SUSE Virtualization v1.7.1 Release Notes

This release introduces several features, enhancements, and bug fixes that improve system quality and the overall user experience. The documentation is available at https://documentation.suse.com/cloudnative/virtualization/v1.7/en/introduction/overview.html.

Installation

SUSE Virtualization can be installed using the ISO image, a bootable USB drive, and PXE boot. For more information, see the Installation section of the documentation.

The SUSE Virtualization installer checks if the hardware meets the minimum requirements for production use. If any of the checks fail, installation is stopped and warnings are printed to the system console. You can disable this behavior during iPXE installation (for testing purposes) by adding the kernel parameter harvester.install.skipchecks=true when you boot the system.

Starting with v1.7, the installation process includes a mandatory step for configuring the login password for the default rancher user account.

Upgrades

SUSE Virtualization only allows upgrades from supported versions. For more information about upgrade paths and procedures, see Upgrades.

SUSE Virtualization v1.7 transitions from wicked to NetworkManager for network management. If the management interface configuration was modified after installation, manual steps are required before upgrading to prevent errors. For more information, see Migration from wicked to NetworkManager.

Highlights

Experimental features

Automatic virtual machine workload rebalancing

The Virtual Machine Auto Balance add-on allows SUSE Virtualization to leverage the Kubernetes Descheduler for rebalancing of virtual machine workloads. When enabled on a multi-node cluster, the add-on deploys the Descheduler and a related configuration. The Descheduler evicts pods that are not optimally placed according to administrator-defined policies, enhancing resource utilization and improving cluster performance.

Fully supported features

MIG-backed vGPU device support

SUSE Virtualization automatically detects GPUs that support Multi-Instance GPU (MIG)-based partitioning. In v1.7, virtual machines can share vGPU devices backed by NVIDIA GPUs with this capability (such as the A100, H100, and H200). To leverage this feature, you must define the MIG profiles for your GPU, enable the MIG configuration, and enable the vGPU device associated with the MIG configuration.

Multipath device recognition and management

Starting with v1.7, SUSE Virtualization supports external storage devices that use multipath I/O (MPIO) to provide redundant data paths while preventing device identification conflicts. Through the os.externalStorageConfig setting, you can define the precise configuration (including device blacklisting and whitelisting) that the multipath daemon uses to manage devices and ensure storage stability.

NIC hotplugging and hotunplugging

SUSE Virtualization v1.7 allows you to add and remove network interface controllers (NICs) from running live-migratable virtual machines without downtime. When you hotplug a NIC, SUSE Virtualization migrates the virtual machine and connects the specified interface through bridge binding. Virtual machines that were created using the Harvester Node Driver and the Harvester Terraform Provider do not support this feature.

Open Virtual Format (OVF) support

In SUSE Virtualization v1.7, you can use the VM Import Controller add-on to import virtual machines using Open Virtual Appliance (OVA) files, which are a single-file version of OVF packages. SUSE Virtualization supports downloading these OVA files via both HTTP and HTTPS. For endpoints that use HTTPS, you can configure a secret that includes basic authentication credentials for the URL and a CA certificate.

Pausable node upgrades

SUSE Virtualization v1.7 introduces a new option to the upgrade-config setting that enables pausing of automatic node upgrades for all or specific cluster nodes. This capability is essential for scenarios requiring manual maintenance or verification on the nodes before the upgrade continues. Once these tasks are completed, you must then explicitly instruct SUSE Virtualization to resume the upgrade process on the target nodes.

Transparent hugepages configuration

Hugepages allow the Linux kernel to allocate memory in chunks larger than the default size. In SUSE Virtualization v1.7, you can configure transparent hugepage settings for each node to increase the overall system performance. Additionally, you can monitor memory allocation for both anonymous (transparent) and persistent (static) hugepages on the SUSE Virtualization UI.

Virtual machine VLAN trunking

SUSE Virtualization v1.7 allows you to create VLAN trunk networks with multiple, overlapping VLAN ID ranges. When a virtual machine is attached to a VLAN trunk network, the guest operating system and applications are allowed to send and receive packets tagged with any of the VLAN IDs within the specified range.

Volume snapshots in guest clusters

v0.1.25 of the Harvester CSI Driver supports volume snapshots, providing point-in-time snapshots and restoration for guest cluster workloads. You can create, list, and delete snapshots of persistent volumes, and create new volumes from existing snapshots. To use this feature, you must ensure that the CSI snapshot controller and the required manifests are deployed on the guest cluster.

Harvester CSI Driver v0.1.25 is used in the following SUSE® Rancher Prime: RKE2 versions:

Security fixes

The interactive installer now allows you to reset the operating system’s default login password before proceeding to other configuration screens, ensuring the password is updated before remote network access to the host is enabled. This prevents attackers from gaining unauthorized network access to the host via a remote shell (SSH) in environments that are exposed to untrusted locations. For more information, see the security advisory for CVE-2025-62877.

