Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-4-0-12-lts-has-been-released/85421
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/4.0/release-notes-4.0.12/

What's Changed

Full Changelog: lxd-4.0.11...lxd-4.0.12

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-5-21-6-lts-has-been-released/85451
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.21/release-notes-5.21.6/

What's Changed

Full Changelog: lxd-5.21.5...lxd-5.21.6

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-5-0-8-lts-has-been-released/85505
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.0/release-notes-5.0.8/

What's Changed

Full Changelog: lxd-5.0.7...lxd-5.0.8

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-5-21-5-lts-has-been-released/84627
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.21/release-notes-5.21.5/

What's Changed

Full Changelog: lxd-5.21.4...lxd-5.21.5

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-5-0-7-lts-has-been-released/84628
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/5.0/release-notes-5.0.7/

What's Changed

Full Changelog: lxd-5.0.6...lxd-5.0.7

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-4-0-11-lts-has-been-released/84629
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/4.0/release-notes-4.0.11/

What's Changed

Full Changelog: lxd-4.0.10...lxd-4.0.11

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-6-9-has-been-released/84211
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/6/release-notes-6.9/

What's Changed

• storage: Fix typo in metadata configuration by @MusicDin in #18173
• storage/connectors: Perform iSCSI non-persistent discovery by @MusicDin in #18164
• storage/connector: Delete iSCSI device using write-only permission by @MusicDin in #18176
• github: tweak tests/cluster to start with candidate channel by @simondeziel in #18182
• Server: Fix local config being wiped out by reverter by @tomponline in #18180
• Minor fixes by @simondeziel in #18184
• github: install pylint in TiCS job by @simondeziel in #18185
• Replicator and cluster link fixes for 6.8 release by @kadinsayani in #18175
• Add helper for compressing JSON responses by @nmezhenskyi in #18125
• Network: Dynamic OVN address updates by @roosterfish in #18156
• Fix operation entity URLs for storage volumes/backups/snapshots by @markylaing in #18167
• build(deps): bump the gomod group with 2 updates by @dependabot[bot] in #18188
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #18190
• github: actions/download-minio has no more use for current LXD by @simondeziel in #18174
• Identity API fixes by @markylaing in #18177
• Adjust ZFS promote tests to better represent our use case by @jonathan-conder in #17952
• lxd/events: Add foundation for security event emission and routing by @tugbataluy in #18027
• doc: append version number in RTD version switcher flyout menu by @minaelee in #18202
• CLI: Fix bad rendering on error during import by @roosterfish in #18206
• doc: add custom search ranking, demote manpages by @minaelee in #18209
• build(deps): bump gitpython from 3.1.46 to 3.1.47 in /doc by @dependabot[bot] in #18208
• lxd/security: Emit authn security events at authentication boundary points by @tugbataluy in #18144
• lxd/storage/drivers/utils_ceph: use legacy CephFS mount syntax on kernel < 5.17 by @simondeziel in #18192
• lxd/events: lxd: Add authorization security event emission (authz_fail and authz_admin) by @tugbataluy in #18159
• Drop support for image import from client-specified URL by @nmezhenskyi in #18210
• Prepare for core26 by @simondeziel in #18216
• doc: fix give feedback button by @minaelee in #18213
• github: use actions/lp-snap-build from canonical/lxd-pkg-snap by @simondeziel in #18215
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #18233
• Improve triage workflow by @simondeziel in #18235
• doc: Improve metadata descriptions by @MusicDin in #18231
• doc: implement fallback for intersphinx inventories when remote is down by @minaelee in #18220
• build(deps): bump github.com/go-acme/lego/v4 from 4.34.0 to 4.35.2 in the gomod group by @dependabot[bot] in #18229
