This is the 3rd LTS release for LXD and a very busy and exciting one!
The changelog below is split so that both users of LXD 3.23 and LXD 3.0 can see what we have in store for them.
As with all our other LTS releases, this one will be supported for 5 years (June 2025) and will receive a number of bugfix and security point releases over that time.
As for LXD 3.0, we’re hoping to release one last bugfix release as 3.0.5 in the near future before we enter security-only maintenance mode for its remaining 3 years.
Our only CLI breaking changes with this release is the replacement of --container-only by --instance-only. Those following the feature releases will have had both supported for a few months now. With the 4.0 release, we’re removing the deprecated ones.
It is now possible to use lxc export and lxc import with virtual machines.
A word of caution however. Virtual machines, unlike containers are only accessible as a large block device. This means that several GB of data will need to be read and compressed, no matter how much is actually used inside the VM.
This can lead to long export times and similarly long import times.
Doing so with --optimized on a backend like ZFS should considerably reduce the export time, assuming the backup is to be imported on a storage pool of the same type.
The resources API (/1.0/resources) has been extended with a list of all PCI and USB devices on the system. This is of particular use when dealing with VFIO passthrough to virtual machines or passing through USB devices to containers.
stgraber@castiana:~$ lxc query /1.0/resources | jq .pci
{
"devices": [
{
"driver": "skl_uncore",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:00.0",
"product": "Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers",
"product_id": "5904",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "i915",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:02.0",
"product": "HD Graphics 620",
"product_id": "5916",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "",
"driver_version": "",
"numa_node": 0,
"pci_address": "0000:00:08.0",
"product": "Xeon E3-1200 v5/v6 / E3-1500 v5 / 6th/7th/8th Gen Core Processor Gaussian Mixture Model",
"product_id": "1911",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "xhci_hcd",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:14.0",
"product": "Sunrise Point-LP USB 3.0 xHCI Controller",
"product_id": "9d2f",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "intel_pch_thermal",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:14.2",
"product": "Sunrise Point-LP Thermal subsystem",
"product_id": "9d31",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "mei_me",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:16.0",
"product": "Sunrise Point-LP CSME HECI #1",
"product_id": "9d3a",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1c.0",
"product": "Sunrise Point-LP PCI Express Root Port #1",
"product_id": "9d10",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1c.2",
"product": "Sunrise Point-LP PCI Express Root Port #3",
"product_id": "9d12",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1c.4",
"product": "Sunrise Point-LP PCI Express Root Port #5",
"product_id": "9d14",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1d.0",
"product": "Sunrise Point-LP PCI Express Root Port #9",
"product_id": "9d18",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "",
"driver_version": "",
"numa_node": 0,
"pci_address": "0000:00:1f.0",
"product": "Sunrise Point LPC Controller/eSPI Controller",
"product_id": "9d4e",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "",
"driver_version": "",
"numa_node": 0,
"pci_address": "0000:00:1f.2",
"product": "Sunrise Point-LP PMC",
"product_id": "9d21",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "snd_hda_intel",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1f.3",
"product": "Sunrise Point-LP HD Audio",
"product_id": "9d71",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "i801_smbus",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:00:1f.4",
"product": "Sunrise Point-LP SMBus",
"product_id": "9d23",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "e1000e",
