LXD 4.0.3 リリースのお知らせ¶
12th of August 2020
Introduction¶
LXD チームが LXD 4.0.3 のリリースをお知らせします!
このリリースは、2025 年 6 月までサポートされる LXD 4.0 に対する 3 つめのバグフィックスリリースです。
バグ修正と改良 ¶
このリリースには、開発ブランチからの数カ月分のバグフィックスと細かな改善が含まれています。
このリリースでは、VGA コンソール(LXD API 内の SPICE)とプロジェクトのディスク制限が含まれており、少し拡張された「マイナーな改良」となっています。4.0 リリースの主要な機能のいくつかのギャップを埋めるには、これが重要で(そして簡単だ)と思ったのです。
これらの機能は、データベーススキーマの更新を必要とせず、ダウングレードを防止したり、ディスク上の構造を変更したりすることもありませんので、変更を行うことは安全で重要であると感じました。
主な変更点は次のとおりです:
lxc launch
に新たに--console
フラグが追加されました- 仮想マシン内の
/dev/lxd
API のサポート /1.0/resources
API 内で GPU 媒介(mediated)デバイスのサポート- 仮想マシンに対する VGA コンソールのサポートの追加。クライアントで
--console=vga
(lxc launch
もしくはlxc start
)や--type=vga
(lxc console
)を指定します dnsmasq
とforkdns
に対する自動的な AppArmor プロファイルの生成- プロジェクトに対するディスク制限(
limits.disk
設定オプション)
コミットの全リストは次のとおりです(翻訳なし):
すべてのChangeLog を見る
- lxd/storage: Better handle broken volumes
- client: Handle unknown image sizes
- lxd/response: Stream multi-part responses
- lxd/device/disk: Fixes cloud-init errors for VMs
- lxc/action: Show usage on missing target
- lxd/storage: Rely on UsedBy for deletion error
- lxd/instances/qemu: Use images dir during compression
- lxd/storage/drivers: Rename fs to filesystem
- shared/api: Add ContentType to storage volume structs
- client: Support custom block volumes
- lxd/util: Detect hugetlbfs mount point
- lxd/cluster: Always check for dqlite protocol version mismatches
- lxd/cluster: Don't run unnecessary HEAD probe upon dqlite connections
- forksyscall: use nsids for shiftfs syscall intercepts
- lxd/db: Drop ClusterRoleDatabase records from the database
- lxd/cluster: Fetch database role information directly from raft
- lxd/storage: Fix regression in truncate handling
- lxd/cluster: Only look up raft_nodes for resolving the address of node 1
- lxd/cluster: Leverage RolesChanges.Handover() to choose handover target
- lxd: Increase timeout of go unit tests when ran from Emacs
- lxd/cluster: Skip unnecessary loading of nodes from database in Rebalance()
- lxd/cluster: Leverage RolesChanges.Adjust() to choose rebalance target
- lxd/cluster: Increase time budget of client.Assign() when assigning voter role
- lxd/cluster: When demoting to Spare only transition to StandBy if Voter
- lxd/project: Add more name checks
- doc/server: Cover listen + authentication
- lxd/qemu: Don't do file lock on custom volumes
- shared/api: Add FailureDomain field to ClusterMemberPut
- client: Check clustering_failure_domains extension when updating a member
- instance: update terminology I
- lxd/network: Validate ipv4/ipv6 routes
- lxd/proxy: Fix govet
- lxd/rsync: Add AtLeast
- lxd/rsync: Filter out security.selinux
- lxd-p2c: Filter out security.selinux
- lxc-to-lxd: Filter out security.selinux
- lxc/launch: Add --console
- instance: introduce container_syscall_filtering_allow_deny extension
- tests: remove trailing comma
- lxd/instance/drivers: Provide instance-data file
- lxd-agent: Support /dev/lxd
- lxd/instance/drivers: Allow updating running VMs
- tests: Fix bad ipv6.routes value
- lxc/instance/drivers/qemu: Support ephemeral VMs
- lxd/qemu: Use memory backend ram/file
- lxc/image: Fix dir handling on snap
- lxd/qemu: Fix crash on non-pinned VM
- lxc/image: Fix more dir handling on snap
- terminals: update terminology again
- doc/instances: Improves proxy docs
- lxc/main_alias: Handle leading arguments
- lxd/storage: Fix block volume migration
- lxd/rbac: Always allow internal cluster traffic
- units: handle multiplication integer overflow
- lxd/rsync: Untangle from daemon package
- lxd/qemu: Don't use file.locking with rbd
- lxd/storage/zfs: Use autotrim when available
- lxd: Add clustering_fix_raft_address_zero patch to fix node with "0" as address
- Revert "lxd/storage: Fix block volume migration"
