Your IP : 216.73.216.189

Current Path : /snap/lxd/current/share/lxd-documentation/reference/release-notes/release-notes-6.8/
Upload File :
Current File : //snap/lxd/current/share/lxd-documentation/reference/release-notes/release-notes-6.8/index.html

<!doctype html>
<html class="no-js" lang="en" data-content_root="../../../">
  <head><meta charset="utf-8">
    <meta name="viewport" content="width=device-width,initial-scale=1">
    <meta name="color-scheme" content="light dark"><meta name="viewport" content="width=device-width, initial-scale=1" />
<meta content="Release notes for LXD 6.8, including highlights about new features, bugfixes, and other updates from the LXD project." name="description" />
<meta property="og:title" content="LXD 6.8 release notes" />
<meta property="og:type" content="website" />
<meta property="og:url" content="/reference/release-notes/release-notes-6.8/" />
<meta property="og:site_name" content="LXD documentation 6.8" />
<meta property="og:description" content="This is a feature release and is not recommended for production use. Highlights: This section highlights new and improved features in this release. Cluster control-plane role: A new control-plane c..." />
<meta property="og:image" content="https://documentation.ubuntu.com/lxd/latest/_static/lxd_tag.png" />
<meta property="og:image:alt" content="LXD documentation 6.8" />

    <meta property="article:modified_time" content="2026-04-22T15:32:28+00:00" /><link rel="index" title="Index" href="../../../genindex/"><link rel="search" title="Search" href="../../../search/"><link rel="next" title="LXD 6.7 release notes" href="../release-notes-6.7/"><link rel="prev" title="Release notes" href="../">
        <link rel="canonical" href="/reference/release-notes/release-notes-6.8/">

    <link rel="shortcut icon" href="../../../_static/favicon.ico"><!-- Generated with Sphinx 7.4.7 and Furo 2025.12.19 -->
        <title>LXD 6.8 release notes - LXD documentation 6.8</title>
      <link rel="stylesheet" type="text/css" href="../../../_static/pygments.css?v=d111a655" />
    <link rel="stylesheet" type="text/css" href="../../../_static/styles/furo.css?v=7bdb33bb" />
    <link rel="stylesheet" type="text/css" href="../../../_static/copybutton.css?v=76b2166b" />
    <link rel="stylesheet" type="text/css" href="../../../_static/config-options.css" />
    <link rel="stylesheet" type="text/css" href="../../../_static/related-links.css" />
    <link rel="stylesheet" type="text/css" href="../../../_static/terminal.css" />
    <link rel="stylesheet" type="text/css" href="../../../_static/youtube.css" />
    <link rel="stylesheet" type="text/css" href="../../../_static/sphinx-design.min.css?v=95c83b7e" />
    <link rel="stylesheet" type="text/css" href="../../../_static/styles/furo-extensions.css?v=8dab3a3b" />
    <link rel="stylesheet" type="text/css" href="../../../_static/lxd_custom.css?v=bfbf4da2" />
    <link rel="stylesheet" type="text/css" href="https://assets.ubuntu.com/v1/d86746ef-cookie_banner.css" />
    <link rel="stylesheet" type="text/css" href="../../../_static/custom.css?v=e189117a" />
    <link rel="stylesheet" type="text/css" href="../../../_static/header.css?v=a8078839" />
    <link rel="stylesheet" type="text/css" href="../../../_static/github_issue_links.css?v=3d761185" />
    <link rel="stylesheet" type="text/css" href="../../../_static/furo_colors.css?v=825fec6f" />
    
    


<style>
  body {
    --color-code-background: #f2f2f2;
  --color-code-foreground: #1e1e1e;
  
  }
  @media not print {
    body[data-theme="dark"] {
      --color-code-background: #202020;
  --color-code-foreground: #d0d0d0;
  
    }
    @media (prefers-color-scheme: dark) {
      body:not([data-theme="light"]) {
        --color-code-background: #202020;
  --color-code-foreground: #d0d0d0;
  
      }
    }
  }
</style>
  
  
</head>
  <body>
    <header id="header" class="p-navigation">
  <!-- Google Tag Manager -->
  <script>
    (function(w, d, s, l, i) {
      w[l] = w[l] || [];
      w[l].push({
        'gtm.start': new Date().getTime(),
        event: 'gtm.js'
      });
      var f = d.getElementsByTagName(s)[0];
      var j = d.createElement(s);
      var dl = '';
      if (l != 'dataLayer') {
          dl = '&l=' + l;
      }
      j.async = true;
      j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl;
      f.parentNode.insertBefore(j, f);
    })(window, document, 'script', 'dataLayer', 'GTM-KNX3CJC');
  </script>
  
  <div class="p-navigation__nav" role="menubar">

    <ul class="p-navigation__links" role="menu">

      <li>
        
        <a class="p-logo" href="https://canonical.com/lxd" aria-current="page">
          <img src="../../../_static/lxd_tag.png" alt="Logo" class="p-logo-image">
          <div class="p-logo-text p-heading--4">LXD
          </div>
        </a>
        
      </li>

      <li class="nav-ubuntu-com">
        
        <a href="https://canonical.com/lxd" class="p-navigation__link">canonical.com/lxd</a>
        
      </li>

      <li class="nav-dropdown">
        <a href="#" class="p-navigation__link nav-more-links"
           id="more-resources-toggle"
           aria-haspopup="true"
           aria-expanded="false">
          More resources
        </a>
        <ul class="more-links-dropdown" aria-labelledby="more-resources-toggle">
          
          <li>
            <a href="https://discourse.ubuntu.com/c/lxd/" class="p-navigation__sub-link p-dropdown__link">Discourse</a>
          </li>
          
      
          
      
          
          <li>
            <a href="https://matrix.to/#/#documentation:ubuntu.com" class="p-navigation__sub-link p-dropdown__link">Matrix</a>
          </li>
          
      
          
          <li>
            <a href="https://github.com/canonical/lxd" class="p-navigation__sub-link p-dropdown__link">GitHub</a>
          </li>
          

        </ul>
      </li>

    </ul>
  </div>
</header>
   
    <script>
      document.body.dataset.theme = localStorage.getItem("theme") || "auto";
    </script>
    

<svg xmlns="http://www.w3.org/2000/svg" style="display: none;">
  <symbol id="svg-toc" viewBox="0 0 24 24">
    <title>Contents</title>
    <svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 1024 1024">
      <path d="M408 442h480c4.4 0 8-3.6 8-8v-56c0-4.4-3.6-8-8-8H408c-4.4 0-8 3.6-8 8v56c0 4.4 3.6 8 8 8zm-8 204c0 4.4 3.6 8 8 8h480c4.4 0 8-3.6 8-8v-56c0-4.4-3.6-8-8-8H408c-4.4 0-8 3.6-8 8v56zm504-486H120c-4.4 0-8 3.6-8 8v56c0 4.4 3.6 8 8 8h784c4.4 0 8-3.6 8-8v-56c0-4.4-3.6-8-8-8zm0 632H120c-4.4 0-8 3.6-8 8v56c0 4.4 3.6 8 8 8h784c4.4 0 8-3.6 8-8v-56c0-4.4-3.6-8-8-8zM115.4 518.9L271.7 642c5.8 4.6 14.4.5 14.4-6.9V388.9c0-7.4-8.5-11.5-14.4-6.9L115.4 505.1a8.74 8.74 0 0 0 0 13.8z"/>
    </svg>
  </symbol>
  <symbol id="svg-menu" viewBox="0 0 24 24">
    <title>Menu</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather-menu">
      <line x1="3" y1="12" x2="21" y2="12"></line>
      <line x1="3" y1="6" x2="21" y2="6"></line>
      <line x1="3" y1="18" x2="21" y2="18"></line>
    </svg>
  </symbol>
  <symbol id="svg-arrow-right" viewBox="0 0 24 24">
    <title>Expand</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather-chevron-right">
      <polyline points="9 18 15 12 9 6"></polyline>
    </svg>
  </symbol>
  <symbol id="svg-sun" viewBox="0 0 24 24">
    <title>Light mode</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round" class="feather-sun">
      <circle cx="12" cy="12" r="5"></circle>
      <line x1="12" y1="1" x2="12" y2="3"></line>
      <line x1="12" y1="21" x2="12" y2="23"></line>
      <line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line>
      <line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line>
      <line x1="1" y1="12" x2="3" y2="12"></line>
      <line x1="21" y1="12" x2="23" y2="12"></line>
      <line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line>
      <line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line>
    </svg>
  </symbol>
  <symbol id="svg-moon" viewBox="0 0 24 24">
    <title>Dark mode</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round" class="icon-tabler-moon">
      <path stroke="none" d="M0 0h24v24H0z" fill="none" />
      <path d="M12 3c.132 0 .263 0 .393 0a7.5 7.5 0 0 0 7.92 12.446a9 9 0 1 1 -8.313 -12.454z" />
    </svg>
  </symbol>
  <symbol id="svg-sun-with-moon" viewBox="0 0 24 24">
    <title>Auto light/dark, in light mode</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round"
      class="icon-custom-derived-from-feather-sun-and-tabler-moon">
      <path style="opacity: 50%" d="M 5.411 14.504 C 5.471 14.504 5.532 14.504 5.591 14.504 C 3.639 16.319 4.383 19.569 6.931 20.352 C 7.693 20.586 8.512 20.551 9.25 20.252 C 8.023 23.207 4.056 23.725 2.11 21.184 C 0.166 18.642 1.702 14.949 4.874 14.536 C 5.051 14.512 5.231 14.5 5.411 14.5 L 5.411 14.504 Z"/>
      <line x1="14.5" y1="3.25" x2="14.5" y2="1.25"/>
      <line x1="14.5" y1="15.85" x2="14.5" y2="17.85"/>
      <line x1="10.044" y1="5.094" x2="8.63" y2="3.68"/>
      <line x1="19" y1="14.05" x2="20.414" y2="15.464"/>
      <line x1="8.2" y1="9.55" x2="6.2" y2="9.55"/>
      <line x1="20.8" y1="9.55" x2="22.8" y2="9.55"/>
      <line x1="10.044" y1="14.006" x2="8.63" y2="15.42"/>
      <line x1="19" y1="5.05" x2="20.414" y2="3.636"/>
      <circle cx="14.5" cy="9.55" r="3.6"/>
    </svg>
  </symbol>
  <symbol id="svg-moon-with-sun" viewBox="0 0 24 24">
    <title>Auto light/dark, in dark mode</title>
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round"
      class="icon-custom-derived-from-feather-sun-and-tabler-moon">
      <path d="M 8.282 7.007 C 8.385 7.007 8.494 7.007 8.595 7.007 C 5.18 10.184 6.481 15.869 10.942 17.24 C 12.275 17.648 13.706 17.589 15 17.066 C 12.851 22.236 5.91 23.143 2.505 18.696 C -0.897 14.249 1.791 7.786 7.342 7.063 C 7.652 7.021 7.965 7 8.282 7 L 8.282 7.007 Z"/>
      <line style="opacity: 50%" x1="18" y1="3.705" x2="18" y2="2.5"/>
      <line style="opacity: 50%" x1="18" y1="11.295" x2="18" y2="12.5"/>
      <line style="opacity: 50%" x1="15.316" y1="4.816" x2="14.464" y2="3.964"/>
      <line style="opacity: 50%" x1="20.711" y1="10.212" x2="21.563" y2="11.063"/>
      <line style="opacity: 50%" x1="14.205" y1="7.5" x2="13.001" y2="7.5"/>
      <line style="opacity: 50%" x1="21.795" y1="7.5" x2="23" y2="7.5"/>
      <line style="opacity: 50%" x1="15.316" y1="10.184" x2="14.464" y2="11.036"/>
      <line style="opacity: 50%" x1="20.711" y1="4.789" x2="21.563" y2="3.937"/>
      <circle style="opacity: 50%" cx="18" cy="7.5" r="2.169"/>
    </svg>
  </symbol>
  <symbol id="svg-pencil" viewBox="0 0 24 24">
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round" class="icon-tabler-pencil-code">
      <path d="M4 20h4l10.5 -10.5a2.828 2.828 0 1 0 -4 -4l-10.5 10.5v4" />
      <path d="M13.5 6.5l4 4" />
      <path d="M20 21l2 -2l-2 -2" />
      <path d="M17 17l-2 2l2 2" />
    </svg>
  </symbol>
  <symbol id="svg-eye" viewBox="0 0 24 24">
    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor"
      stroke-width="1" stroke-linecap="round" stroke-linejoin="round" class="icon-tabler-eye-code">
      <path stroke="none" d="M0 0h24v24H0z" fill="none" />
      <path d="M10 12a2 2 0 1 0 4 0a2 2 0 0 0 -4 0" />
      <path
        d="M11.11 17.958c-3.209 -.307 -5.91 -2.293 -8.11 -5.958c2.4 -4 5.4 -6 9 -6c3.6 0 6.6 2 9 6c-.21 .352 -.427 .688 -.647 1.008" />
      <path d="M20 21l2 -2l-2 -2" />
      <path d="M17 17l-2 2l2 2" />
    </svg>
  </symbol>
</svg>

<input type="checkbox" class="sidebar-toggle" name="__navigation" id="__navigation" aria-label="Toggle site navigation sidebar">
<input type="checkbox" class="sidebar-toggle" name="__toc" id="__toc" aria-label="Toggle table of contents sidebar">
<label class="overlay sidebar-overlay" for="__navigation"></label>
<label class="overlay toc-overlay" for="__toc"></label>

<a class="skip-to-content muted-link" href="#furo-main-content">Skip to content</a>



<div class="page">
  <header class="mobile-header">
    <div class="header-left">
      <label class="nav-overlay-icon" for="__navigation">
        <span class="icon"><svg><use href="#svg-menu"></use></svg></span>
      </label>
    </div>
    <div class="header-center">
      <a href="../../../"><div class="brand">LXD documentation 6.8</div></a>
    </div>
    <div class="header-right">
      <div class="theme-toggle-container theme-toggle-header">
        <button class="theme-toggle" aria-label="Toggle Light / Dark / Auto color theme">
          <svg class="theme-icon-when-auto-light"><use href="#svg-sun-with-moon"></use></svg>
          <svg class="theme-icon-when-auto-dark"><use href="#svg-moon-with-sun"></use></svg>
          <svg class="theme-icon-when-dark"><use href="#svg-moon"></use></svg>
          <svg class="theme-icon-when-light"><use href="#svg-sun"></use></svg>
        </button>
      </div>
      <label class="toc-overlay-icon toc-header-icon" for="__toc">
        <span class="icon"><svg><use href="#svg-toc"></use></svg></span>
      </label>
    </div>
  </header>
  <aside class="sidebar-drawer">
    <div class="sidebar-container">
      
