Hmm, are security updates in Ubuntu only going into Pro nowadays?!?!? #ubuntu #linux

Wheeee. Nothing of major import on here, except my ACARS receiver on here and one of my copies of pihole.

If this weren't running anything, I'd reload it with Debian probably. It's just got an ACARS receiver and pihole in a docker instance on that thing at the moment.

#linux #ubuntu

(both are easily redeployed with minimal headache).
@ai6yr no, its only for for extended LTS releases. Normal releases are supported as usual
@tragivictoria Hmm, so, sounds like I need to upgrade that machine.
@ai6yr what version do you have?


CC: @[email protected]

By the looks of it, Ubuntu 20.04 LTS
@tragivictoria Apparently, I am behind on that machine... So upgrade time, lol. Debian is better...

@ai6yr @tragivictoria

I'm with you on Debian. I think that I'll be using that on my home servers going forward. Honestly, I'm kind of souring on downstream distros in general.

@bruce @ai6yr @tragivictoria I just finished moving all of my server onto Debian off of a mostly-Ubuntu setup...things have been pretty nice.

@ai6yr Check that your standard maint hasn't expired - which it would have if you are still on 20.04 LTS.

https://ubuntu.com/about/release-cycle

Ubuntu release cycle | Ubuntu

Overview of the Ubuntu release cycle - maintenance, support and security coverage, lifetime, upgrade paths, kernel versions and the range of editions and images published by Canonical.

Ubuntu

@wohali AHA

#149~20.04.1-Ubuntu

Time to upgrade then, hope I don't break too many things, lol

@ai6yr

∘ ∘ ∘ (╯🤨)╯︵ ‽

@ai6yr Looks like you're on 20.04? Yeah, they only offer security updates for two major versions for the free versions; so right now that's 22.04 and 24.04, and soon that's going to switch to 24.04 and 26.04.

@ai6yr i just upgraded Ubuntu from back in the Obama days. The entire pro thing was confusing with most saying you don't need it but it sure sounds like you do.

It's making me think about changing distributions.

#ubuntu #linux

@human3500 I have only been loading Debian on new machines. Unless it's got some package only supported on Ubuntu and which you can't build from scratch (commercial stuff, sigh). .

@ai6yr @human3500

I've been using Debian on my machines and Mint on machines I set up for people who ask me to.

I've been thinking of trying out elementary for that use case though

@ai6yr @human3500 You can jam that stuff in a vm or docker image and run it on demand. Might even be able to build a flatpack or something.

I switched to mint a long time ago and now use nixos though I don't know for how long. I might actually switch to buildroot for all the things.

Mint is a good one for people who've liked ubuntu.

@crazyeddie @human3500 Yeah, I don't recall what it was that I had run into that was an Ubuntu only thing recently. It's not on this machine...
@ai6yr you can also enroll in Pro for free for up to 5 machines or something. I have a few machines on Pro LTS and I've never paid a dime
@ai6yr It's been useful because I have a couple of machines with software that won't work with any newer version of Ubuntu. At least I can keep them updated for a few more years

@ai6yr

huh...

Had to go look, since I'm on Ubuntu 24.04.4 LTS and hadn't really heard of Pro

So:

"Existing Ubuntu LTS systems can be upgraded in-place to Ubuntu Pro without redeployment, streamlining the process across large Ubuntu estates with a single command."

Looks like Pro is the next step above LTS

Pretty sure I get Security Updates on my vanilla single-box LTS though...

@FinchHaven This is on an earlier Ubuntu (20.04), they have a cliff on security updates I was not aware of.

@ai6yr

ah...

Yeah I went from 13.x to 18.04 to 24.x LTS and am very diligent about updates -- run it first thing every morning in fact...

@FinchHaven I just hate software breaking because of forced OS updates, lol.

@ai6yr
That python3.8-venv is focal (20.04).

Prior to the introduction of Ubuntu Pro (it went by another name when first introduced, but I forget what that was) fixes were not ever produced for releases beyond 5 years.

Pro introduced fixes for releases from 5-10 years old. Any individual can access these fixes using their 5 free Pro licenses. Those needing more than 5 seats of 5-10 year old releases are expected to be money-making enterprises and thus expected to pay for convenient access.

@ai6yr I like to think of it as corporations (Canonical customers) paying for extended support that is then given away for free in a limited fashion for everyone.

I know the team that does bug fixes for customers at Canonical (security fixes are a different team) are mandated to upstream fixes to Debian if possible and to the FOSS project upstream of that if possible. This creates tracking work because they have to carry the fix for Ubuntu until upstream adopts it.

@ai6yr Note that for versions of software in 5+ year old Ubuntu releases most FOSS projects have frozen their old releases for bug (but perhaps not security) fixes.
@virtuous_sloth I don't mind not getting bug fixes, but security fixes are way different.

@ai6yr But you don't not get security fixes. You just only get 5 tokens to easily access the compiled versions of the security fixes.

Technically you can raid the apt/dpkg cache on those 5 machines to install on other machines. If there is some language in the terms of use that says you can't do that, the you can use the sources, which for GNU software you legally have access, and you can build it.