Go to Table of Contents

Berita

LXC 6.0.5 LTS has been released

15 Agt 2025

Introduction

The LXC team is pleased to announce the release of LXC 6.0.5!

This is the fifth bugfix release for LXC 6.0 which is supported until June 2029.

Changes

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

  • Fixes a regression introduced in LXC 6.0.4 which was causing some hooks to fail due to no-new-priv handling
  • Removed support for building with the bionic C library (Android) as it hadn't been functional for a long time
  • Fixed handling of the container_ttys environment variable
  • Added support for both move and nosymfollow mount options
  • Improved testsuite coverage

The full list of commits is available below:

Detailed changelog
  • start: Re-introduce first SET_DUMPABLE call
  • README: Remove mention of old LXC version
  • bionic: Remove bionic detection and support
  • bionic: Remove custom getline, openpty and prlimit
  • meson_options.txt: don't use str when defining bool default values
  • meson_options.txt: remove space before : for consistency
  • selinux: fix typo (AppArmor)
  • lxc/conf,start: fix setting container_ttys environment variable
  • apparmor test: add an overlay container start
  • meson.build: remove quirk for Ubuntu 14.04 libcap-dev
  • src/tests/lxc-test-apparmor-generated: enable test
  • src/tests/lxc-test-apparmor-mount: prevent fail on cleanup path
  • src/tests/lxc-test-unpriv: prevent fail on cleanup path
  • conf: Add support for "move" mount flag
  • lxc/conf: support nosymfollow mount flag
  • lxc/conf: support flag kind of mount options in lxc.mount.entry options
  • src/tests/oss-fuzz: pin meson to 1.7.2 to workaround build failures
  • Add loong64 to list of recognized architectures
  • meson.build: set LXC_DISTRO_SYSCONF when -Dspecfile=true
  • meson.build: fix checks for fsconfig and calls
  • meson.build: use has_header_symbol() instead of get_define() to improve compatibility
  • lxc/process_utils.h: use strsignal() or sys_siglist[] for Non-GNU distros
  • lxc/lxccontainer: stop printing misleading errors in enter_net_ns()
  • tests/lxc-test-rootfs: add idmapped rootfs testcase
  • tests/lxc-test-snapdeps: try to load overlay kernel module
  • lxc/network: null-terminate ifname string in lxc_network_recv_name_and_ifindex_from_child()
  • lxc/conf: do not leak opts.data memory in __lxc_idmapped_mounts_child()
  • build(deps): bump actions/checkout from 4 to 5

Support and upgrade

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads

Thanks

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

ST-Fund-Logo-Default-White-RGB|690x219

[quote]
The Sovereign Tech Fund supports the development, improvement, and maintenance of open digital infrastructure. Its goal is to sustainably strengthen the open source ecosystem, focusing on security, resilience, technological diversity, and the people behind the code.
[/quote]

Find out more at: https://www.sovereign.tech

LXC 6.0.4 LTS has been released

4 Apr 2025

Introduction

The LXC team is pleased to announce the release of LXC 6.0.4!

This is the fourth bugfix release for LXC 6.0 which is supported until June 2029.

Changes

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

  • Switch to the Zabbly MAC address prefix
  • New LXC_IPV6_ENABLE lxc-net configuration key to turn IPv6 on/off
  • Fixed ability to attach to application containers with non-root entry point

The full list of commits is available below:

Detailed changelog
  • LXC attach should exit on SIGCHLD
  • confile-vlanid: undefined is not a zero value
  • conf: log name of invalid capability in error
  • dbus: replace hardcoded dbus address with environment variable
  • conf: warn when capabilities are disabled or libcap is not found
  • lxc/attach: Revert "- LXC attach should exit on SIGCHLD"
  • config-bcast: fix incorrect broadcast address calculation
  • github: Switch to native arm64 runners
  • Added LXC_IPV6_ENABLE option for lxc-net to enable or disable IPv6
  • sysconfig/lxc: remove false comment
  • global: Switch MAC generation to Zabbly prefix
  • global: Switch to new MAC prefix
  • github: Add packaging workflow
  • tools/lxc_attach: fix ENFORCE_MEMFD_REXEC checks
  • lxc/conf: handle rootfs open_at error in lxc_mount_rootfs
  • lxc/caps: fix open /proc/sys/kernel/cap_last_cap
  • lxc/start: do prctl(PR_SET_DUMPABLE) after last uid/gid switch

Support and upgrade

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads

Thanks

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

ST-Fund-Logo-Default-White-RGB|690x219

[quote]
The Sovereign Tech Fund supports the development, improvement, and maintenance of open digital infrastructure. Its goal is to sustainably strengthen the open source ecosystem, focusing on security, resilience, technological diversity, and the people behind the code.
[/quote]

Find out more at: https://www.sovereign.tech

LXC 6.0.3 LTS has been released

19 Des 2024

Introduction

The LXC team is pleased to announce the release of LXC 6.0.3!