      <div class="sidebar-sticky"><a class="sidebar-brand" href="../../../">
  
  <span class="sidebar-brand-text">LXD documentation 6.8</span>
  
</a><form class="sidebar-search-container" method="get" action="../../../search/" role="search">
    <input class="sidebar-search" placeholder="Search" name="q" aria-label="Search">
    <input type="submit" value="Go">
    <input type="hidden" name="check_keywords" value="yes">
    <input type="hidden" name="area" value="default">
  </form>
  <div id="searchbox"></div><div class="sidebar-scroll"><div class="sidebar-tree">
  <ul class="current">
<li class="toctree-l1"><a class="reference internal" href="../../../">LXD</a></li>
<li class="toctree-l1"><a class="reference internal" href="../../../tutorial/first_steps/">Tutorial</a></li>
<li class="toctree-l1 has-children"><a class="reference internal" href="../../../howto/">How-to guides</a><input aria-label="Toggle navigation of How-to guides" class="toctree-checkbox" id="toctree-checkbox-1" name="toctree-checkbox-1" role="switch" type="checkbox"/><label for="toctree-checkbox-1"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../getting_started/">Getting started</a><input aria-label="Toggle navigation of Getting started" class="toctree-checkbox" id="toctree-checkbox-2" name="toctree-checkbox-2" role="switch" type="checkbox"/><label for="toctree-checkbox-2"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../installing/">Install LXD</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/initialize/">Initialize LXD</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/access_ui/">Access the UI</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/access_documentation/">Access documentation locally</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../operation/">LXD server and client</a><input aria-label="Toggle navigation of LXD server and client" class="toctree-checkbox" id="toctree-checkbox-3" name="toctree-checkbox-3" role="switch" type="checkbox"/><label for="toctree-checkbox-3"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/server_configure/">Configure the LXD server</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/server_expose/">Expose LXD to the network</a></li>
<li class="toctree-l3 has-children"><a class="reference internal" href="../../../howto/oidc/">Configure single sign-on with OIDC</a><input aria-label="Toggle navigation of Configure single sign-on with OIDC" class="toctree-checkbox" id="toctree-checkbox-4" name="toctree-checkbox-4" role="switch" type="checkbox"/><label for="toctree-checkbox-4"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l4"><a class="reference internal" href="../../../howto/oidc_auth0/">Configure Auth0</a></li>
<li class="toctree-l4"><a class="reference internal" href="../../../howto/oidc_ory/">Configure Ory Hydra</a></li>
<li class="toctree-l4"><a class="reference internal" href="../../../howto/oidc_keycloak/">Configure Keycloak</a></li>
<li class="toctree-l4"><a class="reference internal" href="../../../howto/oidc_entra_id/">Configure Entra ID</a></li>
<li class="toctree-l4"><a class="reference internal" href="../../../howto/oidc_pocket_id/">Configure Pocket ID</a></li>
</ul>
</li>
<li class="toctree-l3"><a class="reference internal" href="../../../remotes/">Add remote servers</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/lxc_alias/">Add command aliases</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../instances/">Instances</a><input aria-label="Toggle navigation of Instances" class="toctree-checkbox" id="toctree-checkbox-5" name="toctree-checkbox-5" role="switch" type="checkbox"/><label for="toctree-checkbox-5"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_create/">Create instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_configure/">Configure instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_manage/">Manage instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../profiles/">Use profiles</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_troubleshoot/">Troubleshoot errors</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_ubuntu_pro_attach/">Auto attach Ubuntu Pro</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_access_files/">Access files</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_console/">Access the console</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../instance-exec/">Run commands</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../cloud-init/">Use cloud-init</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_routed_nic_vm/">Add a routed NIC to a VM</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_backup/">Back up instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/import_machines_to_instances/">Import existing machines</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_migrate/">Migrate instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/container_gpu_passthrough_with_docker/">Pass NVIDIA GPUs</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../images/">Images</a><input aria-label="Toggle navigation of Images" class="toctree-checkbox" id="toctree-checkbox-6" name="toctree-checkbox-6" role="switch" type="checkbox"/><label for="toctree-checkbox-6"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/images_remote/">Use remote images</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/images_manage/">Manage images</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/images_profiles/">Associate profiles</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/images_copy/">Copy and import images</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/images_create/">Create images</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../projects/">Projects</a><input aria-label="Toggle navigation of Projects" class="toctree-checkbox" id="toctree-checkbox-7" name="toctree-checkbox-7" role="switch" type="checkbox"/><label for="toctree-checkbox-7"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/projects_create/">Create and configure projects</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/projects_work/">Work with projects</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/projects_confine/">Confine users to projects</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../storage/">Storage</a><input aria-label="Toggle navigation of Storage" class="toctree-checkbox" id="toctree-checkbox-8" name="toctree-checkbox-8" role="switch" type="checkbox"/><label for="toctree-checkbox-8"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_pools/">Manage pools</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_volumes/">Manage volumes</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_buckets/">Manage buckets</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_create_instance/">Create or move an instance in a pool</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_backup_volume/">Back up a custom volume</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_move_volume/">Move or copy a custom volume</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/storage_csi/">Use the LXD CSI driver with Kubernetes</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../networks/">Networking</a><input aria-label="Toggle navigation of Networking" class="toctree-checkbox" id="toctree-checkbox-9" name="toctree-checkbox-9" role="switch" type="checkbox"/><label for="toctree-checkbox-9"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_create/">Create a network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_configure/">Configure a network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_bgp/">Configure as BGP server</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_acls/">Configure network ACLs</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_forwards/">Configure forwards</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_zones/">Configure network zones</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_bridge_firewalld/">Configure your firewall</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_bridge_resolved/">Integrate with resolved</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_ovn_setup/">Set up OVN</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_load_balancers/">Configure load balancers</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_ovn_peers/">Configure peer routing</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_ipam/">Display IPAM information</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../clustering/">Clustering</a><input aria-label="Toggle navigation of Clustering" class="toctree-checkbox" id="toctree-checkbox-10" name="toctree-checkbox-10" role="switch" type="checkbox"/><label for="toctree-checkbox-10"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_form/">Form a cluster</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_manage/">Manage a cluster</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_config_networks/">Configure networks</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_config_storage/">Configure storage</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_manage_instance/">Manage instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_groups/">Set up cluster groups</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_placement_groups/">Use placement groups</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_recover/">Recover a cluster</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_recover_volumes/">Recover orphaned volume entries</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_vip/">Set up a highly available virtual IP</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_links_create/">Create cluster links</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/cluster_links_manage/">Manage cluster links</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/replicators_create/">Set up replicators</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/replicators_manage/">Manage replicators</a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../production-setup/">Production setup</a><input aria-label="Toggle navigation of Production setup" class="toctree-checkbox" id="toctree-checkbox-11" name="toctree-checkbox-11" role="switch" type="checkbox"/><label for="toctree-checkbox-11"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/benchmark_performance/">Benchmark performance</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_increase_bandwidth/">Increase bandwidth</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../metrics/">Monitor metrics</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/logs_loki/">Send logs to Loki</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/grafana/">Set up Grafana</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../backup/">Back up a server</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/disaster_recovery/">Recover instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/disaster_recovery_replication/">Disaster recovery with storage replication</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/replicators_dr/">Disaster recovery with replicators</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../../howto/snap/">Manage the snap</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../howto/security_harden/">Harden security</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../howto/troubleshoot/">Troubleshooting</a><input aria-label="Toggle navigation of Troubleshooting" class="toctree-checkbox" id="toctree-checkbox-12" name="toctree-checkbox-12" role="switch" type="checkbox"/><label for="toctree-checkbox-12"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_bridge_firewalld/">Configure your firewall</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/instances_troubleshoot/">Troubleshoot instances</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/network_ipam/">Troubleshoot networks</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../howto/dqlite_troubleshoot/">Troubleshoot Dqlite</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../faq/">Frequently asked</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../debugging/">Debug LXD</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../../howto/auth_bearer/">Authenticate to the LXD API using bearer tokens</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../howto/devlxd_authenticate/">Authenticate to the DevLXD API</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../support/">Get support</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../contributing/">Contribute to LXD</a></li>
</ul>
</li>
<li class="toctree-l1 has-children"><a class="reference internal" href="../../../explanation/">Explanation</a><input aria-label="Toggle navigation of Explanation" class="toctree-checkbox" id="toctree-checkbox-13" name="toctree-checkbox-13" role="switch" type="checkbox"/><label for="toctree-checkbox-13"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/lxd_lxc/"><code class="docutils literal notranslate"><span class="pre">lxd</span></code> and <code class="docutils literal notranslate"><span class="pre">lxc</span></code></a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/instances/">Containers and VMs</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../image-handling/">Local and remote images</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/storage/">Storage pools, volumes, and buckets</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/networks/">Networking setups</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../database/">The LXD Dqlite database</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/lxc_show_info/"><code class="docutils literal notranslate"><span class="pre">lxc</span></code> <code class="docutils literal notranslate"><span class="pre">show</span></code> and <code class="docutils literal notranslate"><span class="pre">info</span></code></a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../authentication/">Remote API authentication</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/authorization/">Remote API authorization</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/projects/">Instances grouping with projects</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/clusters/">Clusters</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/replicators/">Replicators</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/performance_tuning/">Performance tuning</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/security/">Security</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/bpf/">Privilege delegation using BPF Token</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../explanation/csi/">The LXD CSI driver</a></li>
</ul>
</li>
<li class="toctree-l1 current has-children"><a class="reference internal" href="../../">Reference</a><input aria-label="Toggle navigation of Reference" checked="" class="toctree-checkbox" id="toctree-checkbox-14" name="toctree-checkbox-14" role="switch" type="checkbox"/><label for="toctree-checkbox-14"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul class="current">
<li class="toctree-l2"><a class="reference internal" href="../../../requirements/">Requirements</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../architectures/">Architectures</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../guest-os-compatibility/">Guest OS compatibility</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../container-environment/">Container environment</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../manpages/">Man pages</a><input aria-label="Toggle navigation of Man pages" class="toctree-checkbox" id="toctree-checkbox-15" name="toctree-checkbox-15" role="switch" type="checkbox"/><label for="toctree-checkbox-15"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../manpages/lxc/"><code class="docutils literal notranslate"><span class="pre">lxc</span></code></a></li>
</ul>
</li>
<li class="toctree-l2 current has-children"><a class="reference internal" href="../">Release notes</a><input aria-label="Toggle navigation of Release notes" checked="" class="toctree-checkbox" id="toctree-checkbox-16" name="toctree-checkbox-16" role="switch" type="checkbox"/><label for="toctree-checkbox-16"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul class="current">
<li class="toctree-l3 current current-page"><a class="current reference internal" href="#">LXD 6.8</a></li>
<li class="toctree-l3"><a class="reference internal" href="../release-notes-6.7/">LXD 6.7</a></li>
<li class="toctree-l3"><a class="reference internal" href="../release-notes-6.6/">LXD 6.6</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../releases-snap/">Releases and snap</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../remote_image_servers/">Remote image servers</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../image_format/">Image format</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../config-options/">Configuration option index</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../../server/">Server configuration</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../explanation/instance_config/">Instance configuration</a><input aria-label="Toggle navigation of Instance configuration" class="toctree-checkbox" id="toctree-checkbox-17" name="toctree-checkbox-17" role="switch" type="checkbox"/><label for="toctree-checkbox-17"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../instance_properties/">Instance properties</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../instance_options/">Instance options</a></li>
<li class="toctree-l3 has-children"><a class="reference internal" href="../../devices/">Devices</a><input aria-label="Toggle navigation of Devices" class="toctree-checkbox" id="toctree-checkbox-18" name="toctree-checkbox-18" role="switch" type="checkbox"/><label for="toctree-checkbox-18"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l4"><a class="reference internal" href="../../standard_devices/">Standard devices</a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_none/">Type: <code class="docutils literal notranslate"><span class="pre">none</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_nic/">Type: <code class="docutils literal notranslate"><span class="pre">nic</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_disk/">Type: <code class="docutils literal notranslate"><span class="pre">disk</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_unix_char/">Type: <code class="docutils literal notranslate"><span class="pre">unix-char</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_unix_block/">Type: <code class="docutils literal notranslate"><span class="pre">unix-block</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_usb/">Type: <code class="docutils literal notranslate"><span class="pre">usb</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_gpu/">Type: <code class="docutils literal notranslate"><span class="pre">gpu</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_infiniband/">Type: <code class="docutils literal notranslate"><span class="pre">infiniband</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_proxy/">Type: <code class="docutils literal notranslate"><span class="pre">proxy</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_unix_hotplug/">Type: <code class="docutils literal notranslate"><span class="pre">unix-hotplug</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_tpm/">Type: <code class="docutils literal notranslate"><span class="pre">tpm</span></code></a></li>
<li class="toctree-l4"><a class="reference internal" href="../../devices_pci/">Type: <code class="docutils literal notranslate"><span class="pre">pci</span></code></a></li>
</ul>
</li>
<li class="toctree-l3"><a class="reference internal" href="../../instance_units/">Units for storage and network limits</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../preseed_yaml_fields/">Preseed YAML file fields</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../projects/">Project configuration</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../storage_drivers/">Storage drivers</a><input aria-label="Toggle navigation of Storage drivers" class="toctree-checkbox" id="toctree-checkbox-19" name="toctree-checkbox-19" role="switch" type="checkbox"/><label for="toctree-checkbox-19"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../storage_dir/">Directory - <code class="docutils literal notranslate"><span class="pre">dir</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_btrfs/">Btrfs - <code class="docutils literal notranslate"><span class="pre">btrfs</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_lvm/">LVM - <code class="docutils literal notranslate"><span class="pre">lvm</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_zfs/">ZFS - <code class="docutils literal notranslate"><span class="pre">zfs</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_ceph/">Ceph RBD - <code class="docutils literal notranslate"><span class="pre">ceph</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_powerflex/">Dell PowerFlex - <code class="docutils literal notranslate"><span class="pre">powerflex</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_pure/">Pure Storage - <code class="docutils literal notranslate"><span class="pre">pure</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_alletra/">HPE Alletra - <code class="docutils literal notranslate"><span class="pre">alletra</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_cephfs/">CephFS - <code class="docutils literal notranslate"><span class="pre">cephfs</span></code></a></li>
<li class="toctree-l3"><a class="reference internal" href="../../storage_cephobject/">Ceph Object - <code class="docutils literal notranslate"><span class="pre">cephobject</span></code></a></li>
</ul>
</li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../networks/">Networks</a><input aria-label="Toggle navigation of Networks" class="toctree-checkbox" id="toctree-checkbox-20" name="toctree-checkbox-20" role="switch" type="checkbox"/><label for="toctree-checkbox-20"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../network_bridge/">Bridge network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../network_ovn/">OVN network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../network_macvlan/">Macvlan network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../network_physical/">Physical network</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../network_sriov/">SR-IOV network</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../placement_groups/">Placement group configuration</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../clusters/">Clusters</a><input aria-label="Toggle navigation of Clusters" class="toctree-checkbox" id="toctree-checkbox-21" name="toctree-checkbox-21" role="switch" type="checkbox"/><label for="toctree-checkbox-21"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../cluster_member_config/">Cluster member configuration</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../cluster_link_config/">Cluster link configuration</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../replicator_config/">Replicator configuration</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../permissions/">Permissions</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../server_settings/">Production server settings</a></li>
<li class="toctree-l2"><a class="reference internal" href="../../provided_metrics/">Provided metrics</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../restapi_landing/">REST API</a><input aria-label="Toggle navigation of REST API" class="toctree-checkbox" id="toctree-checkbox-22" name="toctree-checkbox-22" role="switch" type="checkbox"/><label for="toctree-checkbox-22"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../rest-api/">Main API overview</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../api/">Main API specification</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../api-extensions/">Main API extensions</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../events/">Events stream</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../dev-lxd/">DevLXD API for instances</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference internal" href="../../driver_csi/">LXD CSI driver reference</a></li>
<li class="toctree-l2 has-children"><a class="reference internal" href="../../../internals/">Internals</a><input aria-label="Toggle navigation of Internals" class="toctree-checkbox" id="toctree-checkbox-23" name="toctree-checkbox-23" role="switch" type="checkbox"/><label for="toctree-checkbox-23"><span class="icon"><svg><use href="#svg-arrow-right"></use></svg></span></label><ul>
<li class="toctree-l3"><a class="reference internal" href="../../../environment/">Environment variables</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../daemon-behavior/">Daemon behavior</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../uefi_variables/">UEFI variables for VMs</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../syscall-interception/">System call interception</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../../userns-idmap/">User namespace setup</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../ovn-internals/">OVN implementation</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../vm_live_migration_internals/">VM live migration implementation</a></li>
<li class="toctree-l3"><a class="reference internal" href="../../dqlite-internals/">Dqlite database for cluster state</a></li>
</ul>
</li>
<li class="toctree-l2"><a class="reference external" href="https://github.com/canonical/lxd">Project repository</a></li>
<li class="toctree-l2"><a class="reference external" href="https://images.lxd.canonical.com">Image server</a></li>
</ul>
</li>
</ul>

