2026-05-14 (Thursday)

[AkihiroSuda]

How to join

• Date: 2026-05-14 (Thursday) 05:30 UTC (Wednesday 22:30 PDT, 07:30 CEST, 11:00 IST, 14:30 JST) - 06:30
• Link: https://zoom-lfx.platform.linuxfoundation.org/meetings/lima
  • Zoom, Video recording, and AI-generated meeting note

The meetings are open to anyone, not just for maintainers and contributors.

Attendees

@AkihiroSuda @unsuman @jandubois @SwarritSrivastava @mie313

Agenda

Note taker: @AkihiroSuda

LFX Mentorship

Note

Do not talk about evaluation result of candidates in this public meeting

• [LFX Mentorship] Improve Windows support (guest and host) #4907

https://github.com/cncf/mentoring/tree/main/programs/lfx-mentorship/2026/02-Jun-Aug

• Schedule:
  • May 4 - May 19: Mentee applications Open
  • May 20 - Jun 2: Review period
  • Jun 8 - Aug 31: Program term (Evaluations: Jul 21, Aug 25)

Candidates,

• Please confirm your eligibility: https://docs.linuxfoundation.org/lfx/mentorship/mentee-guide/am-i-eligible

  • Notably, Not be a prior or an active participant in another Linux Foundation mentorship program.

• Please complete all the tasks, otherwise your submission cannot be considered for adoption: https://docs.linuxfoundation.org/lfx/mentorship/mentees/manage-your-task

  • Upload the completion certificate for the Inclusive Open Source Community Orientation (LFC102) course
  • Upload the cover letter
  • Upload the resume

• It is highly recommended to submit a POC during the application period.
  e.g., generate autounattend.xml for supporting Windows guests: Support for Windows guests #4852
  Note that "POC" here doesn't mean blindly submitting an untested AI slop!

Originally posted by @AkihiroSuda in #4907

KubeCon Japan

• 2026-07-29 Wednesday 12:33 PM Project Lightning Talk: Lima in 5 Minutes: From Containers to AI Sandboxing by @unsuman
  https://kubecon-cloudnativecon-japan-2026.sessionize.com/session/1228175
• Kiosk (Time to be determined)

v2.1.2

• v2.1.2 planning (for Ubuntu 26.04) #4814

  • Depends on nerdctl v2.3.1 Release nerdctl v2.3.1 with the GA release of containerd v2.3 containerd/nerdctl#4885
    • Depends on containerd v2.3.1 (likely to be by the end of the week)

• gvisor-tap-vsock needs to be updated "Fix issue where udp_proxy enters a tight loop polling the socket if the read returns 0 with err = nil." https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.9

  • Dependabot will update this dependency (but now it is cooled down for 7 days) → needs to be updated manually

PR reviews

https://github.com/lima-vm/lima/pulls

• v2.1.2

  • hostagent: stop destroying ga.sock on guest-agent reconnect #4911
    • @jandubois already approved. He will take a look again
  • docs: add network and disk management guide #4925
    • Allegedly written with AI (?)
    • But looks good anyway. Merged.
  • docs: add base image update and supply chain guidance #4963
    • Ideally cooling down window should be set, but practically not actionable with the current package managers
    • Needs to be updated, as upgradePackages does not work for macos, alpine-iso, etc.
  • qemu: pass -vga none for headless guests #4975
    • Can't we unconditionally set -vga=none for all the archs?
  • fix:track driver PID to prevent zombie processes #4939
    • Should be mergeable soon
    • Needs to be reviewed
    • Doc needs to be updated
  • Add Apparmor's fusermount3 custom rule for reverse SSHFS #4968
    • Can be merged soon when the comments are addressed
  • feat: make limactl shell fall back to default instance when no args given #4966
    • Safe to merge this in v2.1.2
    • The size is huge, but basically it just adds ctx args to functions