• shared/network: implement Happy Eyeballs via Go's built-in dialer by @mbeijen in #18234
• Import: Validate struct slices and config by @roosterfish in #18225
• doc: Add known issues for replicators in LXD 6.8 by @tomponline in #18238
• Backup: Perform defensive check against config by @roosterfish in #18241
• doc: update cloud-init-objects.inv and fix Makefile by @minaelee in #18246
• lxd/instance/drivers: Fix backup file error handling for refresh by @kadinsayani in #18242
• Bound YAML decoding to 1MiB by @tomponline in #18243
• Fixes from Incus by @tomponline in #18219
• storage: Add PowerStore driver by @MusicDin in #18172
• storage/powerstore: Fix header population by @MusicDin in #18250
• Set operation project on auto-created metadata entity URLs by @markylaing in #18245
• lxd/db/cluster: Apply identity certificate trigger similar to other triggers by @markylaing in #18244
• dbgen: Support composite primary keys by @markylaing in #18237
• lxd: Improvements to YAML validation by @tomponline in #18217
• lxd/instance/drivers: Fix race condition in Rename by @tugbataluy in #18254
• lxd/loki: Forward security events to Loki as OWASP audit log entries by @tugbataluy in #18251
• storage: Smaller fixes on PowerStore by @MusicDin in #18259
• lxd/instance: add riscv64 QEMU definitions by @xypron in #15892
• Use shared.ParseCert instead of direct x509.ParseCertificate by @simondeziel in #18260
• Dbgen multi key followup by @markylaing in #18258
• Move ioprogress.ProgressReporter to end of arg list for instance.Start by @markylaing in #18264
• Network: Clearly separate OVN nic add and start by @roosterfish in #18257
• Misc quality improvements by @simondeziel in #18261
• lxd: Add missing storage and network operation metadata by @MusicDin in #18263
• Misc quality fixes by @simondeziel in #18268
• GitHub: Add right permissions for schema.go by @roosterfish in #18275
• lxd/storage: Refactor EnsureImage interface by @tugbataluy in #18266
• doc: Remove unnecessary dots in Keycloak howto examples by @MusicDin in #18273
• doc: implement sphinx-llm to generate llms.txt by @minaelee in #18272
• build(deps): bump gitpython from 3.1.47 to 3.1.49 in /doc by @dependabot[bot] in #18267
• build(deps): bump the gomod group with 4 updates by @dependabot[bot] in #18276
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the actions group across 1 directory by @dependabot[bot] in #18282
• lxd/storage: Address review comments from #18266 by @tugbataluy in #18283
• build(deps): bump gitpython from 3.1.49 to 3.1.50 in /doc by @dependabot[bot] in #18286
• lxd/storage: Use merged node config for local pool creation and correct storage pool config comment by @kadinsayani with @Copilot in #18270
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #18298
• build(deps): bump the gomod group with 5 updates by @dependabot[bot] in #18293
• Instance: Improve snapshot config validation during import by @tomponline in #18301
• test: Add regression tests for nullable BackupConfig fields by @tugbataluy in #18236
• Minor tweaks by @tomponline in #18302
• lxd/metrics: Include slab_reclaimable in MemAvailable by @crishoj in #18289
• client/lxd/instances: Switch ExecInstance to use concurrent connections by @tomponline in #18299
• lxd/events: Add security sys user events by @tugbataluy in #18211
• lxd/db/dbgen: Fix govet "inline" error by @markylaing in #18306
• build(deps): bump github.com/golangci/golangci-lint/v2 from 2.11.4 to 2.12.2 in /tools in the gomod group across 1 directory by @dependabot[bot] in #18280
• go: run go mod tidy now that golang.org/x/exp is no longer a direct dep by @simondeziel in #18307
• Ensure make update-schema can write to all needed files by @kadinsayani in #18308
• Add security events documentation by @tugbataluy in #18262
• doc: remove unnecessary myst cheat sheet by @elijahgreenstein in #18310
• lxc/image: fix architecture filter ...

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-6-8-has-been-released/80650
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/6/release-notes-6.8/

