Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Ubuntu Pro description

Valid since 05 October 2022

As an Ubuntu Pro customer, you are entitled to the following coverage, depending on the appropriate support level on a per-machine basis. Each subscription can cover either (i) Infrastructure-only: Ubuntu Pro (Infra-only) with or without support (previously known as Ubuntu Advantage for Infrastructure), or (ii)Infrastructure and Applications: (Ubuntu Pro), with or without support:

  1. Physical server: A subscription attached to a physical host running Ubuntu or a Covered Hypervisor. If all physical hosts in the Environment are attached, then Ubuntu Pro subscription also covers all Ubuntu guests on those hosts
  2. Desktop: A subscription limited to Desktop use-cases. It covers packages in the base Ubuntu desktop image as well as packages necessary for basic network authentication and connectivity using sssd, winbind, network-manager, and network-manager plugin. It can also cover support (weekday or 24/7) for Ubuntu distribution for Windows Subsystem for Linux (WSL) and developer tools such as MicroK8s and Multipass

Each subscription can be purchased at one of three support levels - Ubuntu Pro (previously known as Essential), Ubuntu Pro + support (weekday) (previously known as Standard) or Ubuntu Pro + support (24/7) (previously known as Advanced) and must cover all Ubuntu systems within your production environment. Unless otherwise stated, a subscription will be Ubuntu Pro. Detailed pricing can be found at: https://ubuntu.com/pricing/pro

Ubuntu Pro Ubuntu Pro + support (weekday) Ubuntu Pro + support (24/7)
Support No 24/5 24/7
Severity 1 response time No 4h 1h
Ubuntu assurance program No
Expanded Security Maintenance (ESM)
Certified components for compliance, hardening and audit
Kernel livepatch
Advanced Active Directory Policies
Landscape
Knowledge base

Back to top

Security and compliance

As an Ubuntu Pro or Ubuntu Pro (Infra-only) customer, with or without support, you are entitled to the following:

  1. Expanded Security Maintenance (ESM)
    1. ESM provides available critical, high, and selected medium CVE fixes for a number of packages, as specified below
    2. All Ubuntu Pro subscriptions cover packages in the Ubuntu Main repository between End of Standard Support and End of Life
    3. Full Ubuntu Pro subscriptions also cover packages in the Ubuntu Universe repository between the Release date and End of Life. This coverage is not included in Ubuntu Pro (Infra-only) subcriptions, with or without support.
    4. ESM does not provide:
      1. Coverage for architectures other than 64-bit x86 AMD/Intel for Ubuntu releases 14.04 LTS, 16.04 LTS
      2. Bug fixes, unless a bug was created by an ESM security fix
      3. Security fixes for CVEs that are not High or Critical
      4. A guarantee to fix all High or Critical CVEs
  2. Other security fixes
    1. Security fixes for OpenStack, Ceph, MAAS
    2. The scope of security fixes for each of those products is described in their respective sections below
  3. Certified components for compliance, hardening and audit
    1. FIPS 140-2 Level 1 certified modules for Ubuntu 20.04 LTS, 18.04 LTS and 16.04 LTS
    2. FIPS 140-3 Level 1 certified modules for Ubuntu 22.04 LTS (coming soon)
    3. Common Criteria EAL2 for Ubuntu 18.04 LTS and 16.04 LTS
    4. Access to certified CIS Benchmark tooling Level 1 and 2 for Ubuntu 18.04 LTS and 16.04 LTS
    5. Ubuntu Security Guide (USG) for Ubuntu 20.04 LTS which includes certified DISA-STIG profiles and CIS benchmark tooling Level 1 and 2
    6. Ubuntu Security Guide (USG) Ubuntu 22.04 LTS (coming soon) which will include certified DISA-STIG profiles and CIS benchmark tooling Level 1 and 2
  4. Landscape and knowledge base access
    1. Access to Canonical's Landscape systems management and the knowledge base
  5. Kernel Livepatch
    1. Access to Canonical's kernel livepatch client and security livepatches for selected High and Critical kernel CVEs
    2. Kernel Livepatch may provide non-security bug fixes as kernel livepatches
    3. Only the default LTS kernel is available for livepatching. This includes its backport as the last HWE kernel to the previous LTS release
    4. Access to Canonical's Livepatch on-prem server
Back to top

