Icon Celebrity Journal
general /

How to hide kernel updates in ubuntu

In this article, we will explain three ways by which you might update your Linux kernel to the latest available version. We have explained the procedure on Ubuntu 20.04 LTS, which comes with kernel version 5.4. More or less the same procedure can be followed using previous versions of Ubuntu OS.

Check Current Kernel Version

Before updating the kernel version, it is better to check the current version. It will help you to decide which new version to update the kernel to. Open the command line by using the Ctrl+Alt+T keyboard shortcut.

Now, check the current kernel version directly from the command line, as follows:

You can also check the kernel version with the following command:

Using either of the above commands will show you the kernel version of your OS. From the above output, you can see that the kernel version used in this article is 5.4.0-28-generic.

In the following methods, I will show you how to update the kernel version using the Command line.

Method # 1: Ubuntu Kernel Team Site

In the following method, we will update the kernel version by first downloading the latest version from the Ubuntu kernel team site and then installing it.

For this method, follow these steps to update the kernel version:

  1. Open the Ubuntu kernel team site to download the latest Linux kernel for Ubuntu. Select the version you wish to download and then download the .deb files for the generic version.
  • linux-headers- -all.deb
  • linux-mage-unsigned- -amd64.deb
  • linux-modules- -amd64.deb

We want to update our kernel to latest stable kernel version 5.6.10. So, we have downloaded the following .deb files.

Alternatively, you can use the wget command to download the following mainline packages for kernel version 5.6.10:

kernel-ppa / mainline / v5.6.10 / linux-headers-
5.6.10-050610_5.6.10- 050610.202005052301 _all.deb
$ wget https: // kernel.ubuntu.com /

kernel-ppa / mainline / v5.6.10 / linux-image-unsigned-
5.6.10-050610-generic_5.6.10- 050610.202005052301 _amd64.deb
$ wget https: // kernel.ubuntu.com /

kernel-ppa / mainline / v5.6.10 / linux-modules-5.6.10-
050610-generic_5.6.10- 050610.202005052301 _amd64.deb

  1. Once all packages are downloaded, you can verify them using the “ls –l” command:
  2. The next step is to install all the downloaded packages. If you have downloaded the files on a directory other than the Home directory, then first navigate to it using the cd command:

Now, install all the downloaded .deb files. You can do so via the following command:

Wait for a while until installation of all packages is complete.

  1. Reboot your system. Once the reboot is completed, log in to your system and check the kernel version with the uname command, as follows:

The output will show the updated kernel version that is 5.6.10.

Method # 2: Using the Bash Script

In the next method, we will use the bash script in order to install a new kernel version. Follow these simple steps to do so:

1. Download the bash script using the following command:

2. Copy the script to the “/usr/local/bin/” directory. You can do so with the following command:

3. Now, you can update the kernel version as follows:

It will search for and provide you with the latest kernel version number, e.g. v5.6.10, in the following output. If you want to install this version, hit B, upon which the installation will begin.

Once installed, reboot the system. Then, check the kernel version with the uname command as follows:

The output will show the updated kernel version

Method # 3: Update Ubuntu Kernel Version via GUI

In the following method, we will discuss the GUI method to update the Linux kernel. We will use the graphical Mainline tool for installing the latest version of the kernel. Here are the simple steps to do so:

1. The Mainline tool is not available in official Ubuntu repositories, so we will need to manually add its PPA to the sources.list file in our system. Use the apt-add-repository command for this purpose:

How to hide kernel updates in ubuntu

2. Once you have added the mainline repository, the following step is to update the system’s repository index:

How to hide kernel updates in ubuntu

3. Next, install the Mainline tool with this command:

How to hide kernel updates in ubuntu

The system might ask for confirmation by providing you with a Y/N option. Hit Y to continue, after which the Mainline tool will be installed on your system.

4. Launch the mainline tool from the Ubuntu search bar as follows:

How to hide kernel updates in ubuntu

5. When the Mainline tool is launched, you will see the following installer window with a list of new and available kernel versions. You may install a new version by selecting the version from the list and clicking the Install button on the bar to the right.

