RATATOSKRATATOSK
로그인

Lima

v2.3.0Kubernetes Core
2026년 11월 6일

ACTION 1CHECK 2OTHER 38

플랫폼 지원과 운영 기능을 넓히고 일부 템플릿 기본값을 조정한 릴리스입니다. 보안 문제도 수정되어 업그레이드가 필요합니다.

조치 필요 (1)

  • securityGHSA-566x-598w-h7w7 호스트 파일 접근 문제 수정

    limactl의 현재 작업 디렉터리에서 QEMU 옵션 ROM으로 불러온 호스트 파일을 게스트가 읽을 수 있던 문제가 수정되었습니다.

영향 확인 (2)

  • securityGHSA-4wvf-9pjc-cpfp 게스트 변경 사항 적용 문제 수정

    limactl shell --sync를 사용하는 경우에 적용됩니다.

    limactl shell --sync가 검토되지 않은 게스트 변경 사항을 호스트에 적용하던 문제가 수정되었습니다.

  • breakingoraclelinux-8 및 centos-stream의 레거시 BIOS 설정 제거

    oraclelinux-8 또는 centos-stream을 설정한 경우에 적용됩니다.

    oraclelinux-8 및 centos-stream에서 레거시 BIOS 설정을 제거했습니다.

그 외 기록된 변경 38건 전체additions 19 · constraints 9 · defaults 6 · value changes 4

additions (19)

  • Add osOpts.darwin.suppressFirstLoginSetup to skip the first-login Setup Assistant (#5336, thanks to @trodemaster)
  • Support attaching host block devices (limactl start --block-device) (#5117, thanks to @pirate)
  • Add audio.microphone to attach a capture stream (#5462, thanks to @iamstarkov)
  • Add networkOpts.hostLoopback to block guest access to the host's loopback services (#5581, thanks to @ranacseruet)
  • Implement limactl screenshot (#5478, thanks to @afbjorklund)
  • Verify the guest VM's SSH host key, even for locally forwarded ports (#5687)
  • Add archVariant (--arch-variant) for selecting x86-64-v2/v3 images (#5335, thanks to @ekalinin)
  • additionalDisks: support custom mountPoint and optional mounting (#5198, thanks to @ekalinin)
  • copyToHost: add skipIfMissing (#5183, thanks to @afbjorklund)
  • Add limactl menu, an experimental TUI for managing instances (#5330 #5629 #5668 ..., thanks to @Soumya-codr et al.)
  • limactl autostart enable: add --keep-alive (#5086, thanks to @resker)
  • limactl shell --sync: add --sync-exclude and support the .limasyncignore file (#4917, thanks to @peschmae)
  • Show the boot progress with an (N/total) counter (#4902 #5602, thanks to @mn-ram and @saswatsam786)
  • Implement the replace tool for targeted file edits (#5540, thanks to @bonifaido)
  • k8s: Add a parameter for apt-proxy (#5251, thanks to @afbjorklund)
  • k3s: Add parameters for apt-proxy and registry (#5251, #5257 #5377, thanks to @afbjorklund)×2
  • Add SBOM artifacts (#5220, thanks to @afbjorklund)
  • Add the JSON schema of lima.yaml (#5339 #5380, thanks to @afbjorklund)

constraints (9)

  • Experimentally support HCS driver (#5449 #5514, thanks to [LFX mentee](https://lfx.linuxfoundation.org/tools/mentorship/) @mie313, and @unsuman)
  • Support native Windows OpenSSH (#5298 #5299 #5300 #5337, thanks to @jandubois)
  • Support provision (#5263, thanks to [LFX mentee](https://lfx.linuxfoundation.org/tools/mentorship/) @mie313)
  • Support nestedVirtualization with HVF (QEMU >= 11.1) (#5443, thanks to @sharanrajt)
  • Experimentally support lima:shared, lima:host, and lima:bridged networks on Linux hosts, via the new lima-privileged-net helper (#5483 #5484 #5485 #5486 #5513 #5669, thanks to @unsuman)
  • additionalDisks: support custom mountPoint and optional mounting (#5198, thanks to @ekalinin)
  • Support stopping multiple instances with limactl stop (#5369, thanks to @MEETNANDA8107)
  • k8s: Allow installing on the minimal image variant (#5385, thanks to @afbjorklund)
  • k8s: Accept an https:// URL when joining a node (#5559, thanks to @Sarthak-Shreshtha01)

defaults (6)

  • Automatically append common tool directories (e.g., QEMU) to PATH (#5348, thanks to [LFX mentee](https://lfx.linuxfoundation.org/tools/mentorship/) @mie313)
  • limactl without arguments now opens the menu on an interactive terminal
  • Update the default Ubuntu (default, ubuntu, ...) to 26.10 (#5657)
  • Update Fedora (fedora, podman, ...) to 45 (#5694m #5734, thanks to @kolyshin)
  • Update openSUSE Leap (opensuse-leap) to 16.1 (#5735, thanks to @e-minguez)
  • k8s: Pin Kubernetes version to 1.37 (#5463, thanks to @afbjorklund)

value changes (4)

  • Warn when a read-only mount is requested (#5740)
  • Forward Unix sockets over gRPC instead of SSH (#5653, thanks to @KayleMaster)
  • Warn when overlapping mounts are detected (#5748)
  • Update from v2.4.1 to [v2.4.2](https://github.com/containerd/nerdctl/releases/tag/v2.4.2) (#5703)
Lima 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.

스택에 추가 →
공식 릴리스 노트 ↗Lima 릴리스 전체 →