Getting started with Ubuntu Pro on Azure

This onboarding site is aimed at those who have launched an Ubuntu Pro instance on Azure for the very first time and dives into some of the technical details of how to use features included in Ubuntu Pro and what they do.For more information and additional resources on the benefits of Ubuntu Pro, please visit ubuntu.com/azure/pro.

To show the current status of Ubuntu Pro features and enablement status:

$ sudo ua status

KEY FEATURES

Security Patches for 30,000 + Open Source Applications for 10 years

ESM is pre-enabled on all Ubuntu Pro instances.

To see available updates from Ubuntu Universe and Ubuntu Main archives:

$ ua security-status --format yaml

Live Kernel Patching

Livepatch is pre-enabled on most Ubuntu Pro instances.

To check which CVE’s Livepatch is protecting you from:

$ canonical-livepatch status --verbose

FIPS 140-2, Common Criteria EAL2, CIS hardening, DISA STIG

If you have a FIPS requirement, we recommend you launch our Ubuntu Pro FIPS premium images if possible.

To enable FIPS, Common Criteria Compliance, CIS hardening, or DISA STIG please visit our certification documentation.

Click here for a deep dive into the security and compliance features available in Ubuntu Pro for Azure.

*Please note that Ubuntu Pro on Azure by default does not include phone and ticketing support.

If you need additional technical support services, a 24/7 SLA can easily be added onto your Ubuntu Pro instance through a Private Offer listing. Please contact customersuccess@canonical.com to get in touch with our team.

FAQ

I launched an Ubuntu Pro VM. Do I need to configure it or enable something?

Ubuntu Pro comes with all the key features already enabled. If you only need Extended Security Maintenance, Pro comes with extended support for Main and Universe repositories already enabled. If you need specific hardening (e.g. CIS or DISA STIG) check the using usg to harden your servers tutorial. If you need FIPS, check enabling FIPS tutorials.

If I shut down the machine, does the billing continue?

Depending on how you subscribed to the product. If you launched it from Azure Marketplace, then you only pay as you go, therefore, if you don’t have any machine running, you won’t pay any additional fee. If you used the “upgrade to ubuntu pro” option from Azure Marketplace, then it is a one year fixed commitment.

Can I create my own golden images from this product?

Yes. Follow this tutorial on How to build your own AMI from Ubuntu Pro using Packer & Creating a hardened Ubuntu Pro 18.04 LTS shared image with Azure Image Builder to understand how to do it without breaking the subscription validation mechanism.

How can I share my golden image, based on Pro, with other accounts in my organization?

Yes. It will work as long as the other account has subscribed to the same product or the license has been shared from the parent Azure account. See how to Store and Share images in an Azure Compute Gallery for more information.

Can I get volume discounts?

Yes. Volume discounts can be provided through a Private Offer, please contact ubuntu-pro-azure@canonical.com

TUTORIALS

Provision an Ubuntu virtual machine running SQL Server in Azure

Using Azure AD to manage SSH logins to Ubuntu

Create a hardened Ubuntu Pro 18.04 LTS shared image with Azure Image Builder

CONTACT US

Are you interested in volume discounts or phone & ticketing support?

Or have any other questions?

Please contact our team: Canonical’s Azure Cloud Team & Customer Success Team