How to hide kernel updates in ubuntu

After this step, the following Authentication dialog will appear. Enter the super user password and click the Authenticate button.

How to hide kernel updates in ubuntu

The installation of the selected kernel version will begin, and you will be able to see the installation process in a new window.

Now, reboot your system and verify the new kernel version:

In this article, we have explained three different methods to update the kernel version on Ubuntu 20.04 LTS. After updating the kernel, sometimes you may face issues in booting the system. In this case, switch back to the old kernel by hitting the Shift key at boot, and select the older version from the list.

About the author

How to hide kernel updates in ubuntu

Karim Buzdar

Karim Buzdar holds a degree in telecommunication engineering and holds several sysadmin certifications. As an IT engineer and technical author, he writes for various web sites. He blogs at LinuxWays.

If for some reason you want to keep your Linux kernel updates on Ubuntu, follow the steps below in this article. You can use this method to update your Ubuntu Linux system without updating the Linux kernel. It saves some space on your system and prevents some manual system kernel related configuration changes. But keeping kernel updates is not a good idea.

Keep Ubuntu Linux kernel updates

Open a terminal application. It can be opened by pressing Ctrl + Alt + T simultaneously.

Stop the Ubuntu kernel update via apt.

syntax:

Replace linux-package-name with the actual Linux kernel image.

Example:

Enable Ubuntu kernel updates.

You can enable kernel update with the following command.

Stop the Ubuntu kernel update in the configuration file.

At the terminal

Scroll down to find the blacklist section and use the Linux kernel package to edit it as follows: Regular expressions are also supported here.

Stop the Ubuntu kernel update via dpkg.

The above syntax is conman to hold all packages. For the Linux kernel, replace Linux-package-name with the Linux kernel image.

If you like this article, please subscribe to us Youtube channel.. You can also stay connected with us twitter And Facebook..

Recommended Recommendation: How to Install Midnight Commander on Ubuntu-Text Based File Manager
It’s a sequel.
..

PHP Code

  1. Home
  2. Web Servers
  3. How to Update Linux Kernel In Ubuntu

The Linux kernel is like the central core of the operating system. It works as sort of a mediator, providing an interface between software applications and computer hardware.

The Linux kernel is the foundation on which all the different types of Linux, operate. It is Open Source software – anyone can decompile, examine, and modify the code.

As technology progresses, developers discover patches and updates to the Linux kernel. These patches can improve security, add functionality, or even improve the speed at which the operating system functions.

If you’re running a Linux operating system (like Ubuntu), it’s a good idea to check and update the kernel regularly.

How to hide kernel updates in ubuntu

High-Performance Dedicated Servers Starting at Only $ 199 $90.00/mo

  • A server running Ubuntu Linux
  • Access to the Terminal (CTRL-ALT-T or Applications menu > Accessories > Terminal)
  • A user account with sudo privileges
  • The apt tool, built into Ubuntu
  • The Update Manager, built into Ubuntu (optional)

Tutorial on Updating Ubuntu Kernel

Option A: Use the System Update Process

Step 1: Check Your Current Kernel Version

At a terminal window, type:

The terminal returns an output similar to:

The first two digits (in this case, 4.4) are the overall kernel package. The third digit is the version, and the fourth digit shows you the level of patches and fixes.

For more details, refer to our full guide on checking the Linux kernel version. While inspecting the system, you can also check which version of Ubuntu you are running.

Step 2: Update the Repositories

At a terminal, type:

How to hide kernel updates in ubuntu

This command refreshes your local list of software, making a note of any newer revisions and updates. If there’s a newer version of the kernel, the command will find it and mark it for download and installation.

Step 3: Run the upgrade

While still in the terminal, type:

The “dist-upgrade” switch asks Ubuntu to handle any dependencies intelligently. That is, if a particular software package is dependent on another software package to run, this command will make sure that the second package is upgraded before upgrading the first one.

This method is a safe way to upgrade your Ubuntu Linux kernel. The kernel updates accessible through this utility have been tested and verified to work with your version of Ubuntu.

