{% extends "security/base_security.html" %}

{% block title %}Ubuntu Livepatch Service | Security{% endblock %}

{% block meta_description %}
  Ubuntu Livepatch eliminates the need for unplanned maintenance windows for kernel vulnerabilities, by patching the Linux kernel while the system runs.
{% endblock %}

{% block meta_copydoc %}
  https://docs.google.com/document/d/1g_Ip5MzlBRpbM2wULpSnsR5XaHJVWgLPLdq8_7fCHrs/edit#
{% endblock
meta_copydoc %}

{% block content %}
  <section class="p-strip u-no-padding">
    <div class="p-strip--suru-topped">
      <div class="row u-equal-height">
        <div class="col-7">
          <h1>Linux Kernel Livepatch</h1>
          <h2 class="p-heading--4">Mitigate Linux kernel exploits with Livepatch</h2>
          <p>
            Livepatch shrinks the exploit window for critical and high severity Linux kernel vulnerabilities, by patching the Linux kernel between security maintenance windows, while the system runs.
          </p>
          <p>
            Livepatch provides security coverage for 10 years with <a href="/pro">Ubuntu Pro</a>, and an additional 2 years with Ubuntu Pro Legacy, for a total of 12 years.
          </p>
          <p>
            <a class="p-button--positive" href="/pro/subscribe">Get Ubuntu Pro</a>
          </p>
        </div>
        <div class="col-5 u-vertically-center">
          <div class="u-embedded-media">
            <iframe title="Livepatch: provide uninterrupted service"
                    class="u-embedded-media__element"
                    width="560"
                    height="315"
                    src="https://www.youtube.com/embed/IOLQQZVYbbg"
                    frameborder="0"
                    allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
                    allowfullscreen></iframe>
          </div>
        </div>
      </div>
    </div>
  </section>
  
  <section class="p-strip">
    <div class="row p-divider">
      <div class="col-4 p-divider__block">
        <h2 class="p-heading--4">Learn more about Livepatch</h2>
      </div>
      <div class="col-4 p-divider__block">
        <div class="p-heading-icon--muted">
          <div class="p-heading-icon__header">
            {{ image(url="https://assets.ubuntu.com/v1/6e184942-Webinar.svg",
                        alt="",
                        width="32",
                        height="28",
                        hi_def=True,
                        attrs={"class": "p-heading-icon__img p-heading-icon__img--small"},
                        loading="lazy",) | safe
            }}
            <h3 class="p-heading-icon__title p-heading--4">Webinar</h3>
          </div>
        </div>
        <ul class="p-list">
          <li class="p-list__item">
            <a href="/engage/patching-automations-best-practices">Best practices for security patching automations</a>
          </li>
        </ul>
      </div>
      <div class="col-4 p-divider__block">
        <div class="p-heading-icon--muted">
          <div class="p-heading-icon__header">
            {{ image(url="https://assets.ubuntu.com/v1/e2315503-tutorial.svg",
                        alt="",
                        width="46",
                        height="30",
                        hi_def=True,
                        attrs={"class": "p-heading-icon", "style": "margin-top: 0.3rem;"},
                        loading="lazy") | safe
            }}
            &nbsp;&nbsp;
            <h3 class="p-heading-icon__title p-heading--4">Documentation</h3>
          </div>
        </div>
        <ul class="p-list">
          <li class="p-list__item">
            <a href="/security/livepatch/docs">Read the Livepatch documentation</a>
          </li>
        </ul>
      </div>
    </div>
  </section>

  <section class="p-strip--suru-accent is-dark">
    <div class="row u-equal-height">
      <div class="col-10">
        <blockquote class="p-pull-quote">
          <p class="p-pull-quote__quote u-no-max-width">
            Livepatch is a perfect fit for our needs. There’s no other solution like it, and it’s highly cost-effective.
            Manually migrating virtual machines, applying kernel updates, and rebooting took an average of 32 hours per
            server. Multiplied by 80 servers, that was more than 2,500 hours of work.
          </p>
          <cite class="p-pull-quote__citation">Shinya Tsunematsu, Senior Engineering Lead of Tech Division, GMO
          Pepabo</cite>
        </blockquote>
        <a href="/engage/case-study-gmo-pepabo" class="p-link--inverted">Read the GMO Pepabo case study&nbsp;&rsaquo;</a>
      </div>
    </div>
  </section>