- lxd/resources: Use udev model data if available
- Decode error
- doc/api-extensions: Fix escaping
- share/api: Add GPU mdev
- lxd/resources: Add GPU mdev
- api: Add GPU mdev
- lxd/qemu: Fix unbound hugepages
- lxd/qemu: Properly connect memory
- api: console_vga_type
- doc/rest-api: Add type field to console
- shared/api: Add Type field to InstanceConsolePost
- lxd/instance: Add protocol argument to Instance.Console()
- lxd/instance/drivers: Support VGA output in qemu.Console()
- lxd: Handle "vga" type in console API handler
- client: Add ConsoleInstanceDynamic() to support multiple websocket connections
- lxc: Add --type flag to "lxc console"
- i18n: Update translation templates
- lxc/console: Missing error handling
- lxc/console: Prefer remote-viewer
- lxc: Populate cmdConsole.flagType also when ran manually
- lxc/console: Short argument for type
- lxc: Allow using --console=TYPE
- lxd/images: Rename imgPostContInfo to imgPostInstanceInfo
- lxd/instances: Return and set image properties
- lxd/qemu: Add support for spice agent
- lxc/console: Disconnect on shutdown
- lxd/db: Drive-by removal of leftover fmt.Printf's
- lxd/main_daemon: s/containers/instances/
- lxd: s/containersShutdown/instancesShutdown/
- lxd: Add context to daemon
- lxd/operations: Add db operation type to Operation
- lxd: Add waitForOperations()
- lxd: Shut down gracefully
- lxd/operations/operations: Fix hanging cancellation
- lxd/instance_post: Pass cancel function to websocket operation
- client/lxd_instances: Cancel websocket op if needed
- lxd/daemon: Return 503 when shutting down
- doc/api-extensions: Fix over-escaping
- lxd: Add --force flag to lxd shutdown
- shared/instance: Move network validation functions to shared
- lxd/db/networks: Adds internal network type constants
- lxd/db/networks: Updates CreateNetwork to accept a network type
- lxd/db/networks: Updates CreatePendingNetwork to accept a network type
- lxd/network/network/interface: Adds network interface
- lxd/network/network/load: LoadByName to use Network interface, add Validate
- lxd/network/errors: Adds error constants
- lxd/network/network/utils: Moved validation functions from main package
- lxd/network/driver/common: Adds common driver
- lxd/network/driver/bridge: Renames network to driver_bridge
- lxd/networks/utils: Remove unused network validation functions in main
- lxd/device/device/utils/network: Removes unused validation functions
- lxd/device/device/utils/proxy: shared.IsNetworkAddress usage
- lxd/device/nic: shared validation function usage
- lxd/device/nic/bridged: Support Network interface
- lxd/device/nic/ipvlan: shared validation function usage
- lxd/device/nic/routed: shared validation function usage
- lxd/main/init/interactive: Uses network name validation from network package
- lxd/networks: ValidNetworkName usage in networkPost
- lxd/networks: Updates doNetworkUpdate to use network package validation
- lxd/networks: Updates networksPost to support network type
- lxd/networks: Remove use of network.IsRunning in networkShutdown
- lxd/networks/config: Removed
- lxd/networks/utils: Updates usage of n.RefreshForkdnsServerAddresses to generic n.HandleHearbeat
- lxd: Updates network tests to pass netType
- lxd/network/network/utils: Unexports usesIPv4Firewall and usesIPv6Firewall
- lxd/network/driver/bridge: usesIPv4Firewall and usesIPv6Firewall usage
- lxd/apparmor: Use templating
- lxd/apparmor: Use proper version parsing
- lxd/network/driver/common: Adds config diff and db update common functions
- lxd/network/driver/common: Adds contextual logger
- lxd/network/driver/common: Removes stuttering on "common" in validation rules function
- lxd/network/driver/bridge: Updates to use contextual logger
