#incus — Public Fediverse posts

Kubernetes (and k3s) is a damn headache.

So many moving parts and pitfalls.
So easy and quick to seriously mess up.
So difficult and time-consuming to repair.

Thousands of hours of my life spent babying a kubernetes homelab. Little actual usefulness produced. I don't want this kind of life.
Instead I want to put less time and effort towards tending digital infra, and more time towards organizing community around that digital infra; so our communities can move away from big tech.

Do y'all have suggestions for FLOSS k3s alternatives?

For my use case, it needs to:
- run distributed on a cluster of old linux computers
- run linux containers
- be able to schedule workloads to specific nodes, and reschedule if the node drops off
- be resilient to nodes dropping off and rejoining (both cluster, apps and databases should be fine)
- have deterministic configuration / use git as a source of truth for cluster config and app config. I like the nix method (compute derivation in isolation, only deploy if it will work, immutable) better than the ansible method (commit changes directly to the live system, try to roll back if something breaks. Mutable)
- be easier than k3s
- be more resilient to cluster admin screwups than k3s

Nice to have:
- self-healing
- simple disaster recovery
- geo-distribution
- delay-tolerance
- tolerance towards low inter-node bandwidth
- ability to use transport-agnostic p2p networking (like reticulum)

Your suggestions are very welcome :heart_cyber:

(Meme nabbed from https://lemmy.world/post/13302376)

#fedihelp #kubernetes #k3s #coopcloud #incus #homelab #IT #techcoop #riseAgainstBigTech #reticulum

CVE-2026-63125 – Critical RCE/privesc in Incus. Unprivileged user can execute code as root via symlink attack. CVSS 9.9. Patch to 7.3.0 immediately. #CVE #Incus #infosec

https://www.valtersit.com/cve/CVE-2026-63125/

Getting started with #incus
Had to login into the hoster and insert a rescue CD to repartition.
Ugh. Fuck novnc again for their fucking "keyboard". Ended up ssh-ing into systemrescuedisc.

@ithoughtisawa2 I tend to select software to self-host based on it they support OIDC/OAUTH. That might limit me a bit but it is surprising how many great services that do support it.

Also, #authelia has pretty good logging which is helpful to troubleshoot #OIDC issues.

Some of my current favorites using OIDC:

#forgejo
#miniflux
#linkding
#usememos
#immich
#actualbudget
#grimmory
#grafana
#argocd
#netbox
#harbor
#paperless
#incus
#readeck
#tududi
#gethomepage

Hm, now I indeed play with the idea to put #incus on a VPS to manage my services. Good idea or not?
Gotta do a list of what I host

#selfhosting

RE: https://tacobelllabs.net/@astraluma/117084073135506335

Yup, for homelab/light prod and you want a cluster.

I think #Incus clusters without Ceph and OVN is completely untested, and I'm finding a shocking amount of bugs.

Go with #Proxmox, its minimal clusters actually work (as long as you set up replication schedules and are ok with time-based data replication).

Or just go Kubernetes or unclustered.

things i have learned about #Incus:

the clustered mode really wants you to also be using ceph and ovn. if you don't you'll constantly be knocking your shins on broken things. (so far: buckets will be weird, project force delete might not work, bridge networks have a process to be created, etc)

Note that Proxmox's clustering doesn't do this--it has options to replicate volumes (on a schedule), networking works as expected, etc.

it's not stupid if it works

#homelab #projecttinyminimicro #incus #cooling #duplo

🚀 Incus 7.3 a fost lansat: Accelerare GPU partajată și 13 remedieri de securitate! Ghidul și administratorul open-source de containere și mașini virtuale, Incus, ajunge la versiunea 7.3, aducând funcționalități avansate de performanță, opțiuni noi de rețea și o serie importantă de corecții de securitate. ✨ Ce aduce nou Incus 7.3:🎮 Accelerare GPU 3D partajată pentru VM-uri:• Introduce un tip nativ de GPU ce combină virtio-gpu și virglrenderer, permițând mai multor mașini virtuale Linux să partajeze eficient resursele aceleiași plăci grafice, fără a mai fi nevoie de passthrough PCI dedicat. 🛡️ 13 vulnerabilități de securitate rezolvate:• Remediază probleme critice ce puteau permite traversarea directoarelor (path traversal) sau executarea de comenzi prin legături simbolice și fișiere de backup malițioase.⚙️ Administrare directă UEFI NVRAM:• Comandă nouă incus low-level nvram ce le permite administratorilor să modifice ordinea de boot și variabilele de firmware direct din terminal. 🌐 Îmbunătățiri de rețea și BGP:• Suport pentru sesiuni BGP ne-numerotate prin interfețe de rețea (IPv6 link-local), optimizând rutarea adreselor IP către instanțe. 💻 Instalatoare native pentru Windows & macOS:• Pachete de instalare dedicate (MSI și PKG) lansate direct pentru utilizatorii de desktop. Un pas important pentru un management eficient și sigur al mașinilor virtuale și containerelor pe Linux! 🚀 #Incus #Virtualization #Linux #SysAdmin #OpenSource #Containers #VirtualMachines #CloudNative #TechNews