</div>
</div>

      </div>
      
    </div>
  </aside>
  <div class="main">
    <div class="content">
      <div class="article-container">
        <a href="#" class="back-to-top muted-link">
          <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
            <path d="M13 20h-2V8l-5.5 5.5-1.42-1.42L12 4.16l7.92 7.92-1.42 1.42L13 8v12z"></path>
          </svg>
          <span>Back to top</span>
        </a>
        <div class="content-icon-container">
          <div class="edit-this-page">
  <a class="muted-link" href="https://github.com/canonical/lxd/edit/main/doc/reference/release-notes/release-notes-6.8.md" title="Contribute to this page">
    <svg><use href="#svg-pencil"></use></svg>
    <span class="visually-hidden">Contribute to this page</span>
  </a>
</div><div class="theme-toggle-container theme-toggle-content">
            <button class="theme-toggle" aria-label="Toggle Light / Dark / Auto color theme">
              <svg class="theme-icon-when-auto-light"><use href="#svg-sun-with-moon"></use></svg>
              <svg class="theme-icon-when-auto-dark"><use href="#svg-moon-with-sun"></use></svg>
              <svg class="theme-icon-when-dark"><use href="#svg-moon"></use></svg>
              <svg class="theme-icon-when-light"><use href="#svg-sun"></use></svg>
            </button>
          </div>
          <label class="toc-overlay-icon toc-content-icon" for="__toc">
            <span class="icon"><svg><use href="#svg-toc"></use></svg></span>
          </label>
        </div>
        <article role="main" id="furo-main-content">
          <section id="lxd-6-8-release-notes">
<span id="ref-release-notes-6-8"></span><h1>LXD 6.8 release notes<a class="headerlink" href="#lxd-6-8-release-notes" title="Link to this heading">¶</a></h1>
<p>This is a <a class="reference internal" href="../../releases-snap/#ref-releases-feature"><span class="std std-ref">feature release</span></a> and is not recommended for production use.</p>
<div class="note admonition">
<p class="admonition-title">Release notes content</p>
<p>These release notes cover updates in the <a class="reference external" href="https://github.com/canonical/lxd">core LXD repository</a> and the <a class="reference external" href="https://snapcraft.io/lxd">LXD snap package</a>.
For a tour of <a class="reference external" href="https://github.com/canonical/lxd-ui">LXD UI</a> updates, please see the release announcement in <a class="reference external" href="https://discourse.ubuntu.com/t/lxd-6-8-released/80650">our Discourse forum</a>.</p>
</div>
<section id="highlights">
<span id="ref-release-notes-6-8-highlights"></span><h2>Highlights<a class="headerlink" href="#highlights" title="Link to this heading">¶</a></h2>
<p>This section highlights new and improved features in this release.</p>
<section id="cluster-control-plane-role">
<h3>Cluster control-plane role<a class="headerlink" href="#cluster-control-plane-role" title="Link to this heading">¶</a></h3>
<p>A new <code class="docutils literal notranslate"><span class="pre">control-plane</span></code> cluster member role has been added that can be manually assigned to designate which members participate in Raft consensus.</p>
<p>Control plane mode is inactive by default until at least 3 members are assigned the <code class="docutils literal notranslate"><span class="pre">control-plane</span></code> role.
While inactive, all cluster members remain eligible for automatic promotion to database roles (preserving existing behavior).
Once active, only <code class="docutils literal notranslate"><span class="pre">control-plane</span></code> members can become voters, standbys, or the database leader; members without the role are assigned <code class="docutils literal notranslate"><span class="pre">RAFT_SPARE</span></code> and excluded from automatic promotion.</p>
<p>When control plane mode is active, control-plane members also act as event hubs, replacing the now-deprecated <code class="docutils literal notranslate"><span class="pre">event-hub</span></code> role.</p>
<ul class="simple">
<li><p>Documentation: <a class="reference internal" href="../../../howto/cluster_manage/#cluster-manage-control-plane"><span class="std std-ref">Use control plane mode</span></a></p></li>
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-clustering-control-plane"><span class="std std-ref">clustering_control_plane</span></a></p></li>
</ul>
</section>
<section id="cluster-links">
<h3>Cluster links<a class="headerlink" href="#cluster-links" title="Link to this heading">¶</a></h3>
<p>Cluster links enable secure, authenticated communication between separate LXD clusters using mutual TLS certificates.</p>
<p>This release adds a full cluster links API, including create/list/show/edit/rename/delete operations and state inspection support.
Matching <code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">cluster</span> <span class="pre">link</span> <span class="pre">...</span></code> subcommands have also been added.</p>
<ul class="simple">
<li><p>Documentation: <a class="reference internal" href="../../../explanation/clusters/#exp-cluster-links"><span class="std std-ref">Cluster links</span></a></p></li>
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-cluster-links"><span class="std std-ref">cluster_links</span></a></p></li>
</ul>
</section>
<section id="replicators">
<h3>Replicators<a class="headerlink" href="#replicators" title="Link to this heading">¶</a></h3>
<p>Replicators enable active-passive project level instance refresh for disaster recovery using the new bi-directional cluster links functionality.</p>
<p>Replicators support scheduled and manual execution for replicating instances between linked clusters.
The daemon gains a background task for running scheduled replicators, and matching <code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">replicator</span></code> subcommands have been added to the CLI.</p>
<ul class="simple">
<li><p>Documentation: <a class="reference internal" href="../../../howto/replicators_create/#howto-replicators-setup"><span class="std std-ref">How to set up replicators</span></a></p></li>
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-replicators"><span class="std std-ref">replicators</span></a></p></li>
</ul>
</section>
<section id="gpu-cdi-hotplug-support-for-containers">
<h3>GPU CDI hotplug support for containers<a class="headerlink" href="#gpu-cdi-hotplug-support-for-containers" title="Link to this heading">¶</a></h3>
<p>Building on the AMD CDI container support added in LXD 6.7, GPU CDI devices can now be hotplugged into running containers.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-gpu-cdi-hotplug"><span class="std std-ref">gpu_cdi_hotplug</span></a></p></li>
</ul>
</section>
<section id="bulk-instance-state-operations-and-metadata-entity-url-improvements">
<h3>Bulk instance state operations and metadata entity URL improvements<a class="headerlink" href="#bulk-instance-state-operations-and-metadata-entity-url-improvements" title="Link to this heading">¶</a></h3>
<p>A new <code class="docutils literal notranslate"><span class="pre">recursion=2</span></code> mode for <code class="docutils literal notranslate"><span class="pre">GET</span> <span class="pre">/1.0/operations</span></code> returns the full parent-child relationship between operations.
<code class="docutils literal notranslate"><span class="pre">GET</span> <span class="pre">/1.0/operations/{id}</span></code> with <code class="docutils literal notranslate"><span class="pre">recursion=1</span></code> also now returns related child operations.</p>
<p>Parallel bulk instance state updates now create a parent operation with per-instance child operations, providing more granular status reporting.</p>
<p>Additionally operation metadata handling for <code class="docutils literal notranslate"><span class="pre">entity_url</span></code> has been tightened and expanded.
LXD now keeps the primary <code class="docutils literal notranslate"><span class="pre">entity_url</span></code> stable when metadata is updated and ensures it is present for applicable operations.</p>
<p>Rename operations can now expose both <code class="docutils literal notranslate"><span class="pre">entity_url</span></code> (the new target URL) and <code class="docutils literal notranslate"><span class="pre">original_entity_url</span></code> (the pre-rename URL), making rename tracking more reliable for API clients.</p>
<p>URL metadata coverage was also extended to additional create and rename operations, including project rename, instance rename/snapshot rename/backup rename, storage pool create, and storage volume create/snapshot rename/backup rename.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-bulk-operations"><span class="std std-ref">bulk_operations</span></a></p></li>
</ul>
</section>
<section id="zfs-volume-promotion-support">
<h3>ZFS volume promotion support<a class="headerlink" href="#zfs-volume-promotion-support" title="Link to this heading">¶</a></h3>
<p>A new <a class="configref reference internal" href="../../storage_zfs/#storage-zfs-volume-conf:zfs.promote"><code class="docutils literal notranslate"><span class="pre">zfs.promote</span></code></a> configuration key has been added.
When set to <code class="docutils literal notranslate"><span class="pre">true</span></code>, this instructs LXD to ZFS-promote the volume when creating (or recreating) it from a clone.</p>
<p>This key is primarily useful when combined with <code class="docutils literal notranslate"><span class="pre">initial.*</span></code> <a class="reference internal" href="../../devices_disk/#devices-disk-initial-config"><span class="std std-ref">disk device configuration options</span></a> and allows controlling ZFS promotion when creating instances from other instances.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-storage-zfs-promote"><span class="std std-ref">storage_zfs_promote</span></a></p></li>
</ul>
</section>
<section id="ceph-rbd-default-features-changed">
<h3>Ceph RBD default features changed<a class="headerlink" href="#ceph-rbd-default-features-changed" title="Link to this heading">¶</a></h3>
<p>New volumes (and clones) in Ceph RBD (<code class="docutils literal notranslate"><span class="pre">ceph</span></code>) pools are no longer created with only <code class="docutils literal notranslate"><span class="pre">--image-feature</span> <span class="pre">layering</span></code>.
Instead the default RBD features configured in the Ceph cluster are used.</p>
<p>If <code class="docutils literal notranslate"><span class="pre">ceph.rbd.features</span></code> is already set on a pool, that value continues to be used unchanged.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-storage-ceph-use-rbd-defaults"><span class="std std-ref">storage_ceph_use_rbd_defaults</span></a></p></li>