• v2.2.0

  • Around August? July? As soon as the basic support for Windows guests is ready?
  • Probably we need to release v2.1.3 before v2.2.0
  • hostagent: gate Ready on raw-TCP SSH banner probe #4967
    • Allegedly generated with AI
    • Needs careful review about SSH protocol version check
  • Windows: support native OpenSSH; no Git for Windows / MSYS2 required #4885
    • should be split to small PRs
    • the powershell stuff is too lengthy
    • Can't we just remove Cygwin/MSYS/blahblahblah dependencies from GHA and confirm that Lima works without those dependencies
    • @jandubois will take a look, but LFX Mentee may also take over this PR (removal of cygpath dependency is already mentioned as a primary task in the LFX program [LFX Mentorship] Improve Windows support (guest and host) #4907)

Update contribution policy

• New rule: "Don't submit PR without opening issue" -- @jandubois
  • Should apply to human contributors, as well as AI
  • Exceptions
    • Maintainers
      • Maintainers' PR can be still rejected if we don't reach consensus on design
    • PRs that update dependencies, templates, etc.
    • Trivial PRs (typo fixes, etc.)
• @unsuman will prepare a draft for the new contribution policy

Tasks

• @unsuman release v2.1.2 (when nerdctl v2.3.1 is ready)
• @AkihiroSuda update gvisor-tap-vsock dependency
• @unsuman update docs: add base image update and supply chain guidance #4963
• @jandubois take a look at hostagent: stop destroying ga.sock on guest-agent reconnect #4911
• @jandubois update qemu: pass -vga none for headless guests #4975
• @mie313 update Add Apparmor's fusermount3 custom rule for reverse SSHFS #4968
• @unsuman draft a contribution policy (originally suggested by @jandubois)
• @jandubois update Windows: support native OpenSSH; no Git for Windows / MSYS2 required #4885
• @AkihiroSuda and @unsuman : review LFX Mentorship program submissions (May 20 - Jun 2)

Next meeting

2026-06-18 (Thursday)

[AkihiroSuda]

AI-generated meeting note

Quick Recap

The team meeting focused on reviewing the AFX mentorship program details and discussing version 2.1.2 release planning. Akihiro outlined the mentorship program timeline, requirements, and evaluation process, while Ansuman confirmed he could handle the presentation if unable to travel to Japan. The team then reviewed several pull requests for the 2.1.2 release, including updates to network and disk documentation, package upgrades, and Windows guest support fixes. Jan raised concerns about AI-generated PRs that lack proper issue documentation and proposed a policy requiring issues to be created before code submission, particularly for external contributors. The team also discussed a large Windows support proof-of-concept PR submitted by Jan, which needs to be split into smaller, more manageable pieces before review.

Next Steps

• Asma: Raise Lima 2.1.2 PR where Lima 2.1.2 is released concurrently with CTL 2.3.1.
• Jan: Review and, if appropriate, merge the PR related to the G-Visor TAP VSOC bug fix (polling the socket) once the 7-day cooldown period is over.
• Mie: Update PR 4939 to check if the file exists before creating it, add the URL of the issue in the code comment, and fix the version typo in the issue reference.
• Ansuman: Open an issue with a draft policy regarding requiring issues before PRs from AI/external contributors.
• Jan: Split the large Windows support proof-of-concept PR into smaller, reviewable PRs when time allows, or consider delegating further work to a mentorship student.
• Jan: Review PR 4946 before approving/merging.
• Akihiro: Add Mie's PR to the 2.1.2 milestone after the required updates.

Summary

AFX Mentorship Program Discussion:
The team discussed the AFX mentorship program, which accepts applications until the 19th with a two-week review period. The program will run from June 8th to August 31st, focusing on supporting Windows guests and hosts, with candidates required to submit proof of concept, completion certificates, and resumes. They also planned to present intermediate results at a July 29th event, though they noted demos might be prohibited and screenshots would likely be shown instead. The team briefly discussed releasing version 2.1.2 after NanoCT 2.3.1, pending the release of Concierge version 2.3.1 by the end of the week.

G-Visor TAP VSOC Release Discussion:
Jan and Akihiro discussed a G-Visor TAP VSOC release that included a bug fix for a hot CPU loop issue. Jan explained that while the fix was already released, they were waiting for Dependabot to update their dependencies due to a 7-day cooldown period. Akihiro agreed to review the merge request for the socket polling feature, and they briefly touched on a document about DenaCity network and disk that was written using AI.

