- 56
- 50 704
Zabbly
Canada
เข้าร่วมเมื่อ 17 ก.ค. 2023
Channel following the open source adventures of Stéphane Graber.
Mostly focused on Incus, the container and virtual machine manager, and other Linux Containers projects.
Mostly focused on Incus, the container and virtual machine manager, and other Linux Containers projects.
Introducing Incus 6.7!
Sponsor this work: github.com/sponsors/stgraber, patreon.com/stgraber or ko-fi.com/stgraber
-----
This is another one of those pretty well rounded releases with new features and improvements for everyone from standalone users to those running a small homelab all the way to large scale cluster users, there’s something for everyone!
New features:
- Easy access to the Incus web interface
- Automatic cluster re-balancing
- DHCP renewal for OCI containers
- Partial instance/volume refresh
- Configurable columns, formatting and refresh time for incus top
- Support for DHCP address ranges in OVN networks
- Changing of parent device for physical networks
- Aditional QMP helpers in QEMU scriptlet
- Additional QEMU log file for QMP commands
- New get_instances_count command for placement scriptlet
- Support of formatting in incus admin sql command
-----
Announcement: discuss.linuxcontainers.org/t/incus-6-7-has-been-released/22099
Github: github.com/lxc/incus
Packages: github.com/zabbly/incus
Online demo: linuxcontainers.org/incus/try-it
Commercial support: zabbly.com/incus
-----
This is another one of those pretty well rounded releases with new features and improvements for everyone from standalone users to those running a small homelab all the way to large scale cluster users, there’s something for everyone!
New features:
- Easy access to the Incus web interface
- Automatic cluster re-balancing
- DHCP renewal for OCI containers
- Partial instance/volume refresh
- Configurable columns, formatting and refresh time for incus top
- Support for DHCP address ranges in OVN networks
- Changing of parent device for physical networks
- Aditional QMP helpers in QEMU scriptlet
- Additional QEMU log file for QMP commands
- New get_instances_count command for placement scriptlet
- Support of formatting in incus admin sql command
-----
Announcement: discuss.linuxcontainers.org/t/incus-6-7-has-been-released/22099
Github: github.com/lxc/incus
Packages: github.com/zabbly/incus
Online demo: linuxcontainers.org/incus/try-it
Commercial support: zabbly.com/incus
มุมมอง: 783
วีดีโอ
Introducing Incus 6.6!
มุมมอง 2.3Kหลายเดือนก่อน
Sponsor this work: github.com/sponsors/stgraber, patreon.com/stgraber or ko-fi.com/stgraber A new release with quite a lot of performance improvements as well as a good lineup of new features! New features: - OS info for virtual machines - Console history for virtual machines - Ability to create clustered LVM volume groups - QCOW2 and VMDK support in incus-migrate - Configurable macvlan mode - ...
Introducing Incus 6.5!
มุมมอง 8072 หลายเดือนก่อน
Sponsor this work: github.com/sponsors/stgraber, patreon.com/stgraber or ko-fi.com/stgraber A new release with quite a lot of performance improvements as well as a good lineup of new features! New features: - Instance auto-restart - Column selection in all list commands - QMP command hooks and scriptlet - Live disk resize for VMs - PCI devices hotplug for VMs - OVN load-balancer health checks -...
Introducing Incus 6.4!
มุมมอง 9703 หลายเดือนก่อน
Sponsor this work: github.com/sponsors/stgraber, patreon.com/stgraber or ko-fi.com/stgraber A pretty packed new release with changes for everyone! New features: - Cluster group configuration - Per-cluster group CPU baseline - Attaching sub-directories of custom storage volumes - Per storage pool project limits - Isolated OVN networks (no uplink) - Per-instance LXCFS - Environment files at creat...
Introducing Incus 6.3!
มุมมอง 1.4K4 หลายเดือนก่อน
Sponsor this work: github.com/sponsors/stgraber, patreon.com/stgraber or ko-fi.com/stgraber A very excited release introducing application container support (OCI/Docker) and much more! New features: - Initial support for OCI application containers - Baseline CPU definition within clusters - Filesystem support for io.bus and io.cache - Improvements to incus top - CPU flags in server resources - ...
Customizing Incus instance placement with scriptlets
มุมมอง 4165 หลายเดือนก่อน
Customizing Incus instance placement with scriptlets
FOSDEM 2024: Isolated user namespaces
มุมมอง 1.7K9 หลายเดือนก่อน
FOSDEM 2024: Isolated user namespaces
Mainline kernel build repository (and ZFS)
มุมมอง 563ปีที่แล้ว
Mainline kernel build repository (and ZFS)
I'm in the process of replacing my Proxmox stuff with Incus! I love Incus :D
Thanks for your work! is there a detailed tutorial on how to build a productive cluster? i have tried the terraform/ansible example, but i find it difficult to build a properly usable cluster with storage and bridges.
Thank you so much!
Keep up the good work!
Could you shorten these videos please? Too long without that much content. I imagine livestreaming is fun and all but think of those who consume this after the fact. This is when an AI-based tool to extract text and summerize would come in handy.
