v2.3.0

[AkihiroSuda]

Highlights:

• 🪟Experimentally support HCS driver for eliminating QEMU dependency (Windows hosts)
• 🍎Attach host block devices to VZ guests (macOS hosts)
• 🐧Experimentally support lima:shared, lima:host, and lima:bridged networks (Linux hosts)
• 🖥️limactl menu: an experimental menu-based user interface

Changes

• Windows host support:

  • Experimentally support HCS driver (Implement HCS driver #5449 driver(hcs): drop dependency on qemu-img for VHDX image conversion #5514, thanks to LFX mentee @mie313, and @unsuman)
  • Support native Windows OpenSSH (sshutil: parse the Win32-OpenSSH version banner #5298 copytool: support native Windows OpenSSH #5299 hostagent: support reverse-sshfs on plain Windows #5300 copytool: report a bad path instead of a missing tool #5337, thanks to @jandubois)
  • Automatically append common tool directories (e.g., QEMU) to PATH (Autoappend common tool directories to PATH #5348, thanks to LFX mentee @mie313)

• Windows guest support:

  • Support provision (Support provision feature on Windows VM #5263, thanks to LFX mentee @mie313)

• macOS guest support:

  • Add osOpts.darwin.suppressFirstLoginSetup to skip the first-login Setup Assistant (feat(vz): add osOpts.Darwin.suppressFirstLoginSetup #5336, thanks to @trodemaster)

• VZ:

  • Support attaching host block devices (limactl start --block-device) (Secure macOS VZ block-device attachment #5117, thanks to @pirate)
  • Add audio.microphone to attach a capture stream (vz: add audio.microphone to attach a capture stream #5462, thanks to @iamstarkov)
  • Add networkOpts.hostLoopback to block guest access to the host's loopback services (vz: add networkOpts.hostLoopback to block guest access to host loopback #5581, thanks to @ranacseruet)

• QEMU:

  • Support nestedVirtualization with HVF (QEMU >= 11.1) (qemu: support nestedVirtualization with HVF (QEMU 11.1 or later) #5443, thanks to @sharanrajt)
  • Implement limactl screenshot (Implement screenshot for the QEMU driver too #5478, thanks to @afbjorklund)

• krunkit:

  • Warn when a read-only mount is requested (krunkit: virtiofs: warn if read-only mount is requested #5740)

• Networking:

  • Experimentally support lima:shared, lima:host, and lima:bridged networks on Linux hosts, via the new lima-privileged-net helper (lima-privileged-net: add the privileged network helper for Linux hosts #5483 networks: add the lima-privileged-net daemon and tap device naming #5484 networks: generate Linux defaults, validation and sudoers rules #5485 networks: enable lima:shared, lima:host and lima:bridged on Linux #5486 networks: derive the tap name in the helper, validate its path #5513 sudoers: pin every helper in lima/privileged to its sha256 digest #5669, thanks to @unsuman)

• SSH:

  • Verify the guest VM's SSH host key, even for locally forwarded ports (ssh: verify the guest host key #5687)

• Port forwarding:

  • Forward Unix sockets over gRPC instead of SSH (portfwd: support Unix socket forwarding over gRPC #5653, thanks to @KayleMaster)

• YAML:

  • Add archVariant (--arch-variant) for selecting x86-64-v2/v3 images (feat(image): add archVariant for x86-64-v3 image selection #5335, thanks to @ekalinin)
  • additionalDisks: support custom mountPoint and optional mounting (additionalDisks: support custom mountPoint and optional mounting #5198, thanks to @ekalinin)
  • copyToHost: add skipIfMissing (Add skipIfMissing to copyToHost rule #5183, thanks to @afbjorklund)
  • Warn when overlapping mounts are detected (mounts: document that overlapping mounts are not supported (and print warnings) #5748)

• limactl CLI:

  • Add limactl menu, an experimental TUI for managing instances (feat(cli): add limactl-menu TUI plugin for instance management #5330 limactl-menu: add a form for creating new instances #5629 limactl: open the menu when run without args #5668 ..., thanks to @Soumya-codr et al.)
    • limactl without arguments now opens the menu on an interactive terminal
  • Support stopping multiple instances with limactl stop (Support stopping multiple instances in limactl stop #5369, thanks to @MEETNANDA8107)
  • limactl autostart enable: add --keep-alive (feat(autostart): add --keep-alive flag to limactl autostart enable #5086, thanks to @resker)
  • limactl shell --sync: add --sync-exclude and support the .limasyncignore file (shell: Add sync-exclude flag and .limasyncignore file #4917, thanks to @peschmae)
  • Show the boot progress with an (N/total) counter (hostagent: unify requirement progress logging with (N/total) counter #4902 instance: redraw the pending progress line after log entries #5602, thanks to @mn-ram and @saswatsam786)

• MCP:

  • Implement the replace tool for targeted file edits (mcp: implement replace tool #5540, thanks to @bonifaido)

• nerdctl:

  • Update from v2.4.1 to v2.4.2 (nerdctl: update from v2.4.1 to v2.4.2 #5703)

• Templates:

  • Update the default Ubuntu (default, ubuntu, ...) to 26.10 (templates: update Ubuntu to 26.10 #5657)
  • Update Fedora (fedora, podman, ...) to 45 (#5694m templates: add fedora-45, point fedora at it #5734, thanks to @kolyshin)
  • Update openSUSE Leap (opensuse-leap) to 16.1 (feat: adding opensuse leap 16.1 #5735, thanks to @e-minguez)
  • oraclelinux-8, centos-stream: Drop legacy BIOS configuration (templates: centos-stream-{9,10}, oraclelinux-8: drop legacyBIOS #5710)
  • k8s: Add a parameter for apt-proxy (Add parameter for Kubernetes apt-proxy (k8s) #5251, thanks to @afbjorklund)
  • k8s: Allow installing on the minimal image variant (Allow installing k8s on minimal image variant #5385, thanks to @afbjorklund)
  • k8s: Pin Kubernetes version to 1.37 (templates: k8s: pin Kubernetes version to 1.37 #5463, thanks to @afbjorklund)
  • k8s: Accept an https:// URL when joining a node (templates/k8s: accept an https:// url when joining a node #5559, thanks to @Sarthak-Shreshtha01)
  • k3s: Add parameters for apt-proxy and registry (Add parameter for Kubernetes apt-proxy (k8s) #5251, Add parameter for Kubernetes apt-proxy (k3s) #5257 Add parameter for Kubernetes registry (k3s) #5377, thanks to @afbjorklund)

• Release artifacts:

  • Add SBOM artifacts (Add SBOM artifact using cyclonedx-gomod #5220, thanks to @afbjorklund)
  • Add the JSON schema of lima.yaml (Add jsonschema to the release artifacts #5339 Add any go comments to the jsonschema #5380, thanks to @afbjorklund)

• Security fixes:

  • GHSA-566x-598w-h7w7 Guest can read host files as QEMU option ROMs loaded from limactl's cwd (800a96b)
  • GHSA-4wvf-9pjc-cpfp limactl shell --sync applies unreviewed guest changes to host (TOCTOU) (fix(shell-sync): apply the reviewed copy instead of re-reading the guest #5752, thanks to @unsuman)

Full changes: https://github.com/lima-vm/lima/milestone/74?closed=1

Thanks to @ChengyuZhu6 @Glitch-On @HMM-210 @KayleMaster @MEETNANDA8107 @Nachiket-Roy @Nashit-h @PhysicistJohn @QIU-Guanzong @SABITHSAHEB @Sarthak-Shreshtha01 @SethFalco @ShauryaBisht @Sonichigo @Soumya-codr @afbjorklund @aka-rider @albdv @alexandear @arixmkii @bcollard @bonifaido @chrisanderton @dawudkhan @deltron-fr @e-minguez @ekalinin @iamstarkov @jandubois @kolyshkin @lbarrosby @mie313 @mn-ram @mvanhorn @nightcityblade @Olamile

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/42233760842

The Software Bill of Materials (SBOM) is in the .sbom.tar.gz artifact.
It does not cover software that is downloaded during Lima operation, such as nerdctl-full.tar.gz or the cloud images.

The sha256sum of the SHA256SUMS file itself is 5f9eaa93d2b58986273347d0f139b95f8fb87f117d98897760dee8d5b9d45ca6 .

---

Release manager: @AkihiroSuda

---

This discussion was created from the release v2.3.0.