Option B: Use the System Update Process to Force a Kernal Upgrade

There are instances in which a newer kernel has been released but not thoroughly tested with your version of Ubuntu. For example, you might be running Ubuntu 17.10 (Artful Aardvark), and you know that Ubuntu 18.04 (Bionic Beaver) is available.

Updating the kernel in this way requires a more substantial process.

Step 1: Back Up Your Important Files

You’ve probably already done this, but it’s important enough that it’s worth repeating.

Step 2: Use the Software Updater

Launch the software updater by hitting the super key (the “windows” key on most keyboards), and search for Update Manager.

The update manager will notify you if there are any updates needed. If you performed the steps in Part A, it should say your computer is up to date.

Click the Settings button.

A new window should open up with several tabs.

Step 3: Configure the Software Updater

Click the Updates tab.

Tick the first three checkboxes, under “Install updates from:”

  • Important security updates
  • Recommended updates
  • Unsupported updates

Then, at the bottom of this tab, look for a drop-down labeled “Notify me of a new Ubuntu version:”

Click that drop-down, and select:

  • For long-term support versions (If you want to stick with tested and reliable versions with full support)
  • For any new version (If you like playing with the latest-and-greatest, and don’t mind if things are a little buggy)

Close this window, and then re-open it. It should offer the option to upgrade if there’s a new version out. (It usually takes a few days after release for the upgrade to become available, and for the server traffic to lighten up.)

Step 4: Force the Upgrade

If for some reason the system does not offer an upgrade, you can force it by opening a terminal and typing:

How to hide kernel updates in ubuntu

The system should respond with a window showing release notes for the new kernel (and version) of Ubuntu.

If everything looks good, click upgrade, and the process will proceed.

Outlet Servers Starting at Only $30.00/mo

Option C: Manually Update the Kernel (Advanced Procedure)

If you just want to upgrade to the latest (untested) kernel available, and you’re aware of the risks, there’s a third procedure for selecting and installing a new kernel.

Before performing this step, it’s worth checking your system configuration. Are you running any custom drivers (especially video drivers)? Any custom configurations or packages? Those may not be compatible with the new kernel.

If you make a mistake and find that the new kernel is incompatible, a recovery option should be available. But it’s better to take precautions and prevent a problem than to try to fix one.

It’s also a good idea to research the release notes for the kernel you want to install. Note the revision number and any features that you intend to work with.

This process will use Ukuu, a graphical utility for updating the kernel. There are other methods, including manually downloading and installing the kernel, or even getting a copy of the source code and compiling it. Those methods are more complicated, and outside the scope of this guide.

How to hide kernel updates in ubuntu

Canonical released today a new Linux kernel security update for its Ubuntu 20.10 (Groovy Gorilla) and Ubuntu 20.04 LTS (Focal Fossa) systems to address a single security vulnerability.

The vulnerability (CVE-2021-26708) was discovered by Alexander Popov as multiple race conditions in Linux kernel’s AF_VSOCK implementation, which could allow a local attacker to crash the system by causing a denial of service or run programs as an administrator (root).

This security issue affects all Ubuntu 20.10 and Ubuntu 20.04 LTS systems running the Linux 5.8 kernel on all supported architectures, including 64-bit, Raspberry Pi (V8) systems, OEM systems, cloud environments (KVM), as well as Amazon Web Services (AWS), Google Cloud Platform (GCP), Oracle Cloud, and Microsoft Azure Cloud systems.

Users are urged to update their installations as soon as possible to the linux-image 5.8.0-43.49 or linux-image 5.8.0-43.49

20.04.1 on 64-bit systems, linux-image-raspi 5.8.0-1015.18 on Raspberry Pi systems (Ubuntu 20.10 only), as well as linux-image-oem 5.6.0-1047.51 on OEM systems (Ubuntu 20.04 LTS only).