I can't really shorten the live streams as with interactions and everything they tend to last about an hour. I also don't have time or much interest in doing any editing on those after the fact either and I've generally had very poor experience with those new AI tools, unless you're using them for somewhat creative tasks, I wouldn't trust them with anything where I need an accurate result. It's perfectly fine to just not watch the live streams though and stick to the release announcements and other shorter videos though. There are playlists setup to make it easy to select what you want.
Thank you for all the very important work that you do.
Annoyingly brilliant - would give 10 thumbs up if I could.
Is OVN usable strictly if you have a L2 network available with unused interface? What solution is there for lower budget projects, that would use either cloud servers or even dedicated servers, where you'd get a vswitch with a vlan to use on the single interface used to connect to the internet also?
When dealing with multiple servers and you want a proper HA environment, then yeah, you need to have a shared L2 network across all servers. But you can still use OVN even if you don't. You can use a regular Incus bridge as the uplink network. In that scenario, the external address can't properly move between servers, so if a server goes down and another takes over as the external facing gateway for an OVN network, all connections on that network will break and have to be re-established, but that's the main impact there. I have a few customers running OVN on the public cloud and it's been working fine with those limitations.
Hi Stephan I really like this project and I have been trying to connect to the rest api using a javascript application and I have been getting certificate issues. What are the requirements for me to be able to talk to the Incus api securely from another application specifically a web app without getting these issue?
Out of the box Incus runs with its own self-signed TLS certificate, so you'd want to have a copy of the public half of that certificate and confirm that you're talking to the expected server. For authentication, we use a client certificate, so you'll also need to generate one of those and have it be added to the Incus trust store. I'm not familiar with javascript, but if that's done as a standalone/server-side piece of software, it shouldn't be too hard to do as TLS server validate and client authentication has been a thing for decades. Where it may get trickier is if you're talking about in-browser javascript. In that scenario, the same still applies, but you don't get to have your code do the server validation, instead the browser will do it. So you'll either need to use a valid certificate (Let's Encrypt or the like), or you'll need to get the user to go to the Incus HTTPS endpoint and go through the steps to allow the untrusted certificate. Then on the client authentication side, you'll need to generate a client certificate, have the user load it in their certificate and then add the public side of that to the Incus trust store. We actually ship a web UI which does all of that as part of the incus-ui-canonical package, so if you need to access the Incus API from a web browser, that may be a good place to look.
@@TheZabbly Thank you so much for reaching out. My use-case scenario was based on a server side authentication using the certificate generated from the Incus API. So when I was placing the certificate in the headers, my client requests failed with “unauthorised” status when I sent the requests. Do you have a community place where I can reach out to you other than the “discussions” platform for more communication on how i can use Incus through the rest API other than its sockets Also I would not mind if you created a short video on how you use your programming language of choice to talk to Incus through the API. Or if there is one already you can point it out.
Fantastic release, love the filtering capabilities, would be great if you could configure or otherwise set your own defaults for the list command. Question: Do you have plans to release a roadmap or, even better, a roadmap video?
You can do it through the built-in alias feature. `incus alias add list "list -cnstuDm"` This also lets you effectively define your own commands so you could have "incus sl" show you your preferred fancy instance listing while keeping ls/list the normal clean output. For roadmap, we don't have a fixed long term roadmap at this time. Github is a good indication of what's up for grabs and we try to go through as much as we can every month. There are some larger ones like Linstor support which would probably qualify as roadmap items, but it's still at the research stage so it's not clear that it'll necessarily be implemented or how quickly it would be.
will incus fix it ?
Timestamps: [00:00:00] - Release overview [00:21:01] - Demos: [00:21:01] - Instance auto-restart [00:23:50] - Column selection in all list commands [00:25:00] - QMP command hooks and scriptlet (no demo, just an overview) [00:26:19] - Live disk resize support in virtual machines (and finding limitations with nVME) [00:30:59] - OVN load-balancer health checks [00:34:27] - ECMP support for OVN interconnect [00:40:24] - Promiscuous mode for OVN NICs [00:42:04] - Ability to run off IP allocation on OVN NICs [00:43:49] - Customizable OIDC scope request [00:44:43] - Configurable LVM PV metadata size [00:46:11] - Configurable OVS socket path [00:47:18] - Wrapping up, where to get releases, and sticking with QEMU 9.0.2
great!
wow impressive.
Very excited about incus-os!
How much time would it take to manually setup this. Without Terraform and ansible?
Depends on existing familiarity with Ceph and OVN. If you're doing it from scratch with no knowledge and are reading through manuals and guides, probably a few days to get it right. Ceph isn't too difficult once you understand all the components and how the keyrings and maps work, so can probably get it to behave in a day. OVN is actually much simpler than Ceph but it lacks end user documentation as it's mostly used embedded in other solutions, so figuring out exactly how to set up a working PKI, generated certificates and keys, where to put them, how to configure the various daemons to use them, connect to each other in the correct order and bring up a functional cluster, can be a very frustrating exercise.