#Incus 7.3 is now out!
That's quite the busy release with a lot of new features across the board (GPU accelerated VMs, remote port-forwarding, UEFI NVRAM configuration, ...) as well as a lot of bugfixes, performance improvements and security fixes.
https://discuss.linuxcontainers.org/t/incus-7-3-has-been-released/27033

i have written words about how i'm trying to build reliable, maintainable, persistent infrastructure at a startup in the middle of the slopocalypse:

https://til.ello.tech/infraslopture-and-other-paradoxes

#nix #nixos #incus #slop

Oh, that's neat

#Incus has a first party compose implementation

Если вы привыкли к Docker, но хотите обойтись без центрального root-демона, попробуйте Podman.

А chroot и unshare выбирайте только для доверенных приложений и задач, где вы готовы настраивать изоляцию вручную.

#docker #podman #incus #firejail

Почему Docker не всегда лучший выбор и чем его заменить

Docker — отличный инструмент, но «отличный» не значит «единственный» и тем более не значит, что он подходит для любой задачи. На одиночном сервере с одним-двумя приложениями Docker может принести больше проблем, чем пользы. Демон, образы, слои, сети и тома упрощают упаковку и запуск приложений, но на одиночке или небольшом VDS они избыточны. Под катом о том, в каких случаях Docker не нужОн, чем его заменить и как. Читать

https://habr.com/ru/companies/ruvds/articles/1060030/

#Docker #Podman #systemd #systemdnspawn #Incus #Firejail #Linuxконтейнеры #контейнеризация #администрирование_серверов #ruvds_статьи

Just started using the labs in #pluralsight; I did not know they existed. The setup is decent, but my network is shit, and waiting minutes for a single line to type out is unworkable. I am going back to creating my own local labs with #incus.

#linux #sysadmin #devops #tech

#Incus 7.0.1 LTS is now out!
That's got quite a lot of bugfixes, security fixes and a whole bunch of backported enhancements.
https://discuss.linuxcontainers.org/t/incus-7-0-1-lts-has-been-released/26942

Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.

#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec

https://securityonline.info/incus-vulnerabilities-v7-2-0/?utm_source=mastodon&utm_medium=jetpack_social

Incus 7.2 fixes eight security flaws, including six critical issues, while adding per-instance SELinux confinement for containers and VMs.
https://linuxiac.com/incus-7-2-container-virtual-machine-manager-released-with-selinux-support/

#incus #opensource #containers #virtualization

Kennt sich hier wer mit Incus aus? Ich versuche mich, da einzulesen und sehe Incus OS. Brauche ich das?

Ich habe einfach einen Rechner, auf den ich das installieren möchte.

Oder sollte ich ein Debian 13 installieren und darin Incus installieren?

#incus #incusOS

#Incus 7.2 is now out!
This brings in proper SELinux support, a lot of CLI improvements, a bunch of welcome network related improvements and more!
Also includes quite a few important security fixes, so you're going to want to update to a fixed version.
https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879

Migrating from Proxmox to NixOS and Incus

https://www.nijho.lt/post/proxmox-to-nixos/

#HackerNews #Proxmox #NixOS #Incus #migration #technews #virtualization

I know it's not supposed to be like this; but I swear every time I need to recover an #illumos zone - including transferring them between installs using snapshots - I feel like motherfucking Indiana Jones. Between things like #zoneadmd and #beadm and magic #zfs flags, it's the worst kind of archeology trip.

Say what you might about #incus or #zones - IMHO, nobody matches the user-friendly ergonomics of @BastilleBSD for persistent containers.

Quick question for Incus users: What happened to the Fedora images on https://images.linuxcontainers.org?

I was trying to pull a fedora image and found that all the fedora images have disappeared from the list. Now I am confused, were the images removed, or was I hallucinating their presence the whole time?

#fedora #linux #containers #vm #question #incus #lxc #lxd #archlinux #sysadmin #devops #ubuntu #technology