Rediger

Del via

Ubuntu Server to Ubuntu Pro in-place upgrade on Azure

  • Artikkel

Customers can now upgrade their Ubuntu Server (version 16.04 or higher) virtual machines to Ubuntu Pro without redeployment or downtime. This method is recommended for customers wishing to convert their servers from versions that are End of Life (EOL) status.

Important

EOL versions are not officially supported unless they have the PRO entitlement. For an updated list of versions that are EOL, check the official Canonical Release Cycle page.

Warning

  • Only Ubuntu images on the Azure Marketplace published by Canonical can be converted to "UBUNTU_PRO"

  • Images published by any other vendors or custom images are not supported

What's Ubuntu Pro?

Ubuntu Pro is a cross-cloud OS, optimized for Azure, and security maintained for 10 years. The secure use of open-source software allows the operating system to use the latest technologies while meeting internal governance and compliance requirements. Ubuntu Pro provides Extended Security Maintenance (ESM) for infrastructure and applications support, providing security patching for all Ubuntu packages.

Why developers and devops choose Ubuntu Pro for Azure

  • Access to security updates for 23,000+ packages including Apache Kafka, NGINX, MongoDB, Redis, and   PostgreSQL integrated into system tools (for example Azure Update Manager, apt)
  • Security hardening and audit tools (CIS) to establish a security baseline across your systems (   helps meeting the Azure Linux Security Baseline policy)
  • Federal Information Processing Standard (FIPS) 140-2 certified modules
  • Common Criteria (CC) EAL2 provisioning packages
  • Kernel Live patch: kernel patches delivered immediately, without the need to reboot
  • Optimized performance: optimized kernel, with improved boot speed, outstanding runtime performance, and   advanced device support
  • 10-year security maintenance: Ubuntu Pro 18.04 Long-Term Support (LTS) provides security maintenance until April 2028
  • Developer friendly: Ubuntu offers developers the latest libraries and tools to innovate with the latest technologies
  • Nonstop security: Canonical publishes images ensuring security is present from the moment an instance launches
  • Portability: Ubuntu is available in all regions with content mirrors to reduce the need to go across regions or out to the Internet for updates
  • Consistent experience across platforms: from edge to multicloud, Ubuntu provides the same experience regardless of the platform. It ensures consistency of your CI/CD pipelines and management mechanisms.

Important

Converting to Ubuntu Pro is an irreversible process.

Convert to Ubuntu Pro using the Azure CLI

The following command enables Ubuntu Pro on a virtual machine in Azure:

az vm update -g myResourceGroup -n myVmName --license-type UBUNTU_PRO

Execute these commands inside the VM:

sudo apt install ubuntu-pro-client
sudo pro auto-attach

Important

The change of the "licenseType" property may take some time to propagate thru the system. If the auto-attach process fails, wait for a few minutes, and try again. If the auto-attach process continues to fail, open a support ticket with Microsoft. If the pro --version is lower than 28, execute this command:

sudo apt install ubuntu-pro-client

Validate the license

use the pro status --all command to validate the license:

Expected output:

SERVICE      ENTITLED    STATUS    DESCRIPTION
cc-eal       yes         disabled  Common Criteria EAL2 Provisioning Packages
cis          yes         disables  Security compliance and audit tools
esm-apps     yes         enabled   Expanded Security Maintenance and audit tools
esm-infra    yes         enabled   Expanded Security Maintenance for infrastructure
fips         yes         disabled  NIST-certified core packages
fips-updates yes         disabled  NIST-certified core packages with priority security updates
livepatch    yes         enabled   Canonical Livepatch service

Create an Ubuntu Pro VM using the Azure CLI

You can create a new VM using the Ubuntu Server images and apply Ubuntu Pro at the time of creation.

Both of the following commands enable Ubuntu Pro on a virtual machine in Azure. Choose which to run based on whether you want to use SSH keys or an administrator user and password.

To create the VM and use SSH keys:

az vm create -g myResourceGroup -n myVmName --generate-ssh-keys --license-type UBUNTU_PRO --image ubuntu2204

To create the VM and use an administrator user and password:

az vm create -g myResourceGroup -n myVmName --admin-username Username --license-type UBUNTU_PRO --image ubuntu2204

Note

For more information on ways to connect to Linux machines, see Connect to a Linux VM.

Execute these commands inside the VM:

sudo apt install ubuntu-pro-client
sudo pro auto-attach

Note

For systems with advantage tools using version 28 or higher, installed the system will perform a pro attach during a reboot.

Check licensing model using the Azure CLI

Tip

You can query the metadata in Azure Instance Metadata Service to determine the virtual machine's licenseType value. You can use the az vm get-instance-view command to check the status. Look for the licenseType field in the response. If the field exists and the value is UBUNTU_PRO, your virtual machine has Ubuntu Pro enabled. Learn more about attested metadata.

az vm get-instance-view -g MyResourceGroup -n MyVm

Billing

Visit the pricing calculator for more details on Ubuntu Pro pricing. To cancel the Pro subscription during the preview period, open a support ticket through the Azure portal.

Next steps after launching an Ubuntu Pro VM

With the availability of outbound internet access, Ubuntu Pro automatically enables premium features including Live Patch and Extended Security Maintenance for Main and Universe repositories. Should any specific hardening be required, check usg to harden your servers for CIP and FIPS tutorials. Learn more about networking requirements (such as egress traffic, endpoints and ports) by reading Ubuntu Pro Client network requirements.

Frequently Asked Questions

Does shutting down the machine stop billing?

Launching Ubuntu Pro from Azure Marketplace is you pay as you go and only charges for running machines.

Are there volume discounts?

Yes. Contact your Microsoft sales representative.

Are Reserved Instances available?

Yes.

If the customer doesn't perform the auto attach function, will they still get attached to pro on reboot?

If the customer doesn't perform the auto attach, they still get the Pro attached upon reboot. However, this action only applies if they're using version 28 of the Pro client.

  • For Ubuntu 20.04+, this process works as expected.
  • For Ubuntu 16.04 and 18.04, this process doesn't work due to older versions of the Pro client installed.