# mvirt 0.27.2

migrations: no
wire: unchanged
rev: 2108be625acaffeb72d99994b054e02c5e66a192

mvirt 0.27.2

A pod created before its vNIC is compiled no longer starts without a
network, and the storage daemons no longer default to wildcard binds.

- cplane, node, vmm: the node compiler holds a pod out of the slice
  until its Nic row exists, so the pod and its VnicSpec land in the same
  generation; mvirt-vmm reports the NIC a pod-VM is defined with, and
  mvirt-node re-creates a pod-VM whose NIC differs from the desired one
  (once; never on a vmm that does not report it). Found by the ADR-0087
  lab (#380). Additive fields on the vmm's Pod message (node-local).
- stor, s3: mvirt-stor-noded takes --data/--repair/--blob (required)
  and --control (default 127.0.0.1:50058); wildcards need
  --bind-wildcard-insecure. The nix module now passes --blob, so this
  fleet's blob wire moves from 0.0.0.0:50059 to the underlay address
  (nftables already limited it to the fabric). mvirt-s3 defaults to
  127.0.0.1:9000 (#123).
- tests: the no-host-reads check covers the reconciler, not its unit
  tests (fixes main's red platform_manifest_sections).


## Upgrading

Point your flake's `mvirt` input at this release and redeploy the control-plane
host first, then each node in turn:

```
nix run .#colmena -- apply boot --reboot --on <control-plane host>
nix run .#colmena -- apply boot --reboot --on <node>   # one at a time
```

This release adds no migrations, so the control-plane host rolls back the same way
a node does: boot the previous NixOS generation.