Ubuntu Pro is a comprehensive subscription service provided by Canonical that extends the security and compliance capabilities of Ubuntu LTS (Long Term Support) releases. It essentially transforms a standard LTS installation into an enterprise-grade platform by expanding security coverage.
Key Features
- Expanded Security Maintenance (ESM): While standard LTS provides 5 years of security updates for the “Main” repository, Ubuntu Pro extends this to 10 years (and up to 12 with Pro+ support). It also covers the “Universe” repository, which includes over 23,000 packages.
- Kernel Livepatch: Allows you to apply critical kernel security patches without rebooting your system, which is vital for maintaining high uptime.
- Compliance & Hardening: Provides access to tools for FIPS 140-2, CIS hardening profiles, and DISA-STIG compliance.
- Cost: It is free for personal use on up to 5 machines. For enterprises, it is a paid per-node or per-core subscription.
How to Set It Up
Setting up Ubuntu Pro involves getting a token from the Ubuntu portal and “attaching” your machine via the command line.
1. Get Your Token
- Go to the Ubuntu Pro Dashboard.
- Log in or create an Ubuntu One account.
- Your free personal token (or enterprise token) will be displayed on the main dashboard.
2. Attach Your Machine
Ensure your system is up to date, then run the attachment command:
sudo apt update && sudo apt upgrade -y
sudo pro attach <YOUR_TOKEN>
3. Verify the Status
After attaching, check that the services are active:
pro status
How to Manage It
Management is handled primarily through the pro command-line tool or the web dashboard for subscription-level changes.
Common Management Commands
Here is a brief description for each pro command:
- attach: Links your local machine to your Ubuntu Pro account using a token.
- api: Accesses internal program interfaces for scripting or advanced integration.
- auto-attach: Attempts to link the machine automatically (common in cloud environments like AWS/Azure).
- collect-logs: Gathers diagnostic data and logs for troubleshooting support issues.
- config: Views or modifies local settings like proxy details or repository mirrors.
- detach: Unlinks the machine from the subscription and disables Pro services.
- disable: Turns off a specific feature (e.g., Livepatch) without detaching the whole system.
- enable: Activates a specific feature (e.g., FIPS or ESM) included in your plan.
- fix: Scans and applies patches for a specific security vulnerability (CVE) or notice (USN).
- security-status: Summarizes which installed packages are covered by Pro and which need updates.
- help: Provides detailed syntax and usage information for the Pro client.
- refresh: Manually updates the machine’s local contract and entitlement data from Canonical.
- status: Displays which Pro services are currently active or available on the system.
- version: Shows the current software version of the Ubuntu Pro client.
- system: Provides hardware and OS details that affect Pro service eligibility.