What's Changed

• Less negative grep by @simondeziel in #17751
• Use source file size when recreating volumes during recovery by @kadinsayani in #17752
• shared/cert: Close the response body in GetRemoteCertificate by @nmezhenskyi in #17762
• doc: Include LXC bump to v6.0.6 in LXD 6.7 release notes by @tomponline in #17768
• test/clustering: Test image publish in a project with features.images disabled by @MusicDin in #17755
• Conflicts between operations by @skozina in #17721
• Unify IsRecursionRequest return type and consolidate GetInstances SDK methods by @gajeshbhat in #17679
• Add createTLSListener helper by @simondeziel in #17771
• Minor string handling improvements by @simondeziel in #17774
• Client certificate handling simplifications by @simondeziel in #17763
• lxd/resouces: avoid repeatedly building filepaths by @simondeziel in #17760
• Reinstate udev rules to trigger lxd-agent.service in LXD VMs by @simondeziel in #17767
• Minor improvements to DNS handler by @simondeziel in #17772
• Fix --profile and --no-profiles flags being ignored on cluster moves by @tugbataluy in #17756
• Prevent concurrent evacuations by @kadinsayani in #17475
• Fix mutex leak and unclosed files by @larrasket in #17778
• Minor improvements to device equality helpers by @simondeziel in #17773
• QEMU micro optimizations by @simondeziel in #17766
• GPU physical device micro optimizations by @simondeziel in #17765
• Add "RequestorAuditor" for use in operations by @markylaing in #17769
• lxc/file: fix recursive pull failing on existing directories by @tugbataluy in #17739
• build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 in the actions group across 1 directory by @dependabot[bot] in #17782
• operations: Clean up orphaned operations after successful initial heartbeat by @markylaing in #17734
• lxd/db/operationtype: Clarify comment by @kadinsayani in #17785
• doc: use intersphinx for snap docs links by @minaelee in #17786
• Replace deviceEquals by maps.Equal by @simondeziel in #17788
• Apply refresh config server-side for copy and migration by @kadinsayani in #17678
• DB: Make identity ID int64 by @markylaing in #17789
• lxd/operations: operation.Render() error is unused by @skozina in #17791
• Fix ignored config keys (boot priority) when adding device to an instance. by @tugbataluy in #17790
• lxc/config/file: include path to bogus or missing file in errors by @simondeziel in #17795
• Get operations from DB rather than memory by @skozina in #17783
• lxc/console_unix: improve logging on errors and fix channel leak by @simondeziel in #17798
• lxd: Fix snapshot URL in clustered mode by @MusicDin in #17794
• github: ask Dependabot to respect gorilla/websocket@v1.5.1 pinning by @simondeziel in #17802
• test/main: ignore WGA crashes by @simondeziel in #17807
• build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 in the actions group across 1 directory by @dependabot[bot] in #17805
• Identity ID follow up and report operation run hook error on connect by @markylaing in #17799
• Followup fixes on GET /1.0/operations changes by @skozina in #17800
• lxd: Use correct name in create from backup entity URL by @markylaing in #17810
• lxd/db/cluster: Remove backticks from integer values in errors by @skozina in #17812
• Disk device micro optimizations by @simondeziel in #17764
• lxd/instance/drivers/qemu: only add udev rules on platform lacking DMI support by @simondeziel in #17816
• Start scheduled operations automatically by @skozina in #17814
• Avoid os.Lstat+os.ReadFile pattern by @simondeziel in #17815
• Improve error message for low limits.memory by @larrasket in #17775
• Enforce limits.instances in clusters by @kadinsayani in #17822
• Improve limits.instances error message by @kadinsayani in #17824
• Remove support for fan.type=ipip networks by @simondeziel in #17826
• Cluster: control-plane cluster role by @kadinsayani in #17269
• Cluster link identity by @kadinsayani in #17819
• Refactor cluster role handling and simplify documentation by @kadinsayani in #17831
• lxd: Add godoc and named return by @kadinsayani in #17834
• Prealloc fixes by @simondeziel in #17841
• Cgroup tweaks by @simondeziel in #17838
• Minor tweaks for lxc list by @simondeziel in #17836
• lxd/apparmor/apparmor: avoid TOCTOU in hasProfile by @simondeziel in #17837
• shared/tcp/tcp_timeout_user: do not shadow error from unix.SetsockoptInt by @simondeziel in #17833
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #17846
• Add operation type for scheduled snapshot creation by @markylaing in #17849
• Address many TOCTOU races by @simondeziel in #17840
• String handling improvements by @simondeziel in #17835
• Makefile: Pin to dqlite v1.18.x branch by @tomponline in #17854
• Improve file operation error messages for missing paths by @larrasket in #17777
• lxd/operations: Don't send event on schedule by @skozina in #17851
• Use net.KeepAliveConfig and enable TCP_USER_TIMEOUT in RFC3493Dialer by @tomponline in #17830
• Bulk instance state resource url by @markylaing in #17857
• Endpoints: Listener improvements by @tomponline in #17861
• Optimize dnsmasq log message creation by @tugbataluy in #17848
• Add location to the Operation structure by @skozina in #17867
• go: Bump Go min by @simondeziel in #17865
• Endpoints: Setup TCP keep alive and user timeouts on incoming API connections by @tomponline in #17868
• Remove minio support by @simondeziel in #17673
• Correctly report QEMU from external snap by @simondeziel in #17876
• Add more DNS tests by @simondeziel in #17873
• doc: Added reference to CVE-2026-28384 in 6.7 release notes by @tomponline in #17879
• storage/connector: Force multipath for single iSCSI connection by @MusicDin in #17858
• lxd/operations: Make operation error a string by @skozina in #17859
• Drop MAAS controller by @simondeziel in #17872
• lxd/dnsmasq: Clean up orphaned .removing files on bridge network start by @tugbataluy in #17869
• test/lint: Add error-msg linter by @kadinsayani in #17817
• Storage: Drop source config key for Ceph/CephFS by @roosterfish in #17853
• Minor device improvements by @simondeziel in #17884
• golangci-lint: remove now unused exclusion rule by @simondeziel in #17880
• Scheduled snapshot optype follow up by @simondeziel in #17883
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #17889
• lxd/dnsmasq: do not swallow errors in DHCPAllAllocations by @simondeziel i...