</ul>
</section>
<section id="ceph-and-cephfs-support-for-messenger-protocol-v2">
<h3>Ceph and CephFS support for messenger protocol v2<a class="headerlink" href="#ceph-and-cephfs-support-for-messenger-protocol-v2" title="Link to this heading">¶</a></h3>
<p>The Ceph storage driver now has support for the Ceph messenger protocol v2.</p>
<p>LXD now uses the native Ceph CLI tool (<code class="docutils literal notranslate"><span class="pre">ceph</span> <span class="pre">mon</span> <span class="pre">dump</span> <span class="pre">--format</span> <span class="pre">json</span></code>) instead of an internal <code class="docutils literal notranslate"><span class="pre">ceph.conf</span></code> parser for monitor discovery and FSID information. This enables Ceph messenger protocol v2 support.</p>
<p>These improvements enhance compatibility with modern Ceph deployments and provide more robust handling of various Ceph configurations, including those deployed through MicroCeph.</p>
</section>
<section id="custom-port-numbers-in-nvme-and-iscsi-storage-connectors">
<h3>Custom port numbers in NVMe and iSCSI storage connectors<a class="headerlink" href="#custom-port-numbers-in-nvme-and-iscsi-storage-connectors" title="Link to this heading">¶</a></h3>
<p>The NVMe and iSCSI storage connectors now support custom port numbers, providing more flexibility when connecting to storage targets that do not use standard ports.</p>
</section>
<section id="ovn-dynamic-northbound-connection">
<h3>OVN dynamic Northbound connection<a class="headerlink" href="#ovn-dynamic-northbound-connection" title="Link to this heading">¶</a></h3>
<p>When the <a class="configref reference internal" href="../../../server/#server-miscellaneous:network.ovn.northbound_connection"><code class="docutils literal notranslate"><span class="pre">network.ovn.northbound_connection</span></code></a> server configuration is not set, LXD now dynamically determines the OVN Northbound database connection string based on the environment.
If the MicroOVN snap is used, LXD reads the configuration from the MicroOVN <code class="docutils literal notranslate"><span class="pre">ovn.env</span></code> file.
Otherwise, it defaults to <code class="docutils literal notranslate"><span class="pre">unix:/var/run/ovn/ovnnb_db.sock</span></code>.</p>
<p>This ensures that if the MicroOVN cluster membership changes, LXD will then use the updated OVN server connection configuration.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-ovn-dynamic-northbound-connection"><span class="std std-ref">ovn_dynamic_northbound_connection</span></a></p></li>
</ul>
</section>
<section id="instance-configuration-refresh-on-copy">
<h3>Instance configuration refresh on copy<a class="headerlink" href="#instance-configuration-refresh-on-copy" title="Link to this heading">¶</a></h3>
<p>Instance <code class="docutils literal notranslate"><span class="pre">copy</span> <span class="pre">--refresh</span></code> operations now correctly apply target configuration, profile, and device updates server-side before the data transfer completes.
This applies to both direct copies and migration-based refresh operations.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-instance-refresh-config"><span class="std std-ref">instance_refresh_config</span></a></p></li>
</ul>
</section>
<section id="extended-image-metadata-from-simplestreams">
<h3>Extended image metadata from SimpleStreams<a class="headerlink" href="#extended-image-metadata-from-simplestreams" title="Link to this heading">¶</a></h3>
<p>Two new optional fields, <code class="docutils literal notranslate"><span class="pre">release_codename</span></code> and <code class="docutils literal notranslate"><span class="pre">release_title</span></code>, have been added to the <code class="docutils literal notranslate"><span class="pre">api.Image</span></code> struct.
These are populated from the SimpleStreams index when available.
The generated image description for SimpleStreams images now includes the variant when available, and no longer includes the creation date or architecture.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-image-extended-metadata"><span class="std std-ref">image_extended_metadata</span></a></p></li>
</ul>
</section>
<section id="lxc-project-get-current-command">
<h3><code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">project</span> <span class="pre">get-current</span></code> command<a class="headerlink" href="#lxc-project-get-current-command" title="Link to this heading">¶</a></h3>
<p>A new <code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">project</span> <span class="pre">get-current</span></code> command has been added that outputs the name of the currently selected project, making it easy to use in scripts.</p>
</section>
<section id="lxc-column-c-flag-for-csv-output">
<h3><code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">--column</span></code>/<code class="docutils literal notranslate"><span class="pre">-c</span></code> flag for CSV output<a class="headerlink" href="#lxc-column-c-flag-for-csv-output" title="Link to this heading">¶</a></h3>
<p>The <code class="docutils literal notranslate"><span class="pre">--column</span></code>/<code class="docutils literal notranslate"><span class="pre">-c</span></code> flag is now supported by the <code class="docutils literal notranslate"><span class="pre">lxc</span></code> command everywhere that <code class="docutils literal notranslate"><span class="pre">--format</span> <span class="pre">csv</span></code> is accepted, allowing column selection to be combined with CSV output consistently across all <code class="docutils literal notranslate"><span class="pre">lxc</span></code> list commands.</p>
</section>
<section id="stricter-file-permissions-across-the-codebase">
<h3>Stricter file permissions across the codebase<a class="headerlink" href="#stricter-file-permissions-across-the-codebase" title="Link to this heading">¶</a></h3>
<p>A large sweep of stricter file permissions has been applied across the codebase, reducing the risk of unintended access to sensitive files created by the LXD daemon and the <code class="docutils literal notranslate"><span class="pre">lxc</span></code> client.</p>
</section>
<section id="widespread-toctou-race-condition-fixes">
<h3>Widespread TOCTOU race condition fixes<a class="headerlink" href="#widespread-toctou-race-condition-fixes" title="Link to this heading">¶</a></h3>
<p>Numerous time-of-check to time-of-use (TOCTOU) race conditions across the daemon, client, and storage drivers have been fixed, improving correctness and security under concurrent workloads.</p>
</section>
<section id="csrf-protection-using-go-standard-library">
<h3>CSRF protection using Go standard library<a class="headerlink" href="#csrf-protection-using-go-standard-library" title="Link to this heading">¶</a></h3>
<p>The daemon now uses the CSRF protection provided by the Go standard library, replacing the previous custom implementation.</p>
</section>
<section id="constant-time-secret-comparison">
<h3>Constant-time secret comparison<a class="headerlink" href="#constant-time-secret-comparison" title="Link to this heading">¶</a></h3>
<p>All secret comparison operations (exec, console, migration, and certificate token secrets) now use constant-time comparison to prevent timing side-channel attacks.</p>
</section>
<section id="http-hardening">
<h3>HTTP hardening<a class="headerlink" href="#http-hardening" title="Link to this heading">¶</a></h3>
<p>Several HTTP hardening improvements have been applied to the daemon:</p>
<ul class="simple">
<li><p>Dropped the deprecated <code class="docutils literal notranslate"><span class="pre">X-XSS-Protection</span></code> response header.</p></li>
<li><p>Added a <code class="docutils literal notranslate"><span class="pre">Referrer-Policy</span></code> header to prevent leaking referrer information.</p></li>
<li><p>Applied HTTP timeouts to the pprof, Loki, and endpoint listeners.</p></li>
<li><p>TCP keep alive and TCP user timeout configured on incoming API connections for faster stale connection detection.</p></li>
</ul>
</section>
</section>
<section id="ui-updates">
<h2>UI updates<a class="headerlink" href="#ui-updates" title="Link to this heading">¶</a></h2>
<p>This release introduces cluster links, improves instance configuration visibility, and enhances responsiveness across the UI, alongside a range of user-driven fixes and refinements.</p>
<section id="cluster-management">
<h3>Cluster management<a class="headerlink" href="#cluster-management" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>The UI now supports cluster links for connecting multiple clusters.</p></li>
<li><p>The UI now supports full create, edit, and delete management for cluster member roles.</p></li>
</ul>
</section>
<section id="instance-experience">
<h3>Instance experience<a class="headerlink" href="#instance-experience" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>The YAML editor now provides an expanded view that surfaces inherited configuration values (such as from profiles) alongside instance-level settings.</p></li>
<li><p>More responsive instance creation with live progress updates via events.</p></li>
<li><p>Ubuntu-themed terminal for instances.</p></li>
</ul>
</section>
<section id="forms-and-input-enhancements">
<h3>Forms and input enhancements<a class="headerlink" href="#forms-and-input-enhancements" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>Introduced prefixed inputs for IP address assignments for clearer networking configuration.</p></li>
<li><p>Added output fields to forms where applicable.</p></li>
</ul>
</section>
<section id="asynchronous-operations">
<h3>Asynchronous operations<a class="headerlink" href="#asynchronous-operations" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>Improved handling of long-running operations with asynchronous support for:</p>
<ul>
<li><p>Networks</p></li>
<li><p>Network peerings</p></li>
<li><p>Network ACLs</p></li>
<li><p>Storage pools</p></li>
<li><p>Storage buckets and bucket keys</p></li>
</ul>
</li>
</ul>
</section>
<section id="user-driven-improvements">
<h3>User-driven improvements<a class="headerlink" href="#user-driven-improvements" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>Instances uploaded from file now appear immediately in the instance list while processing.</p></li>
<li><p>Improved visibility of available storage pool size.</p></li>
<li><p>Enhanced storage driver selection with more details.</p></li>