- lxd/network/driver/bridge: Simplifies Update function to use common update functions
- lxc/networks: Renames notify to clusterNotification in doNetworkUpdate
- lxd/network/network/interface: Clarifies Update arguments
- lxd/network/network/interface: Renames Delete withDatabase arg to clusterNotification
- lxd/network/driver/common: Adds common delete function
- lxd/networks: Cleans up networksPost to use clusterNotification argument correctly
- lxd/networks: Log quoting in networksPostCluster
- lxd/networks: Cleans up doNetworksCreate to use clusterNotification argument
- lxd/network/driver/bridge: Updates Delete to use common delete function
- lxd/network/driver/bridge: Adds logging to Update
- lxd/networks: Removes bridge specific logic in doNetworkUpdate
- lxd/network/driver/bridge: Adds fan auto detection logic to Update
- lxd/network/driver/common: Adds rename common function
- lxd/network/driver/bridge: Updates Rename to use common rename function
- lxd/networks: networkPost logging quoting
- lxc/network/driver/bridge: isRunning comment
- lxd/network/driver/bridge: Unexports hasIPv4Firewall and hasIPv6Firewall
- lxd/networks: Detect unknown network type in networksPost, dont assume bridge
- lxd/networks: comment fix in networksPostCluster
- lxd/networks: Allow for different managed network types in doNetworkGet
- lxd/network/network/interface: Adds fillConfig to interface
- lxd/network/driver/common: Adds default fillConfig function
- lxd/network/driver/common: Adds default HandleHeartbeat function
- lxd/network/network/load: Adds per-driver FillConfig wrapper
- lxd/network/network/utils: Removes generic FillConfig
- lxd/network/driver/bridge: fillConfig implementation
- lxd/network/driver/bridge: Exposes error message from ValidNetworkName in Validate
- shared/version: Add projects_limits_disk extension
- doc: Document limits.disk project configuration key
- lxd: Add "limits.disk" to supported project config keys
- lxd/project: Check that root disk sizes are within limits.disk
- lxd/project: Add projectInfo struct to hold together project's extra info
- lxd/db: Add GetCustomVolumesInProject() to fetch custom volumes in a project
- lxd/project: Fetch the project's custom volumes
- lxd/project: Consider custom volumes sizes in checkAggregateLimits
- lxd/project: Add AllowVolumeCreation() to check limits upon volume creation
- lxd: Call project.AllowVolumeCreation() before creating custom volumes
- lxd/project: Add AllowVolumeUpdate() to check custom volumes config updates
- lxd: Call project.AllowVolumeUpdate() before modifying a custom volume
- shared: Add QuotaWriter
- lxd/project: Add GetImageSpaceBudget() returning image disk space budget
- lxd: Possibly limit the disk space that can be used by POST /1.0/images
- lxd: Check available project budget when publishing an instance as image
- lxd/project: Fill missing fields when checking instance creation
- lxd/project: Skip checks when unsetting limits
- lxd: Honor project disk budget when downloading images
- test: Add tests for the "limits.disk" project config key
- lxd/sys: Create apparmor/seccomp paths
- lxd/apparmor: Split and rename instance functions
- lxd/resources/storage: Use ID_MODEL_ENC when possible
- shared: Add InSnap
- shared/subprocess: Add AppArmor support
- lxd/apparmor: Rename template
- lxd/apparmor: Add dnsmasq profile
- lxd/networks: Use AppArmor when available
- tests: Delete leftover storage volume
- lxd/operations/operations: Renames Operations to Clone
- lxd-agent/operations: operations.Clone() usage
- lxd: operations.Clone() usage
- Drop from .travis.yaml Go versions we don't support anymore
- shared/api/network: Adds network status constants
- lxd/networks: API constant usage in networkDelete