Announcement

• Announcement: https://discourse.ubuntu.com/t/lxd-6-7-has-been-released/77656
• Release notes: https://canonical.com/lxd/docs/latest/reference/release-notes/6/release-notes-6.7/

What's Changed

• tests: Wait for raft roles to update by @kadinsayani in #17049
• github: add PR template checklist by @minaelee in #17052
• doc: Fix grammar in rest-api.md by @kadinsayani in #17060
• doc: update commit structure for contributions by @minaelee in #17056
• devlxd: Allow creating volume from snapshot by @MusicDin in #17058
• Disallow sending a TLS certificate when updating an OIDC or Bearer identity by @markylaing in #17054
• events package refactoring and race condition fix by @kadinsayani in #16999
• Commit structure improvements by @kadinsayani in #17061
• lxd: Move instance post request parsing up by @kadinsayani in #16973
• doc/lxd-test: Install nano for dev comfort by @MusicDin in #17065
• Make LXD_VM_TESTS=1 the new default by @simondeziel in #17057
• doc: Add 6/stable channel to snap install command for 6.6 release notes by @tomponline in #17069
• cgroup package refactorings by @kadinsayani in #16997
• Use sudo when invoking apt-get to install packages by @simondeziel in #17071
• Remove some unused functions by @simondeziel in #17009
• Cluster: Fix clearing a member when using remote storage by @roosterfish in #17047
• build(deps): bump github.com/openfga/openfga from 1.11.0 to 1.11.1 by @dependabot[bot] in #17038
• storage: Correctly parse Pure Storage gateway URL by @MusicDin in #17075
• lxd/cluster/config: actually set a default expiry on remote token by @simondeziel in #17081
• fix: use uint64 for interface statistics counters by @troyanov in #17010
• storage: Do not call host updated in Alletra as it is not supported by @MusicDin in #17082
• 24.04 runners followup by @simondeziel in #17088
• lxd: Require all cluster member to process forced project delete notifications by @kadinsayani in #17091
• Cache rework by @simondeziel in #17090
• devlxd: Ensure security.devlxd flag is checked /1.0 endpoint by @MusicDin in #17078
• Makefile: Replace pin for tags.cncf.io/container-device-interface@v0.8.1 with github.com/opencontainers/runtime-spec@v1.2.1 by @tomponline in #17100
• test: Run VM tests in standalone mode by @tomponline in #17102
• Fix inefficiency in instance deleteCommon() by @kadinsayani in #17092
• Notify all cluster members to update node schema and/or handle forced project deletion by @kadinsayani in #17104
• lxd/cluster/gateway: Use dqlite WithBusyTimeout by @tomponline in #17099
• test/suites: Reduce awk usage and creation of subdirectories by @markylaing in #17077
• Revert "github: reintroduce CLA check in commits job" by @simondeziel in #17051
• build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 by @dependabot[bot] in #17121
• build(deps): bump github/codeql-action from 4.31.5 to 4.31.6 by @dependabot[bot] in #17120
• build(deps): bump github.com/go-acme/lego/v4 from 4.28.1 to 4.29.0 by @dependabot[bot] in #17118
• doc: Update Keycloak howto to handle client secrets. by @escabo in #17083
• lxd-agent: Make event processing synchronous by @MusicDin in #17123
• Add dqlite developer documentation and improve dqlite related code comments by @kadinsayani in #17105
• doc: Ignore linkcheck for kubernetes.io host by @MusicDin in #17128
• client: Call mkdir instead of file stat by @markylaing in #17131
