News¶

LXC 6.0.6 LTS has been released ¶

27.02.2026

Introduction¶

The LXC team is pleased to announce the release of LXC 6.0.6!

This is the sixth bugfix release for LXC 6.0 which is supported until June 2029.

Changes¶

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

Support for alternative compression formats in lxc-local
Updated AppArmor profile generation (allows running newer runc)
Support for --rbduser with the ceph backend
Improved systemd scope handling for unprivileged containers
Added support for OpenRC as an init system
Fixed a data transfer race in the attach logic when using io_uring
Fixed handling of lxc.cap.keep and lxc.cap.drop in configuration

The full list of commits is available below:

Detailed changelog

README: Fix CI links
Rename CONTRIBUTING to CONTRIBUTING.md
README: update links
commands: Fix indent
Enable systemd to create /var/lib/lxc at runtime with StateDirectory
Standardize log file create mode to 0640
lxccontainer: check if target exists before remove in create_mount_target()
Automatically detect compression format in the lxc-local template
add MFD_EXEC and MFD_NOEXEC_SEAL flag to memfd_create
github: Drop focal source packages
builds workflow: make .orig.tar.gz unique per build
build(deps): bump actions/upload-artifact from 4 to 5
config/apparmor/abstractions: Fix meson build generation of container-base
config/apparmor/abstractions: Drop manually generated container-base file
Update lxc.spec.in to use meson
apparmor: skip /proc and /sys restrictions if nesting is enabled
build(deps): bump actions/checkout from 5 to 6
Ensure do_lxcapi_unfreeze returns false when getstate errors
build: Check if P_PIDFD is defined
meson: add meson option for running doxygen in build
Enumerated all values in array
Initial changes without testing
checkonfig: Fixed compatible with toybox/gunzip
Fallback to XDG_RUNTIME_DIR when /run not found
added "--rbduser" option in "lxc-create -B rbd"
added doc for --rbduser
Added documentation on unprivileged LXC containers
build(deps): bump actions/upload-artifact from 5 to 6
start: Remove outdated comment about group dropping
start: Respect lxc.init.groups also in new user namespace
copy_rdepends: Don't fail on missing source file
cgfsng: fix reboots when using dbus
Improve the dbus scope creation error handling
build: update Makefile and meson.build
github: test io_uring-based event loop
lxc/{terminal, file_utils}: ensure complete data writes in ptx/peer io handlers
tests/lxc-attach: ensure no data corruption happens during heavy IO on pts
src/confile: fix values of lxc.cap.keep and lxc.cap.drop
lxc: added support OpenRC init system
meson.build: fix openat2 include typo, fix with glibc-2.43 +FORTIFY
meson.build: fix open_how include with glibc-2.43+
lxc/network: optimize netdev_get_mtu
lxc/network: save/restore physical network interfaces altnames
lxc/network: define netlink uAPI constants for link properties
cmd/lxc-user-nic: prevent OOB read in name_is_in_groupnames

Support and upgrade¶

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads¶

Main release tarball: lxc-6.0.6.tar.gz
GPG signature: lxc-6.0.6.tar.gz.asc

LXC 6.0.5 LTS has been released ¶

15.08.2025

Introduction¶

The LXC team is pleased to announce the release of LXC 6.0.5!

This is the fifth bugfix release for LXC 6.0 which is supported until June 2029.

Changes¶

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

Fixes a regression introduced in LXC 6.0.4 which was causing some hooks to fail due to no-new-priv handling
Removed support for building with the bionic C library (Android) as it hadn't been functional for a long time
Fixed handling of the container_ttys environment variable
Added support for both move and nosymfollow mount options
Improved testsuite coverage

The full list of commits is available below:

Detailed changelog

start: Re-introduce first SET_DUMPABLE call
README: Remove mention of old LXC version
bionic: Remove bionic detection and support
bionic: Remove custom getline, openpty and prlimit
meson_options.txt: don't use str when defining bool default values
meson_options.txt: remove space before : for consistency
selinux: fix typo (AppArmor)
lxc/conf,start: fix setting container_ttys environment variable
apparmor test: add an overlay container start
meson.build: remove quirk for Ubuntu 14.04 libcap-dev
src/tests/lxc-test-apparmor-generated: enable test
src/tests/lxc-test-apparmor-mount: prevent fail on cleanup path
src/tests/lxc-test-unpriv: prevent fail on cleanup path
conf: Add support for "move" mount flag
lxc/conf: support nosymfollow mount flag
lxc/conf: support flag kind of mount options in lxc.mount.entry options
src/tests/oss-fuzz: pin meson to 1.7.2 to workaround build failures
Add loong64 to list of recognized architectures
meson.build: set LXC_DISTRO_SYSCONF when -Dspecfile=true
meson.build: fix checks for fsconfig and calls
meson.build: use has_header_symbol() instead of get_define() to improve compatibility
lxc/process_utils.h: use strsignal() or sys_siglist[] for Non-GNU distros
lxc/lxccontainer: stop printing misleading errors in enter_net_ns()
tests/lxc-test-rootfs: add idmapped rootfs testcase
tests/lxc-test-snapdeps: try to load overlay kernel module
lxc/network: null-terminate ifname string in lxc_network_recv_name_and_ifindex_from_child()
lxc/conf: do not leak opts.data memory in __lxc_idmapped_mounts_child()
build(deps): bump actions/checkout from 4 to 5

Support and upgrade¶

Downloads¶

Main release tarball: lxc-6.0.5.tar.gz
GPG signature: lxc-6.0.5.tar.gz.asc

Thanks¶

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

[quote]
The Sovereign Tech Fund supports the development, improvement, and maintenance of open digital infrastructure. Its goal is to sustainably strengthen the open source ecosystem, focusing on security, resilience, technological diversity, and the people behind the code.
[/quote]

Find out more at: https://www.sovereign.tech

LXC 6.0.4 LTS has been released ¶

04.04.2025

Introduction¶

The LXC team is pleased to announce the release of LXC 6.0.4!