This is the third bugfix release for LXC 6.0 which is supported until June 2029.

Changes

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

  • Added support for PuzzleFS images in lxc-oci
  • SIGHUP is now propagated through lxc.init
  • Reworked testsuite including support for 64-bit Arm

The full list of commits is available below:

Detailed changelog
  • meson.build: add -ffat-lto-objects
  • meson.build: drop suggest-attribute=noreturn build option
  • Add suppport for PuzzleFS images in the oci template
  • create_run_template: don't use txtuid and txtguid out of scope
  • Avoid null pointer dereference when using shared rootfs. rootfs->storage not set by lxc_storage_prepare when using a shared rootfs.
  • meson: fix minor typo
  • lxc-net: Replace random IPv6 subnet
  • fix return code of recursive all of cgroup_tree_prune
  • lxccontainer: fix enter_net_ns helper to work when netns is inherited
  • lxc.init: Switch to sigaction
  • lxc.init: Ignore user signals coming from inside the contianer
  • lxc.init: Allow SIGHUP from outside the container
  • github: Update coverity workflow
  • github: Introduce shared build logic
  • github: Introduce shared testsuite logic
  • github: Rework test workflow
  • github: Cleanup OSS-fuzz
  • github: Improve progress reporting

Support and upgrade

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads

Thanks

This LTS release update was made possible thanks to funding provided by the Sovereign Tech Fund (now part of the Sovereign Tech Agency).

ST-Fund-Logo-Default-White-RGB|690x219

[quote]
The Sovereign Tech Fund supports the development, improvement, and maintenance of open digital infrastructure. Its goal is to sustainably strengthen the open source ecosystem, focusing on security, resilience, technological diversity, and the people behind the code.
[/quote]

Find out more at: https://www.sovereign.tech

LXC 6.0.2 LTS has been released

17 Sep 2024

Introduction

The LXC team is pleased to announce the release of LXC 6.0.2!

This is the second bugfix release for LXC 6.0 which is supported until June 2029.

Changes

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

  • Reduced log level on some common messages
  • Fix compilation error on aarch64

The full list of commits is available below:

Detailed changelog
  • Remove unused function
  • idmap: Lower logging level of newXidmap tools to INFO
  • Exit 0 when there's no error
  • doc: Fix definitions of get_config_path and set_config_path
  • README: Update security contact
  • fix possible clang compile error in AARCH

Support and upgrade

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads

LXC 6.0.1 LTS has been released

27 Jun 2024

Introduction

The LXC team is pleased to announce the release of LXC 6.0.1!

This is the first bugfix release for LXC 6.0 which is supported until June 2029.

Changes

As usual this bugfix releases focus on stability and hardening.

Some of the highlights for this release are:

  • Fixed some build tooling issues
  • Fixed startup failures on system without IPv6 support
  • Updated AppArmor rules to avoid potential warnings

The full list of commits is available below:

Detailed changelog
  • meson: fix build on NixOS
  • github: test the lxc multicall binary builds too
  • lxc/network: handle non-existing sysctl /disable_ipv6
  • network: netdev_configure_server_veth: reduce scope of disable_ipv6_fd/path vars
  • Update lxc-attach.sgml.in
  • Update lxc-execute.sgml.in
  • Update lxc-{attach,execute}.sgml.in
  • Update lxc-execute.sgml.in
  • lxc-local: fix use of LXC_PATH before init
  • lxc-local: fix incorrect path to templates file
  • lxc-local: remove check for template existence before extraction
  • apparmor: fix rule path pattern specification syntax
  • apparmor: regenerate rules
  • apparmor: use /{,} instead of /
  • apparmor: regenerate rules
  • github: start using ubuntu-24.04
  • github: properly check apparmor profile changes
  • lxc/storage/zfs: ignore false-positive use-after-free warning
  • github: exclude clang & ubuntu-24.04 combination
  • meson: fix build with -Dtools-multicall=true on NixOS

Support and upgrade

The LXC 6.0 branch is supported until June 2029.
Only bugfixes and securitiy issues get included into the stable bugfix releases, so it's always safe and recommended to keep up and run the latest bugfix release.

Downloads

Older news

Contents