Starstruk Logo MarkStarstruk

v1.15.0

mvanhorn/last30days-skillv1.15.0Mar 9, 2026by JackThomson2

AI Summary

This release introduces support for the VMClock device and the Intel Granite Rapids platform, while also updating the Jailer security model and fixing several critical bugs related to snapshots and networking.

Key Highlights

  • Added support for the VMClock device and Intel Granite Rapids platform.
  • Reduced maximum device limits due to the VMClock device requiring an extra GSI.
  • Updated Jailer to disallow symlinks and hardlinks during binary copying.
  • Fixed critical memory corruption issues in differential snapshots.

Breaking Changes

  • Reduced maximum device count to 92 on AArch64 and 17 on x86.
  • vsock local port reuse bug requires snapshot regeneration.

New Features

  • VMClock device support with snapshot safety features.
  • Intel Granite Rapids support on 6.1 host kernel versions.

Full Release Notes

### Added

- [#5510](https://github.com/firecracker-microvm/firecracker/pull/5510), [#5593](https://github.com/firecracker-microvm/firecracker/pull/5593), [#5564](https://github.com/firecracker-microvm/firecracker/pull/5564): Add support for the [VMClock device](https://uapi-group.org/specifications/specs/vmclock). The implementation supports the snapshot safety features proposed [here](https://lore.kernel.org/lkml/20260107132514.437-1-bchalios@amazon.es/), but doesn't provide currently any clock-specific information for helping the guest synchronize its clocks. More information can be found in [docs](docs/snapshotting/snapshot-support.md#userspace-notifications-of-loading-virtual-machine-snapshots).
- [#5574](https://github.com/firecracker-microvm/firecracker/pull/5574), [#5671](https://github.com/firecracker-microvm/firecracker/pull/5671), [#5674](https://github.com/firecracker-microvm/firecracker/pull/5674) [#5690](https://github.com/firecracker-microvm/firecracker/pull/5690) Added Intel Granite Rapids as a supported and tested platform for Firecracker on 6.1 host kernel versions.

### Changed

- [#5564](https://github.com/firecracker-microvm/firecracker/pull/5564): which added support for VMClock, uses one extra GSI for the VMClock device itself which reduces the available GSIs for VirtIO devices. New maximum values is 92 devices on Aarch64 and 17 devices on x86.
- [#5631](https://github.com/firecracker-microvm/firecracker/pull/5631): Update binary copy process inside Jailer to disallow symlinks and hardlinks at the destination path and change ownership of the copied binary to the specified uid/gid.

### Fixed

- [#5698](https://github.com/firecracker-microvm/firecracker/pull/5698): Fixed the possible ENXIO error which could occur during file open operation if the underlying file is FIFO without active readers already attached.
- [#5688](https://github.com/firecracker-microvm/firecracker/pull/5688): Fixed vsock local port reuse across snapshot restore by saving the last used local port into the snapshot, so users need to regenerate snapshots.
- [#5705](https://github.com/firecracker-microvm/firecracker/pull/5705): Fixed a bug that caused Firecracker to corrupt the memory files of differential snapshots for VMs with multiple memory slots. This affected VMs using memory hot-plugging or any x86 VMs with a memory size larger than 3GiB.
- [#5739](https://github.com/firecracker-microvm/firecracker/pull/5739): Fixed validation of TCP SYN options length when MMDS is enabled.