# mvirt 0.32.0

migrations: no
wire: unchanged
floor: 0.29.0
rev: 26ea8d4c6bb53f9e4d39f81a499443c55aec0994

mvirt 0.32.0

Pin review: nixpkgs, rust-overlay, crane and colmena move to 2026-09-28.
No mvirt behaviour change; the host and guest software underneath moves.

- flake: nixpkgs 2026-01-21 → 2026-09-28 (dist/nix/flake.nix in step).
  Host kernel 6.18.6 → 6.18.54, systemd 258.2 → 261.2 (systemd-based
  initrd), openssh 10.2p1 → 10.5p1, openssl 3.6.0 → 3.6.4, glibc 2.40 →
  2.42, rustc 1.93.0 → 1.98.1, bpf-linker 0.9.15 → 0.11.1 (#405).
- mvirt-one: pod-VM guest kernel 6.18.37 → 6.18.54 (past the 6.18.50
  fixes for the KEV-listed kernel CVEs of 2026-09-18) (#405).
- envoy-static (host edge :80/:443): 1.39.0 → 1.39.1, in step with the
  fleet image; 13 upstream security fixes (#405).
- bare-metal-node: watchdog settings under systemd.settings.Manager
  (rename only; evaluated values unchanged) (#405).
- Rust 1.98 clippy fallout fixed, behaviour-preserving (#405).

Soaked on the dev cluster (node-1/2/3) on 6.18.54.


## Upgrading

Point your flake's `mvirt` input at this release and redeploy the control-plane
host first, then each node in turn:

```
nix run .#colmena -- apply boot --reboot --on <control-plane host>
nix run .#colmena -- apply boot --reboot --on <node>   # one at a time
```

This release adds no migrations, so the control-plane host rolls back the same way
a node does: boot the previous NixOS generation.