- lxd/network/network/load: Adds status
- lxd/network/network/interface: Adds status function
- lxd/network/driver/common: Adds status field and function
- lxd/network/driver/bridge: Don't allow starting a pending network
- lxd/device/nic/bridged: Usage of d.state.Cluster.GetNetworkInAnyState in rebuildDnsmasqEntry
- lxd/api/cluster: Usage of api.NetworkStatusPending
- lxd/db/networks: Usage of api package's NetworkStatus constants in getNetwork
- lxd/db/networks: Removes unused GetNetwork
- lxd/db/networks: GetNonPendingNetworks comment
- lxd/db/networks: Allow pending nodes to be added to errored networks in CreatePendingNetwork
- lxd/db/networks: CreatePendingNetwork comments and line spacing
- lxd/networks/utils: Skip network load error in networkUpdateForkdnsServersTask
- lxd/device/nic/bridged: Validates network is type bridge
- lxc/device/nic/bridged: Only allow using non-Pending networks
- lxd/networks: Various comment and error quoting consistency fixes
- lxd/networks: Validate network name earlier in networksPost
- lxc/networks: Validate config in doNetworksCreate
- lxd/db/networks: Ensure that network type matches existing pending network in CreatePendingNetwork
- lxd/db/networks: Remove errored state on successful update in UpdateNetwork
- lxd/network/driver/bridge: Adds targetNode arg to Update
- lxd/network/network/interface: Adds targetNode arg to Update
- lxd/network/driver/common: Tweaks to update function in cluster environment
- lxd/networks: networksPost error response tweaks
- lxd/networks: Updates networksPostCluster
- lxd/networks: Unifies networkPut and networkPatch
- lxd/device/nictype: Adds small package to resolve NIC device nictype from network
- lxd/device/config/devices: Removes NICType
- lxd/device/config/devices: Improves comment on Update
- lxd/device/device/load: Removes devTypes map and updates load to use NICType function
- lxd/device: Removes device load helpers
- lxd/device/device/utils/network: nictype.NICType usage
- lxd/device/nic/bridged: Updates usage of functions whose signatures changed due to NICType
- lxd/device/nic/p2p: Updates usage of functions that changed signature due to NICType
- lxd/device/proxy: nictype.NICType usage
- lxd/instance/drivers/driver/lxc: nictype.NICType usage
- lxd/instance/drivers/driver/qemu: nictype.NICType usage
- lxd/network/driver/bridge: Usage of functions that changed signature due to NICType
- lxd/network/driver/common: Updates IsUsed for NICType signature changes and checks for profile usage
- lxd/network/network/interface: Signature change of IsUsed to accommodate NICType
- lxd/network/network/utils: Usage of nictype.NICType and signature changes to accommodate it
- lxd/networks: nictype.NICType usage and comment improvements
- lxd/networks: Comment ending consistency
- test: Updates tests to delete profiles before networks
- lxd/networks: Remove database record on error in networksPost
- test: sriov NIC comment ending consistency
- doc/networks: Re-arranges network docs to support different types
- doc/networks: Fixes typo
- lxd/network/openvswitch/ovs: Adds OVS wrapper
- lxd/network/driver/bridge: ovs usage
- lxd/network/network/utils: ovs usage
- lxd/networks: ovs.BridgeExists usage
- tree-wide: add dummy include package for cgo
- doc/images: Cover the various image servers
- doc: Typo fix
- lxd/networks: Fixes bug in doNetworkUpdate that prevents removal of non-node specific keys
- lxd/network/driver/bridge: Consistent comment ending in setup()
- lxd/network/network/interface: fillConfig signature
- lxd/network/driver/common: Updates fillConfig signature
- lxd/network/driver/bridge: Updates fillConfig signature
- lxd/network/network/load: Updates FillConfig to use new signature
