{"id":175160,"date":"2025-06-29T13:43:29","date_gmt":"2025-06-29T13:43:29","guid":{"rendered":"https:\/\/linuxiac.com\/?p=175160"},"modified":"2025-06-29T21:39:15","modified_gmt":"2025-06-29T21:39:15","slug":"incus-6-14-container-and-virtual-machine-manager-released","status":"publish","type":"post","link":"https:\/\/linuxiac.com\/incus-6-14-container-and-virtual-machine-manager-released\/","title":{"rendered":"Incus 6.14 Container &amp; Virtual Machine Manager Released"},"content":{"rendered":"\n<p>The Incus team has just announced the release of version 6.14 of its container &amp; virtual machine manager, describing it as a \u201clighter\u201d monthly release that nonetheless delivers a pair of important security fixes alongside several quality-of-life improvements.<\/p>\n\n\n\n<p>Two security vulnerabilities, <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-52890\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2025-52890<\/a> and <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-52889\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2025-52889<\/a>, have been resolved. Both issues stemmed from network ACLs on bridge networks using nftables, where isolation bypasses could allow a compromised instance to either launch denial-of-service attacks or intercept traffic from other instances on the same network.<\/p>\n\n\n\n<p>Affected versions (<a href=\"https:\/\/linuxiac.com\/incus-6-12-container-and-virtual-machine-manager-released\/\" data-type=\"post\" data-id=\"166528\">Incus 6.12<\/a> and <a href=\"https:\/\/linuxiac.com\/incus-6-13-container-and-virtual-machine-manager-released\/\" data-type=\"post\" data-id=\"170877\">6.13<\/a>) are now unsupported, so users are strongly encouraged to upgrade. Notably, the latest LTS release remains unaffected.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui.jpg\"><img decoding=\"async\" width=\"1024\" height=\"554\" src=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui-1024x554.jpg\" alt=\"Incus 6.14 Web Management UI\" class=\"wp-image-175220\" srcset=\"https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui-1024x554.jpg 1024w, https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui-380x206.jpg 380w, https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui-768x416.jpg 768w, https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui-1536x832.jpg 1536w, https:\/\/linuxiac.com\/wp-content\/uploads\/2025\/06\/incus614-web-ui.jpg 1904w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption class=\"wp-element-caption\">Incus 6.14 Web Management UI<\/figcaption><\/figure>\n\n\n\n<p>A new standout addition is automated S3 bucket uploads and volume backups. Available only via API, this feature lets backup systems push snapshots directly to cloud storage\u2014handy for off-site redundancy. After generating a local backup, Incus uploads it to the specified bucket and cleans up the temporary file.<\/p>\n\n\n\n<p>Moreover, snapshots now support an <code>--expiry<\/code> flag at creation, letting users override default retention periods on the fly. Additionally, admins can now set different defaults for manual vs. automated snapshots using <code>snapshots.expiry.manual<\/code>. If unset, the system falls back to the general <code>snapshots.expiry<\/code> setting.<\/p>\n\n\n\n<p>Lastly, Incus 6.14 brings some noteworthy under-the-hood improvements:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Live Migration Tweaks<\/strong>: VM migrations now throttle the CPU more aggressively when memory changes are frequent, reducing transfer time. Progress reporting has also been added for better visibility.<\/li>\n\n\n\n<li><strong>CPU Address Size Reporting<\/strong>: The resources API now exposes physical and virtual address sizes, helping optimize VM memory allocation and hotplugging.<\/li>\n\n\n\n<li><strong>Database Code Refactoring<\/strong>: Network forwards and peers have been migrated to Incus\u2019s code-generated database logic, improving maintainability.<\/li>\n<\/ul>\n\n\n\n<p>For more information about the Incus 6.14 container and virtual machine manager changes, visit the <a href=\"https:\/\/discuss.linuxcontainers.org\/t\/incus-6-14-has-been-released\/24092\" target=\"_blank\" rel=\"noreferrer noopener\">release announcement<\/a> or check out the <a href=\"https:\/\/github.com\/lxc\/incus\/releases\/tag\/v6.13.0\" target=\"_blank\" rel=\"noreferrer noopener\">f<\/a><a href=\"https:\/\/github.com\/lxc\/incus\/releases\/tag\/v6.14.0\" target=\"_blank\" rel=\"noreferrer noopener\">ull changelog<\/a>.<\/p>\n\n\n\n<p>Users are encouraged to try out these new features by visiting the <a href=\"https:\/\/linuxcontainers.org\/incus\/try-it\/\" target=\"_blank\" rel=\"noreferrer noopener\">Incus online platform<\/a>, which provides a hands-on experience with the latest version.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Incus 6.14 is out now, bringing security fixes, performance boosts, and new features like S3 backup uploads and customizable snapshot expiry.<\/p>\n","protected":false},"author":10,"featured_media":175163,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,5],"tags":[3470,5396,1440],"class_list":["post-175160","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","category-news","tag-containers","tag-incus","tag-virtualization"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/175160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/comments?post=175160"}],"version-history":[{"count":0,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/175160\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media\/175163"}],"wp:attachment":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media?parent=175160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/categories?post=175160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/tags?post=175160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}