Linux Containers: Incus Version 0.7 Now Available
Table of Contents
According to Incus’s latest update, version 0.7 has been released, bringing with it a plethora of new features and improvements, setting the stage for the upcoming Incus 6.0 LTS release. This version introduces significant enhancements, especially for those interested in server management, Linux, DevOps, and home lab environments. Here’s a detailed overview of the key features and improvements:
New Features #
-
Network Integrations: This feature allows Incus deployments to connect with external networks. Current implementation includes OVN interconnection for peering OVN networks with other Incus clusters or systems like OpenStack or Kubernetes.
-
Image Server Management Tool (
incus-simplestreams
): A new tool to simplify the setup of an Incus image server usingsimplestreams
, facilitating image listing, adding, removing, and metadata file generation. -
JSON Web Token (JWT) Authentication: Adds support for JWT bearer tokens for authentication, providing an alternative to TLS client certificates, especially useful behind reverse HTTP(S) proxies.
-
Configurable OIDC Username Field: Allows setting
oidc.claim
to specify which OIDC claim to use as the user’s identifier, enhancing flexibility in identity management. -
Improved NUMA Handling: Enhancements to workloads distribution across NUMA nodes for both container and virtual-machine performance on large systems, including multi-socket systems and AMD systems in NPS4 mode.
-
More Options to Select USB Devices: Introduces
busnum
,devnum
, andserial
fields for USB device passthrough, aiding in distinguishing between identical USB devices. -
Disk I/O Throttling for VMs: Closes a feature gap between containers and virtual machines by enforcing
limits.write
andlimits.read
properties ondisk
devices in VMs. -
Per-Remote Client Certificates: Allows using specific client certificates for different Incus remotes, enhancing security and flexibility in remote management.
-
Manual Generation of Client Certificate Keypair: Introduces a command to trigger manual generation of the
client.crt
andclient.key
keypair.
Improvements #
- Enhanced
lxd-to-incus
tool to support migrations from LXD 5.21 LTS and handle Alpine installations. incus-migrate
tool now supports using the local Incus system as the migration target and prompts for the firmware type for imported VMs.- Introduction of additional image restrictions, including
requirements.nesting
andrequirements.cdrom_agent
, to ensure proper instance configurations.
Documentation and Support #
The Incus documentation has been updated to reflect these new features and improvements, providing a comprehensive resource for users. Support is available through the Incus community forum or commercially through Zabbly services. Bugs can be reported via the Incus GitHub repository.
This release of Incus 0.7 represents a significant step forward in container and virtual machine management, offering advanced capabilities for network integration, authentication, and system performance optimizations.