The LXC project shipped Incus 7.1 on 2026-06-02, the first monthly feature release since the 7.0 LTS branch settled in. The drop patches four security advisories, including the critical CVE-2026-48753, so any current Incus host should be queued for an upgrade window.
Virtual machines pick up an explicit CPU topology knob. The limits.cpu key now accepts strings like sockets=2,cores=4,threads=2, giving the guest a fixed view of socket, core, and thread counts. Using the new syntax disables dynamic CPU hotplug and hotremove on that VM, which is the tradeoff for matching license-bound workloads or guest schedulers that care about NUMA layout. A test launch with sockets=4,cores=2,threads=4 exposes 32 logical CPUs inside the guest.
Storage management gets several quality-of-life additions. A new incus storage volume rebuild command wipes a custom volume and recreates it with the same configuration, mirroring the existing instance rebuild flow (only available when no snapshots exist). The incus storage volume attach command also accepts a --create flag that provisions the volume in the same call. Pool creation exposes block.create_options and btrfs.create_options to pass mkfs arguments directly, and LINSTOR pools and volumes pick up linstor.raw.* keys for tuning the underlying resource groups and definitions.
Security-minded operators can now hand Incus a CA via instances.tpm.platform_cert and instances.tpm.platform_key so the virtual TPM endorsement key is signed by a known authority, making remote attestation against guest TPMs viable. On the networking side, address sets accept IP ranges of up to 256 addresses (for example, 10.0.0.120-10.0.0.130), managed bridges gain a bridge.multicast_snooping toggle, and incus remote accepts comma-separated addresses with automatic failover for clustered or HA endpoints. The built-in S3 server adds presigned URLs for both SigV2 and SigV4 plus a server-side CopyObject implementation.
Incus 7.1 is a monthly feature release, supported only until the next one ships; production users wanting longer windows should stay on 7.0 LTS. Installation instructions cover most distributions, with Homebrew and Winget packages available for the client. Source and issue tracking live on the lxc/incus GitHub repository.