Weekday or 24/7 support

As a weekday or 24/7 support customer, you are entitled to all of the benefits of the Ubuntu Pro or Ubuntu Pro (Infra-only) customer, as set out in the security and compliance section above, plus:

  1. Support scope and levels:
    1. Infra support: weekday or 24/7
    2. Apps support: weekday or 24/7
    3. Full Stack Support (Infra & Apps): weekday or 24/7
  2. Included in all support levels:
    1. Ubuntu releases
      1. Break-fix support for standard installation, configuration, maintenance, and troubleshooting and usage of any Ubuntu LTS release when installed using official sources and within Ubuntu lifecycle. Bug-fix support is not offered after the End of Standard Support
    2. Certified hardware
      1. Ubuntu Certified hardware has passed Canonical's extensive testing and review process. More information about the Ubuntu certification process and a list of certified hardware can be found on the Ubuntu Certification page: http://www.ubuntu.com/certification
      2. Full support applies only with respect to customer's hardware that has been certified. In the event a customer requests the services with respect to hardware, which is not certified, Canonical will use reasonable efforts to provide support services, but may not adhere to the obligations described in this service description
    3. Supported services
      1. The following packages, kernels and services are within the scope of support:
        1. Canonical maintained packages in Ubuntu Main repository
        2. Packages in the Ubuntu Cloud Archive
        3. Canonical maintained Snap packages, Charms and OCI images
        4. Supported Kernels
        5. Landscape
        6. Kernel Livepatch
      2. Support is not provided for any packages that have been modified
    4. Kubernetes
      1. Kubernetes cluster Full-Stack Support requirements:
        1. Kubernetes installations deployed via:
          1. Charmed Kubernetes in at least the minimum deployment configuration
          2. A kubeadm-deployed cluster of unmodified upstream Kubernetes binaries as published by the CNCF deployed on Ubuntu as base OS validated by Canonical
          3. MicroK8s
        2. Highly-Available control plane either deployed using Charms in the Charmed Kubernetes reference architecture or in a similar fashion using kubeadm
        3. Support must be purchased for all Nodes in the supported Kubernetes cluster
        4. Supported versions of Kubernetes include:
          1. Weekday or 24/7 Support for N-2 (the latest and previous two) releases in the stable release channel
          2. ESM security patching for N-4 (the latest and previous four) releases in the stable release channel
        5. For any deployment of Charmed Kubernetes carried out by Canonical while under contract for a deployment, which results in the customisation of any Charms, the customisation will be supported for 90 days after completion of the deployment
      2. Limited Kubernetes Support
        1. Unless the Full-Stack Support requirements set out above are met, support is limited to Bug-fix Support for:
          1. The software packages and Charms necessary for running Charmed Kubernetes
          2. Kubernetes clusters deployed using kubeadm utilising the software packages available from apt.kubernetes.io
  3. Support — included in Infra and Full Stack support, but not included in Apps support:
    1. OpenStack
      1. OpenStack software support depends on the Ubuntu release deployed on the underlying Nodes:
        1. The version of OpenStack provided initially in the release of a LTS version of Ubuntu is supported for the entire lifecycle of that Ubuntu version
        2. Releases of OpenStack after an LTS version of Ubuntu are available in the Ubuntu Cloud Archive. Each OpenStack release in the Ubuntu Cloud Archive is supported on an Ubuntu LTS version for a minimum of 18 months from the release date of the Ubuntu version that included the applicable OpenStack version
      2. OpenStack support requires all Nodes that participate in the OpenStack Cloud to be covered under an active support agreement
      3. OpenStack support includes access to use available Canonical provided Microsoft-certified drivers in Windows Guest instances
      4. Full OpenStack support
        1. Requirements:
          1. In addition to the requirements set out above, hardware must meet the minimum criteria for Charmed OpenStack
          2. The OpenStack Cloud was deployed via a Private Cloud Build or was validated through a Cloud Validation engagement
        2. Scope:
          1. Support for the Charms deployed
          2. For any deployments under contract with Canonical, which result in customisation of any Charms, customisation will be valid for 90 days after the official release of the Charm which includes the customisations
          3. Support is included for all packages required to run OpenStack as deployed
          4. Upgrades of OpenStack components as part of the regular Ubuntu LTS maintenance cycle