Ubuntu 20.10 (Groovy Gorilla) users on cloud environment must update their kernels to linux-image-kvm 5.8.0-1018.20, linux-image-aws 5.8.0-1023.25 on Amazon Web Services (AWS) systems, linux-image-azure 5.8.0-1022.24 on Microsoft Azure Cloud systems, linux-image-gcp 5.8.0-1022.23 on Google Cloud Platform (GCP) systems, and linux-image-oracle 5.8.0-1020.21 on Oracle Cloud systems.

Also today, Canonical released new kernel versions for its Ubuntu 18.04 LTS (Bionic Beaver) operating system series running the Linux 5.0 or Linux 5.3 kernels on 64-bit, Raspberry Pi (V8), or Google Container Engine (GKE) systems to address the CVE-2020-28374 flaw that could allow a remote attacker with access to at least one iSCSI LUN in a multiple backstore environment to expose sensitive information or modify data.

Ubuntu 18.04 LTS users would have to update their installations to linux-image-generic 5.3.0-70.66 on 32-bit or 64-bit systems, linux-image-raspi2 5.3.0-1037.39 on Raspberry Pi (V8) systems, as well as linux-image-gke 5.3.0-1040.43 or linux-image-gke 5.0.0-1051.53 on Google Container Engine (GKE) systems.

You should reboot your installations after installing the new kernel updates, as well as to recompile and
reinstall any third-party kernel modules you might have installed.

How to hide kernel updates in ubuntu

Canonical released today a new Linux kernel security update for its Ubuntu 20.10 (Groovy Gorilla) and Ubuntu 20.04 LTS (Focal Fossa) systems to address a single security vulnerability.

The vulnerability (CVE-2021-26708) was discovered by Alexander Popov as multiple race conditions in Linux kernel’s AF_VSOCK implementation, which could allow a local attacker to crash the system by causing a denial of service or run programs as an administrator (root).

This security issue affects all Ubuntu 20.10 and Ubuntu 20.04 LTS systems running the Linux 5.8 kernel on all supported architectures, including 64-bit, Raspberry Pi (V8) systems, OEM systems, cloud environments (KVM), as well as Amazon Web Services (AWS), Google Cloud Platform (GCP), Oracle Cloud, and Microsoft Azure Cloud systems.

Users are urged to update their installations as soon as possible to the linux-image 5.8.0-43.49 or linux-image 5.8.0-43.49

20.04.1 on 64-bit systems, linux-image-raspi 5.8.0-1015.18 on Raspberry Pi systems (Ubuntu 20.10 only), as well as linux-image-oem 5.6.0-1047.51 on OEM systems (Ubuntu 20.04 LTS only).

Ubuntu 20.10 (Groovy Gorilla) users on cloud environment must update their kernels to linux-image-kvm 5.8.0-1018.20, linux-image-aws 5.8.0-1023.25 on Amazon Web Services (AWS) systems, linux-image-azure 5.8.0-1022.24 on Microsoft Azure Cloud systems, linux-image-gcp 5.8.0-1022.23 on Google Cloud Platform (GCP) systems, and linux-image-oracle 5.8.0-1020.21 on Oracle Cloud systems.

Also today, Canonical released new kernel versions for its Ubuntu 18.04 LTS (Bionic Beaver) operating system series running the Linux 5.0 or Linux 5.3 kernels on 64-bit, Raspberry Pi (V8), or Google Container Engine (GKE) systems to address the CVE-2020-28374 flaw that could allow a remote attacker with access to at least one iSCSI LUN in a multiple backstore environment to expose sensitive information or modify data.

Ubuntu 18.04 LTS users would have to update their installations to linux-image-generic 5.3.0-70.66 on 32-bit or 64-bit systems, linux-image-raspi2 5.3.0-1037.39 on Raspberry Pi (V8) systems, as well as linux-image-gke 5.3.0-1040.43 or linux-image-gke 5.0.0-1051.53 on Google Container Engine (GKE) systems.

You should reboot your installations after installing the new kernel updates, as well as to recompile and
reinstall any third-party kernel modules you might have installed.