  <section class="p-strip">
    <div class="row">
      <div class="p-card col-4">
        <h3 class="p-card__title">Spend less time on unplanned work</h3>
        <hr class="p-rule" />
        <p>
          According to a study of <a href="https://www.pagerduty.com/resources/reports/unplanned-work/">Dimensional research</a> 64% of IT professionals spend more than 100 hours per year
          on unplanned work. That’s work that eliminates focus and distracts from one’s goals and business objectives.
          With <a href="/blog/what-lies-after-lts-two-years-of-ubuntu-14-04-in-esm">40% of high and critical severity
          vulnerabilities</a> affecting the Linux kernel, the number of interruptions can be significant. Livepatch
          reduces the unplanned work that comes from Linux kernel vulnerabilities, making you more effective when managing
          Ubuntu systems.
        </p>
      </div>
      <div class="p-card col-4">
        <h3 class="p-card__title">Reduce downtime</h3>
        <hr class="p-rule" />
        <p>
          Downtime is one of the major pains of every service provider. That is however unavoidable when deploying
          vulnerability fixes on the Linux kernel the traditional way. That’s because the updated system needs to be
          rebooted to apply the changes irrespective of your deployment strategy (<a href="/kubernetes">Kubernetes</a>, <a href="/openstack">OpenStack</a> or <a href="https://maas.io/">bare-metal</a>).
          Industry leaders achieve high uptime by livepatching and scheduled maintenance.
        </p>
      </div>
      <div class="p-card col-4">
        <h3 class="p-card__title">Follow organisational policy</h3>
        <hr class="p-rule" />
        <p>
          Livepatch on-prem allows you to define your rollout policy and remain in full control of which machines will
          get updated and when, as well as provide updates to isolated network environments. To keep your machines
          up-to-date, the Livepatch on-prem server regularly syncs with Ubuntu Livepatch service and obtains the latest
          patches. It then applies the policy for releasing patches gradually in as many stages as needed.
        </p>
      </div>
      <p>
        <a class="p-button--positive js-invoke-modal" href="/support/contact-us">Get in touch</a>
      </p>
    </div>
  </section>

  <div class="u-fixed-width">
    <hr class="p-rule" />
  </div>

  <section class="p-strip">
    <div class="row u-vertically-center">
      <div class="col-6">
        <h2>Kernel livepatching at a glance</h2>
        <p>
          When a high or critical Linux kernel vulnerability is detected a livepatch along with a <a href="/security/notices">Livepatch Security Notice</a> are issued. Systems that enable the
          livepatch client will receive and apply the patch, after it is made available. The livepatch will provide new
          kernel code replacing the vulnerable one, and will update the rest of the kernel to use the new code.
        </p>
        <div class="row u-vertically-center">
          <div class="col-6">
            <a href="/security/livepatch/docs/howitworks" class="p-button--positive">Read more</a>
            <a href="/security/livepatch/docs/kernels" class="p-button">Livepatch coverage</a>
          </div>
        </div>
      </div>
      <div class="col-6 u-hide--medium u-hide--small u-align--center">
        {{ image(url="https://assets.ubuntu.com/v1/72bfe690-Livepatching+at-a-glance-diagram.svg",
                alt="Livepatching diagram",
                width="500",
                height="200",
                hi_def=True,
                loading="lazy",) | safe
        }}
      </div>
    </div>
  </section>

