instance

package

Versions in this module

v0

v0.7.0

Mar 26, 2024 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.6.0

Feb 22, 2024 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.5.1

Jan 28, 2024 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.5.0

Jan 25, 2024 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

Changes in this version

type Instance

+ RunPath func() string

v0.4.0

Dec 21, 2023 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.3.0

Nov 26, 2023 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.2.0

Oct 27, 2023 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

v0.1.0

Oct 7, 2023 GO-2025-3781 +2 more

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

Changes in this version

+ const ConsoleTypeConsole

+ const ConsoleTypeVGA

+ const HookStart

+ const HookStop

+ const HookStopNS

+ const PowerStateRunning

+ const PowerStateStopped

+ var Create func(s *state.State, args db.InstanceArgs, p api.Project) (Instance, revert.Hook, error)

+ var ErrNotImplemented = fmt.Errorf("Not implemented")

+ var Load func(s *state.State, args db.InstanceArgs, p api.Project) (Instance, error)

+ var ValidDevices func(state *state.State, p api.Project, instanceType instancetype.Type, ...) error

+ func AllowedUnprivilegedOnlyMap(rawIdmap string) error

+ func BackupLoadByName(s *state.State, project, name string) (*backup.InstanceBackup, error)

+ func DeviceNextInterfaceHWAddr() (string, error)

+ func FilterFull(instances []*api.InstanceFull, clauses filter.ClauseSet) ([]*api.InstanceFull, error)

+ func IsSameLogicalInstance(inst Instance, dbInst *db.InstanceArgs) bool

+ func LoadInstanceDatabaseObject(ctx context.Context, tx *db.ClusterTx, project, name string) (*cluster.Instance, error)

+ func MoveTemporaryName(inst Instance) (string, error)

+ func NextSnapshotName(s *state.State, inst Instance, defaultPattern string) (string, error)

+ func ResolveImage(ctx context.Context, tx *db.ClusterTx, projectName string, ...) (string, error)

+ func SnapshotProtobufToInstanceArgs(s *state.State, inst Instance, snap *migration.Snapshot) (*db.InstanceArgs, error)

+ func SnapshotToProtobuf(snap *api.InstanceSnapshot) *migration.Snapshot

+ func SuitableArchitectures(ctx context.Context, s *state.State, tx *db.ClusterTx, projectName string, ...) ([]int, error)

+ func ValidConfig(sysOS *sys.OS, config map[string]string, expanded bool, ...) error

+ func ValidName(instanceName string, isSnapshot bool) error

+ type Cmd interface

+ PID func() int

+ Signal func(s unix.Signal) error

+ Wait func() (int, error)

+ WindowResize func(fd, winchWidth, winchHeight int) error

+ type ConfigReader interface

+ Architecture func() int

+ ExpandedConfig func() map[string]string

+ ExpandedDevices func() deviceConfig.Devices

+ LocalConfig func() map[string]string

+ LocalDevices func() deviceConfig.Devices

+ Project func() api.Project

+ Type func() instancetype.Type

+ type Container interface

+ ConsoleLog func(opts liblxc.ConsoleLogOptions) (string, error)

+ CurrentIdmap func() (*idmap.IdmapSet, error)

+ DevptsFd func() (*os.File, error)

+ DiskIdmap func() (*idmap.IdmapSet, error)

+ IdmappedStorage func(path string, fstype string) idmap.IdmapStorageType

+ InsertSeccompUnixDevice func(prefix string, m deviceConfig.Device, pid int) error

+ NextIdmap func() (*idmap.IdmapSet, error)

+ type CriuMigrationArgs struct

+ ActionScript bool

+ Cmd uint

+ DumpDir string

+ Features liblxc.CriuFeatures

+ Function string

+ Op *operationlock.InstanceOperation

+ PreDumpDir string

+ StateDir string

+ Stop bool

+ type Info struct

+ Error error

+ Features map[string]any

+ Name string

+ Type instancetype.Type

+ Version string

+ type Instance interface

+ Backups func() ([]backup.InstanceBackup, error)

+ CGroup func() (*cgroup.CGroup, error)

+ CanMigrate func() (bool, bool)

+ CloudInitID func() string

+ Console func(protocol string) (*os.File, chan error, error)