I am running Ubuntu 14.04 server for Kiosk application.
The problem is when kiosk is starting , kernel shows some debug messages about stuff like USB port error and such things, and those ugly messages are being displayed over our plymouth splash screen.
Is there anyway to prevent such messages from showing during startup ? I already have “quiet splash” in my grub config file.

2 Answers 2

If you just want to suppress those messages, rather than fix them, you can try adjusting the kernel.printk sysctl, as outlined in man 2 syslog.

/proc/sys/kernel/printk is a writable file containing four integer values that influence kernel printk() behavior when printing or logging error messages. The four values are:

Only messages with a log level lower than this value will be printed to the console. The default value for this field is DEFAULT_CONSOLE_LOGLEVEL (7), but it is set to 4 if the kernel command line contains the word “quiet”, 10 if the kernel command line contains the word “debug”, and to 15 in case of a kernel fault (the 10 and 15 are just silly, and equivalent to 8). The value of console_loglevel can be set (to a value in the range 1-8) by a syslog() call with a type of 8.

This value will be used as the log level for printk() messages that do not have an explicit level. Up to and including Linux 2.6.38, the hard-coded default value for this field was 4 (KERN_WARNING); since Linux 2.6.39, the default value is a defined by the kernel configuration option CONFIG_DEFAULT_MESSAGE_LOGLEVEL, which defaults to 4.

The value in this field is the minimum value to which console_loglevel can be set.

This is the default value for console_loglevel.

In this article we will be using the ubuntu-mainline-kernel.sh Bash script utility for Ubuntu and use it to easily install or uninstall kernels from the Ubuntu Kernel PPA.

In this tutorial you will learn:

  • How to install kernel upgrade script utility
  • How to to upgrade kernel to latest version
  • How to uninstall previously installed PPA kernels

How to hide kernel updates in ubuntu

Software Requirements and Conventions Used

Software Requirements and Linux Command Line Conventions
CategoryRequirements, Conventions or Software Version Used
SystemInstalled Ubuntu 20.04 or upgraded Ubuntu 20.04 Focal Fossa
Softwareubuntu-mainline-kernel.sh
OtherPrivileged access to your Linux system as root or via the sudo command.
Conventions# – requires given linux commands to be executed with root privileges either directly as a root user or by use of sudo command $ – requires given linux commands to be executed as a regular non-privileged user

Upgrade kernel to latest version on Ubuntu 20.04 step by step instructions

  1. First step is to download the ubuntu-mainline-kernel.sh Bash script utility. Open up your terminal and enter:
  2. Next, step is to install the previously downloaded script into our executable path:
  3. All is ready to upgrade the Ubuntu kernel to the latest version. To do so run do following command: The above command will search for the latest kernel version available. To continue with the kernel installation answer y .

How to hide kernel updates in ubuntu

  • Prev
  • Next

More on LinuxConfig.org:

  • Install And Set Up KVM On Ubuntu 20.04 Focal Fossa Linux
  • Disable Automatic Updates on Ubuntu 20.04 Focal Fossa Linux
  • Ubuntu 20.04 GPG error: The following signatures couldn’t be verified
  • Ping command not found on Ubuntu 20.04 Focal Fossa Linux

Newsletter

Subscribe to Linux Career Newsletter to receive latest news, jobs, career advice and featured configuration tutorials.

Write For Us

LinuxConfig is looking for a technical writer(s) geared towards GNU/Linux and FLOSS technologies. Your articles will feature various GNU/Linux configuration tutorials and FLOSS technologies used in combination with GNU/Linux operating system.

When writing your articles you will be expected to be able to keep up with a technological advancement regarding the above mentioned technical area of expertise. You will work independently and be able to produce at minimum 2 technical articles a month.

How to hide kernel updates in ubuntu

Keeping your computer system updated is, of course, one of the most important tasks as it saves you from so many security and privacy-related problems, not to mention new features (if any) each update brings along. Most modern day operating systems are configured in a way that they automatically check for updates, saving the user extra time and effort that he/she might otherwise have to invest in order to keep their system updated.

While the auto-check feature for system updates is no doubt designed keeping user convenience in mind, there are times when it can be annoying or scenarios where it is undesirable. Take for example the Ubuntu operating system which, by default, auto-checks for updates daily and throws a dialog box similar to the one shown below in your face each time it finds one.

