• Logo
    Livepatch
  • ubuntu.com/security/livepatch
  • More resources
    • Discourse
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Livepatch documentation
Livepatch documentation
  • Livepatch Documentation
  • Client
    • How-to guides
      • Installation
        • Enable client
        • Enable client on ubuntu core
        • Disable client
        • Disable livepatch during startup
      • Configuration
        • Configure Livepatch Client
        • Configure proxy
        • Enable and configure the Livepatch Client with cloud init
        • Use patch cut off date
        • Configure reboot notification policy
      • Operations
        • Check client status
      • Security
        • Securely configure and operate the client
        • Securely decommission the client
        • Report client vulnerability
    • Reference
      • Platform
        • Supported kernels
        • Supported architectures
        • Configuration options
        • Kernel upgrade recommendation
      • Networking
        • Firewall configuration
        • Data sent to Canonical
      • Patches
        • Patch security
      • Releases
    • Explanation
      • Architecture
        • How kernel live patching works
        • Updates provided by Livepatch
        • Updates not provided by Livepatch
        • Livepatch tiers
        • When to expect new updates
        • Content caching
        • Kernel upgrade recommendations
        • Reboot notice removal
      • Security
        • How CVEs are rated
        • Security overview
        • Security lifecycle
        • Livepatch security notices
      • Patches
        • Patch lifecycle
        • Patch installation
      • Troubleshooting
        • Livepatch not working
        • Service access problems
        • Missing patches
        • Unpatchable problems
        • When to reboot
        • Patch cut-off date
  • Server
    • Tutorial
      • Livepatch and LXD
      • Livepatch and MicroK8s
      • Airgapped Livepatch and MicroK8s
      • Airgapped Livepatch and Snap
    • How-to guides
      • Deployment
        • Deploy via juju
        • Deploy via snap
        • Deploy cve service via snap
        • Upgrade a deployment
        • Migrate from reactive charm to snap
        • Migrate from reactive charm to operator charm
        • Migrate from reactive charm to k8s operator charm
        • Migrate to the new machine charm
        • Public clouds
          • Deploying on aws
          • Deploying on azure
      • Patch management
        • Fetch patches
        • Distribute patches across an air gap
        • Use the patch downloader tool
        • Configure proxy for fetching patches
        • Chain Livepatch Servers
      • Operations
        • Manage fleet of machines
        • Generate patch health report
        • Scale out
        • Configure logging and monitoring
        • Decommission
        • Use Livepatch Client with on prem server
      • Security
        • Setup tls
        • Harden your deployment
        • Setup administration tool
        • Report server vulnerabilities
    • Reference
      • Platform
        • Configuration
        • Resource requirements
        • Network access
      • Authentication
        • Livepatch Server authentication
      • Patch management
        • Managing patches in an on-prem Livepatch deployment
        • Patch sync filters
      • Patch storage
        • Use S3 for patch storage
        • Use GCS for patch storage
        • Use Azure for patch storage
        • Use IBM COS for patch storage
        • Use OCI Object Storage for patch storage
        • Use Swift for patch storage
        • Migrate patches between storage backends
      • Telemetry
        • Data sent to Canonical
        • Machine reports
      • Releases
    • Explanation
      • Architecture
        • Security overview
        • Security lifecycle
        • Access control
      • Observability
        • Logging and monitoring
  • Release Notes
    • Client
    • Server
  • Contribute
    • Contribute to our documentation
  • Support
    • Get more help
    • Report bugs
Back to top

Patch management¶

Fetch, download, proxy, and chain patches across servers.

In this section¶

  • Fetch patches

  • Distribute patches across an air gap

  • Use the patch downloader tool

  • Configure proxy for fetching patches

  • Chain Livepatch Servers

© 2026 CC-BY-SA Canonical Ltd.
Last updated on Oct 19, 2026
Manage your tracker settings
Ask a question on Discourse
Edit this page on GitHub
Contents
  • Patch management
    • In this section