The open-source container and virtual-machine management platform Incus has released version 7.4, introducing native UEFI Secure Boot key management, "near-live" container migration, and burst I/O limits. The update targets three core areas of infrastructure management: firmware security, workload mobility, and resource allocation.
Version 7.4 integrates UEFI Secure Boot key management directly into the platform. This addition allows administrators to handle the signing, rotation, and validation of boot keys natively, streamlining a process that has traditionally required external provisioning workflows.
The release also introduces a "near-live" migration capability for containers moving between Incus instances. Designed to minimize service interruptions during routine host maintenance or load balancing, the feature operates without requiring shared storage. From an operational standpoint, this architecture could reduce reliance on complex enterprise storage setups that typically underpin traditional live migration workflows.
To manage resource contention in shared environments, version 7.4 adds configurable burst I/O limits for disk and network devices. Rather than enforcing static restrictions, the new controls allow administrators to set temporary throughput ceilings that absorb traffic spikes. This adaptive approach to I/O throttling offers a more flexible quality-of-service model, helping critical applications maintain performance during peak demand without destabilizing the host or starving neighboring workloads.
Beyond the technical additions, the release reinforces Incus’s positioning as a community-driven, vendor-neutral alternative to commercial orchestration ecosystems. By consolidating security provisioning, migration flexibility, and dynamic resource tuning into a single open-source management layer, the platform aims to reduce toolchain fragmentation. For infrastructure teams evaluating hybrid deployment strategies, version 7.4 represents a pragmatic shift toward lightweight virtualization management that avoids proprietary licensing constraints.
開源 Container 與虛擬機器管理平台 Incus 已推出 7.4 版本，引入原生 UEFI Secure Boot 金鑰管理、「近乎即時」（near-live）Container 遷移，以及突發 I/O 限制。是次更新針對基礎設施管理的三個核心範疇：韌體安全、工作負載流動性，以及資源分配。
7.4 版本將 UEFI Secure Boot 金鑰管理直接整合至平台內。此新增功能讓管理員能夠原生處理啟動金鑰的簽署、輪替與驗證，簡化了以往傳統上需依賴外部配置流程的工序。
新版本同時引入「近乎即時」Container 遷移功能，支援在不同 Incus 實例之間轉移。此功能旨在於執行常規主機維護或負載平衡時盡量減少服務中斷，且運作時無需依賴共享儲存。從營運角度分析，此架構有望降低對複雜企業級儲存系統的依賴，而該類系統通常為傳統即時遷移工作流程的基礎。
為管理共享環境中的資源爭用問題，7.4 版本為磁碟及網絡裝置新增可配置的突發 I/O 限制。新控制機制無須實施靜態限制，而是容許管理員設定臨時吞吐量上限以緩衝流量高峰。這種針對 I/O 節流的自適應方法提供更靈活的服務質素（QoS）模型，協助關鍵應用程式在需求高峰期維持效能，同時避免導致主機不穩或令鄰近工作負載資源匱乏。
除技術層面的新增功能外，是次更新亦進一步鞏固 Incus 作為社群推動、供應商中立之商業編排生態系統替代方案的定位。分析指，平台透過將安全配置、遷移靈活性及動態資源調校整合至單一開源管理層，旨在減少工具鏈碎片化。對於正評估混合部署策略的基礎設施團隊而言，7.4 版本代表著向輕量級虛擬機器管理邁出的務實一步，在免除專有授權限制的同時，提供另一營運路徑。