How to hide kernel updates in ubuntu

Now, if for whatever reason, you aren’t interested in installing a particular update, the dialog box will still appear every day when you start using your system. If you’ve faced this situation, you’ll agree that this is where things get annoying. So, what’s the way out? The answer is to configure automatic updates the way you want or disable them altogether if you’re aware of what you’re doing and don’t have any other option.

Note: all steps mentioned in this article have been tested on Ubuntu 14.04 LTS.

Configure/disable automatic updates in Ubuntu

To do this first head to the Unity Dash on your Ubuntu system and search for “Software & Updates.”

How to hide kernel updates in ubuntu

Click on the “Software & Updates” icon, and a window should open up containing various update-related configuration options grouped under five tabs including Ubuntu Software, Other Software, Updates, Authentication, and Additional Drivers.

How to hide kernel updates in ubuntu

Click on the “Updates” tab, and you should see several configuration options related to software updates including an option titled “Automatically check for updates” which is set to “Daily” by default.

How to hide kernel updates in ubuntu

Click on “Daily,” and you’ll see other values that you can set for this option including “Every two days,” “Weekly,” “Every two weeks,” and “Never.”

How to hide kernel updates in ubuntu

As you might have gathered by now, selecting “Never” will disable the auto-check feature. Of course, you can choose any other value depending on your nends.

Note: keep in mind that disabling the auto-check feature will just stop the system from checking for updates without your permission. You’ll still be able to manually check for the updates, something which you can do through the command line as well as a GUI-based tool like Software Updater.

The “Updates” tab also contains many other options such as those related to displaying the updates with the security updates – quite understandably – set to be displayed immediately by default, while other updates are configured to be displayed weekly. Then there are also options that you can enable/disable to tell the system the kind of updates you want (or don’t want) to install.

Conclusion

There could be many reasons for you to stop the automatic checking, hence the installation of system updates including limited Internet bandwidth, sticking to a particular version of a software or OS kernel, and more. However, what’s worth stressing here is that completely disabling the auto-check feature (which obviously would also disable the checking for security updates) isn’t an intelligent move until, of course, you understand the risks involved and still want to go ahead with it.

Himanshu Arora is a freelance technical writer by profession but a software programmer and Linux researcher at heart. He covers software tutorials, reviews, tips/tricks, and more. Some of his articles have been featured on IBM developerworks, ComputerWorld, and in Linux Journal.

Since its inception in 2004, Ubuntu has been built on a foundation of enterprise-grade, industry leading security practices. From our toolchain to the suite of packages we use and from our update process to our industry standard certifications, Canonical never stops working to keep Ubuntu at the forefront of safety and reliability.

How to hide kernel updates in ubuntu

Secure out of the box

All Canonical products are built with unrivalled security in mind — and tested to ensure they deliver it. Your Ubuntu software is secure from the moment you install it, and will remain so as Canonical ensures security updates are always available on Ubuntu first.

Secure by process

Canonical’s team of security experts react fast to threats constantly reviewing and fixing vulnerabilities. They also develop security features and best practices that are rolled into all Canonical products.

Certified compliance

Canonical offers a range of tools to enable organisations to manage their desktop fleet and cloud with specific compliance requirements. A FIPS (Federal Information Processing Standard) certified version of Ubuntu is also available to comply to US government standards.

FIPS certification and CIS compliance with Ubuntu

Learn about Ubuntu CIS and FIPS certified components to enable operating under compliance regimes like FedRAMP, HIPAA, PCI and ISO. Get all of your compliance questions answered in our upcoming webinar to ensure you and your team are, and remain, compliant.

Find out more

Security notices

Security news

Security hardening features

Canonical puts security at the heart of Ubuntu

Fast fixes

No system is 100% secure and vulnerabilities will always arise. What matters is the speed and success with which they are resolved — and nobody makes fixes available faster than Canonical.