+ ConsoleBufferLogPath func() string

+ CreationDate func() time.Time

+ DeferTemplateApply func(trigger TemplateTrigger) error

+ Delete func(force bool) error

+ Description func() string

+ DeviceEventHandler func(*deviceConfig.RunConfig) error

+ DevicesPath func() string

+ Exec func(req api.InstanceExecPost, stdin *os.File, stdout *os.File, stderr *os.File) (Cmd, error)

+ ExecOutputPath func() string

+ ExpiryDate func() time.Time

+ Export func(w io.Writer, properties map[string]string, expiration time.Time) (api.ImageMetadata, error)

+ FileSFTP func() (*sftp.Client, error)

+ FileSFTPConn func() (net.Conn, error)

+ FillNetworkDevice func(name string, m deviceConfig.Device) (deviceConfig.Device, error)

+ Freeze func() error

+ ID func() int

+ Info func() Info

+ InitPID func() int

+ IsEphemeral func() bool

+ IsFrozen func() bool

+ IsPrivileged func() bool

+ IsRunning func() bool

+ IsSnapshot func() bool

+ IsStateful func() bool

+ LastUsedDate func() time.Time

+ Location func() string

+ LockExclusive func() (*operationlock.InstanceOperation, error)

+ LogFilePath func() string

+ LogPath func() string

+ Metrics func(hostInterfaces []net.Interface) (*metrics.MetricSet, error)

+ MigrateReceive func(args MigrateReceiveArgs) error

+ MigrateSend func(args MigrateSendArgs) error

+ Name func() string

+ OnHook func(hookName string, args map[string]string) error

+ Operation func() *operations.Operation

+ Path func() string

+ Profiles func() []api.Profile

+ Rebuild func(img *api.Image, op *operations.Operation) error

+ RegisterDevices func()

+ Rename func(newName string, applyTemplateTrigger bool) error

+ Render func(options ...func(response any) error) (any, any, error)

+ RenderFull func(hostInterfaces []net.Interface) (*api.InstanceFull, any, error)

+ RenderState func(hostInterfaces []net.Interface) (*api.InstanceState, error)

+ Restart func(timeout time.Duration) error

+ Restore func(source Instance, stateful bool) error

+ RootfsPath func() string

+ SetOperation func(op *operations.Operation)

+ Shutdown func(timeout time.Duration) error

+ Snapshot func(name string, expiry time.Time, stateful bool) error

+ Snapshots func() ([]Instance, error)

+ Start func(stateful bool) error

+ State func() string

+ StatePath func() string

+ Stop func(stateful bool) error

+ StoragePool func() (string, error)

+ TemplatesPath func() string

+ Unfreeze func() error

+ Update func(newConfig db.InstanceArgs, userRequested bool) error

+ UpdateBackupFile func() error

+ VolatileSet func(changes map[string]string) error

+ func CreateInternal(s *state.State, args db.InstanceArgs, clearLogDir bool) (Instance, *operationlock.InstanceOperation, revert.Hook, error)

+ func LoadByID(s *state.State, id int) (Instance, error)

+ func LoadByProjectAndName(s *state.State, projectName string, instanceName string) (Instance, error)

+ func LoadFromBackup(s *state.State, projectName string, instancePath string, applyProfiles bool) (Instance, error)

+ func LoadNodeAll(s *state.State, instanceType instancetype.Type) ([]Instance, error)

+ type MigrateArgs struct

+ ClusterMoveSourceName string

+ ControlReceive func(m proto.Message) error

+ ControlSend func(m proto.Message) error

+ Disconnect func()

+ FilesystemConn func(ctx context.Context) (io.ReadWriteCloser, error)

+ Live bool

+ Snapshots bool

+ StateConn func(ctx context.Context) (io.ReadWriteCloser, error)

+ type MigrateReceiveArgs struct

+ InstanceOperation *operationlock.InstanceOperation

+ Refresh bool

+ type MigrateSendArgs struct

+ AllowInconsistent bool

+ type TemplateTrigger string

+ const TemplateTriggerCopy

+ const TemplateTriggerCreate

+ const TemplateTriggerRename

+ type VM interface

+ AgentCertificate func() *x509.Certificate

Other modules containing this package

github.com/lxc/incus/v6

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL