Weekly status #104

Weekly status for the weeks of the 24th to the 30th of June.


This last week saw the addition of 2 new features in LXD.

Firstly a new storage driver has been added that provides CEPHFS as an option for container custom storage volumes. This is in addition to the existing CEPH storage driver that LXD has. The difference between CEPH and CEPHFS is that the former uses block level access to the CEPH cluster whereas CEPHFS uses a higher level POSIX filesystem API to CEPH.
For more info see https://lxd.readthedocs.io/en/latest/storage/#cephfs

The second new feature is a preliminary release of the isolated networking feature. This preliminary release provides IP filtering for containers with statically assigned IPs when using the bridged NIC type. This prevents containers from spoofing packets from IPs other then the ones assigned to them statically. It can be controlled by 2 new container configuration keys; security.ipv4_filtering and security.ipv6_filtering respectively.
For more info see https://lxd.readthedocs.io/en/latest/containers/#nictype-bridged

LXD master also transitioned from our old implementation of dqlite (mostly in Go) to dqlite 1.0 which is mostly based on C libraries and re-designed to improve performance and debug-ability of our clustering logic. This will ship in LXD 3.15 and then make it to LXD 3.0.5.

There were also several bug fixes in LXD and LXC.

Upcoming events

Ongoing projects

The list below is feature or refactoring work which will span several weeks/months and can’t be tied directly to a single Github issue or pull request.

  • Isolated networking
  • Rework of internal LXD storage handling
  • Dqlite 1.0
  • Various kernel work
  • Stable release work for LXC, LXCFS and LXD

Upstream changes

The items listed below are highlights of the work which happened upstream over the past week and which will be included in the next release.




  • Nothing to report this week


  • Nothing to report this week

Distribution work

This section is used to track the work done in downstream Linux distributions to ship the latest LXC, LXD and LXCFS as well as work to get various software to work properly inside containers.


  • Nothing to report this week


  • Updated edge snap for dqlite 1.0