<li><p>Added icons for full-screen mode and ISO usage in the instance terminal.</p></li>
<li><p>Removed expiry field from instance export (system defaults are now applied).</p></li>
</ul>
</section>
<section id="bug-fixes">
<h3>Bug fixes<a class="headerlink" href="#bug-fixes" title="Link to this heading">¶</a></h3>
<ul class="simple">
<li><p>Fixed issue where the admin group was incorrectly immutable.</p></li>
<li><p>Fixed terminal behavior to display content when a connection closes or errors occur.</p></li>
</ul>
</section>
</section>
<section id="ref-release-notes-6-8-bugfixes">
<span id="id1"></span><h2>Bug fixes<a class="headerlink" href="#ref-release-notes-6-8-bugfixes" title="Link to this heading">¶</a></h2>
<p>The following bug fixes are included in this release.</p>
<ul class="simple">
<li><p><a class="reference external" href="https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f"><spellexception>VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf (CVE-2026-34177)</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/security/advisories/GHSA-c3h3-89qf-jqm5"><spellexception>Update of type field in restricted TLS certificate allows privilege escalation to cluster admin (CVE-2026-34179)</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/security/advisories/GHSA-q96j-3fmm-7fv4"><spellexception>Importing a crafted backup leads to project restriction bypass (CVE-2026-34178)</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/lxc/incus/security/advisories/GHSA-83xr-5xxr-mh92"><spellexception>Arbitrary file read and write through pongo templates (CVE-2026-33897 from Incus)</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/lxc/incus/security/advisories/GHSA-p8mm-23gg-jc9r"><spellexception>Verify combined fingerprint when downloading images from simplestreams servers (CVE-2026-33542 from Incus)</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17924"><spellexception>Fix creating instances using a local image from another project</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17914"><spellexception>Require can_view on source instance and volume when copying</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17988"><spellexception>Migration: Don't allow pull mode in restricted projects</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17810"><spellexception>Use correct name in create-from-backup entity URL</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17958"><spellexception>GPU CDI device fixes</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17794"><spellexception>Fix snapshot URL in clustered mode</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17739"><spellexception>Fix recursive file pull failing on existing directories and symlinks</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17756"><spellexception>Fix --profile and --no-profiles flags being ignored on cluster moves</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17778"><spellexception>Fix mutex leak and unclosed files</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17475"><spellexception>Prevent concurrent evacuations</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17985"><spellexception>Fix image fingerprint validation being too permissive</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18043"><spellexception>Fix UI and documentation MIME type</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17822"><spellexception>Enforce project limits.instances in clustered instance creation</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/17869"><spellexception>dnsmasq: clean up orphaned .removing files on bridge network start</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18101"><spellexception>Improve phantom volume error reporting during cluster moves</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18102"><spellexception>Fix instance copy to keep source architecture type</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18087"><spellexception>Fix inverted TLS verification logic in Alletra client</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/16686"><spellexception>Mark images as cached consistently</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18115"><spellexception>Fix deadlock by only taking storage pool and network creation lock for external API requests</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18127"><spellexception>Network: Set veth/vtap host interface MTU to the larger of parent bridge or instance MTU</spellexception></a></p></li>
<li><p><a class="reference external" href="https://github.com/canonical/lxd/pull/18151"><spellexception>Cluster: Fix cluster healing functionality</spellexception></a></p></li>
</ul>
</section>
<section id="backwards-incompatible-changes">
<span id="ref-release-notes-6-8-incompatible"></span><h2>Backwards-incompatible changes<a class="headerlink" href="#backwards-incompatible-changes" title="Link to this heading">¶</a></h2>
<p>These changes are not compatible with older versions of LXD or its clients.</p>
<section id="maas-controller-support-removed">
<h3>MAAS controller support removed<a class="headerlink" href="#maas-controller-support-removed" title="Link to this heading">¶</a></h3>
<p>The MAAS controller integration has been removed from LXD.
This removes all <code class="docutils literal notranslate"><span class="pre">maas.api.url</span></code>, <code class="docutils literal notranslate"><span class="pre">maas.api.key</span></code>, and <code class="docutils literal notranslate"><span class="pre">maas.machine</span></code> configuration keys, as well as the <code class="docutils literal notranslate"><span class="pre">maas.subnet.ipv4</span></code> and <code class="docutils literal notranslate"><span class="pre">maas.subnet.ipv6</span></code> NIC device options.</p>
<p>On upgrade, a patch automatically removes any MAAS-related configuration keys from the database.</p>
</section>
<section id="minio-local-object-storage-buckets-removed">
<h3>MinIO local object storage buckets removed<a class="headerlink" href="#minio-local-object-storage-buckets-removed" title="Link to this heading">¶</a></h3>
<p>Local (non-Ceph) storage drivers no longer support object storage buckets.
Object storage buckets are now only supported by the <code class="docutils literal notranslate"><span class="pre">cephobject</span></code> driver.</p>
<p>The bundled <code class="docutils literal notranslate"><span class="pre">minio</span></code> binary and the <code class="docutils literal notranslate"><span class="pre">core.storage_buckets_address</span></code> configuration have been removed.
The <code class="docutils literal notranslate"><span class="pre">storage_buckets_local</span></code> API extension is no longer advertised.</p>
</section>
<section id="ceph-rbd-and-cephfs-source-configuration-key-dropped">
<h3>Ceph RBD and CephFS <code class="docutils literal notranslate"><span class="pre">source</span></code> configuration key dropped<a class="headerlink" href="#ceph-rbd-and-cephfs-source-configuration-key-dropped" title="Link to this heading">¶</a></h3>
<p>The <code class="docutils literal notranslate"><span class="pre">source</span></code> configuration key for the <code class="docutils literal notranslate"><span class="pre">ceph</span></code> and <code class="docutils literal notranslate"><span class="pre">cephfs</span></code> storage drivers has been removed.
Use <code class="docutils literal notranslate"><span class="pre">ceph.osd.pool_name</span></code> for Ceph RBD pools and <code class="docutils literal notranslate"><span class="pre">cephfs.path</span></code> for CephFS pools instead.</p>
<p>On upgrade, a patch automatically unsets any stored <code class="docutils literal notranslate"><span class="pre">source</span></code> configuration keys for affected pools.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-storage-remote-drop-source"><span class="std std-ref">storage_remote_drop_source</span></a></p></li>
</ul>
</section>
<section id="fan-bridge-fan-type-ipip-support-removed">
<h3>FAN bridge <code class="docutils literal notranslate"><span class="pre">fan.type=ipip</span></code> support removed<a class="headerlink" href="#fan-bridge-fan-type-ipip-support-removed" title="Link to this heading">¶</a></h3>
<p>Support for <code class="docutils literal notranslate"><span class="pre">fan.type=ipip</span></code> in bridge networks has been removed.
Only <code class="docutils literal notranslate"><span class="pre">fan.type=vxlan</span></code> (the default) remains supported.</p>
</section>
<section id="cluster-role-event-hub-removed">
<h3>Cluster role <code class="docutils literal notranslate"><span class="pre">event-hub</span></code> removed<a class="headerlink" href="#cluster-role-event-hub-removed" title="Link to this heading">¶</a></h3>
<p>The <code class="docutils literal notranslate"><span class="pre">event-hub</span></code> cluster role has been removed in favor of the new <code class="docutils literal notranslate"><span class="pre">control-plane</span></code> role, which provides equivalent event-hub behaviour alongside full Raft control-plane functionality.
Existing <code class="docutils literal notranslate"><span class="pre">event-hub</span></code> role assignments are automatically migrated to <code class="docutils literal notranslate"><span class="pre">control-plane</span></code> on upgrade.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-clustering-control-plane"><span class="std std-ref">clustering_control_plane</span></a></p></li>
</ul>
</section>
<section id="asynchronous-storage-pool-network-and-storage-bucket-endpoints">
<h3>Asynchronous storage pool, network, and storage bucket endpoints<a class="headerlink" href="#asynchronous-storage-pool-network-and-storage-bucket-endpoints" title="Link to this heading">¶</a></h3>
<p>Storage and network endpoints that were previously synchronous now return background operations.
This affects create, update, delete, and rename actions.</p>
<p>This includes storage pools, storage buckets (including bucket keys), networks, network ACLs, network zones, network zone records, network forwards, network load balancers and network peers.</p>
<p>Clients should check for this extension and handle the asynchronous response by waiting on the returned operation.
Operation metadata may include additional data, such as storage bucket admin credentials on bucket creation.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-storage-and-network-operations"><span class="std std-ref">storage_and_network_operations</span></a></p></li>
</ul>
</section>
<section id="operation-resources-metadata-no-longer-populated">