Thx Zabbly. For running incus I use an existing immutable OS: NixOS. Very minimal (no desktop) and systemd centric :)
Timestamps: [00:00:00] - Release overview, running through the announcement [00:17:46] - Demos: [00:17:46] - Creation of complex ZFS pools [00:19:45] - Listing of profiles across projects [00:20:10] - Listing of network zones across projects [00:21:15] - Additional functions made available to the instance placement scriptlet (no demo) [00:22:02] - Feeding YAML to 'create' commands in the 'incus' CLI [00:23:39] - Customizable columns in the 'incus' CLI [00:25:09] - migration.stateful configuration key for containers [00:26:34] - Stateless ACLs on OVN [00:27:44] - Instance uptime (startup time) tracking [00:28:36] - Improvement to network handling during evacuation (internal) [00:28:47] - Wrapping up, and where to find releases
Timestamps: [00:00:00] - Release overview, running through the announcement [00:11:59] - Demos: [00:11:59] - Initial support for OCI application containers [00:19:44] - Baseline CPU definition within clusters [00:22:28] - Filesystem support for 'io.bus' and 'io.cache' [00:25:40] - Improvements to 'incus top' [00:27:38] - CPU flags in server resources [00:29:02] - Unified image support in incus-simplestreams [00:31:47] - Completion of libovsdb transition (internal) [00:33:49] - Wrapping up, and more OCI container info
Timestamps: [00:00:00] - Release overview, running through the announcement [00:12:27] - Demos: [00:12:27] - Cluster group configuration [00:20:33] - Using a sub-path of a volume as a disk [00:23:07] - Support for environment file at create/launch time [00:26:20] - Per storage pool projects limits [00:30:16] - Isolated OVN networks (no uplink) [00:35:33] - Per-instance LXCFS [00:38:13] - Wrapping up, where to get releases, and features not being added to 6.0 LTS
Timestamps: [00:00:00] - Release overview, running through the announcement [00:14:42] - Demos: [00:14:42] - 'incus top' command [00:16:20] - System load information in resources API && PCI devices in 'incus info --resources' [00:17:19] - Query access information for instances and projects [00:20:43] - Forceful deletion of projects [00:21:58] - 'get_project' scriptlet function (can't demo) [00:22:33] - Querying objects across projects [00:24:26] - Improved alias handling in 'incus-simplestreams' [00:27:01] - Feeding YAML to create commands in the incus CLI (no demo) [00:27:28] - Customizable column lists in the CLI [00:28:39] - More automatically generated documentation [00:29:57] - Wrapping up, where to get releases, and talking about LTS
Good news
Wow!!
awesome
Amongst all open-source products I use, Incus 'doc & showcase' are by far the best :-) Thanks for this great work !
Really appreciate for the great features. 👍
Thanks for your hard work
👍
game changer
Cool. You said that it's not the idea to replace docker or even Kubernetes. Why? Would be nice to have the one who rules all virtualization. 😊
pronounciation of alias threw me for a loop there, but I got it in the end :)
Really cool stuff! I've moved all my containers from lxc which wasn't working for a while and works now with incus.
Are you the main developer of incus?
Yeah. We have many contributors but I'm currently the only person working full time on it.
Slightly unrelated question. What terminal program do you use? I like how you increase / decrease the font size while keeping the window size unchanged.
I'm using Tilix
YAML input supported for all `create` commands is a very nice feature ! Thx
.
Thanks for all the New features !! Listing bit, about networks and config/project is super cool ! 👍👍
Very nice, but on Void Linux we have still only 0.6 version 😞
Even on distros that decide to ship the monthly releases, it often takes a few days before they update to a new release.
Thank you
Thx Canonical for having feeding the nerds :)
Are you going to do another video about NorthSec after the conference? It would be really cool to see the parts you had to skip. I am also interested in how it all went. 😊
yeah nice i'm using to my test server
This was such a good priority to address. Thank you for your beautiful work.
Yeah, for sure, not much point in having a LTS release for stable production environments without also having a good way to deploy and maintain such environments!
YES YES YES. Thanks for this. Can't wait to start playing around with Incus and learn it more.
Thanks for making this Video. I heard about Incus from Awesome Open Source and so far i am liking it. A lot of the information is going over my head but I am able to understand the basics. I hope i can learn more and move away from Proxmox to this.
Newb here, can this be installed along side docker yet?
It can, but you need to understand and configure Docker's firewalling as otherwise it will prevent Incus containers from getting any networking.
It is nice to hear that Incus reached the LTS version. Keep up the good work.
congrats!!! and thanks for all the hard work you guys are putting into this.
If I would be the responsible person at Canonical, I would really feel stupid to have lost the company such a brilliant and next to iconic employee. If I would be the boss of that responsible, I would really enjoy to do some very detailed bossing. Looks like I'm not qualified to work for a company like Canonical. Probably a good thing.
One of the most exciting projects in the Linux virtualization space. Congrats on this milestone release!