But this is definitely neat. I've found Incus quite handy for development environments, and a good compliment to docker.
I use Proxmox on fat servers, but for homelab-like setup Incus OS seems more like a sweet spot
I have noticed incus has better security configs by default. For instance, all pre-built images come with secureboot enabled and there are ACLs which are easy to configure for fine-grained network rules. The only downside I feel like is lack of something like PBS
One thing in particular is permissions in unprivileged containers. In Proxmox, you have to do a bunch of somewhat confusing ID mapping. In Incus, it's as simple as setting "shift=true".
Also the profile system in Incus is really powerful and allowed me to deduplicate a ton of config.
LXD containers also are unprivileged by default.
kouskoush•1h ago