# mvirt 0.24.17

migrations: no
wire: unchanged
rev: 1672d46cb641678cb88a28020c2a63d0268405d2

mvirt 0.24.17

Closes a cross-tenant admission hole at VIP ingress. A pod in any
network could reach a guest behind a public 1:1 VIP east-west with its
private source address intact, and the guest's "internal only" rules
admitted it.

- ebpf: VIP ingress admits a publicly routable source, and a private
  one only if it belongs to the guest's own network; anything else is
  dropped and counted (VIP_FOREIGN_DROPS). The VIP path runs as its own
  tail-called program (#343).
- Includes 0.24.16: a live object-storage bucket keeps serving through
  a provider-management error (#366).


## Upgrading

Point your flake's `mvirt` input at this release and redeploy the control-plane
host first, then each node in turn:

```
nix run .#colmena -- apply boot --reboot --on <control-plane host>
nix run .#colmena -- apply boot --reboot --on <node>   # one at a time
```

This release adds no migrations, so the control-plane host rolls back the same way
a node does: boot the previous NixOS generation.