What is an Ubuntu Appliance?
An Ubuntu Appliance turns a computer into a specialised appliance for home or work. It is a system disk image for a PC or Raspberry Pi, built for security and simplicity. Ubuntu Appliances have strong privacy policies and long term security maintenance guarantees. They are published by companies and open source communities, who follow the Ubuntu code of conduct and appliance guidelines, together with Canonical, the publisher of Ubuntu.
Why are we hosting Ubuntu Appliances?
Software is everywhere in the modern home and office — in your fridge, in your vacuum cleaner, in your heating and lighting system. Software-based appliances enhance our modern lives. But they also represent a risk — of bad data practices, or bad software. Ubuntu Appliances set the standard for smart connected devices that meet consistent criteria for security, privacy, maintenance and operations.
The Ubuntu Appliance mission is to enable secure, self-healing, smart things, everywhere. Open source is the backbone of the platform, and both open and commercial appliances co-exist in the ecosystem.
Free to download and use
All Ubuntu Appliances are free to download and install.
We've taken care of everything for you
Easy to install, low maintenance
Each Ubuntu Appliance is a boot disk image. Install it on a spare disk with a disk imaging tool and boot from it. You will need a keyboard and monitor. Or give it a try in a virtual machine on Windows, Mac or Linux. During startup you make yourself the owner and set up the appliance. That's it! Leave it running and it will take care of itself.
App store included
Ubuntu Appliances have an app store to upgrade them with extra features. Find retro games for your console, better routing on your mesh network, or a fancier autopilot for your quadcopter. Each app is strictly confined. Integration between apps is secure. Apps can be specific to an appliance, or published for many types of appliances.
Clear privacy policy
Every Ubuntu Appliance has a clear privacy policy which explains what data leaves the device, where it goes and who has access to it. The privacy policy must comply with global standards such as EU GDPR and California privacy law, and the appliance page makes it clear what commitments the publisher makes. If an appliance fails to meet that standard then it is removed from the portfolio.
Security and simplicity, by design
The Ubuntu Appliance goal is automatic widespread security without human supervision, in every building and on every street. Security is a many-layered endeavour — Ubuntu Appliances respond with defence in depth. Every aspect of an Ubuntu Appliance is built with security in mind:
- Secure boot protocols defend against low-level attacks on system integrity.
- Strict confinement of every application reduces the blast radius of a compromised or malicious application.
- Transactional updates enable automatic security patches with rollback on failure.
- Full disk encryption and hardware key management protect your data.
Canonical scans every app for known vulnerabilities and proactively notifies community and commercial publishers to fix them. Canonical blocks any app that turns out to be malware, and keeps a rigorous log of all the artefacts used in the creation of every image and every component to fix them or analyse them in the future.
Automatic system updates
All Ubuntu Appliances are Ubuntu Core, the highly secure, fully containerised Linux with transactional updates and data snapshot guardrails that can always roll back to a known-good state. Emergency repair mechanisms provide safety nets in the event of a bad update. Ubuntu Appliances evolve and improve automatically, every day, with no human intervention needed. Millions of devices use these mechanisms every day for critical software updates around the world. The underlying package delivery system optimises bandwidth and efficiency with compressed binary delta updates that reduce total traffic and speed up the delivery of critical fixes.
Enterprise grade security and control
Control the flow of changes to enterprise Ubuntu Appliances with a local enterprise app store. Groups of devices are guaranteed a coherent view of updates, to ensure consistency in a critical cluster or highly available set. A local enterprise store can restrict the use of particular applications across your estate, or adjust the specific versions used by your devices. Enterprise Ubuntu Appliances typically use full disk encryption with hardware crypto keys to protect data at rest, and Secure Boot for system integrity at every stage of deployment and recycling of old hardware.
Built securely for the future
-
Long term security
Ubuntu Core and the open source Ubuntu Appliances are securely maintained for ten years by Canonical to meet enterprise security and longevity requirements. Proprietary Ubuntu Appliances follow the maintenance commitment of the appliance vendor. Each appliance tells you exactly what commitment is being made, and for how long.
-
Built on trusted infrastructure
All Ubuntu Appliance images and open source components are assembled on the same secure infrastructure as Ubuntu. Proprietary components are built by the official vendor for that application, just like the software you download directly from them. Since an Ubuntu Appliance is made of digitally signed packages, you always know exactly where each component comes from, when it was updated, and which versions are available.
-
Always fresh and future-proof
Appliance software components follow stable channels by default. They can follow beta or candidate channels for pre-release testing and early access to future features. The device chooses stable versions when there is nothing new to test, and rolls back from failed updates automatically. Automatic healing makes it safer to live on the edge.
-
Standardised experience
All Ubuntu Appliances share common capabilities and consistent operations. The platform guarantees a standard approach to software updates and versioning, and evolution to newer platform versions. Multiple devices from multiple manufacturers all fit into a single management framework, and receive updates consistently across the estate.
-
Community and commercial, together
Ubuntu Appliances bring enterprise and community together. Ubuntu Core is completely open-source, so open source appliances are true free software devices. Commercial software appliances reuse the same mechanisms, and by doing so enhance and expand the capabilities of the free platform enjoyed by community publishers.
-
Widely compatible
Ubuntu Appliances benefit from the testing and investment that makes Ubuntu so popular on PCs and servers. Canonical, the publisher of Ubuntu, works with all major manufacturers to enable and certify a wide range of hardware. As they add hardware for Ubuntu server or desktop, you gain more options for your appliances as well. Certified Ubuntu Appliances are continuously tested to work perfectly on certified boards.