|
| 1 | + |
1 | 2 | ---
|
2 | 3 | title: In-place upgrade to Ubuntu Pro Linux images on Azure
|
3 | 4 | description: Learn how to do an in-place upgrade from Ubuntu Server to Ubuntu Pro
|
4 |
| -author: chasecrum |
| 5 | +author: anujkmaurya |
5 | 6 | ms.service: virtual-machines
|
6 | 7 | ms.subservice: billing
|
7 |
| -ms.custom: devx-track-linux, devx-track-azurecli |
| 8 | +ms.custom: devx-track-linux, devx-track-azurecli, linux-related-content |
8 | 9 | ms.collection: linux
|
9 | 10 | ms.topic: article
|
10 |
| -ms.date: 09/12/2023 |
11 |
| -ms.author: chasecrum |
| 11 | +ms.date: 9/12/2023 |
| 12 | +ms.author: anujmaurya |
12 | 13 | ---
|
13 | 14 |
|
14 | 15 | # Ubuntu Server to Ubuntu Pro in-place upgrade on Azure
|
15 | 16 |
|
16 |
| -**Applies to:** :heavy_check_mark: Linux virtual machines |
| 17 | +Customers can now upgrade their Ubuntu Server (version 16.04 or higher) virtual machines to Ubuntu |
| 18 | +Pro without redeployment or downtime. This method has proven useful for customers wishing to convert |
| 19 | +their servers from Ubuntu 18.04 LTS now that it's reached End of Life (EOL). |
17 | 20 |
|
18 |
| -Customers can now upgrade from Ubuntu Server (16.04 or higher) to Ubuntu Pro on your existing Azure |
19 |
| -Virtual Machines without redeployment or downtime. One of the major use cases includes conversion of |
20 |
| -Ubuntu 18.04 LTS going EOL to Ubuntu Pro. |
21 |
| -[Canonical announced that the Ubuntu 18.04 LTS (Bionic Beaver) OS images end-of-life (EOL)](https://ubuntu.com/18-04/azure). |
22 |
| -Canonical no longer provides technical support, software updates, or security patches for this |
23 |
| -version. Customers need to upgrade to Ubuntu Pro to continue to be on Ubuntu 18.04 LTS. |
| 21 | +> [!IMPORTANT] |
| 22 | +> Canonical has announced that Ubuntu 18.04 LTS (Bionic Beaver) OS images are now |
| 23 | +> [out of standard support][01]. This means that Canonical will no longer offer technical support, |
| 24 | +> software updates, or security patches for this version. Customers wishing to continue using Ubuntu |
| 25 | +> 18.04 LTS need to upgrade to Ubuntu Pro for continued supportability. |
24 | 26 |
|
25 |
| -## What is Ubuntu Pro? |
| 27 | +## What's Ubuntu Pro? |
26 | 28 |
|
27 | 29 | Ubuntu Pro is a cross-cloud OS, optimized for Azure, and security maintained for 10 years. The
|
28 |
| -secure use of open-source software allows teams to utilize the latest technologies while meeting |
29 |
| -internal governance and compliance requirements. Ubuntu Pro 18.04 LTS, remains fully compatible with |
30 |
| -Ubuntu Server 18.04 LTS, but adds more security enabled by default, including compliance and |
31 |
| -management tools in a form suitable for small to large-scale Linux operations. Ubuntu Pro 18.04 LTS |
32 |
| -is fully supported until April 2028. Ubuntu Pro also comes with security patching for all Ubuntu |
33 |
| -packages due to Extended Security Maintenance (ESM) for Infrastructure and Applications and optional |
34 |
| -24/7 phone and ticket support. |
35 |
| - |
36 |
| -Customers using Ubuntu Server 18.04, for example, can upgrade to Ubuntu Pro and continue to receive |
37 |
| -security patches from Canonical until 2028. Customers can upgrade to Ubuntu Pro via Azure CLI. |
| 30 | +secure use of open-source software allows the operating system to use the latest technologies while |
| 31 | +meeting internal governance and compliance requirements. Ubuntu Pro 18.04 LTS remains fully |
| 32 | +compatible with Ubuntu Server 18.04 LTS, with more security enabled by default. It includes |
| 33 | +compliance and management tools in a form suitable for small to large-scale Linux operations. Ubuntu |
| 34 | +Pro 18.04 LTS is fully supported until April 2028. Ubuntu Pro provides Extended Security Maintenance |
| 35 | +(ESM) for infrastructure and applications support, providing security patching for all Ubuntu |
| 36 | +packages. |
38 | 37 |
|
39 | 38 | ## Why developers and devops choose Ubuntu Pro for Azure
|
40 | 39 |
|
41 |
| -* Access to security updates for 23,000+ packages including Apache Kafka, NGINX, MongoDB, Redis and |
42 |
| - PostgreSQL, integrated into normal system tools (for example Azure Update Manager, apt) |
43 |
| -* Security hardening and audit tools (CIS) to establish a security baseline across your systems (and |
44 |
| - help you meet the Azure Linux Security Baseline policy) |
45 |
| -* FIPS 140-2 certified modules |
46 |
| -* Common Criteria (CC) EAL2 provisioning packages |
47 |
| -* Kernel Live patch: kernel patches delivered immediately, without the need to reboot |
48 |
| -* Optimized performance: optimized kernel, with improved boot speed, outstanding runtime performance |
49 |
| - and advanced device support |
50 |
| -* 10-year security maintenance: Ubuntu Pro 18.04 LTS provides security maintenance until April 2028 |
51 |
| -* Production ready: Ubuntu is the leading Linux in the public cloud with > 50% of Linux workloads |
52 |
| -* Developer friendly: Ubuntu is the \#1 Linux for developers offering the latest libraries and tools |
53 |
| - to innovate with the latest technologies |
54 |
| -* Non-stop security: Canonical publishes images frequently, ensuring security is present from the |
55 |
| - moment an instance launches |
56 |
| -* Portability: Ubuntu is available in all regions with content mirrors to reduce the need to go |
57 |
| - across regions or out to the Internet for updates |
58 |
| -* Consistent experience across platforms: from edge to multicloud, Ubuntu provides the same |
59 |
| - experience regardless of the platform. It ensures consistency of your CI/CD pipelines and |
60 |
| - management mechanisms. |
| 40 | +- Access to security updates for 23,000+ packages including Apache Kafka, NGINX, MongoDB, Redis and |
| 41 | + PostgreSQL, integrated into system tools (for example Azure Update Manager, apt) |
| 42 | +- Security hardening and audit tools (CIS) to establish a security baseline across your systems (and |
| 43 | + help you meet the Azure Linux Security Baseline policy) |
| 44 | +- FIPS 140-2 certified modules |
| 45 | +- Common Criteria (CC) EAL2 provisioning packages |
| 46 | +- Kernel Live patch: kernel patches delivered immediately, without the need to reboot |
| 47 | +- Optimized performance: optimized kernel, with improved boot speed, outstanding runtime performance |
| 48 | + and advanced device support |
| 49 | +- 10-year security maintenance: Ubuntu Pro 18.04 LTS provides security maintenance until April 2028 |
| 50 | +- Developer friendly: Ubuntu offers developers the latest libraries and tools to innovate with the latest technologies |
| 51 | +- Nonstop security: Canonical publishes images ensuring security is present from the moment an instance launches |
| 52 | +- Portability: Ubuntu is available in all regions with content mirrors to reduce the need to go across regions or out to the Internet for updates |
| 53 | +- Consistent experience across platforms: from edge to multicloud, Ubuntu provides the same experience regardless of the platform. It ensures consistency of your CI/CD pipelines and management mechanisms. |
61 | 54 |
|
62 | 55 | > [!NOTE]
|
63 |
| -> This document presents the direction to upgrade from an Ubuntu Server (16.04 or higher) image to |
64 |
| -> Ubuntu Pro with zero downtime for upgrade by executing the following steps in your VMs: |
65 |
| -> |
66 |
| -> 1. Converting to Ubuntu Pro license |
67 |
| -> 2. Validating the license |
68 |
| -> |
69 |
| -> Converting to UBUNTU_PRO is an irreversible process. You can't even downgrade a VM by running |
70 |
| -> detach. Open a support ticket for any exceptions. |
| 56 | +> This document provides instructions to upgrade Ubuntu Server (16.04 or higher) to |
| 57 | +> Ubuntu Pro. Converting to Ubuntu Pro is an irreversible process. |
71 | 58 |
|
72 | 59 | ## Convert to Ubuntu Pro using the Azure CLI
|
73 | 60 |
|
74 |
| -```azurecli-interactive |
75 |
| -# The following will enable Ubuntu Pro on a virtual machine |
| 61 | +The following command enables Ubuntu Pro on a virtual machine in Azure: |
| 62 | + |
| 63 | +```Azure CLI |
76 | 64 | az vm update -g myResourceGroup -n myVmName --license-type UBUNTU_PRO
|
77 | 65 | ```
|
78 | 66 |
|
79 |
| -```In-VM commands |
80 |
| -# The next step is to execute two in-VM commands |
| 67 | +Execute these commands inside the VM: |
| 68 | + |
| 69 | +```bash |
81 | 70 | sudo apt install ubuntu-advantage-tools
|
82 | 71 | sudo pro auto-attach
|
83 | 72 | ```
|
84 | 73 |
|
85 |
| -(Note that "sudo apt install ubuntu-advantage-tools" is only necessary if "pro --version" is lower than 28) |
| 74 | +If the `pro --version` is lower than 28, execute this command: |
| 75 | + |
| 76 | +```bash |
| 77 | +sudo apt install ubuntu-advantage-tools |
| 78 | +``` |
86 | 79 |
|
87 | 80 | ## Validate the license
|
88 | 81 |
|
| 82 | +use the `pro status --all` command to validate the license: |
| 83 | + |
89 | 84 | Expected output:
|
90 | 85 |
|
91 |
| - |
| 86 | +```output |
| 87 | +SERVICE ENTITLED STATUS DESCRIPTION |
| 88 | +cc-eal yes disabled Common Criteria EAL2 Provisioning Packages |
| 89 | +cis yes disables Security compliance and audit tools |
| 90 | +esm-apps yes enabled Expanded Security Maintenance and audit tools |
| 91 | +esm-infra yes enabled Expanded Security Maintenance for infrastructure |
| 92 | +fips yes disabled NIST-certified core packages |
| 93 | +fips-updates yes disabled NIST-certified core packages with priority security updates |
| 94 | +livepatch yes enabled Canonical Livepatch service |
| 95 | +``` |
92 | 96 |
|
93 | 97 | ## Create an Ubuntu Pro VM using the Azure CLI
|
94 | 98 |
|
95 |
| -You can also create a new VM using the Ubuntu Server images and apply Ubuntu Pro at create time. |
| 99 | +You can create a new VM using the Ubuntu Server images and apply Ubuntu Pro at the time of creation. |
| 100 | +The following command enables Ubuntu Pro on a virtual machine in Azure: |
96 | 101 |
|
97 |
| -For example: |
98 |
| - |
99 |
| -```azurecli-interactive |
100 |
| -# The following will enable Ubuntu Pro on a virtual machine |
| 102 | +```Azure CLI |
101 | 103 | az vm update -g myResourceGroup -n myVmName --license-type UBUNTU_PRO
|
102 | 104 | ```
|
103 | 105 |
|
104 |
| -```In-VM commands |
105 |
| -# The next step is to execute two in-VM commands |
| 106 | +Execute these commands inside the VM: |
| 107 | + |
| 108 | +```bash |
106 | 109 | sudo apt install ubuntu-advantage-tools
|
107 | 110 | sudo pro auto-attach
|
108 | 111 | ```
|
109 | 112 |
|
110 |
| ->[!NOTE] |
111 |
| -> For systems with advantage tools version 28 or higher installed the system will perform a pro attach during a reboot. |
| 113 | +> [!NOTE] |
| 114 | +> For systems with advantage tools using version 28 or higher, installed the system will perform a |
| 115 | +> `pro attach` during a reboot. |
112 | 116 |
|
113 | 117 | ## Check licensing model using the Azure CLI
|
114 | 118 |
|
115 |
| -You can use the az vm get-instance-view command to check the status. Look for a licenseType field in the response. If the licenseType field exists and the value is UBUNTU_PRO, your virtual machine has Ubuntu Pro enabled. |
| 119 | +> [!TIP] |
| 120 | +> You can query the metadata in _Azure Instance Metadata Service_ to determine the virtual machine's |
| 121 | +> _licenseType_ value. You can use the `az vm get-instance-view` command to check the status. Look |
| 122 | +> for the _licenseType_ field in the response. If the field exists and the value is UBUNTU_PRO, your |
| 123 | +> virtual machine has Ubuntu Pro enabled. [Learn more about attested metadata][02]. |
116 | 124 |
|
117 | 125 | ```Azure CLI
|
118 | 126 | az vm get-instance-view -g MyResourceGroup -n MyVm
|
119 | 127 | ```
|
120 | 128 |
|
121 |
| -## Check the licensing model of an Ubuntu Pro enabled VM using Azure Instance Metadata Service |
122 |
| - |
123 |
| -From within the virtual machine itself, you can query the attested metadata in Azure Instance Metadata Service to determine the virtual machine's licenseType value. A licenseType value of UBUNTU_PRO indicates that your virtual machine has Ubuntu Pro enabled. [Learn more about attested metadata](../../instance-metadata-service.md). |
124 |
| - |
125 | 129 | ## Billing
|
126 | 130 |
|
127 |
| -You are charged for Ubuntu Pro as part of the Preview. Visit the |
128 |
| -[pricing calculator](https://azure.microsoft.com/pricing/calculator/) for more details on Ubuntu Pro |
129 |
| -pricing. To cancel the Pro subscription during the preview period, open a support ticket through the |
130 |
| -Azure portal. |
131 |
| - |
132 |
| -## Frequently Asked Questions |
| 131 | +Visit the [pricing calculator][03] for more details on Ubuntu Pro pricing. To cancel the Pro |
| 132 | +subscription during the preview period, open a support ticket through the Azure portal. |
133 | 133 |
|
134 |
| -### What are the next step after launching an Ubuntu Pro VM? |
| 134 | +## Next steps after launching an Ubuntu Pro VM |
135 | 135 |
|
136 | 136 | With the availability of outbound internet access, Ubuntu Pro automatically enables premium features
|
137 |
| -such as Extended Security Maintenance for |
138 |
| -[Main and Universe repositories](https://help.ubuntu.com/community/Repositories) and |
139 |
| -[live patch](https://ubuntu.com/security/livepatch/docs). Should any specific hardening be required |
140 |
| -(for example CIS), check the using 'usg' to |
141 |
| -[harden your servers](https://ubuntu.com/tutorials/comply-with-cis-or-disa-stig-on-ubuntu#1-overview) |
142 |
| -tutorial. Should you require FIPS, check enabling FIPS tutorials. |
| 137 | +including [Live Patch][04] and Extended Security Maintenance for |
| 138 | +[Main and Universe repositories][05]. |
| 139 | +Should any specific hardening be required, check `usg` to [harden your servers][06] for CIP and FIPS |
| 140 | +tutorials. |
| 141 | +Learn more about networking requirements (such as egress traffic, endpoints and ports) by reading |
| 142 | +[Ubuntu Pro Client network requirements][07]. |
143 | 143 |
|
144 |
| -For more information about networking requirements for making sure Pro enablement process works |
145 |
| -(such as egress traffic, endpoints and ports) |
146 |
| -[check this documentation](https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/references/network_requirements.html). |
| 144 | +## Frequently Asked Questions |
147 | 145 |
|
148 |
| -### Does shutting down the machine stop billing? |
| 146 | +**Does shutting down the machine stop billing?** |
149 | 147 |
|
150 |
| -If you launch Ubuntu Pro from Azure Marketplace you pay as you go, so, if you don’t have any machine running, you won’t pay anything additional. |
| 148 | +Launching Ubuntu Pro from Azure Marketplace is you pay as you go and only charges for running |
| 149 | +machines. |
151 | 150 |
|
152 |
| -### Are there volume discounts? |
| 151 | +**Are there volume discounts?** |
153 | 152 |
|
154 | 153 | Yes. Contact your Microsoft sales representative.
|
155 | 154 |
|
156 |
| -### Are Reserved Instances available? |
| 155 | +**Are Reserved Instances available?** |
| 156 | + |
| 157 | +Yes. |
157 | 158 |
|
158 |
| -Yes |
| 159 | +**If the customer doesn't perform the `auto attach` function, will they still get attached to pro on reboot?** |
159 | 160 |
|
160 |
| -### If the customer doesn't do the auto attach will they still get attached to pro on reboot? |
| 161 | +If the customer doesn't perform the _auto attach_, they still get the Pro attached upon reboot. |
| 162 | +However, this action only applies if they're using version 28 of the Pro client. |
161 | 163 |
|
162 |
| -If the customer doesn't perform the auto attach, they still get the Pro attached upon reboot. |
163 |
| -However, this applies only if they have v28 of the Pro client. |
| 164 | +- For Ubuntu Jammy and Focal, this process works as expected. |
| 165 | +- For Ubuntu Bionic and Xenial, this process doesn't work due to older versions of the Pro client installed. |
164 | 166 |
|
165 |
| -* For Jammy and Focal, this process works as expected. |
166 |
| -* For Bionic and Xenial this process doesn't work due to the older versions of the Pro client installed. |
| 167 | +<!-- link references --> |
| 168 | +[01]: https://ubuntu.com/18-04/azure |
| 169 | +[02]: ../../instance-metadata-service.md |
| 170 | +[03]: https://azure.microsoft.com/pricing/calculator/ |
| 171 | +[04]: https://ubuntu.com/security/livepatch/docs |
| 172 | +[05]: https://help.ubuntu.com/community/Repositories |
| 173 | +[06]: (https://ubuntu.com/tutorials/comply-with-cis-or-disa-stig-on-ubuntu#1-overview) |
| 174 | +[07]: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/latest/references/network_requirements.html |
0 commit comments