<h3>Operation <code class="docutils literal notranslate"><span class="pre">resources</span></code> metadata no longer populated<a class="headerlink" href="#operation-resources-metadata-no-longer-populated" title="Link to this heading">¶</a></h3>
<p>Operation <code class="docutils literal notranslate"><span class="pre">resources</span></code> entries are now intentionally emptied and should no longer be relied upon by clients.</p>
<p>Historically, some clients used <code class="docutils literal notranslate"><span class="pre">resources</span></code> to infer the URL of entities created or affected by asynchronous operations.
With the 6.8 changes, clients should treat <code class="docutils literal notranslate"><span class="pre">entity_url</span></code> as authoritative for the operation target and, for rename operations, use <code class="docutils literal notranslate"><span class="pre">original_entity_url</span></code> (old URL) together with <code class="docutils literal notranslate"><span class="pre">entity_url</span></code> (new URL).</p>
<p>The <code class="docutils literal notranslate"><span class="pre">resources</span></code> field will be used in the future to record associated entities for an operation.</p>
<ul class="simple">
<li><p>API extension: <a class="reference internal" href="../../../api-extensions/#extension-bulk-operations"><span class="std std-ref">bulk_operations</span></a></p></li>
</ul>
</section>
<section id="public-images-restricted-to-the-default-project">
<h3>Public images restricted to the default project<a class="headerlink" href="#public-images-restricted-to-the-default-project" title="Link to this heading">¶</a></h3>
<p>Public images can no longer be created in non-default projects.
Attempts to mark images as public in non-default projects via image creation or update API endpoints will be rejected.</p>
<p>Images in non-default projects cannot be accessed by unauthenticated or unauthorized clients; only authenticated clients with appropriate permissions can view them.
To share images publicly, they must be created in or moved to the default project.</p>
<p>This change supports the forthcoming Image Registries feature.</p>
</section>
<section id="migration-pull-mode-into-restricted-projects-no-longer-allowed">
<h3>Migration pull mode into restricted projects no longer allowed<a class="headerlink" href="#migration-pull-mode-into-restricted-projects-no-longer-allowed" title="Link to this heading">¶</a></h3>
<p>It is no longer possible to migrate instances and storage volumes into a restricted project when using <code class="docutils literal notranslate"><span class="pre">pull</span></code> migration mode.</p>
</section>
<section id="go-sdk-changes">
<h3>Go SDK changes<a class="headerlink" href="#go-sdk-changes" title="Link to this heading">¶</a></h3>
<p>The following backwards-incompatible changes were made to the LXD Go SDK and will require updates to consuming applications.
These client functions are made to be backward compatible with older LXD servers.</p>
<ul class="simple">
<li><p>Storage pool <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, and <code class="docutils literal notranslate"><span class="pre">Delete</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p>Storage bucket and bucket key <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, and <code class="docutils literal notranslate"><span class="pre">Delete</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p>Network <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, <code class="docutils literal notranslate"><span class="pre">Delete</span></code>, and <code class="docutils literal notranslate"><span class="pre">Rename</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p>Network ACL <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, <code class="docutils literal notranslate"><span class="pre">Delete</span></code>, and <code class="docutils literal notranslate"><span class="pre">Rename</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p>Network peer <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, and <code class="docutils literal notranslate"><span class="pre">Delete</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p>Network zone and network zone record <code class="docutils literal notranslate"><span class="pre">Create</span></code>, <code class="docutils literal notranslate"><span class="pre">Update</span></code>, and <code class="docutils literal notranslate"><span class="pre">Delete</span></code> functions now return an <code class="docutils literal notranslate"><span class="pre">Operation</span></code>.</p></li>
<li><p><code class="docutils literal notranslate"><span class="pre">GetInstances</span></code> variants unified into a single <code class="docutils literal notranslate"><span class="pre">GetInstances</span></code> method accepting an <code class="docutils literal notranslate"><span class="pre">args</span></code> struct.</p></li>
</ul>
</section>
</section>
<section id="deprecated-features">
<span id="ref-release-notes-6-8-deprecated"></span><h2>Deprecated features<a class="headerlink" href="#deprecated-features" title="Link to this heading">¶</a></h2>
<p>These features are removed in this release.</p>
<section id="maas-integration-removed">
<h3>MAAS integration removed<a class="headerlink" href="#maas-integration-removed" title="Link to this heading">¶</a></h3>
<p>All MAAS-related configuration options have been removed (see <a class="reference internal" href="#ref-release-notes-6-8-incompatible">Backwards-incompatible changes</a> above).</p>
</section>
<section id="local-minio-storage-buckets-removed">
<h3>Local MinIO storage buckets removed<a class="headerlink" href="#local-minio-storage-buckets-removed" title="Link to this heading">¶</a></h3>
<p>Local object storage bucket support using MinIO has been removed (see <a class="reference internal" href="#ref-release-notes-6-8-incompatible">Backwards-incompatible changes</a> above).</p>
</section>
</section>
<section id="known-issues">
<h2>Known issues<a class="headerlink" href="#known-issues" title="Link to this heading">¶</a></h2>
<section id="arm64-vm-boot-failures-synchronous-exception">
<h3>ARM64 VM Boot Failures (Synchronous Exception)<a class="headerlink" href="#arm64-vm-boot-failures-synchronous-exception" title="Link to this heading">¶</a></h3>
<p>Booting virtual machines on ARM64 hardware (such as Raspberry Pi 4 and 5) may result in a Synchronous Exception early in the UEFI boot process.</p>
<p>Impact: Ubuntu 22.04 VMs fail to boot immediately. Ubuntu 24.04 VMs are also affected, with the failure threshold depending on the host’s available memory.
Cause: This bug is tied to Secure Boot and is hypothesized to be related to memory availability and layout.</p>
<p>The workaround for now is disabling Secure Boot (setting <a class="configref reference internal" href="../../instance_options/#instance-boot:boot.mode"><code class="docutils literal notranslate"><span class="pre">boot.mode</span></code></a> to <code class="docutils literal notranslate"><span class="pre">uefi-nosecureboot</span></code>).</p>
</section>
</section>
<section id="updated-minimum-go-version">
<span id="ref-release-notes-6-8-go"></span><h2>Updated minimum Go version<a class="headerlink" href="#updated-minimum-go-version" title="Link to this heading">¶</a></h2>
<p>If you are building LXD from source instead of using a package manager, the minimum version of Go required to build LXD is now 1.26.2.</p>
</section>
<section id="snap-packaging-changes">
<span id="ref-release-notes-6-8-snap"></span><h2>Snap packaging changes<a class="headerlink" href="#snap-packaging-changes" title="Link to this heading">¶</a></h2>
<ul class="simple">
<li><p>Minimum required <code class="docutils literal notranslate"><span class="pre">snapd</span></code> raised to <code class="docutils literal notranslate"><span class="pre">2.64</span></code>.</p></li>
<li><p>Dqlite bumped to <code class="docutils literal notranslate"><span class="pre">v1.18.6</span></code>.</p></li>
<li><p>QEMU bumped to <code class="docutils literal notranslate"><span class="pre">10.2.1+ds-1ubuntu3</span></code>.</p></li>
<li><p>EDK2 rebased to <code class="docutils literal notranslate"><span class="pre">2025.11-3ubuntu7</span></code>.</p></li>
<li><p>NVIDIA container toolkit updated to <code class="docutils literal notranslate"><span class="pre">1.19.0</span></code>.</p></li>
<li><p>Go toolchain for snap builds bumped to <code class="docutils literal notranslate"><span class="pre">go1.26</span></code>.</p></li>
<li><p>Removed MinIO-related snap config (<code class="docutils literal notranslate"><span class="pre">minio.path</span></code>) and MinIO support bits.</p></li>
<li><p>Added the <code class="docutils literal notranslate"><span class="pre">ovn-env</span></code> plug for MicroOVN integration.</p></li>
<li><p>Updated LXCFS handling to align with <code class="docutils literal notranslate"><span class="pre">pidfs</span></code> defaults and removed obsolete <code class="docutils literal notranslate"><span class="pre">lxcfs.pidfd</span></code> options/checks.</p></li>
<li><p>Refactored ZFS setup through a dedicated <code class="docutils literal notranslate"><span class="pre">setup-zfs</span></code> helper script, including improved error handling and fallback behavior.</p></li>
</ul>
</section>
<section id="change-log">
<span id="ref-release-notes-6-8-changelog"></span><h2>Change log<a class="headerlink" href="#change-log" title="Link to this heading">¶</a></h2>
<p>View the <a class="reference external" href="https://github.com/canonical/lxd/compare/lxd-6.7...lxd-6.8">complete list of all changes in this release</a>.</p>
</section>
<section id="downloads">
<span id="ref-release-notes-6-8-downloads"></span><h2>Downloads<a class="headerlink" href="#downloads" title="Link to this heading">¶</a></h2>
<p>The source tarballs and binary clients can be found on our <a class="reference external" href="https://github.com/canonical/lxd/releases/tag/lxd-6.8">download page</a>.</p>
<p>Binary packages are also available for:</p>
<ul class="simple">
<li><p><strong>Linux:</strong> <code class="docutils literal notranslate"><span class="pre">snap</span> <span class="pre">install</span> <span class="pre">lxd</span> <span class="pre">--channel=6/stable</span></code></p></li>
<li><p><strong>MacOS client:</strong> <code class="docutils literal notranslate"><span class="pre">brew</span> <span class="pre">install</span> <span class="pre">lxc</span></code></p></li>
<li><p><strong>Windows client:</strong> <code class="docutils literal notranslate"><span class="pre">choco</span> <span class="pre">install</span> <span class="pre">lxc</span></code></p></li>
</ul>
</section>
</section>