"driver_version": "3.2.6-k",
"numa_node": 0,
"pci_address": "0000:00:1f.6",
"product": "Ethernet Connection (4) I219-LM",
"product_id": "15d7",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "rtsx_pci",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:02:00.0",
"product": "RTS525A PCI Express Card Reader",
"product_id": "525a",
"vendor": "Realtek Semiconductor Co., Ltd.",
"vendor_id": "10ec"
},
{
"driver": "iwlwifi",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:04:00.0",
"product": "Wireless 8265 / 8275",
"product_id": "24fd",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "nvme",
"driver_version": "1.0",
"numa_node": 0,
"pci_address": "0000:05:00.0",
"product": "SSD 600P Series",
"product_id": "f1a5",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:06:00.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:07:00.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:07:01.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:07:02.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:07:04.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "thunderbolt",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:08:00.0",
"product": "JHL6540 Thunderbolt 3 NHI (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d2",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:09:00.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:0a:00.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:0a:01.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:0a:02.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "pcieport",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:0a:04.0",
"product": "JHL6540 Thunderbolt 3 Bridge (C step) [Alpine Ridge 4C 2016]",
"product_id": "15d3",
"vendor": "Intel Corporation",
"vendor_id": "8086"
},
{
"driver": "ahci",
"driver_version": "3.0",
"numa_node": 0,
"pci_address": "0000:0b:00.0",
"product": "",
"product_id": "0622",
"vendor": "ASMedia Technology Inc.",
"vendor_id": "1b21"
},
{
"driver": "xhci_hcd",
"driver_version": "5.4.0-18-generic",
"numa_node": 0,
"pci_address": "0000:0c:00.0",
"product": "FL1100 USB 3.0 Host Controller",
"product_id": "1100",
"vendor": "Fresco Logic",
"vendor_id": "1b73"
},
{
"driver": "atlantic",
"driver_version": "5.4.0-18-generic-kern",
"numa_node": 0,
"pci_address": "0000:0d:00.0",
"product": "AQC107 NBase-T/IEEE 802.3bz Ethernet Controller [AQtion]",
"product_id": "87b1",
"vendor": "Aquantia Corp.",
"vendor_id": "1d6a"
}
],
"total": 32
}
stgraber@castiana:~$ lxc query /1.0/resources | jq .usb
{
"devices": [
{
"bus_address": 1,
"device_address": 4,
"interfaces": [
{
"class": "Wireless",
"class_id": 224,
"driver": "btusb",
"driver_version": "0.8",
"number": 0,
"subclass": "Radio Frequency",
"subclass_id": 1
},
{
"class": "Wireless",
"class_id": 224,
"driver": "btusb",
"driver_version": "0.8",
"number": 1,
"subclass": "Radio Frequency",
"subclass_id": 1
}
],
"product": "",
"product_id": "0a2b",
"speed": 12,
"vendor": "Intel Corp.",
"vendor_id": "8087"
},
{
"bus_address": 1,
"device_address": 3,
"interfaces": [
{
"class": "Video",
"class_id": 14,
"driver": "uvcvideo",
"driver_version": "1.1.1",
"number": 0,
"subclass": "Video Control",
"subclass_id": 1
},
{
"class": "Video",
"class_id": 14,
"driver": "uvcvideo",
"driver_version": "1.1.1",
"number": 1,
"subclass": "Video Streaming",
"subclass_id": 2
}
],
"product": "Integrated Camera",
"product_id": "b5ce",
"speed": 480,
"vendor": "Chicony Electronics Co., Ltd",
"vendor_id": "04f2"
},
{
"bus_address": 3,
"device_address": 2,
"interfaces": [
{
"class": "Audio",
"class_id": 1,
"driver": "snd-usb-audio",
"driver_version": "5.4.0-18-generic",
"number": 0,
"subclass": "Control Device",
"subclass_id": 1
},
{
"class": "Audio",
"class_id": 1,
"driver": "snd-usb-audio",
"driver_version": "5.4.0-18-generic",
"number": 1,
"subclass": "Streaming",
"subclass_id": 2
},
{
"class": "Audio",
"class_id": 1,
"driver": "snd-usb-audio",
"driver_version": "5.4.0-18-generic",
"number": 2,
"subclass": "Streaming",
"subclass_id": 2
},
{
"class": "Human Interface Device",
"class_id": 3,
"driver": "usbhid",
"driver_version": "5.4.0-18-generic",
"number": 3,
"subclass": "",
"subclass_id": 0
}
],
"product": "TX42C500",