          5. Upgrades between versions of OpenStack or LTS versions of Ubuntu, Juju and MAAS are supported as long as the upgrade is performed following a documented process as specified by Canonical as part of the Private Cloud Build or Cloud Validation Package
          6. Addition of new cloud Nodes and replacement of existing Nodes with new Nodes of equivalent capacity are both supported
      5. Limited OpenStack support
        1. OpenStack clouds not deployed through a Private Cloud Build or validated using the Cloud Validation Package are limited to Bug-fix Support
        2. OpenStack support does not include support beyond Bug-fix Support during the deployment or configuration of an OpenStack cloud
      6. Exclusions
        1. Full Stack Support excludes customisations which are not considered Valid Customisations
        2. Support for workloads other than those required to run an OpenStack deployment
        3. Support for Guest Instances other than Cloud Guests
    2. Charms support
      1. Each Charm version is supported for one year from the release date
      2. Canonical will not provide support for any Charms that have been modified from the supported version
    3. Ceph storage support
      1. Ceph storage support depends on the Ubuntu release deployed on the underlying storage nodes:
        1. The version of Ceph initially included in the release of a LTS version of Ubuntu is supported for the entire lifecycle of that Ubuntu version
        2. Updated releases of Ceph are made available in the Ubuntu Cloud Archive after an LTS version is released. Each Ceph release in the Ubuntu Cloud Archive is supported on an Ubuntu LTS version for a minimum of 18 months from the release date of the Ubuntu version that included the applicable Ceph version
      2. Canonical will provide support for 192TB of raw storage per Ceph storage node. Please note that only Ceph storage nodes count towards the 192TB free tier of raw storage per node
      3. If the Node allowance is exceeded, additional Ceph storage support needs to be acquired
      4. Customers who have purchased Ceph storage support for an unlimited amount of storage are limited to support of a single Ceph cluster
      5. Ceph storage support requires all nodes that participate in the Ceph storage cluster to be covered under an active support agreement
      6. Full Ceph storage support
        1. Requirements:
        2. The Ceph storage cluster was deployed via a Private Cloud Build, Ceph Cluster Build or was validated through a Cloud Validation engagement
        3. Scope:
        4. Support for the Charms deployed
        5. Support is included for all packages required to run Ceph as deployed
        6. Upgrades of Ceph components as part of the regular Ubuntu LTS maintenance cycle
        7. Upgrades between versions of Ceph or LTS versions of Ubuntu, Juju, and MAAS are supported as long as the upgrade is performed following a documented process as specified by Canonical as part of the Private Cloud Build or Cloud Validation Package
        8. Addition of new Ceph storage nodes and replacement of existing nodes with new nodes of equivalent capacity are both supported
      7. Limited Ceph storage support
        1. Stand-alone storage clusters not deployed through a Ceph Cluster Build Package or cloud attached Ceph storage clusters not validated using a Cloud Validation Package are limited to Bug-fix Support only
        2. Ceph storage support does not include support beyond Bug-fix Support during the deployment or configuration of a standalone or cloud-attached storage cluster
    4. MAAS support
      1. In order to be eligible for MAAS support, all machines connected to a MAAS need to be covered under a MAAS support agreement or Ubuntu Pro
      2. To be eligible for MAAS support, MAAS support must be purchased for all machines not covered by Ubuntu Pro
      3. Versions of MAAS are supported on a corresponding LTS version of Ubuntu for a period of two years from the date that the MAAS version is released
      4. MAAS support scope:
        1. Support for the ability to boot machines using operating system images provided by Canonical
        2. Support for the tooling required to convert certified operating system images not provided by Canonical into MAAS images
      5. Out of scope. MAAS support does not provide:
        1. Support for workloads, packages and service components other than those required to run a MAAS deployment
        2. Support for the servers that the MAAS service runs on
        3. Support for the Nodes deployed using MAAS but not covered under Ubuntu Pro
        4. Support for design and implementation details of a MAAS deployment
        5. Access to Landscape and Canonical Livepatch Service for machines deployed with MAAS
    5. Ubuntu Assurance Program
      1. Ubuntu Pro + support customers are entitled to the Ubuntu Assurance Programme. Canonical may update the Assurance Programme and its terms periodically
  4. Support — included in Apps support and Full Stack support, but not included in Infra support
    1. Canonical will provide phone and ticket support to the Applications installed from Ubuntu Repositories. The list of supported applications is at: https://ubuntu.com/support

Support exclusions

  1. Apps only support does not include support for Hypervisor, OpenStack, MAAS, Ceph or Swift storage. It does not include providing native images for a chosen hypervisor
  2. Ubuntu Pro Desktop support does not provide:
    1. Dual-booting (cohabitating with other operating systems)
    2. Peripherals which are not certified to work with Ubuntu
    3. Community flavours of Ubuntu
    4. Support for architectures other than x86_64
Back to top

Add Ons

Managed Services

  1. Managed Services are an add-on to Ubuntu Pro + Infra Support (24/7), or Ubuntu Pro + Apps support (24/7) or Ubuntu Pro + Full Stack support (24/7). When added on, Canonical will manage the Environment as described below. Guests Instance running in the Environment receive the Ubuntu Pro subscriptions and support
  2. Following Canonical's building and initialising of the Environment (subject to separate service engagement), the Managed Service will re-deploy the Environment to reset credentials and validate the deployment process. The Managed Service will also provide documentation providing further detail on the working relationship with Canonical. Additional services can be offered subject to purchasing Professional Support Services (as listed in the section below)
  3. The Managed Service will remotely operate, monitor, and manage the Environment. Concrete examples include:
    1. backing up and restoring of the management infrastructure suite
    2. hardware and software failure monitoring and alerting
    3. capacity and performance reporting
    4. security patching and bug fixing
    5. scaling to deal with changes in demand
    6. version upgrades and data migration
    7. administrator credential management
    8. operational monitoring and addressing issues of performance, capacity and alerting
    9. patching and updates. The Managed Service will install applicable (e.g., security) patches and updates from the Ubuntu Cloud Archive to:
      1. The Ubuntu operating system
      2. OpenStack or Kubernetes and its dependencies
      3. OpenStack or Kubernetes Charms
      4. Other software deployed as part of the Environment
    10. Administrative access. The Managed Service will provide the customer with access to the following applications and/or services:
      1. The OpenStack or Kubernetes dashboard, API and CLI
      2. Landscape (restricted to read only access)
      3. Monitoring and logging system (restricted to read only access)
      4. Only Canonical will have login access to Environment Nodes
    11. Environment size. The Managed Service will add or remove Nodes from the Environment as requested by the customer through a support ticket, provided that the Environment does not go under the Minimum Size Requirement. All Environment Nodes must be covered under the service, so additional fees may apply
    12. Ubuntu, OpenStack and Kubernetes upgrades. The Managed Service will ensure the customer's Environment remains on a supported LTS version of Ubuntu and OpenStack and/or Kubernetes
      1. Upgrades will be performed on a per-AZ basis within maintenance windows decided in concert with the client.
      2. Downtime should be expected for non-cloud-native workloads that cannot be migrated away from the availability zone undergoing upgrade.
      3. If cloud utilisation is very high, upgrade risks will need to be carefully evaluated with the customer, potentially causing delays or preventing the project from being undertaken.
    13. Project work. The Managed Service will provide planned upgrades and maintenance Monday to Friday during Canonical working days
    14. Managed Apps. Canonical will manage Applications from its managed applications portfolio. Canonical will expose only API and other user-level interfaces of the Applications
  4. Out of scope. The Managed Service does not provide:
    1. For managed OpenStack and managed Kubernetes:
      1. Managing, monitoring, backup or recovery of the operating system, customer generated data and any applications running within Guest Instances or Container Instances
      2. Support for the ability to run Guest Instances using images other than those provided by Canonical
    2. Architectural changes to the Environment
    3. Alternative scheduling of updates or upgrades
    4. Installation of packages or software other than those in the applicable Ubuntu Main Repository or updates to those packages delivered in the Ubuntu Cloud Archive
    5. Unsupported versions of Ubuntu, OpenStack, Kubernetes or applications.
    6. Installation of additional components (e.g. LBaaS, VPNaaS, SDN or SDS) beyond the software installed as part of the building of the Environment
    7. Adherence to the Customer's Change Management requirements/regulations without a DSE
    8. Integration with Customer's ticketing system without a TAM
  5. Service conclusion. At the end of the service term, the Managed Service will initiate an operational transfer. Operational transfer includes:
    1. Hand over of all credentials of the hosts, management software, Landscape and Applications to the customer. The continued operation of Landscape is subject to purchase and agreement of appropriate license terms
    2. Coordination of any applicable training (if purchased)
  6. Customer dependencies. The Managed Service requires:
    1. Credentials to the Infrastructure being used for the Applications in the case in which such infrastructure is not managed by Canonical, i.e. Managed OpenStack
    2. Continuous VPN access for Canonical support personnel to the Environment
    3. Utilisation parameters per Node to be kept below the maximum specified in the design document provided by Canonical when the Environment is delivered to the customer
    4. The facility where the Environment is hosted to comply with the minimum required measures to function, including but not limited to, connectivity, sufficient power supply, sufficient cooling system, and physical access control to the Environment
    5. The Minimum Size Requirement for the Cloud or Kubernetes cluster maintained at all times
  7. Uptime Service Level
    1. The Managed Service includes the following uptime service levels:
      Data plane for customer workloads that are distributed across two Regions Data plane for customer workloads that are in a single Region Control plane (OpenStack/ Kubernetes API, Web UI and CLI)
      Uptime 99.9% 99.5% 99%
    2. Data plane includes:
      1. Virtualisation (for workloads that are architected to not depend on a single compute node)
      2. Storage (block & object)
      3. Network for instances
    3. Downtime must be directly attributable to Canonical in order for it to count against the service level and is measured across a 12 month period. Planned maintenance windows and any requests by the customer are not taken into account when calculating uptime. Planned maintenance is carried out as required by Canonical, Monday to Friday during Canonical working days