  <div class="u-fixed-width">
    <hr class="p-rule" />
  </div>

  <section class="p-strip">
    <div class="row u-vertically-center">
      <div class="col-6">
        <h2>Livepatch on-prem overview</h2>
        <p>
          Livepatch on-prem is designed for complex Enterprise environments that follow their own rollout policy and remain in control of which machines will get updated and when. Livepatch on-prem regularly syncs with the Ubuntu Livepatch service and obtains the latest patches. It then deploys the livepatches gradually in as many stages as required.
        </p>
        <a href="/security/livepatch/docs/on_prem" class="p-button">Read more</a>
      </div>
      <div class="col-6 u-hide--medium u-hide--small u-align--center">
        {{ image(url="https://assets.ubuntu.com/v1/0fe5fa1d-Livepatch+on-prem+overview-diagram.svg",
                alt="Livepatching on prem diagram",
                width="500",
                height="250",
                hi_def=True,
                loading="lazy",) | safe
        }}
      </div>
    </div>
  </section>

  <section class="p-strip--light">
    <div class="u-fixed-width">
      <p class="p-muted-heading">Livepatch is used by</p>
      <div class="p-logo-section">
        <div class="p-logo-section__items">
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/9ae8ff55-2018-logo-bloomberg.svg",
                        alt="Bloomberg",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/d8f890fb-logo-at%26t.svg",
                        alt="AT&T",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/d199354d-2018-logo-deutsche-telekom.svg",
                        alt="Deutcshe Telecom",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/675af314-2018-logo-eBay.svg",
                        alt="eBay",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/8a4d26de-2018-logo-cisco.svg",
                        alt="Cisco",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/94da9f2a-2018-logo-NTT.svg",
                        alt="NTT",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/dcde7628-2018-logo-best-buy.svg",
                        alt="Best Buy",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
          <div class="p-logo-section__item">
            {{ image(url="https://assets.ubuntu.com/v1/9f7bc2d4-2018-logo-paypal.svg",
                        alt="PayPal",
                        width="145",
                        height="145",
                        hi_def=True,
                        loading="lazy",
                        attrs={"class": "p-logo-section__logo"},) | safe
            }}
          </div>
        </div>
      </div>
    </div>
  </section>

  <section class="p-strip">
    <div class="row">
      <div class="col-12">
        <h2>Get Livepatch with Ubuntu Pro</h2>
      </div>
      <div class="p-card col-6">
        <h3 class="p-card__title">Free for personal use</h3>
        <hr class="p-rule" />
        <p>Livepatch is available free for up to 5 machines, for personal use, or evaluation purposes.</p>
        <br />
        <a href="/pro/subscribe" class="p-button--positive">Get your free subscription</a>
      </div>
      <div class="p-card col-6">
        <h3 class="p-card__title">Part of Ubuntu Pro</h3>
        <hr class="p-rule" />
        <p>Get Livepatch with an Ubuntu Pro subscription from Canonical.</p>
        <a href="/pro/subscribe" class="p-button--positive">Get Ubuntu Pro</a>
      </div>
    </div>
  </section>

