From 6f28fa0488ca63295dd77248f6eb5aee3848e37f Mon Sep 17 00:00:00 2001 From: Tom Herbers Date: Sat, 2 May 2026 13:34:53 +0200 Subject: [PATCH] incus-lts: 6.0.6-unstable-2026-03-27 -> 7.0.0 Changelog: https://github.com/lxc/incus/releases/tag/v7.0.0 Announcement: https://discuss.linuxcontainers.org/t/incus-7-0-lts-has-been-released/26641 Patchsets: - https://github.com/zabbly/incus/commit/cd1412344be5fc6dabb25b4f9095eee2ab7cd7bf - https://github.com/zabbly/incus/commit/8b47b2222b3d5eb4b67417d3586b35ffae630752 - https://github.com/zabbly/incus/commit/6d3f94b0f5a3cef7bd9f20da4057769f07f63805 Advisories: - https://github.com/lxc/incus/security/advisories/GHSA-8gw4-p4wq-4hcv (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-gc7j-g665-rxr9 (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-r7w7-mmxr-47r9 (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-4m88-wxj4-9qj6 (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-fwj8-62r8-8p8m (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-x5r6-jr56-89pv (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-98vh-x9cx-9cfp (Moderate) - https://github.com/lxc/incus/security/advisories/GHSA-c839-4qxr-j4x3 (Low) - https://github.com/lxc/incus/security/advisories/GHSA-67wx-r9xr-x75x (Low) --- doc/release-notes/rl-2605.section.md | 2 + ...b7e3ec65b4d0e166e2127d9f1835320165b8.patch | 29 ------ ...fb06f66f83ca95efa1b9386fceeaa1c9e11b.patch | 28 ------ pkgs/by-name/in/incus/lts.nix | 91 +++++++++++++++++-- 4 files changed, 83 insertions(+), 67 deletions(-) delete mode 100644 pkgs/by-name/in/incus/0c37b7e3ec65b4d0e166e2127d9f1835320165b8.patch delete mode 100644 pkgs/by-name/in/incus/572afb06f66f83ca95efa1b9386fceeaa1c9e11b.patch diff --git a/doc/release-notes/rl-2605.section.md b/doc/release-notes/rl-2605.section.md index 6a750ebde07f..84ee336f3fd6 100644 --- a/doc/release-notes/rl-2605.section.md +++ b/doc/release-notes/rl-2605.section.md @@ -308,6 +308,8 @@ If your SQLite database is corrupted, the migration might fail and require [manual intervention](https://github.com/louislam/uptime-kuma/issues/5281). See the [migration guide](https://github.com/louislam/uptime-kuma/wiki/Migration-From-v1-To-v2) for more information. +- `incus-lts` has been updated from v6 to v7 + - The `libcxxhardeningextensive` hardening flag has been **disabled** by default. Enabling it by default in 25.11 was unintentional and may have had a negative effect on performance in some cases. `libcxxhardeningfast` remains enabled by default. - The packages `ibtool`, `actool` and `re-plistbuddy` have been added, providing reimplementations of the corresponding proprietary Apple tools. They are more compatible with the originals than the previously existing `xcbuild` package, and should enable more darwin software to be built from source. diff --git a/pkgs/by-name/in/incus/0c37b7e3ec65b4d0e166e2127d9f1835320165b8.patch b/pkgs/by-name/in/incus/0c37b7e3ec65b4d0e166e2127d9f1835320165b8.patch deleted file mode 100644 index d4f9cfccc21a..000000000000 --- a/pkgs/by-name/in/incus/0c37b7e3ec65b4d0e166e2127d9f1835320165b8.patch +++ /dev/null @@ -1,29 +0,0 @@ -From 0c37b7e3ec65b4d0e166e2127d9f1835320165b8 Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?St=C3=A9phane=20Graber?