Professional Support Services

  1. Technical Account Manager (TAM) is an add-on service to enhance support
    1. Canonical will provide a TAM, who will perform the following services for up to 10 hours per week during local Business Hours during the term of service:
      1. Provide support and best-practice advice on platform and configurations covered by the applicable Ubuntu Pro services
      2. Participate in review calls every other week at mutually agreed times addressing the customer's operational issues
      3. Organise multi-vendor issue coordination through TSANet or Canonical's direct partnerships where applicable. When the root cause is identified, the TAM will work with the vendor for that sub-system, working to resolve the case through their normal support process
    2. Canonical will hold a quarterly service review meeting with the customer to assess service performance and determine areas of improvement
    3. If required, the TAM may facilitate integration of the Customer's ticketing system with Canonical's
    4. The TAM will visit the customer's site annually for on-site technical review
    5. The TAM is available to respond to support cases during the TAM's working hours. Outside of such hours, support will be provided per the Ubuntu Pro Support Process
  2. Dedicated Technical Account Manager (DTAM) is an add-on service to enhance support
    1. Canonical will provide a DTAM, who will perform all services provided by TAM and the services listed below during local Business Hours for up to 40 hours per week (subject to Canonical leave policies) during local Business Hours during the term of service:
      1. Act as the primary point of contact for all support requests originating from the customer department for which the DTAM is responsible
      2. Manage support escalations and prioritisation in accordance with Canonical's standard support response definitions and customer needs
      3. Attend applicable Canonical internal training and development activities (in-person and remote)
    2. The DTAM is available to respond to support cases during the DTAM's working hours. Outside of Business Hours, support will be provided per the Ubuntu Pro Support Process
    3. If a DTAM is on leave for longer than five consecutive days, Canonical will assign a temporary remote resource to cover the leave period. Canonical will coordinate with the customer with respect to foreseeable DTAM leave
  3. Dedicated Support Engineer (DSE) is an add-on service to enhance support
    1. Canonical will provide a DSE, who will perform the following services during local Business Hours for up to 40 hours per week (subject to Canonical leave policies) during the term of service:
      1. Be available onsite as required to meet the customer's requirements
      2. Understand the products utilised in the customer's Environment that need to be integrated with Canonical's offerings and assist with those products, to the extent reasonable based on the DSE's expertise, to ensure the successful usage of offerings from Canonical
      3. Provide support and best-practice advice on platform and configurations covered by the applicable Ubuntu Pro services
      4. Act as the primary point of contact for all support requests originating from the customer department for which the DSE is responsible
      5. Act as a Canonical representative for Change Management protocols, in turn defending, coordinating and executing required Changes by Managed Services
      6. Manage support escalations and prioritization in accordance with Canonical's standard support response definitions and customer needs
      7. Participate in regular review calls addressing the customer's operational issues
      8. Organise multi-vendor issue coordination through TSANet or Canonical's direct partnerships where applicable. When the root cause is identified, the DSE will work with the vendor for that sub-system, working to resolve the case through their normal support process
      9. Attend applicable Canonical internal training and development activities
    2. Canonical will hold a quarterly service review meeting with the customer to assess service performance and determine areas of improvement
    3. The DSE is available to respond to support cases during the DSE's working hours. Outside of Business Hours, support will be provided per the Support Services Process
    4. If a DSE is on leave for longer than five consecutive business days, Canonical will assign a temporary remote resource to cover the leave period. Canonical will coordinate with the customer with respect to foreseeable DSE leave
Back to top

Support Services Process

  1. Service initiation
    1. Upon commencement of the services, Canonical will provide access for a single technical representative to Landscape, the support portal, and the online knowledge base