Automatic updates

Security updates are provided for five years for long term support (LTS) releases. With the default configuration for unattended upgrades (16.04 and after), these updates get applied to your system automatically.

Livepatch

The Canonical Livepatch Service enables live automatic security fixes to the kernel without rebooting. This service reduces planned or unplanned downtime while maintaining compliance and security.

5 years of support guaranteed

A new LTS (Long Term Support) version of Ubuntu is released every two years, for desktop and server. Both versions are supported for five years.

Extended security

For users of Ubuntu 14.04 LTS, Canonical offers Extended Security Maintenance (ESM) to provide ongoing kernel security fixes through a secure and private archive.

Ubuntu is certified to US government standards by FIPS (Federal Information Processing Standard) to ensure compliance and tougher security.

Designed to be secure

Linux is based on Unix. It inherits Discretionary Access Control and includes Mandatory Access Control via AppArmor.

Protected VMs

LXD containers, libvirt VMs and OpenStack VMs are protected by AppArmor by default. A rich set of profiles are provided so users can opt-in to protection for other applications.

Secure snap packages

Software packages delivered as strict-mode snaps are fully confined using AppArmor, device cgroups, and seccomp.

Learn how ITstrategen keeps their applications secure with Ubuntu

The security of customer data is of the utmost importance to ITstrategen, which is why Ubuntu is their server operating system of choice.

Ubuntu is trusted by

Find out why the UK Government puts Ubuntu in first place for security

Learn more about Ubuntu security

White paper

Ubuntu Core Security Whitepaper

White paper

IoT Security Whitepaper

Ensuring the ongoing security compliance of Ubuntu

Helping you manage security

Every Long Term Support (LTS) release of Ubuntu comes with five years of free security and maintenance updates. Canonical also offers a number of additional products and services to help manage the security of your Ubuntu systems.

Critical security fixes with zero downtime

The Canonical Livepatch Service lets you apply kernel fixes in seconds, without restarting your Ubuntu 18.04 LTS, 16.04 LTS or 14.04 ESM systems. Fewer reboots removes the operational burden associated planned downtimes for upgrades. It also means improved service availability and systems that are more compliant and secure.

Be compliant and FIPS certified

Canonical has received FIPS 140-2, Level 1 certification for cryptographic modules in Ubuntu 18.04 LTS and Ubuntu 16.04 LTS and Common Criteria EAL2 certification for Ubuntu 16.04 LTS. These certifications, alongside further security measures and achievements, enable organisations to meet compliance requirements within regulated industries.

Manage security updates with Landscape

Landscape is the leading management tool to deploy, monitor and manage your Ubuntu servers and desktops. Landscape gives the ability to centrally view and manage the security updates that have been applied to their systems and, critically, the security updates which have not yet been applied.

Extend your Ubuntu 14.04 LTS security maintenance

Following the end-of-life of Ubuntu 14.04 LTS in April 2019, Canonical began offering Ubuntu 14.04 ESM (Extended Security Maintenance), to Ubuntu Advantage customers to provide important security fixes for the kernel and essential user space packages. These updates are delivered via a secure, private archive exclusively available to Ubuntu Advantage customers.

Ubuntu Advantage

All of our security products are available for a one off fee or they are all included in our Ubuntu Advantage support packages.

Ubuntu Advantage is the professional package of tools, technology and expertise from Canonical, helping organisations around the world get the most out of their Ubuntu deployments. It includes access to:

  • Livepatch: automatic kernel security hotfixes without rebooting
  • FIPS: certified cryptographic modules available for compliance requirements
  • Landscape: the systems management tool for using Ubuntu at scale
  • Extended Security Maintenance: critical security updates after Ubuntu end-of-life
  • Knowledge Base: a private archive of expert-written articles and tutorials
  • Support: phone and web-based support at multiple service levels

How to hide kernel updates in ubuntu

Education discounts

To support those using Ubuntu in schools, research and academia, Canonical is pleased to offer a discount programme for approved institutions. Please mention your interest in this programme in your conversations with our team.

Talk to a member of our team

We can recommend a security solution that best suits the needs of your organisation.