc/network/resolved: Add disabling DNSSEC and DNSOverTLS #1328
  * Add some application container documentation #1331
  * incusd/device/nic/bridged: Handle invalid configuration #1330
  * Fix handling of custom volume snapshot patterns #1333
  * Add OCI DHCP renewal #1334
  * doc/installing: Update for Chimera Linux #1335
  * shared/cgo: Don't use strlcpy #1337
  * Implement incus webui #1338

OBS-URL: https://build.opensuse.org/request/show/1224509
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=10
2024-11-16 01:59:17 +00:00
22023da206 Accepting request 1224207 from home:cyphar:lxc
- Move some binaries to sbin to match upstream packaging recommendations.
- Update VM-related dependencies to make VMs work properly.

OBS-URL: https://build.opensuse.org/request/show/1224207
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=9
2024-11-14 13:40:45 +00:00
1a493dacb6 Accepting request 1217322 from home:cyphar:lxc
Fix incus-startup.service.

OBS-URL: https://build.opensuse.org/request/show/1217322
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=7
2024-10-23 10:53:02 +00:00
ccc92cc8cd Accepting request 1217315 from home:cyphar:lxc
- Fix %_libexecdir usage for Leap 15.x (Leap 15.x still uses /usr/lib, so we
  need to replace the usage of /usr/libexec in our scripts with a token that we
  can replace during build).

OBS-URL: https://build.opensuse.org/request/show/1217315
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=6
2024-10-23 10:24:19 +00:00
0d83f58014 Accepting request 1216848 from home:cyphar:lxc
- Rework packaging to match recommended packaging from doc/packaging.md and
  <https://github.com/zabbly/incus/tree/stable/systemd>.

OBS-URL: https://build.opensuse.org/request/show/1216848
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=5
2024-10-21 23:46:52 +00:00
b4648820ae OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=4 2024-10-19 01:33:36 +00:00
54ee626109 Accepting request 1208882 from home:cyphar:lxc
- Package Incus 6.6, based on the LXD 5.21 package. The primary differences are
  that we no longer need to do ELF patching to work around having a custom
  sqlite fork (instead we can use libcowsql, which is packaged for openSUSE
  already).

OBS-URL: https://build.opensuse.org/request/show/1208882
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/incus?expand=0&rev=1
2024-10-18 13:45:15 +00:00