    2. The customer, through their initial technical representative, may select their chosen technical representatives who act as primary points of contact for support requests. The customer will receive up to 5 dedicated, personalised credentials for technical representatives per every 500 Nodes under support, but not more than a total of 15 credentials
    3. The customer may change their specified technical representatives at any time by submitting a support request via the support portal
  2. Submitting support requests
    1. The customer may open a support request once the customer account has been provisioned within the support portal
    2. The customer may submit support cases through the support portal or by contacting the support team by telephone, unless otherwise noted
    3. A support case should consist of a single discrete problem, issue, or request
    4. Cases are assigned a ticket number and responded to automatically. All correspondence not entered directly into the case, including emails and telephone calls, will be logged into the case with a timestamp for quality assurance
    5. When reporting a case, the customer should provide an impact statement to help Canonical determine the appropriate severity level. Customers with multiple concurrent support cases may be asked to prioritize cases according to severity of business impact
    6. The customer is expected to provide all information requested by Canonical as we work to resolve the case
    7. Canonical will keep a record of each case within the support portal enabling the customer to track and respond to all current cases and allowing for review of historical cases
  3. Support severity levels
    1. Once a support request is opened, a Canonical support engineer will validate the case information and determine the severity level, working with the customer to assess the urgency of the case
    2. Canonical will work as described below to provide the customer with a work-around or permanent solution following the severity levels as described below. As soon as core functionality is available, the severity level will be lowered to the new appropriate severity level.
    3. Canonical will use reasonable efforts to respond to support requests made by the customer within the initial response times set forth below, based on the applicable service and severity level, but cannot guarantee a work-around, resolution or resolution time:
      Severity Level Description Weekday initial response time 24/7 initial response time
      1 Core functionality critical impact/Service down 4 hours, excluding weekends and holidays 1 hour
      2 Core functionality severely degraded 8 Business hours 2 hours
      3 Standard support request 12 Business hours 6 Business hours
      4 Non-urgent requests, including cosmetic, informational and feature requests. 24 Business hours 12 Business hours
  4. Customer assistance. Continuous effort support is dependent on the customer being available at all times to assist Canonical, otherwise Canonical may need to reduce the severity level and its ability to respond
  5. Hotfixes. To temporarily resolve critical support cases, Canonical may provide a version of the affected software (e.g. package) that applies a patch. Such versions are referred to as “hotfixes”. Hotfixes provided by Canonical are supported for 90 days after the corresponding patch has been incorporated into a release of the software in the Ubuntu Archives. However, if a patch is rejected by the applicable upstream project, the hotfix will no longer be supported and the case will remain open
  6. Support language. Canonical will provide the support in English, unless specified otherwise
  7. Remote sessions. At the discretion of a Canonical engineer, a remote access service might be offered to access a supported system. In such a case, Canonical will determine which remote access service to use. Canonical engineers do not perform any remote actions on a supported system
  8. Ask for a Peer Review. As a normal business practice, Canonical performs peer reviews on a percentage of all cases. Customers can specifically request a peer review on a case within the case comments or by calling the phone number listed in the support portal. An impartial engineer will be assigned to review the case and provide feedback
  9. Management escalation. The customer may escalate support issues following the escalation process:
    1. Non-urgent needs. Request a management escalation within the case itself. A manager will be contacted to review the case and post a response within 1 business day
    2. Urgent needs can be escalated to Canonical's Support & Technical Services Manager by emailing support-manager@canonical.com. If you require further escalation, email Canonical's Support & Technical Services Director at operations-director@canonical.com
Back to top