  <section class="p-strip--light">
    <div class="row">
      <div class="col-12">
        <h2 class="u-no-max-width">How to enable the Ubuntu Livepatch Service</h2>
      </div>
    </div>
    <div class="row">
      <div class="col-6">
        <br />
        <ol class="p-stepped-list">
          <li class="p-stepped-list__item">
            <h3 class="p-stepped-list__title">Attach your subscription</h3>
            <div class="p-code-snippet">
              <pre class="p-code-snippet__block--icon"><code>sudo pro attach [TOKEN]</code></pre>
            </div>
            <div class="p-notification--information">
              <div class="p-notification__content">
                <p class="p-notification__message">
                  Note: obtain the subscription token via the <a href="/pro/dashboard">Ubuntu Pro portal</a>. This step is not necessary on Ubuntu Pro.
                </p>
              </div>
            </div>
          </li>
          <li class="p-stepped-list__item">
            <h3 class="p-stepped-list__title">Enable Livepatch on your system</h3>
            <div class="p-code-snippet">
              <pre class="p-code-snippet__block--icon"><code>sudo pro enable livepatch</code></pre>
            </div>
          </li>
        </ol>
      </div>
      <div class="col-5 col-start-large-8">
        <br />
        <div class="p-card">
          <div class="p-heading-icon--muted">
            <div class="p-heading-icon__header">
              {{ image(url="https://assets.ubuntu.com/v1/5edefef9-Datasheet.svg",
                            alt="",
                            width="32",
                            height="28",
                            hi_def=True,
                            loading="lazy",
                            attrs={"class": "p-heading-icon__img p-heading-icon__img--small"},) | safe
              }}
              <h4 class="p-heading-icon__title">Datasheet</h4>
            </div>
          </div>
          <h3>Learn more about Livepatch</h3>
          <ul class="p-list">
            <li class="p-list__item is-ticked">Detailed product overview</li>
            <li class="p-list__item is-ticked">System requirements</li>
            <li class="p-list__item is-ticked">Answers to frequently asked questions</li>
          </ul>
          <p>
            <a class="p-button"
               href="https://assets.ubuntu.com/v1/4a8eed26-Livepatch-Datasheet_25.10.21.pdf"
               onclick="dataLayer.push({'event' : 'GAEvent', 'eventCategory' : 'resource', 'eventAction' : 'Livepatch datasheet', 'eventLabel' : 'from ubuntu.com/security/livepatch', 'eventValue' : undefined });"><span>Download the datasheet</span></a>
          </p>
        </div>
      </div>
    </div>
  </section>

  <section class="p-strip is-deep is-bordered">
    <div class="row u-equal-height">
      <div class="col-3 u-vertically-center u-align--center u-hide--medium u-hide--small">
        {{ image(url="https://assets.ubuntu.com/v1/0326ac7d-dena-logo.png",
                alt="Dena",
                width="144",
                height="59",
                hi_def=True,
                loading="auto",) | safe
        }}
      </div>
      <div class="col-8 col-start-large-5">
        <blockquote class="p-pull-quote">
          <p class="p-pull-quote__quote u-no-max-width">
            Livepatch is like a dream come true, both from a technical and a business standpoint. Our Ubuntu systems now
            rarely, or never, have to be rebooted. Service is continuous. That makes a big difference for user and customer
            satisfaction and loyalty.
          </p>
          <cite class="p-pull-quote__citation">Masaaki Hirose, IT Platform Department, DeNA</cite>
        </blockquote>
      </div>
    </div>
  </section>

  <section class="p-strip--light">
    <div class="row u-equal-height">
      <div class="col-5 u-hide--medium u-hide--small u-align--center">
        {{ image(url="https://assets.ubuntu.com/v1/c4b290c8-Contact+us.svg",
                alt="",
                width="281",
                height="200",
                hi_def=True,
                loading="lazy",) | safe
        }}
      </div>
      <div class="col-7 u-vertically-center">
        <div>
          <h2>Get started with Livepatch today</h2>
          <p>
            Livepatch is free to use on your own PC or server. To discuss whether Livepatch is right for your business,
            talk to our team.
          </p>
          <p class="u-no-margin--bottom">
            <a href="/support/contact-us" class="p-button--positive js-invoke-modal">Get in
            touch</a>
          </p>
        </div>
      </div>
    </div>
  </section>

  {% with first_item="_server_download", second_item="_server_contact_us", third_item="_cloud_further_reading" %}
    {%
    include "shared/contextual_footers/_contextual_footer.html" %}
  {% endwith %}

  <!-- Set default Marketo information for contact form below-->
  <div class="u-hide"
       id="contact-form-container"
       data-form-location="/shared/forms/interactive/support"
       data-form-id="1240"
       data-lp-id="2065"
       data-return-url="https://ubuntu.com/support/thank-you"
       data-lp-url="https://pages.ubuntu.com/things-contact-us.html"></div>

{% endblock content %}