• doc: requirements/configuration tooling updates by @minaelee in #17106
• doc: Add that QEMU is required for VMs by @markylaing in #17124
• lxc/auth: Add a newline on bearer identity creation message by @markylaing in #17134
• Don't build any Go binaries during system-tests by @simondeziel in #17137
• lxd: Fix in-memory config corruption on update failure by @kwonkwonn in #17122
• Use microovn instead of OVS deb by @simondeziel in #17141
• Tweak syslog test by @simondeziel in #17140
• Storage: Fix returning last error in TryMount by @roosterfish in #17142
• lxd/storage/drivers/zfs_volumes: Rework zvol resolution logic (from Incus) by @simondeziel in #17095
• lxd/instance/drivers: Ignore expected ErrInUse by @kadinsayani in #17143
• Move some Go checks to lint scripts by @simondeziel in #17154
• doc: remove edit button from manpages by @minaelee in #17153
• OIDC test fixes by @simondeziel in #17150
• Fix test ordering issues with basic tests by @simondeziel in #17149
• Improve cleanup of lxd-user tests to allow repeated runs by @simondeziel in #17148
• Reliability and consistency improvements to tls_restrictions test by @simondeziel in #17147
• Minor tweaks to filemanip test by @simondeziel in #17146
• Minor tweak and fixes to projects tests by @simondeziel in #17145
• Minor tweaks to storage_driver_zfs test by @simondeziel in #17144
• doc: merge docs makefiles by @minaelee in #17157
• doc: baseurl and sitemap improvements by @minaelee in #17158
• Use the snap cache in snap tests by @simondeziel in #17156
• Minor test tweaks by @simondeziel in #17152
• test/suites/kernel_limits: simplify test by @simondeziel in #17151
• Test: Cleanup all daemons in clustering tests by @roosterfish in #17161
• Storage: Fix ZFS zvol activation race when mounting a temporary XFS snapshot for export by @tomponline in #17162
• test/suites/storage_driver_zfs: fix /dev/zfs permissions if udev didn't do it by @simondeziel in #17163
• doc: use Go 1.25 by @simondeziel in #17164
• Storage: Scan block devices directly when mounting Btrfs pool by @roosterfish in #17160
• lxd/network/acl: Don't get instance usage within project ACL loop by @markylaing in #17165
• Makefile: don't build lxd-metadata when building all by @simondeziel in #17155
• Storage: Drop CephFS volatile.pool.pristine config key by @roosterfish in #17168
• Storage: zfs.clone_copy=rebase mode fixes by @tomponline in #17135
• Test: Fix and clarify clustering storage cleanup by @roosterfish in #17169
• Minor improvements to lxd-benchmark by @simondeziel in #17172
• Rebalance when there are too many voters or standby nodes and clean up nodeRefreshTask() (from Incus) by @kadinsayani in #17171
• build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #17195
• build(deps): bump github.com/zitadel/oidc/v3 from 3.45.0 to 3.45.1 by @dependabot[bot] in #17197
• build(deps): bump github.com/openfga/openfga from 1.11.1 to 1.11.2 by @dependabot[bot] in #17192
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #17183
• build(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by @dependabot[bot] in #17181
• build(deps): bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot[bot] in #17184
• build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #17182
• Re-instate check for native bridge info check by @simondeziel in htt...

Announcement

https://discourse.ubuntu.com/t/lxd-5-0-6-lts-has-been-released/77113

What's Changed

Full Changelog: lxd-5.0.5...lxd-5.0.6