Embedded Services

Where services are denoted to be “Embedded” the following applies:

  1. Introduction. You will receive the engineering support and access to Expanded Security Maintenance. Canonical will provide such technical support to unmodified Ubuntu LTS release images when installed using official sources and within its product life cycle
  2. Scope. The scope of the service is limited to the appropriate level, as listed above
  3. Engineering Support-only: scope and process. You will provide the following:
    1. You are responsible for resolving all end user issues. Canonical will not be supporting end-users directly. You should utilise the Knowledge Base, Launchpad, and other resources in addition to your own resolution systems to find workarounds or resolutions for any issue prior to opening a support case with Canonical
    2. You will search Launchpad, to ensure that the issue is not already known and being resolved and, if it is, provide suspected bug number to Canonical support as reference. Canonical reserves the right to redirect low-level and untriaged issues to you
    3. You are responsible for specifying how an issue arises and in what sub-system it is taking place. You must provide a repeatable test case that Canonical can recreate on the hardware systems to which Canonical has access
    4. You will work with Canonical to provide any debugging or further testing required. You will provide any technical information as requested to resolve the problem. Failure to provide required information or assistance in gathering such information may result in closure of the case. When the final solution has been provided by Canonical, you are responsible for verifying that it solves the issue
Back to top

Definitions

Applications: Applications Supported or Managed by Canonical (Managed Applications as described in the Add-ons section, under Managed Services, and at https://ubuntu.com/managed)

Apps support: phone and ticket support for the base Ubuntu OS image and a set of open source applications from Ubuntu repositories, built by Canonical or otherwise agreed with Canonical. A list of currently offered applications is set out at https://ubuntu.com/support. The list of Applications is subject to change without notice. The support scope also covers Kubernetes and LXD

Break-fix Support: request assistance in the event of an incident and answer questions about Supported Packages and products

Bug-fix Support: support for reported software bugs in Supported Packages only. This does not include troubleshooting of issues to determine if a bug is present

Business Hours: 08:00–18:00, Monday–Friday, local to the customer's headquarters unless another location is agreed. All times exclude public holidays

Ceph Cluster: a single Ceph installation in a single physical data center and specified by a unique identifier

Charm: a set of scripts compatible with Juju application modelling for the purpose of deploying and configuring relationships between software packages

Charmed Kubernetes: Kubernetes deployed using Juju and the official Canonical-Kubernetes bundle on bare metal, Cloud Guests, or virtual machines