        </article>
      </div>
      <footer>
        
   

<div class="related-pages">
  
  
      
  
  
  <a class="next-page" href="../release-notes-6.7/">
        <div class="page-info">
          <div class="context">
            <span>Next</span>
          </div>
          <div class="title">LXD 6.7 release notes</div>
        </div>
        <svg class="furo-related-icon"><use href="#svg-arrow-right"></use></svg>
      </a>
    <a class="prev-page" href="../">
        <svg class="furo-related-icon"><use href="#svg-arrow-right"></use></svg>
        <div class="page-info">
          <div class="context">
            <span>Previous</span>
          </div>
          
            <div class="title">Release notes</div>
          
        </div>
      </a>
</div>
<div class="bottom-of-page">
  <div class="left-details">
    <div class="copyright">
        &copy; 2014-2026 AGPL-3.0, LXD contributors 
    </div><div class="last-updated">
      Last updated on Apr 22, 2026</div>
  </div>
  <div class="right-details">
    
      <a href="" class="js-revoke-cookie-manager muted-link">Manage your tracker settings</a>
</div>

      </footer>
    </div>
    <aside class="toc-drawer">
      
<div class="toc-sticky toc-scroll">
   
    <div class="toc-title-container">
      <span class="toc-title">
       Contents
      </span>
    </div>
    <div class="toc-tree-container">
      <div class="toc-tree">
        <ul>
<li><a class="reference internal" href="#">LXD 6.8 release notes</a><ul>
<li><a class="reference internal" href="#highlights">Highlights</a><ul>
<li><a class="reference internal" href="#cluster-control-plane-role">Cluster control-plane role</a></li>
<li><a class="reference internal" href="#cluster-links">Cluster links</a></li>
<li><a class="reference internal" href="#replicators">Replicators</a></li>
<li><a class="reference internal" href="#gpu-cdi-hotplug-support-for-containers">GPU CDI hotplug support for containers</a></li>
<li><a class="reference internal" href="#bulk-instance-state-operations-and-metadata-entity-url-improvements">Bulk instance state operations and metadata entity URL improvements</a></li>
<li><a class="reference internal" href="#zfs-volume-promotion-support">ZFS volume promotion support</a></li>
<li><a class="reference internal" href="#ceph-rbd-default-features-changed">Ceph RBD default features changed</a></li>
<li><a class="reference internal" href="#ceph-and-cephfs-support-for-messenger-protocol-v2">Ceph and CephFS support for messenger protocol v2</a></li>
<li><a class="reference internal" href="#custom-port-numbers-in-nvme-and-iscsi-storage-connectors">Custom port numbers in NVMe and iSCSI storage connectors</a></li>
<li><a class="reference internal" href="#ovn-dynamic-northbound-connection">OVN dynamic Northbound connection</a></li>
<li><a class="reference internal" href="#instance-configuration-refresh-on-copy">Instance configuration refresh on copy</a></li>
<li><a class="reference internal" href="#extended-image-metadata-from-simplestreams">Extended image metadata from SimpleStreams</a></li>
<li><a class="reference internal" href="#lxc-project-get-current-command"><code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">project</span> <span class="pre">get-current</span></code> command</a></li>
<li><a class="reference internal" href="#lxc-column-c-flag-for-csv-output"><code class="docutils literal notranslate"><span class="pre">lxc</span> <span class="pre">--column</span></code>/<code class="docutils literal notranslate"><span class="pre">-c</span></code> flag for CSV output</a></li>
<li><a class="reference internal" href="#stricter-file-permissions-across-the-codebase">Stricter file permissions across the codebase</a></li>
<li><a class="reference internal" href="#widespread-toctou-race-condition-fixes">Widespread TOCTOU race condition fixes</a></li>
<li><a class="reference internal" href="#csrf-protection-using-go-standard-library">CSRF protection using Go standard library</a></li>
<li><a class="reference internal" href="#constant-time-secret-comparison">Constant-time secret comparison</a></li>
<li><a class="reference internal" href="#http-hardening">HTTP hardening</a></li>
</ul>
</li>
<li><a class="reference internal" href="#ui-updates">UI updates</a><ul>
<li><a class="reference internal" href="#cluster-management">Cluster management</a></li>
<li><a class="reference internal" href="#instance-experience">Instance experience</a></li>
<li><a class="reference internal" href="#forms-and-input-enhancements">Forms and input enhancements</a></li>
<li><a class="reference internal" href="#asynchronous-operations">Asynchronous operations</a></li>
<li><a class="reference internal" href="#user-driven-improvements">User-driven improvements</a></li>
<li><a class="reference internal" href="#bug-fixes">Bug fixes</a></li>
</ul>
</li>
<li><a class="reference internal" href="#ref-release-notes-6-8-bugfixes">Bug fixes</a></li>
<li><a class="reference internal" href="#backwards-incompatible-changes">Backwards-incompatible changes</a><ul>
<li><a class="reference internal" href="#maas-controller-support-removed">MAAS controller support removed</a></li>
<li><a class="reference internal" href="#minio-local-object-storage-buckets-removed">MinIO local object storage buckets removed</a></li>
<li><a class="reference internal" href="#ceph-rbd-and-cephfs-source-configuration-key-dropped">Ceph RBD and CephFS <code class="docutils literal notranslate"><span class="pre">source</span></code> configuration key dropped</a></li>
<li><a class="reference internal" href="#fan-bridge-fan-type-ipip-support-removed">FAN bridge <code class="docutils literal notranslate"><span class="pre">fan.type=ipip</span></code> support removed</a></li>
<li><a class="reference internal" href="#cluster-role-event-hub-removed">Cluster role <code class="docutils literal notranslate"><span class="pre">event-hub</span></code> removed</a></li>
<li><a class="reference internal" href="#asynchronous-storage-pool-network-and-storage-bucket-endpoints">Asynchronous storage pool, network, and storage bucket endpoints</a></li>
<li><a class="reference internal" href="#operation-resources-metadata-no-longer-populated">Operation <code class="docutils literal notranslate"><span class="pre">resources</span></code> metadata no longer populated</a></li>
<li><a class="reference internal" href="#public-images-restricted-to-the-default-project">Public images restricted to the default project</a></li>
<li><a class="reference internal" href="#migration-pull-mode-into-restricted-projects-no-longer-allowed">Migration pull mode into restricted projects no longer allowed</a></li>
<li><a class="reference internal" href="#go-sdk-changes">Go SDK changes</a></li>
</ul>
</li>
<li><a class="reference internal" href="#deprecated-features">Deprecated features</a><ul>
<li><a class="reference internal" href="#maas-integration-removed">MAAS integration removed</a></li>
<li><a class="reference internal" href="#local-minio-storage-buckets-removed">Local MinIO storage buckets removed</a></li>
</ul>
</li>
<li><a class="reference internal" href="#known-issues">Known issues</a><ul>
<li><a class="reference internal" href="#arm64-vm-boot-failures-synchronous-exception">ARM64 VM Boot Failures (Synchronous Exception)</a></li>
</ul>
</li>
<li><a class="reference internal" href="#updated-minimum-go-version">Updated minimum Go version</a></li>
<li><a class="reference internal" href="#snap-packaging-changes">Snap packaging changes</a></li>
<li><a class="reference internal" href="#change-log">Change log</a></li>
<li><a class="reference internal" href="#downloads">Downloads</a></li>
</ul>
</li>
</ul>

      </div>
    </div>
   
    
  </div>

    </aside>
  </div>
</div><script src="../../../_static/jquery.js?v=5d32c60e"></script>
    <script src="../../../_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
    <script src="../../../_static/documentation_options.js?v=a5603611"></script>
    <script src="../../../_static/doctools.js?v=9a2dae69"></script>
    <script src="../../../_static/sphinx_highlight.js?v=dc90522c"></script>
    <script src="../../../_static/scripts/furo.js?v=46bd48cc"></script>
    <script src="../../../_static/clipboard.min.js?v=a7894cd8"></script>
    <script src="../../../_static/copybutton.js?v=b01cb6f2"></script>
    <script src="../../../_static/config-options.js"></script>
    <script src="../../../_static/design-tabs.js?v=f930bc37"></script>
    <script src="https://assets.ubuntu.com/v1/287a5e8f-bundle.js"></script>
    <script src="../../../_static/header-nav.js?v=e117ad08"></script>
    <script src="../../../_static/github_issue_links.js?v=32bb732f"></script>
    </body>
</html>