Package Upgrade Vulnerability Discussion:
Jan and Akihiro discussed updating packages to fix zero-day vulnerabilities, with Jan suggesting they should have a cool-down window. They identified that not all templates support package upgrades, particularly macOS and Alpine ISO, though the extent of unsupported templates remains unclear. Jan proposed creating a separate issue to document which templates support package upgrades rather than addressing this in the current PR.

QEMU PCI BIOS Code Removal:
Jan and Akihiro discussed removing architecture-specific code related to PCI BIOS in QEMU, particularly focusing on Intel implementations. Akihiro suggested removing the branch entirely to reduce architecture-specific code, which Jan agreed to test on other architectures. The conversation ended with Ansuman mentioning PR4939 but the specific context was not clear from the transcript.

Code Merge and Release Planning:
The team discussed a small issue that needs to be addressed before merging, with Jan noting that feedback from Ansuman wasn't properly implemented despite claims otherwise. Akihiro confirmed they would review the issue again and merge it soon, along with updates to the internal data structure document. The discussion touched on the upcoming 2.2 release, which will include support for Windows guest and other features, with a potential 2.1.3 patch release in between. The conversation ended with a mention of a PR submitted by Mie Tokunaga-san regarding a promo, though details about this were not provided in the transcript.

Template and SSHFS Issue Fix:
Mie and Akihiro discussed fixing an issue with the default template and reverse SSHFS where the home directory cannot be mounted. Mie proposed adding code to check if the file exists before creating a new one. Akihiro agreed to merge the PR after the fix is implemented and suggested adding the issue URL in the code documentation. They also confirmed the issue was introduced in version 25.04 and added it to the 2.1.2 milestone.

PR Policy and Review Process:
The team discussed establishing a policy requiring issues to be created before opening PRs, particularly for external contributors. Jan proposed this policy to ensure proper discussion and consensus before implementation, though it would allow for exceptions when PRs are clearly valuable. The team also reviewed Jan's large AI-generated PR for Windows support, which needs to be split into smaller pieces and simplified before review. Akihiro suggested having a mentorship student take over the PR work, and Swarit requested review of PR 4946 which was approved for merging in version 2.1.2.

[AkihiroSuda]

Corrections

The team meeting focused on reviewing the AFX mentorship program details and discussing version 2.1.2 release planning.

• AFX → LFX

Asma: Raise Lima 2.1.2 PR where Lima 2.1.2 is released concurrently with CTL 2.3.1.

• Asma → Ansuman
• CTL → nerdctl

Jan: Review and, if appropriate, merge the PR related to the G-Visor TAP VSOC bug fix (polling the socket) once the 7-day cooldown period is over.

• G-Visor TAP VSOC → gvisor-tap-vsock
• The PR was not ready at the time of the meeting

The team briefly discussed releasing version 2.1.2 after NanoCT 2.3.1, pending the release of Concierge version 2.3.1 by the end of the week.

• NanoCTL → nerdctl
• Concierge → containerd

Akihiro agreed to review the merge request for the socket polling feature, and they briefly touched on a document about DenaCity network and disk that was written using AI.

• DenaCity → limactl
• The documentation PR docs: add network and disk management guide #4925 is irrelevant to gvisor-tap-vsock

QEMU PCI BIOS Code Removal

• PCI BIOS → VGA BIOS

The conversation ended with Ansuman mentioning PR4939 but the specific context was not clear from the transcript.

PR #4939 is irrevant to QEMU VGA BIOS (#4975)

The team discussed a small issue that needs to be addressed before merging, with Jan noting that feedback from Ansuman wasn't properly implemented despite claims otherwise.

Not sure what was the "small issue that needs to be addressed before merging".
Was this about PR #4939?

The conversation ended with a mention of a PR submitted by Mie Tokunaga-san regarding a promo, though details about this were not provided in the transcript.

• promo → fusermount (?) Add Apparmor's fusermount3 custom rule for reverse SSHFS #4968

They also confirmed the issue was introduced in version 25.04 and added it to the 2.1.2 milestone.

• version 25.04 → Ubuntu version 25.04

Jan proposed this policy to ensure proper discussion and consensus before implementation, though it would allow for exceptions when PRs are clearly valuable.

No such an exception was proposed.
He proposed that maintainers could be exempted from this policy though.