- lxd/network/driver/bridge: Fixes Update to regenerate default values if missing
- test/suites/container/devices/nic/bridged: Fixes DHCP disable by setting IP address none
- lxd/network/driver/bridge: Dont fail start if cannot restore third party route
- lxd/migrate: Fix crash in sendControl when no active connection
- lxd/operations: Fix typo
- lxc/export: Plug in cancelable wait
- i18n: Update translation templates
- lxd/devices/device/utils/network: Removes networkValidMAC
- shared/instance: Adds IsNetworkMAC for use in network and device packages
- lxd/device/nic: shared.IsNetworkMAC usage
- lxd/network/driver/bridge: Adds volatile.bridge.hwaddr key
- shared/validate: Adds validate helper package
- lxd: Updates use of validate helper functions now in validate package
- shared: Removes validate helper functions
- lxd/device/device/utils/infiniband: Changes infinibandValidMAC to use net.ParseMAC
- lxd/device/device/utils/infiniband/test: Changes test name for linter
- lxd/networks: Allow update/removal of node-specific key in non-clustered mode
- lxd/network/driver/bridge: Adds safety check for volatile MAC address usage
- lxd/device: fix empty error message when tc fails
- test: Wait for operations to be removed from the database
- shared/validate: Adds Optional() validate wrapper
- shared/validate: Makes IsInt64 non-optional
- lxd/network/driver/bridge: Add validate.Optional() wrapper for validate.IsInt64 usage
- lxd/storage/utils: Adds validate.Optional() wrapper for validate.IsInt64 usage
- shared/instance: Adds validate.Optional() wrapper for validate.IsInt64 usage
- lxd/device/device/utils/network: Removes networkValidVLAN
- shared/validate: Adds IsNetworkVLAN
- lxd/device/nic: validate.IsNetworkVLAN usage
- seccomp: switch from individual pread() to process_vm_readv()
- seccomp: fix i386 builds
- seccomp: ensure that target process is still valid
- client: Move proxyMigration
- lxd: Port remaining calls to instance
- lxd/network/driver/common: Adds Create function no-op
- lxd/network/network/interface: Adds Create function
- lxd/networks: Adds call to network Create in doNetworksCreate
- lxd/device/device/utils/network: Adds networkDHCPValidIP
- lxd/device/nic/bridged: Removes networkDHCPValidIP
- lxd/device/device/utils/networks: Splits networkSetupHostVethDevice into multiple functions
- lxd/device/nic/bridged: networkVethFillFromVolatile usage and other host-veth functions
- lxd/device/nic/p2p: networkVethFillFromVolatile usage and other host-veth helper functions
- lxd/device/nic/routed: networkVethFillFromVolatile usage and other host-veth helper functions
- lxd/network/network/utils: Updates isInUseByDevices to support networks that don't match their physical parent
- lxd/device: Add missing sriov type
- lxc/move: Allow --target with cluster destination
- i18n: Update translation templates
- lxd/networks: Validate network config before starting networks on startup
- lxd/network/driver/common: Call init() in update() to consistency apply new internal state
- lxd/device/device/utils/network: Removes networkDHCPValidIP
- lxd/dnsmasq/dhcpalloc: Adds static DHCP allocation package for dnsmasq
- lxd/dnsmasq: Renames DHCPStaticIPs to DHCPStaticAllocation
- lxd/dnsmasq: Renames DHCPAllocatedIPs to DHCPAllAllocations
- lxd/network/network/utils: Removes GetIP
- lxd/network/network/utils: dhcpalloc.GetIP usage
- lxd/network/network/utils: dnsmasq.DHCPStaticAllocation usage
- lxd/network/network/interface: Changes of functions to accommodate dhcpalloc package
- lxd/network/driver/common: Implements default no-op function for non-dhcp enabled networks
- lxd/network/driver/common: dhcpalloc.DHCPRange usage
- lxd/network/driver/bridge: dhcpalloc package function usage