Cloud Guest: a Guest Instance or Container Instance of Ubuntu Server

Container Instance: a container instance running in the cluster

Covered Hypervisor: any of: KVM | Qemu | Boch, VMWare ESXi, LXD | LXC, Xen, Hyper-V (WSL, Multipass), VirtualBox, z/VM, Docker. All Nodes in the cluster have to be subscribed to the service in order to benefit from the unlimited VM support

CVEs (High and Critical): High and Critical Common Vulnerabilities and Exposures as assessed by the Ubuntu Security Team. More details can be found at https://ubuntu.com/security/cves

DSE: a Canonical dedicated support engineer assigned to work full-time for a single customer acting as an extension of the customer's support organisation with a primary focus on integrating and supporting Canonicals offerings within the customer's Environment

DTAM: a Canonical support engineer dedicated to work full-time remotely for a single customer

Environment: a cloud or cluster, as applicable to the particular service offering

End of Life: a date (10 years after the Release Date) on which the Expanded Security Maintenance service for an Ubuntu LTS expires

End of Standard Support: a date (5 years after the Release Date) on which free standard security maintenance service for the Ubuntu Main repository of an Ubuntu LTS expires

Expanded Security Maintenance (ESM): an additional scope of security patching service delivered by the Ubuntu Security Team as found at https://ubuntu.com/security/esm. It covers fixes to High and Critical CVE vulnerabilities for 10 years and could be offered for Ubuntu Main repository (with Ubuntu Pro (Infra-only)), or both Ubuntu Main and Universe repositories (with the full Ubuntu Pro).

Guest Instance: a virtual machine instance

Infra support: Support for the base Ubuntu OS image and a set of open source infrastructure components, such as MAAS, Ceph storage and OpenStack. It also covers Kubernetes and LXD.

Kubernetes: the container orchestration software known as “Kubernetes” as distributed by Canonical

Minimum Size Requirement: at least 12 host Nodes continuously available for the Cloud or 10 host Nodes continuously available for the Cluster or such other size requirement as agreed with Canonical in writing

Node: a Physical Node or Virtual Machine provided to Canonical (or paid for) by the Customer for the purposes of running the Environment. Any further machines (whether virtual (VM) or container) created on top of a Node are not themselves considered to be Nodes

OpenStack: the cloud computing software known as “OpenStack” as distributed by Canonical with Ubuntu

Physical Node: a single named/managed unit of physical compute infrastructure, essentially the shelf or rack unit. May contain multiple CPU sockets, cores, NICs, Storage controllers/devices

Region: a discrete OpenStack Environment with dedicated API endpoints, which typically shares only the Identity (Keystone) service with other Regions. An OpenStack Region must be contained within a single datacenter.

Release date: the general availability release date of an Ubuntu version as found at https://ubuntu.com/about/release-cycle

Swift Cluster: a single Swift installation in a single physical data center and specified by a unique identifier

TAM: a Canonical support engineer who works remotely to personally collaborate with the customer's staff and management

Ubuntu Main: the deb package repository of an Ubuntu identified by Canonical as Ubuntu Main

Ubuntu Universe: the deb package repository of an Ubuntu identified by Canonical as Ubuntu Universe

Valid Customisations: configurations made through Horizon or the OpenStack API of the OpenStack Packages. For the avoidance of doubt, valid customisations do not include architectural changes that are not expressly executed or authorised by Canonical. Configuration options set during a Private Cloud Build should be considered critical to the health of the Cloud. Any changes to these may render the cloud unsupported. Requests for changes should be validated by Canonical to ensure continued support

Virtual Machine (VM): a virtualised compute instance instantiated on a recognised hypervisor technology (KVM, VMWare ESXi, OpenStack or public cloud)

Back to top

Want a fully managed private cloud?

Canonical provides a managed services option for OpenStack. Our experts take responsibility for the design, deployment and operations.

Learn more ›

Contact us

Get Ubuntu

The open source software platform that runs everywhere from the smartphone, the tablet and the PC to the server and the cloud.

Download Ubuntu ›

Further reading