"product_id": "4933",
"speed": 12,
"vendor": "Realtek Semiconductor Corp.",
"vendor_id": "0bda"
},
{
"bus_address": 3,
"device_address": 13,
"interfaces": [
{
"class": "Video",
"class_id": 14,
"driver": "uvcvideo",
"driver_version": "1.1.1",
"number": 0,
"subclass": "Video Control",
"subclass_id": 1
},
{
"class": "Video",
"class_id": 14,
"driver": "uvcvideo",
"driver_version": "1.1.1",
"number": 1,
"subclass": "Video Streaming",
"subclass_id": 2
},
{
"class": "Audio",
"class_id": 1,
"driver": "snd-usb-audio",
"driver_version": "5.4.0-18-generic",
"number": 2,
"subclass": "Control Device",
"subclass_id": 1
},
{
"class": "Audio",
"class_id": 1,
"driver": "snd-usb-audio",
"driver_version": "5.4.0-18-generic",
"number": 3,
"subclass": "Streaming",
"subclass_id": 2
}
],
"product": "HD Pro Webcam C920",
"product_id": "082d",
"speed": 480,
"vendor": "Logitech, Inc.",
"vendor_id": "046d"
},
{
"bus_address": 3,
"device_address": 16,
"interfaces": [
{
"class": "Human Interface Device",
"class_id": 3,
"driver": "usbhid",
"driver_version": "5.4.0-18-generic",
"number": 0,
"subclass": "",
"subclass_id": 0
},
{
"class": "Chip/SmartCard",
"class_id": 11,
"driver": "usbfs",
"driver_version": "5.4.0-18-generic",
"number": 1,
"subclass": "",
"subclass_id": 0
}
],
"product": "YubiKey FIDO+CCID",
"product_id": "0406",
"speed": 12,
"vendor": "Yubico.com",
"vendor_id": "1050"
},
{
"bus_address": 3,
"device_address": 17,
"interfaces": [
{
"class": "Human Interface Device",
"class_id": 3,
"driver": "usbhid",
"driver_version": "5.4.0-18-generic",
"number": 0,
"subclass": "Boot Interface Subclass",
"subclass_id": 1
},
{
"class": "Human Interface Device",
"class_id": 3,
"driver": "usbhid",
"driver_version": "5.4.0-18-generic",
"number": 1,
"subclass": "Boot Interface Subclass",
"subclass_id": 1
}
],
"product": "ThinkPad Compact USB Keyboard with TrackPoint",
"product_id": "6047",
"speed": 12,
"vendor": "Lenovo",
"vendor_id": "17ef"
}
],
"total": 6
}
Multiple ipvlan devices can now be added to the same container provided that one of them has ipv4.gateway and/or ipv6.gateway set to none.
The host side address on routed nics can now be configured through the ipv4.host_address and ipv6.host_address properties.
A new lxc cluster edit command allows for editing clustering roles.
It’s worth noting that there currently are no writable roles, but we expect to be adding some in the near future which will then be manageable through this API and command.
Containers with custom storage volumes attached to them will now report those volume’s usage in the state API (and through lxc info):
The API now exposes the size of each individual snapshots.
This will soon be displayed in lxc info once it’s gone through a redesign.
For those using LXD with a managed PKI, it is now possible to configure LXD to automatically trust any client certificate signed by the CA.
This is done with core.trust_ca_certificates.
To handle revocation, LXD also now accepts a CRL which should be placed alongside server.ca as server.crl.
In addition to the features and changes listed above, those who were using the LXD 3.0 LTS branch have the following “new” features to look forward to:
LXD can now run both containers and virtual machines.
The experience and configuration works in much the same way though some device types and configuration options aren’t available for virtual machines yet.
Some operations are performed through an agent running in the virtual machine (lxc exec and lxc file). The agent comes pre-installed in the majority of our images.
To create a virtual machine rather than a container, simply pass --vm to lxc launch
VM images are now available for most commonly used Linux distributions with plans to add more in the future.
Projects are a way to segment your LXD server.
Each project can contain its own set of instances, images, profiles and storage volumes.
Those various features can be enabled/disabled on a per-project basis. If disable, the project inherit from the default project.
On top of this, there is support for both restrictions (disabling particular device types, privileged containers, …) and limits (limiting the amount of CPU, memory and instance count).