- lxd/network/driver/bridge: DHCPv4Subnet and DHCPv6Subnet implementations
- lxd/device/nic/bridged: Comment correction
- lxd/device/nic/bridged: n.DHCPv4Subnet and n.DHCPv6Subnet usage
- lxd/device/nic/bridged: dnsmasq.DHCPStaticAllocation usage
- lxd/device/nic/bridged: dhcpalloc.DHCPValidIP usage
- lxd/device/nic/bridged: Switches static DHCP allocation for IP filtering to dnsmasq/dhcpalloc
- lxd/main_activateifneeded: Clarify 'No DB' debug statements
- doc: s/container/instance/g
- doc/backup: Add note about the snap mntns
- lxd/apparmor: Don't fail on missing apparmor
- shared/validate: Makes IsUint32 non-optional
- lxd: Wraps validate.IsUint32 in validate.Optional
- shared/instance: Wraps validate.IsUint32 in validate.Optional
- shared/validate: Makes IsUint8 non-optional
- lxd/network/driver/bridge: Wraps validate.IsUint8 in validate.Optional
- shared/validate: Makes IsPriority non-optional
- shared/instance: Wraps validate.IsPriority in validate.Optional
- shared/validate: Makes IsBool non-optional
- lxd: Wraps validate.IsBool in validate.Optional
- shared/instance: Wraps validate.IsBool in validate.Optional
- shared/validate: Makes IsSize non-optional
- lxd: Wraps validate.IsSize in validate.Optional
- shared/instance: Wraps validate.IsSize in validate.Optional
- shared/validate: Makes IsNetworkAddress non-optional
- lxd: Wraps validate.IsNetworkAddress in validate.Optional
- shared/validate: Makes IsNetworkV4 non-optional
- lxd/network/driver/bridge: Wraps validate.IsNetworkV4 in shared.Optional
- shared/validate: Makes IsNetworkAddressV4 non-optional
- lxd/device/nic: Wraps validate.IsNetworkAddressV4 in validate.Optional
- lxd/network/driver/bridge: Wraps validate.IsNetworkAddressV4 in validate.Optional
- shared/validate: Makes IsNetworkAddressCIDRV4 non-optional
- lxd: Wraps validate.IsNetworkAddressCIDRV4 in validate.Optional
- shared/validate: Makes IsDeviceID non-optional
- lxd/device: Wraps validate.IsDeviceID in validate.Optional
- shared/validate: Makes IsNetworkV6 non-optional
- shared/validate: Makes IsNetworkAddressCIDRV6 non-optional
- lxd: Wraps validate.IsNetworkAddressCIDRV6 in validate.Optional
- shared/validate: Makes IsNetworkAddressV6 non-optional
- lxd: Wraps validate.IsNetworkAddressV6 in validate.Optional
- lxd/device/nic/routed: Wraps validate.IsNetworkAddressV4List in validate.Optional
- lxd: Wraps validate.IsNetworkV4List and validate.IsNetworkV6List in validate.Optional
- shared/validate: Tweaks IsNetworkVLAN error message ordering
- shared/validate: comment spacing
- daemon: check whether shiftfs is usable
- lxd/network/network/utils: Renames ValidNetworkName to validInterfaceName
- lxd/network/network/utils: Adds validVirtualNetworkName
- lxd/network/network/interfaces: Adds ValidateName
- lxd/network/driver/bridge: Implements ValidateName
- lxd/network/network/load: Adds ValidateName helper function
- lxd/main/init/interactive: Switches to network.ValidateName for bridge validation
- lxd/networks: Switches to network.ValidateName
- lxd/storage/utils: Simplifies error message from ValidName
- lxd/cluster/config: Fix import ordering of external package
- lxd/network/openvswitch: Name functions consistently using ObjectAction format
- lxd/network/driver/bridge: OVS function naming usage
- lxd/network/network/utils: OVS function naming usage
- lxd/network/network/interface: Adds ID() function
- lxd/network/driver/common: Implements ID() function
- lxd/resources: Fix total memory for per NUMA node
- lxd/rsync: Don't pass --bwlimit when no limits set
- client/operations: Fixes race conditions
- lxd/operations: Fixes race conditions
- client: More races fixed
- Makefile: Adds race target for enabling race detector