Deprecations and removals

Legacy BIOS booting

Support for legacy BIOS booting is deprecated in v1.7 and will be removed in a later release. Existing SUSE Virtualization clusters that use this boot mode will continue to function, but upgrading to later versions may require re-installation in UEFI mode. To avoid issues and disruptions, use UEFI in new installations.

Bug fixes

  • #10012 [BUG] Can’t restore from snapshot replace existing

  • #9979 [backport v1.7] [BUG] Upgrading from v1.6.x to v1.7.0 stuck due to the incomplete kubeovn-operator upgrade

  • #9976 [BUG] Addon managed DHCP is not working on Harvester 1.7.1-rc2

  • #9965 [backport v1.7] [BUG] upgrade stuck due to the mismatch instance-manager checksum

  • #9947 [backport v1.7] [BUG] Upgrading to v1.7.1-rc1 is stuck due to longhorn-manager image handle mismatch

  • #9931 [BUG] Failed to upload Harvester ISO to create upgrade image in server-version setting

  • #9926 [backport v1.7] [BUG] Not able to create VirtualMachines with persistent vTPM and UEFI on Harvester 1.7.0 version

  • #9872 [backport v1.7] [GUI] [BUG] Raw image upload breaks when using external storage

  • #9869 [backport v1.7] [BUG] Raw image upload breaks when using external storage

  • #9861 [backport v1.7] [BUG] Failed upgrade from 1.6.1 to 1.7.0

  • #9830 [backport v1.7] [BUG] VMs cannot get IPs from vm-dhcp-controller when names differ in IPPool and NAD

  • #9789 [backport v1.7] [BUG] VMs created from a template which is generated from another VM cannot boot after shutdown

  • #9787 [backport v1.7] [BUG] Fail to enable the kubeovn-operator add-on in Harvester v1.7.0

  • #9783 [backport v1.7] [BUG] fine tune UI logic to not inject maxSockets on arm clusters

  • #9781 [backport v1.7] [BUG] Upgrade from v1.6.x to v1.7.x may result in host IP address change when using DHCP

  • #9758 [BUG] All VMs was Off after migrate from v1.6.0 to v1.7.0-rc7 caused by vm migration failed

  • #9722 [backport v1.7] [BUG] Can’t completely delete airgapped upgrade image when clicking delete button, prompt error message

  • #9707 [backport v1.7] [BUG] Click View in API of resource always direct to empty page

  • #9675 [backport v1.7] [BUG] Add bridged virtio NIC to VM via Edit Config triggers live migration on single node cluster

  • #9635 [backport v1.7] [BUG] Can not hot-plugging on a VM has management network with bridge-bond and virtio

  • #9634 [backport v1.7] [BUG] Add Network via Edit Config triggers hotplug NIC before user choosing on popup box

  • #9591 [backport v1.7] [BUG] terraform apply same logic storage-network setting cannot pass

  • #9542 [backport v1.7] [BUG] Clone VM, but the cloned one stuck in starting

  • #5186 [BUG] Cannot create Image from URL with query string

  • #9760 [backport v1.7] [BUG] Node status shows Cordoned when the node is powered off

  • #9756 [backport v1.7] [BUG] Enable/DisableCPUManager return 500 not 400 when Enable/DisableCPUManager on node already enable/disable

Known issues

This section includes only issues identified before the release date. For information about all issues associated with v1.7.1, see this page.

  • #9399 [BUG] PCI vGPU USB device failed to pass through due to . in the hostDevices.name

  • #9597 [BUG] Upgrade v1.7.0 stuck in node post-draining

  • #9619 [BUG] Add Network via Edit Config triggers hotplug NIC before user choosing on popup box

  • #9660 [BUG] Add bridged virtio NIC to VM via Edit Config triggers live migration on single node cluster

  • #9714 [BUG] LH v2 Snapshot Stuck in Deletion

  • #9738 [BUG] Upgrade stuck indefinitely at the apply-manifest phase due to the pending-upgrade fleet

  • #9751 [BUG] After upgrade from v1.6.1 to v1.7.0-rc6, Running VM show message "Restart action is required …​"

  • #9990 [BUG] When upgrade, wrong ISO checksum doest not detect and report by the system

Components

Component Version

Containerized Data Importer (CDI)

v1.62.0

Kube-OVN

v1.14.10

KubeVirt

v1.6.3

SUSE® Storage

v1.10.2

SUSE® Rancher Prime (embedded)

v2.13.1

SUSE® Rancher Prime: RKE2

v1.34.3+rke2r3

SUSE Linux Micro

6.1