This is the fourth bugfix release for LXC 6.0 which is supported until June 2029.

Changes¶

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

Switch to the Zabbly MAC address prefix
New LXC_IPV6_ENABLE lxc-net configuration key to turn IPv6 on/off
Fixed ability to attach to application containers with non-root entry point

The full list of commits is available below:

Detailed changelog

LXC attach should exit on SIGCHLD
confile-vlanid: undefined is not a zero value
conf: log name of invalid capability in error
dbus: replace hardcoded dbus address with environment variable
conf: warn when capabilities are disabled or libcap is not found
lxc/attach: Revert "- LXC attach should exit on SIGCHLD"
config-bcast: fix incorrect broadcast address calculation
github: Switch to native arm64 runners
Added LXC_IPV6_ENABLE option for lxc-net to enable or disable IPv6
sysconfig/lxc: remove false comment
global: Switch MAC generation to Zabbly prefix
global: Switch to new MAC prefix
github: Add packaging workflow
tools/lxc_attach: fix ENFORCE_MEMFD_REXEC checks
lxc/conf: handle rootfs open_at error in lxc_mount_rootfs
lxc/caps: fix open /proc/sys/kernel/cap_last_cap
lxc/start: do prctl(PR_SET_DUMPABLE) after last uid/gid switch

Support and upgrade¶

Downloads¶

Main release tarball: lxc-6.0.4.tar.gz
GPG signature: lxc-6.0.4.tar.gz.asc

Thanks¶

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

Find out more at: https://www.sovereign.tech

LXC 6.0.3 LTS has been released ¶

19.12.2024

Introduction¶

The LXC team is pleased to announce the release of LXC 6.0.3!

This is the third bugfix release for LXC 6.0 which is supported until June 2029.

Changes¶

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

Added support for PuzzleFS images in lxc-oci
SIGHUP is now propagated through lxc.init
Reworked testsuite including support for 64-bit Arm

The full list of commits is available below:

Detailed changelog

meson.build: add -ffat-lto-objects
meson.build: drop suggest-attribute=noreturn build option
Add suppport for PuzzleFS images in the oci template
create_run_template: don't use txtuid and txtguid out of scope
Avoid null pointer dereference when using shared rootfs. rootfs->storage not set by lxc_storage_prepare when using a shared rootfs.
meson: fix minor typo
lxc-net: Replace random IPv6 subnet
fix return code of recursive all of cgroup_tree_prune
lxccontainer: fix enter_net_ns helper to work when netns is inherited
lxc.init: Switch to sigaction
lxc.init: Ignore user signals coming from inside the contianer
lxc.init: Allow SIGHUP from outside the container
github: Update coverity workflow
github: Introduce shared build logic
github: Introduce shared testsuite logic
github: Rework test workflow
github: Cleanup OSS-fuzz
github: Improve progress reporting

Support and upgrade¶

Downloads¶

Main release tarball: lxc-6.0.3.tar.gz
GPG signature: lxc-6.0.3.tar.gz.asc

Thanks¶

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

Find out more at: https://www.sovereign.tech

LXC 6.0.2 LTS has been released ¶

17.09.2024

Introduction¶

The LXC team is pleased to announce the release of LXC 6.0.2!

This is the second bugfix release for LXC 6.0 which is supported until June 2029.

Changes¶

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

Reduced log level on some common messages
Fix compilation error on aarch64

The full list of commits is available below:

Detailed changelog

Remove unused function
idmap: Lower logging level of newXidmap tools to INFO
Exit 0 when there's no error
doc: Fix definitions of get_config_path and set_config_path
README: Update security contact
fix possible clang compile error in AARCH

Support and upgrade¶

Downloads¶

Main release tarball: lxc-6.0.2.tar.gz
GPG signature: lxc-6.0.2.tar.gz.asc

News¶

LXC 6.0.6 LTS has been released¶

Introduction¶

Changes¶

Support and upgrade¶

Downloads¶

LXC 6.0.5 LTS has been released¶

Introduction¶

Changes¶

Support and upgrade¶

Downloads¶

Thanks¶

LXC 6.0.4 LTS has been released¶

Introduction¶

Changes¶

Support and upgrade¶

Downloads¶

Thanks¶

LXC 6.0.3 LTS has been released¶

Introduction¶

Changes¶

Support and upgrade¶

Downloads¶

Thanks¶

LXC 6.0.2 LTS has been released¶

Introduction¶

Changes¶

Support and upgrade¶

Downloads¶

Older news¶

LXC 6.0.6 LTS has been released ¶

LXC 6.0.5 LTS has been released ¶

LXC 6.0.4 LTS has been released ¶

LXC 6.0.3 LTS has been released ¶

LXC 6.0.2 LTS has been released ¶