- Makefile: Correctly builds lxd-p2c and lxd-agent in debug and nocache targets
- client/operations: Race fix
- lxd/db: Adds mutex to fix races
- lxd/operations: Fixes races
- shared/validate: Adds IsURLSegmentSafe function
- lxd/network/driver/common: Adds common ValidateName function
- lxd/network/driver/bridge: Changes ValidateName to use common validation too
- lxd/network/network/load: Adds field name context to name validation errors
- lxd/network/network/utils: Removes validVirtualNetworkName
- lxd/networks: Returns network context on network startup failure
- shared/validate: Adds Required() and makes Optional() accept multiple validators
- test/suites/storage: LVM size tweaks
- lxd: enable safe native container terminal allocation
- exec: fix OpenPtyInDevpts()
- lxd/instance/drivers/driver/lxc: Adds nil check in getLxcState
- lxd/storage/locking: Moves package to lxd/locking
- lxd/locking: Renames variables to make them generic
- lxd/storage/drivers/utils: Adds OperationLockName function
- lxd/storage: locking.Lock usage with OperationLockName wrapper
- lxd/network/driver/bridge: Don't allow stable volatile MAC with fan network
- lxd/network/driver/bridge: Don't allow hwaddr to be set in fan mode
- seccomp: update comment about blocking the new mount api
- syscall_numbers: fix pidfd_open() definition
- lxd_seccomp: add SECCOMP_IOCTL_NOTIF_ADDFD definitions and types
- checkfeature: check for seccomp notify fd injection feature
- syscall_numbers: add pidfd_getfd()
- syscall_numbers: add bpf()
- seccomp: report helpful errors when determining support for features
- seccomp: handle liblxc sending the notify fd as part of the seccomp message
- syscall_numbers: add close_range()
- exec: switch to close_range() syscall
- process_utils: remove faulty license
- lxd/apparmor/dnsmasq: Add binary for nesting
- lxd/storage/drivers/ceph: Fix volume deletion
- lxd/instance/drivers/driver/qemu: Fix race in onStop getting operation
- lxd/db: Fix premature failure when listing cluster volumes
- lxd/db/storage_volumes: Add comments regarding behaviour
- doc/production-setup: Fix escaping
- doc/production-setup: Update introduction
- lxd: Fix automatic storage volume snapshots
- cluster: Don't upgrade nodes without raft role concurrently
- lxd/network/network/load: Moves fillAuto logic into per-driver fillConfig function
- lxd/network/utils: Moves fillAuto into bridge's fillConfig function
- lxd/network/network/utils: Adds randomHwaddr function
- lxd/patches: Adds patch to remove volatile.bridge.hwaddr network key
- lxd/network/bridge/driver: Removes volatile.bridge.hwaddr and adds stable MAC generation
- shared/usbid: Don't auto-load
- lxd/resources: Load USB database
- lxd/apparmor: Move dnsmasq functions
- lxd/apparmor: forkdns profile
- lxd/sys: Add unpriv uid/group
- lxd/instances: Update for OS type change
- shared/subprocess: s/Pid/PID/
- shared/subprocess: Add credentials
- lxd/network: forkdns and creds drop for forkdns
- lxd/network: Run dnsmasq as unpriv group
- lxd/device/device/common: Adds common contextual logger
- lxd/network/driver/bridge: Validates bridge.external_interfaces using validate.Optional() helper
- shared/validate: Adds network IP range validators
- lxd/network/driver/bridge: Adds DHCP IP range validation
- shared/network/ip: Defines IPRange struct
- lxd/dnsmasq/dhcpalloc: Removes DHCPRange and switches to shared.IPRange
- lxd/network: Replaces dhcpalloc.DHCPRange with shared.IPRange
- lxd/storage: Fix delete of remote pools
- lxd/storage/ceph: Allow for small size variation
試用環境 ¶
この新しい LXD リリースは私たちの デモサービス で利用できます。
ダウンロード ¶
このリリースの tarball は ダウンロードページ から取得できます。
ビルド済みバイナリーは次のように使えます:
- Linux: snap install lxd
- MacOS: brew install lxc
- Windows: choco install lxc
Contents