Weekly status for the week of 11th March to 17th March.
Introduction
The highlight of the past week was the release of LXD 5.21.0 LTS which is our 5th LTS release.
Please see the release notes for more details.
Bug fixes
- Fixed hang and failure in BTRFS local refreshes for VMs and some containers (depending on the image type being used).
- Fixed regression in Ceph RBD snapshot migrations due to locking change.
- Fixed resize for ZFS pools with custom zfs.pool_name.
- Fixed auth bug to ensure projects cannot be edited or deleted by restricted clients.
- Fixed crash when evacuating cluster member that has instances with OVN NICs.
- Fixed issue with
lxc permission listincorrectly using the current project set by the client rather than the filter parameter specified on the command line. - Fixed issue with
lxc permission listnot correctly parsing the remote specified. - Fixed intermittent minio start up error due to conflicting console address.
- Pre-checks permissions when performing bulk state update so that partial updates don’t occur.
- Fixed issue with storage volume
volatile.uuidpatch not applying for shared-storage volumes when using a cluster. - Fixed LXD snap race setting up
/var/snap/lxd/shmountsthat sometimes prevented snap removal on Ubuntu 24.04.
All changes
The items listed below is all of the work which happened over the past week and which will be included in the next release.
LXD
- Implement
xerrors.Unwrapforapi.StatusError. - lxd/response: Use SmartError if SyncResponse success=false
- build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
- build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0
- build(deps): bump github.com/go-acme/lego/v4 from 4.15.0 to 4.16.1
- build(deps): bump github.com/minio/minio-go/v7 from 7.0.68 to 7.0.69
- Storage: Fix hang when BTRFS receive fails in RefreshVolume
- Storage: Ceph RBD lock concurrent snapshot migrations
- Indicate LTS version in LXD agent and useragent
- lxd: Fallback to error response after setting headers
- Storage: Use volume name from VolumeDBGet in BackupCustomVolume
- ui: add server-side gzip and security headers for LXD UI
- Storage: Fix resize for pools with custom zfs.pool_name
- Storage: Cleanup on failure in BTRFS RefreshVolume
- github: Add support for 5.21-stable branch (stable-5.21)
- github: Fix branches for 5.21 support (stable-5.21)
- Auth: Remove
can_view_configurationentitlement. - Auth: Ensure projects cannot be edited or deleted by restricted clients.
- Stable 5.21 backports (stable-5.21)
- github: fix branch target name/version extraction logic
- github: fix branch target name/version extraction logic (stable-5.21)
- Branch target multi digits (stable-5.0)
- Github: Update Tests badge to use correct branch (stable-5.21)
- Network: Only stop OVN device if network is populated
- client: Unset project when querying permissions.
- Update starterpack
- lxc: Remove impossible condition in
copy - lxc: Print “permission denied” when LXD socket isn’t writable
- UI: Update
X-Xss-Protection(deprecated) forContent-Security-Policy - Backports (stable-5.21)
- Doc: Fix CLI instructions for changing an image alias
- Backports (stable-5.21)
- doc: install extra tools inside the environment
- VM: Restore 50MB tmpfs for lxd-agent as it will likely exceed 25MB
- Backports (stable-5.21)
- doc/UI: reword status of the LXD UI
- Auth: Don’t build authorization drivers into the lxd-agent
- Release LXD 5.21.0 (stable-5.21)
- Makefile: consistently use pip
- Storage: Fix Btrfs local refresh
- Doc: Documentation for identity and access management
- Release LXD 5.21.0 (stable-5.21)
- Test: Check version number format (X.Y.Z for LTSes, X.Y otherwise)
- Storage: Specify a port for
minio --console-address - Release LXD 5.21.0
- Backports (stable-5.0)
- lxc: Correctly parse remote when listing permissions.
- doc: Add CLI examples for unix-* devices
- Doc: Add CLI examples for more device types
- Auth: Remove no-op authorizer interface methods.
- Auth: Pre-check permissions when performing bulk state update.
- lxd: Improves efficiency of operation cancel with permission checker.
- scripts: Add bash completions for
lxc auth - Doc: Add CLI examples for proxy device
- Storage: Rework volume
volatile.uuidpatch - Doc: add configuration examples for gpu devices
- Stable backports (stable-5.21)
- lxd/device/nic: fix default IP for routed NIC (
ipv4.host_address)
LXD Charm
- Nothing to report this week
Distribution work
This section is used to track the work done in downstream Linux distributions to ship the latest LXD as well as work to get various software to work properly inside containers.
Ubuntu
- Nothing to report this week.
Snap
LXD snap
- Stop bundling
nanoin the snap - snapcraft: bump to zfs 2.2.3 (compat with kernel 6.7 & 6.8)
- Bring into sync with latest-edge (latest-candidate)
- Dependency updates
- github: fix branch target name/version extraction logic
- Branch target multi digits (5.0-edge)
- Branch target multi digits (5.21-edge)
- Sync with latest-edge (latest-candidate)
- Sync with latest-edge (5.21-candidate)
- snapcraft: add python3-pip to build lxd docs
- Pip is needed to build lxd docs (5.21-edge)
- snapcraft: add python3-pip to build lxd docs (5.21-candidate)
- lxd: Bump to 5.21.0 (5.21-candidate)
- Backports (5.21-edge)
- Sync to 5.21-candidate (latest-candidate)
- lxd: Change to previous tag format lxd-5.21.0 (latest-candidate)
- lxd: Change to previous tag format lxd-5.21.0 (5.21-candidate)
- Do not export XDG_ vars
- Xdg variables (5.21-edge)
- Xdg variables (5.21-candidate)
- snapcraft/hooks/remove: also unmount /var/snap/lxd/shmounts
- snapcraft/hooks/remove: also unmount /var/snap/lxd/shmounts (latest-candidate)
- snapcraft/hooks/remove: also unmount /var/snap/lxd/shmounts (5.21-edge)
- snapcraft/hooks/remove: also unmount /var/snap/lxd/shmounts (5.21-candidate)
- shmounts: terminate the forked off mount namespace capture helper
- Rename microovn content interface
- snapcraft: Rename microovn content interface (latest-candidate)
- snapcraft: Rename microovn content interface (5.21-edge)
- snapcraft: Rename microovn content interface (5.21-candidate)