= -Date: Fri, 6 Sep 2024 17:07:11 -0400 -Subject: [PATCH] incusd/instance/qemu: Make O_DIRECT conditional on - directCache -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -Signed-off-by: Stéphane Graber ---- - internal/server/instance/drivers/driver_qemu.go | 4 +++- - 1 file changed, 3 insertions(+), 1 deletion(-) - -diff --git a/internal/server/instance/drivers/driver_qemu.go b/internal/server/instance/drivers/driver_qemu.go -index 5a94c9db43..9609b73c1b 100644 ---- a/internal/server/instance/drivers/driver_qemu.go -+++ b/internal/server/instance/drivers/driver_qemu.go -@@ -4276,7 +4276,9 @@ func (d *qemu) addDriveConfig(qemuDev map[string]string, bootIndexes map[string] - permissions = unix.O_RDONLY - } - -- permissions |= unix.O_DIRECT -+ if directCache { -+ permissions |= unix.O_DIRECT -+ } - - f, err := os.OpenFile(driveConf.DevPath, permissions, 0) - if err != nil { diff --git a/pkgs/by-name/in/incus/572afb06f66f83ca95efa1b9386fceeaa1c9e11b.patch b/pkgs/by-name/in/incus/572afb06f66f83ca95efa1b9386fceeaa1c9e11b.patch deleted file mode 100644 index e918deb8569c..000000000000 --- a/pkgs/by-name/in/incus/572afb06f66f83ca95efa1b9386fceeaa1c9e11b.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 572afb06f66f83ca95efa1b9386fceeaa1c9e11b Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?St=C3=A9phane=20Graber?= -Date: Fri, 6 Sep 2024 15:51:35 -0400 -Subject: [PATCH] incusd/instance/qemu: Set O_DIRECT when passing in FDs -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -This is required in most cases with QEMU 9.1.0. - -Signed-off-by: Stéphane Graber ---- - internal/server/instance/drivers/driver_qemu.go | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/internal/server/instance/drivers/driver_qemu.go b/internal/server/instance/drivers/driver_qemu.go -index 37da21f42f..e25aab0667 100644 ---- a/internal/server/instance/drivers/driver_qemu.go -+++ b/internal/server/instance/drivers/driver_qemu.go -@@ -4277,6 +4277,8 @@ func (d *qemu) addDriveConfig(qemuDev map[string]string, bootIndexes map[string] - permissions = unix.O_RDONLY - } - -+ permissions |= unix.O_DIRECT -+ - f, err := os.OpenFile(driveConf.DevPath, permissions, 0) - if err != nil { - return fmt.Errorf("Failed opening file descriptor for disk device %q: %w", driveConf.DevName, err) diff --git a/pkgs/by-name/in/incus/lts.nix b/pkgs/by-name/in/incus/lts.nix index 4b9ece2bc59e..a69ea11df4c5 100644 --- a/pkgs/by-name/in/incus/lts.nix +++ b/pkgs/by-name/in/incus/lts.nix @@ -1,16 +1,87 @@ import ./generic.nix { - hash = "sha256-DgPSH5t1Zx2X9T8dbpz54M5nXNcCJbdfcq9AEd8kmYo="; - version = "6.0.6-unstable-2026-03-27"; - vendorHash = "sha256-bVJwg9VaiSgfpKo+e2oMsYgmaKk42dktq0pahcfbjp0="; - rev = "d0f2c86fcb4a7d38343807c83ea3541bb4661e1e"; - patches = [ - # qemu 9.1 compat, remove when added to LTS - ./572afb06f66f83ca95efa1b9386fceeaa1c9e11b.patch - ./0c37b7e3ec65b4d0e166e2127d9f1835320165b8.patch - ]; + hash = "sha256-7s2gc+78O8jKypVe1itaUrsLPa2mLjNgUUrR/cv7ITA="; + version = "7.0.0"; + vendorHash = "sha256-6irMB3hpWcxDuMQBxWXnhMLAOwTAl63JX6JJZMQXf5E="; lts = true; + patches = fetchpatch2: [ + (fetchpatch2 { + name = "doc-devices-disk_Fix-broken-link.patch"; + url = "https://github.com/lxc/incus/commit/faa636b70c05a5cca0346492a0586d5747e4b117.patch?full_index=1"; + hash = "sha256-UsfzSeLJq0B9xDmd124ITzFBJzg2w1xXNK6TavQ5iMs="; + }) + (fetchpatch2 { + name = "incusd-instance-qemu_Fix-version-detection-for-qemu-kvm.patch"; + url = "https://github.com/lxc/incus/commit/a5f50d36eaa41580f2233b05936bd29fe1b15100.patch?full_index=1"; + hash = "sha256-Qwu2oljB7COZB2m3W/9Y5wCCZyxvLj4ZUHcNqtoDGzk="; + }) + (fetchpatch2 { + name = "incusd_Re-introduce-core-scheduling-detection.patch"; + url = "https://github.com/lxc/incus/commit/1e6ce18e8cd92b5b3eb4346e7bd27fd4a7d1fb9b.patch?full_index=1"; + hash = "sha256-RLy8bcod55g8vtXxChte4oalApw7d/gZg8No6BUZQS0="; + }) + (fetchpatch2 { + name = "incusd-instance-lxc_Fix-swap=false-failure.patch"; + url = "https://github.com/lxc/incus/commit/5f2cdf7545c5398290dc507313de9ee547fe803f.patch?full_index=1"; + hash = "sha256-Ux6mm8Y4q68fj//hG7k+bXMjqhGDOxGNm64De1pwcYY="; + }) + (fetchpatch2 { + name = "incusd-forknet_Persist-DHCPv6-client-DUID-across-restarts.patch"; + url = "https://github.com/lxc/incus/commit/47377e345930e77d3fbce29d037fc7dbd6823dcf.patch?full_index=1"; + hash = "sha256-CWaNaDYuBBLahxkqnM0FQZraVkvBSbrx1+8dcB8Vfbg="; + }) + (fetchpatch2 { + name = "incusd-forknet_Include-FQDN-in-DHCPv6-INFO-requests.patch"; + url = "https://github.com/lxc/incus/commit/d7f1c9d75ca33eb2ddb0bf10cec934fd6e352089.patch?full_index=1"; + hash = "sha256-3zyADLiPUuiGLwdeISj5lUk3tkAayQGaRI+/yBHrvuM="; + }) + (fetchpatch2 { + name = "incusd-forknet_Properly-renew-stateful-DHCPv6.patch"; + url = "https://github.com/lxc/incus/commit/3b127758c17752302b3f4bf907f42e926ab664e4.patch?full_index=1"; + hash = "sha256-+dcdeZwuyTWH7yfPEDqKOax/lS1Yqvwn9ooqJxKD3jA="; + }) + (fetchpatch2 { + name = "incusd-forknet_Add-jitter-to-DHCPv6-renewal.patch"; + url = "https://github.com/lxc/incus/commit/2b24a260b6177c033047f270286933563f05a999.patch?full_index=1"; + hash = "sha256-grMspYyqn4Zl1Kn+hFeUfeIevdwszJc0x2YDC2JILKw="; + }) + (fetchpatch2 { + name = "incusd-device-nic_bridged_Fix-swapped-IPv4-IPv6-DNS-record.patch"; + url = "https://github.com/lxc/incus/commit/33ffcf71745e138dd4f3546839115c293e6be083.patch?full_index=1"; + hash = "sha256-E8Plz9qdoTt3id9I5jbZYMKQt+kUrKmXmtMJ6IXlRJg="; + }) + (fetchpatch2 { + name = "doc-authorization_Fix-reference-to-old-manager-relation.patch"; + url = "https://github.com/lxc/incus/commit/c65ac0f4e6e94859b8565bce41bbf1595f4a8085.patch?full_index=1"; + hash = "sha256-6wEz3uxWauIibBkH+OdB7+VsFySmugt6wk61qMayzYo="; + }) + (fetchpatch2 { + name = "incusd-network-acl_Fix-issue-with-instances-in-different-project-than-ACL.patch"; + url = "https://github.com/lxc/incus/commit/2a3584b6fccf152be42cf5614e54241bdb13e671.patch?full_index=1"; + hash = "sha256-CXE5Bowk3ZPup6oVDEJb9ucsJoXhXu/kU7gGCghhtjQ="; + }) + (fetchpatch2 { + name = "incusd-projects_Fix-targeting-on-project-delete.patch"; + url = "https://github.com/lxc/incus/commit/3a104e4dc24897f0d6543136bb1043fcd4a33632.patch?full_index=1"; + hash = "sha256-kTFkJqbjzdq5jvNxKw8YMPR04WRj4t5IS6ymoGyXDXE="; + }) + (fetchpatch2 { + name = "test-network_acl_Add-test-for-ACL-used-by-instance-in-different-project.patch"; + url = "https://github.com/lxc/incus/commit/41878729f06e9c31df9d4fac20fb8c384608577c.patch?full_index=1"; + hash = "sha256-YR2Akus4vp3vNvHEmsJUh/3gbEf3R/cFUOVvt9u/wEU="; + }) + (fetchpatch2 { + name = "incusd-instance-qemu_Remove-deprecated-QEMU-flag.patch"; + url = "https://github.com/lxc/incus/commit/c1f18c78fc6bc4850df20574bdcc541e5eefc4ac.patch?full_index=1"; + hash = "sha256-kbn4Yd/G23FCFA0Ch0+d81HUxCbcoiOzHfZ0MW+VlzE="; + }) + (fetchpatch2 { + name = "incusd-cluster_Re-order-evacuations-to-happen-earlier-on-shutdown.patch"; + url = "https://github.com/lxc/incus/commit/5b29ecc164ef28239d2e2a874a7c871a2e419083.patch?full_index=1"; + hash = "sha256-jpyJYjiZvRw/aOGsykEx8uotRBF7p1q5O08PVhyQtvk="; + }) + ]; nixUpdateExtraArgs = [ - "--version-regex=^v(6\\.0\\.[0-9]+)$" + "--version-regex=^v(7\\.0\\.[0-9]+)$" "--override-filename=pkgs/by-name/in/incus/lts.nix" ]; }