Affected by GO-2025-3781 and 29 other vulnerabilities

GO-2025-3781: Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

GO-2025-3782: Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

GO-2026-4357: Incus container image templating arbitrary host file read and write in github.com/lxc/incus

GO-2026-4359: Incus container environment configuration newline injection in github.com/lxc/incus

GO-2026-4879: Local Incus UI web server vulnerable to nuthentication bypass in github.com/lxc/incus

GO-2026-4881: Incus vulnerable to arbitrary file read and write through pongo templates in github.com/lxc/incus

GO-2026-4882: Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus

GO-2026-4884: Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus

GO-2026-4885: Incus vulnerable to local privilege escalation through VM screenshot path in github.com/lxc/incus

GO-2026-4886: Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus

GO-2026-5127: Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus

GO-2026-5168: Incus has Unbounded YAML Metadata Decode via Parsing in github.com/lxc/incus

GO-2026-5252: Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus

GO-2026-5254: Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus

GO-2026-5280: Incus is affected by unbounded binary import disk exhaustion in github.com/lxc/incus

GO-2026-5319: Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus

GO-2026-5384: Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus

GO-2026-5397: Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus

GO-2026-5612: Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

GO-2026-5742: Incus has Nil Dereferences on Restore via Malformed YAML in github.com/lxc/incus

GO-2026-5798: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image in github.com/lxc/incus

GO-2026-5799: Incus has a restricted project bypass leading to arbitrary command execution in github.com/lxc/incus

GO-2026-5800: Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} in github.com/lxc/incus

GO-2026-5801: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus

GO-2026-5802: Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus

GO-2026-5803: Incus has arbitrary file read+write on host via templates/ symlink in malicious image in github.com/lxc/incus

GO-2026-5806: Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus

GO-2026-5808: Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus

GO-2026-5810: Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus

The highest tagged major version is v7.

instancetype

package

v0.7.0 Latest Latest Go to latest Published: Mar 26, 2024 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lxc/incus

Links

Documentation ¶

Constants ¶

View Source

const (
	// Any represents any type of instance.
	Any = Type(-1)

	// Container represents a container instance type.
	Container = Type(0)

	// VM represents a virtual-machine instance type.
	VM = Type(1)
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Type ¶

type Type int

Type indicates the type of instance.

func New ¶

func New(name string) (Type, error)

New validates the supplied string against the allowed types of instance and returns the internal representation of that type. If empty string is supplied then the type returned is TypeContainer. If an invalid name is supplied an error will be returned.

func (Type) Filter ¶

func (instanceType Type) Filter() *Type

Filter returns a valid filter field compatible with cluster.InstanceFilter. 'Any' represents any possible instance type, and so it is omitted.

func (Type) String ¶

func (instanceType Type) String() string

String converts the internal representation of instance type to a string used in API requests. Returns empty string if value is not a valid instance type.

func (Type) ToAPI ¶

func (instanceType Type) ToAPI() api.InstanceType

ToAPI converts the internal representation of instance type to an api.InstanceType.

type VMAgentData ¶

type VMAgentData struct {
	Name        string                         `json:"name"`
	CloudInitID string                         `json:"cloud_init_id"`
	Location    string                         `json:"location"`
	Config      map[string]string              `json:"config,omitempty"`
	Devices     map[string]deviceConfig.Device `json:"devices,omitempty"`
}

VMAgentData represents the instance data exposed to the VM agent.

type VMAgentMount ¶

type VMAgentMount struct {
	Source  string   `json:"source"`
	Target  string   `json:"target"`
	FSType  string   `json:"fstype"`
	Options []string `json:"options"`
}

VMAgentMount defines mounts to perform inside VM via agent.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL