Skip to content

Commit 828adf9

Browse files
committed
Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into fixSnap
2 parents be0990f + bbd6301 commit 828adf9

File tree

1 file changed

+101
-94
lines changed

1 file changed

+101
-94
lines changed

articles/virtual-machines/workloads/canonical/ubuntu-pro-in-place-upgrade.md

Lines changed: 101 additions & 94 deletions
Original file line numberDiff line numberDiff line change
@@ -4,163 +4,170 @@ description: Learn how to do an in-place upgrade from Ubuntu Server to Ubuntu Pr
44
author: anujkmaurya
55
ms.service: virtual-machines
66
ms.subservice: billing
7-
ms.custom: devx-track-linux, devx-track-azurecli
7+
ms.custom: devx-track-linux, devx-track-azurecli, linux-related-content
88
ms.collection: linux
99
ms.topic: article
10-
ms.date: 08/07/2023
10+
ms.date: 9/12/2023
1111
ms.author: anujmaurya
1212
---
1313

1414
# Ubuntu Server to Ubuntu Pro in-place upgrade on Azure
1515

16-
**Applies to:** :heavy_check_mark: Linux virtual machines
16+
Customers can now upgrade their Ubuntu Server (version 16.04 or higher) virtual machines to Ubuntu
17+
Pro without redeployment or downtime. This method has proven useful for customers wishing to convert
18+
their servers from Ubuntu 18.04 LTS now that it's reached End of Life (EOL).
1719

18-
Customers can now upgrade from Ubuntu Server (16.04 or higher) to Ubuntu Pro on your existing Azure
19-
Virtual Machines without redeployment or downtime. One of the major use cases includes conversion of
20-
Ubuntu 18.04 LTS going EOL to Ubuntu Pro.
21-
[Canonical announced that the Ubuntu 18.04 LTS (Bionic Beaver) OS images end-of-life (EOL)](https://ubuntu.com/18-04/azure).
22-
Canonical no longer provides technical support, software updates, or security patches for this
23-
version. Customers need to upgrade to Ubuntu Pro to continue to be on Ubuntu 18.04 LTS.
20+
> [!IMPORTANT]
21+
> Canonical has announced that Ubuntu 18.04 LTS (Bionic Beaver) OS images are now
22+
> [out of standard support][01]. This means that Canonical will no longer offer technical support,
23+
> software updates, or security patches for this version. Customers wishing to continue using Ubuntu
24+
> 18.04 LTS need to upgrade to Ubuntu Pro for continued supportability.
2425
25-
## What is Ubuntu Pro?
26+
## What's Ubuntu Pro?
2627

2728
Ubuntu Pro is a cross-cloud OS, optimized for Azure, and security maintained for 10 years. The
28-
secure use of open-source software allows teams to utilize the latest technologies while meeting
29-
internal governance and compliance requirements. Ubuntu Pro 18.04 LTS, remains fully compatible with
30-
Ubuntu Server 18.04 LTS, but adds more security enabled by default, including compliance and
31-
management tools in a form suitable for small to large-scale Linux operations. Ubuntu Pro 18.04 LTS
32-
is fully supported until April 2028. Ubuntu Pro also comes with security patching for all Ubuntu
33-
packages due to Extended Security Maintenance (ESM) for Infrastructure and Applications and optional
34-
24/7 phone and ticket support.
35-
36-
Customers using Ubuntu Server 18.04, for example, can upgrade to Ubuntu Pro and continue to receive
37-
security patches from Canonical until 2028. Customers can upgrade to Ubuntu Pro via Azure CLI.
29+
secure use of open-source software allows the operating system to use the latest technologies while
30+
meeting internal governance and compliance requirements. Ubuntu Pro 18.04 LTS remains fully
31+
compatible with Ubuntu Server 18.04 LTS, with more security enabled by default. It includes
32+
compliance and management tools in a form suitable for small to large-scale Linux operations. Ubuntu
33+
Pro 18.04 LTS is fully supported until April 2028. Ubuntu Pro provides Extended Security Maintenance
34+
(ESM) for infrastructure and applications support, providing security patching for all Ubuntu
35+
packages.
3836

3937
## Why developers and devops choose Ubuntu Pro for Azure
4038

41-
* Access to security updates for 23,000+ packages including Apache Kafka, NGINX, MongoDB, Redis and
42-
PostgreSQL, integrated into normal system tools (for example Azure Update Manager, apt)
43-
* Security hardening and audit tools (CIS) to establish a security baseline across your systems (and
44-
help you meet the Azure Linux Security Baseline policy)
45-
* FIPS 140-2 certified modules
46-
* Common Criteria (CC) EAL2 provisioning packages
47-
* Kernel Live patch: kernel patches delivered immediately, without the need to reboot
48-
* Optimized performance: optimized kernel, with improved boot speed, outstanding runtime performance
49-
and advanced device support
50-
* 10-year security maintenance: Ubuntu Pro 18.04 LTS provides security maintenance until April 2028
51-
* Production ready: Ubuntu is the leading Linux in the public cloud with > 50% of Linux workloads
52-
* Developer friendly: Ubuntu is the \#1 Linux for developers offering the latest libraries and tools
53-
to innovate with the latest technologies
54-
* Non-stop security: Canonical publishes images frequently, ensuring security is present from the
55-
moment an instance launches
56-
* Portability: Ubuntu is available in all regions with content mirrors to reduce the need to go
57-
across regions or out to the Internet for updates
58-
* Consistent experience across platforms: from edge to multicloud, Ubuntu provides the same
59-
experience regardless of the platform. It ensures consistency of your CI/CD pipelines and
60-
management mechanisms.
39+
- Access to security updates for 23,000+ packages including Apache Kafka, NGINX, MongoDB, Redis and
40+
  PostgreSQL, integrated into system tools (for example Azure Update Manager, apt)
41+
- Security hardening and audit tools (CIS) to establish a security baseline across your systems (and
42+
  help you meet the Azure Linux Security Baseline policy)
43+
- FIPS 140-2 certified modules
44+
- Common Criteria (CC) EAL2 provisioning packages
45+
- Kernel Live patch: kernel patches delivered immediately, without the need to reboot
46+
- Optimized performance: optimized kernel, with improved boot speed, outstanding runtime performance
47+
  and advanced device support
48+
- 10-year security maintenance: Ubuntu Pro 18.04 LTS provides security maintenance until April 2028
49+
- Developer friendly: Ubuntu offers developers the latest libraries and tools to innovate with the latest technologies
50+
- Nonstop security: Canonical publishes images ensuring security is present from the moment an instance launches
51+
- Portability: Ubuntu is available in all regions with content mirrors to reduce the need to go across regions or out to the Internet for updates
52+
- Consistent experience across platforms: from edge to multicloud, Ubuntu provides the same experience regardless of the platform. It ensures consistency of your CI/CD pipelines and management mechanisms.
6153

6254
> [!NOTE]
63-
> This document presents the direction to upgrade from an Ubuntu Server (16.04 or higher) image to
64-
> Ubuntu Pro with zero downtime for upgrade by executing the following steps in your VMs:
65-
>
66-
> 1. Converting to Ubuntu Pro license
67-
> 2. Validating the license
68-
>
69-
> Converting to UBUNTU_PRO is an irreversible process. You can't even downgrade a VM by running
70-
> detach. Open a support ticket for any exceptions.
55+
> This document provides instructions to upgrade Ubuntu Server (16.04 or higher) to
56+
> Ubuntu Pro. Converting to Ubuntu Pro is an irreversible process.
7157
7258
## Convert to Ubuntu Pro using the Azure CLI
7359

74-
```azurecli-interactive
75-
# The following will enable Ubuntu Pro on a virtual machine
60+
The following command enables Ubuntu Pro on a virtual machine in Azure:
61+
62+
```Azure CLI
7663
az vm update -g myResourceGroup -n myVmName --license-type UBUNTU_PRO
7764
```
7865

79-
```In-VM commands
80-
# The next step is to execute two in-VM commands
66+
Execute these commands inside the VM:
67+
68+
```bash
8169
sudo apt install ubuntu-advantage-tools
8270
sudo pro auto-attach
8371
```
8472

85-
(Note that "sudo apt install ubuntu-advantage-tools" is only necessary if "pro --version" is lower than 28)
73+
If the `pro --version` is lower than 28, execute this command:
74+
75+
```bash
76+
sudo apt install ubuntu-advantage-tools
77+
```
8678

8779
## Validate the license
8880

81+
use the `pro status --all` command to validate the license:
82+
8983
Expected output:
9084

91-
![Screenshot of the expected output.](./expected-output.png)
85+
```output
86+
SERVICE      ENTITLED    STATUS    DESCRIPTION
87+
cc-eal       yes         disabled  Common Criteria EAL2 Provisioning Packages
88+
cis          yes         disables  Security compliance and audit tools
89+
esm-apps     yes         enabled   Expanded Security Maintenance and audit tools
90+
esm-infra    yes         enabled   Expanded Security Maintenance for infrastructure
91+
fips         yes         disabled  NIST-certified core packages
92+
fips-updates yes         disabled  NIST-certified core packages with priority security updates
93+
livepatch    yes         enabled   Canonical Livepatch service
94+
```
9295

9396
## Create an Ubuntu Pro VM using the Azure CLI
9497

95-
You can also create a new VM using the Ubuntu Server images and apply Ubuntu Pro at create time.
96-
97-
For example:
98+
You can create a new VM using the Ubuntu Server images and apply Ubuntu Pro at the time of creation.
99+
The following command enables Ubuntu Pro on a virtual machine in Azure:
98100

99-
```azurecli-interactive
100-
# The following will enable Ubuntu Pro on a virtual machine
101+
```Azure CLI
101102
az vm update -g myResourceGroup -n myVmName --license-type UBUNTU_PRO
102103
```
103104

104-
```In-VM commands
105-
# The next step is to execute two in-VM commands
105+
Execute these commands inside the VM:
106+
107+
```bash
106108
sudo apt install ubuntu-advantage-tools
107109
sudo pro auto-attach
108110
```
109111

110-
>[!NOTE]
111-
> For systems with advantage tools version 28 or higher installed the system will perform a pro attach during a reboot.
112+
> [!NOTE]
113+
> For systems with advantage tools using version 28 or higher, installed the system will perform a
114+
> `pro attach` during a reboot.
112115
113116
## Check licensing model using the Azure CLI
114117

115-
You can use the az vm get-instance-view command to check the status. Look for a licenseType field in the response. If the licenseType field exists and the value is UBUNTU_PRO, your virtual machine has Ubuntu Pro enabled.
118+
> [!TIP]
119+
> You can query the metadata in _Azure Instance Metadata Service_ to determine the virtual machine's
120+
> _licenseType_ value. You can use the `az vm get-instance-view` command to check the status. Look
121+
> for the _licenseType_ field in the response. If the field exists and the value is UBUNTU_PRO, your
122+
> virtual machine has Ubuntu Pro enabled. [Learn more about attested metadata][02].
116123
117124
```Azure CLI
118125
az vm get-instance-view -g MyResourceGroup -n MyVm
119126
```
120127

121-
## Check the licensing model of an Ubuntu Pro enabled VM using Azure Instance Metadata Service
122-
123-
From within the virtual machine itself, you can query the attested metadata in Azure Instance Metadata Service to determine the virtual machine's licenseType value. A licenseType value of UBUNTU_PRO indicates that your virtual machine has Ubuntu Pro enabled. [Learn more about attested metadata](../../instance-metadata-service.md).
124-
125128
## Billing
126129

127-
You are charged for Ubuntu Pro as part of the Preview. Visit the
128-
[pricing calculator](https://azure.microsoft.com/pricing/calculator/) for more details on Ubuntu Pro
129-
pricing. To cancel the Pro subscription during the preview period, open a support ticket through the
130-
Azure portal.
130+
Visit the [pricing calculator][03] for more details on Ubuntu Pro pricing. To cancel the Pro
131+
subscription during the preview period, open a support ticket through the Azure portal.
131132

132-
## Frequently Asked Questions
133-
134-
### What are the next step after launching an Ubuntu Pro VM?
133+
## Next steps after launching an Ubuntu Pro VM
135134

136135
With the availability of outbound internet access, Ubuntu Pro automatically enables premium features
137-
such as Extended Security Maintenance for
138-
[Main and Universe repositories](https://help.ubuntu.com/community/Repositories) and
139-
[live patch](https://ubuntu.com/security/livepatch/docs). Should any specific hardening be required
140-
(for example CIS), check the using 'usg' to
141-
[harden your servers](https://ubuntu.com/tutorials/comply-with-cis-or-disa-stig-on-ubuntu#1-overview)
142-
tutorial. Should you require FIPS, check enabling FIPS tutorials.
136+
including [Live Patch][04] and Extended Security Maintenance for
137+
[Main and Universe repositories][05].
138+
Should any specific hardening be required, check `usg` to [harden your servers][06] for CIP and FIPS
139+
tutorials.
140+
Learn more about networking requirements (such as egress traffic, endpoints and ports) by reading
141+
[Ubuntu Pro Client network requirements][07].
143142

144-
For more information about networking requirements for making sure Pro enablement process works
145-
(such as egress traffic, endpoints and ports)
146-
[check this documentation](https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/references/network_requirements.html).
143+
## Frequently Asked Questions
147144

148-
### Does shutting down the machine stop billing?
145+
**Does shutting down the machine stop billing?**
149146

150-
If you launch Ubuntu Pro from Azure Marketplace you pay as you go, so, if you don’t have any machine running, you won’t pay anything additional.
147+
Launching Ubuntu Pro from Azure Marketplace is you pay as you go and only charges for running
148+
machines.
151149

152-
### Are there volume discounts?
150+
**Are there volume discounts?**
153151

154152
Yes. Contact your Microsoft sales representative.
155153

156-
### Are Reserved Instances available?
154+
**Are Reserved Instances available?**
155+
156+
Yes.
157157

158-
Yes
158+
**If the customer doesn't perform the `auto attach` function, will they still get attached to pro on reboot?**
159159

160-
### If the customer doesn't do the auto attach will they still get attached to pro on reboot?
160+
If the customer doesn't perform the _auto attach_, they still get the Pro attached upon reboot.
161+
However, this action only applies if they're using version 28 of the Pro client.
161162

162-
If the customer doesn't perform the auto attach, they still get the Pro attached upon reboot.
163-
However, this applies only if they have v28 of the Pro client.
163+
- For Ubuntu Jammy and Focal, this process works as expected.
164+
- For Ubuntu Bionic and Xenial, this process doesn't work due to older versions of the Pro client installed.
164165

165-
* For Jammy and Focal, this process works as expected.
166-
* For Bionic and Xenial this process doesn't work due to the older versions of the Pro client installed.
166+
<!-- link references -->
167+
[01]: https://ubuntu.com/18-04/azure
168+
[02]: ../../instance-metadata-service.md
169+
[03]: https://azure.microsoft.com/pricing/calculator/
170+
[04]: https://ubuntu.com/security/livepatch/docs
171+
[05]: https://help.ubuntu.com/community/Repositories
172+
[06]: https://ubuntu.com/tutorials/comply-with-cis-or-disa-stig-on-ubuntu#1-overview
173+
[07]: https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/references/network_requirements.html

0 commit comments

Comments
 (0)