• Logo
    Ubuntu Server
  • ubuntu.com/server
  • More resources
    • Discourse
    • Mattermost
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Ubuntu Server documentation
Ubuntu Server documentation
  • Tutorial
    • Basic installation
    • Managing your software
    • Attach your Ubuntu Pro subscription
  • How-to guides
    • Server installation
      • amd64 netboot install
      • arm64 netboot install
      • Choose between the arm64 and arm64+largemem installer options
      • ppc64el netboot install
      • Virtual CD-ROM and Petitboot install on ppc64el
      • s390x install via z/VM
      • Non-interactive IBM z/VM autoinstall (s390x)
      • s390x install via LPAR
      • Non-interactive IBM Z LPAR autoinstall (s390x)
    • Security
      • User management
      • Firewalls
      • AppArmor
      • Console security
      • Kerberos
        • Install a Kerberos server
        • Configure service principals
        • Kerberos encryption types
        • Set up secondary KDC
        • Basic workstation authentication
        • Kerberos with OpenLDAP backend
      • Network user authentication with SSSD
        • SSSD with Active Directory
        • SSSD with LDAP
        • SSSD with LDAP and Kerberos
        • Troubleshooting SSSD
      • Smart cards
        • Smart card authentication
        • Smart card authentication with SSH
      • OpenSSH
        • OpenSSH server
        • 2FA with TOTP/HOTP
        • 2FA with U2F/FIDO
      • Install a root CA certificate
      • OpenVPN
      • WireGuard VPN
        • Peer-to-site
          • Peer-to-site (on router)
          • Peer-to-site (inside device)
        • Site-to-site
        • Default gateway
        • Common tasks
        • Security tips
        • Troubleshooting
    • Networking
      • File transfers with FTP
      • Set up a name server (DNS)
      • Set up DNS Security Extensions (DNSSEC)
      • DNSSEC Troubleshooting
      • Use Open vSwitch with DPDK
      • Install DHCP isc-kea
      • Install DHCP isc-dhcp-server
      • Time sync with timedatectl and timesyncd
      • Time sync with chrony
      • Network File System (NFS) sharing
      • Samba
        • Set up a Samba AD Domain Controller
        • Join an Active Directory domain
        • Set up a file server
        • Set up a print server
        • Share access controls
        • Create AppArmor profile
        • Mount CIFS shares permanently
        • NT4 domain controller
        • OpenLDAP backend
      • Active Directory integration
        • Prepare to join a domain
        • Join a simple domain with the rid backend
        • Join a forest with the rid backend
        • Join a forest with the autorid backend
      • Set up a CUPS print server
    • Managing software
      • Package management
      • Automatic updates
      • Upgrade your release
      • Reporting bugs
      • Kernel crash dump
    • Data and storage
      • OpenLDAP
        • Install OpenLDAP
        • Set up access control
        • OpenLDAP with replication
        • User and group management
        • OpenLDAP and TLS
        • Backup and restore
      • Databases
        • MySQL
        • PostgreSQL
      • Storage
        • Manage logical volumes
        • iSCSI
      • Backups and version control
        • Install Bacula
        • Install rsnapshot
        • Backup with shell scripts
        • etckeeper
        • Install gitolite
    • Mail services
      • Install Postfix
      • Install Exim4
      • Install Dovecot
    • Web services
      • Install a Squid server
      • Install Apache2
      • Apache2 settings
      • Apache2 modules
      • Install nginx
      • nginx settings
      • nginx modules
      • Install PHP
      • Install Ruby on Rails
    • Graphics
      • Install NVIDIA drivers
      • vGPU with QEMU/KVM
    • Virtualisation
      • Multipass
      • UVtool
      • QEMU
      • Libvirt and virsh
      • virt-manager
      • Nested virtualization
      • Ubuntu on Hyper-V
    • Containers
      • LXD
      • Docker for sysadmins
      • How to run rocks on your server
    • High availability
      • Distributed Replicated Block Device (DRBD)
    • Observability
      • Set up your LMA stack
      • Install Logwatch
      • Install Munin
      • Install Nagios Core 3
      • Use Nagios with Munin
  • Reference
    • Glossary
    • System requirements
    • Data and storage
      • Archive rotation shell script
    • High availability
      • Migrate from crmsh to pcs
    • Other tools
      • Byobu
      • pam_motd
  • Explanation
    • Security
      • Introduction to security
      • Security suggestions
      • Introduction to Kerberos
      • Introduction to network user authentication with SSSD
      • DNSSEC
      • Cryptography
        • Introduction to cryptographic libraries
        • OpenSSL
        • GnuTLS
        • Network Security Services (NSS)
        • Java cryptography configuration
        • BIND 9 DNSSEC cryptography selection
        • OpenSSH crypto configuration
        • Troubleshooting TLS/SSL
      • Certificates
      • Introduction to WireGuard VPN
      • OpenVPN clients
    • Networking
      • Introduction to networking
      • Networking key concepts
      • About Netplan
      • Configuring networks
      • The DPDK library
      • About DHCP
      • Time synchronisation
      • Introduction to Samba
      • Active Directory integration
        • Introduction to Active Directory integration
        • Choosing an integration method
        • Security identifiers (SIDs)
        • Identity Mapping (idmap) backends
        • The rid idmap backend
        • The autorid idmap backend
    • Managing software
      • Third party repository usage
      • Changing package files
      • Configuration managers
      • About apt upgrade and phased updates
      • Advance testing of updates in best practice server deployments
    • Data and storage
      • Introduction to OpenLDAP
      • Introduction to databases
      • Storage
        • About LVM
      • Multipath
        • Introduction to device mapper multipathing (“multipath”)
        • Configuration options and overview
        • Configuration examples
        • Common tasks and procedures
      • Introduction to backups
    • Web services
      • Introduction to web servers
      • About web servers
      • About Squid proxy servers
    • Virtualisation and containers
      • Introduction to virtualization
      • VM tools overview
      • QEMU microvm
      • Upgrade VM machine type
      • Container tools overview
      • About rock images
      • Docker storage, networking, and logging
      • About OpenStack
      • eBPF
    • Clouds
      • About cloud-init
      • Cloud images
    • Performance
      • Profile-Guided Optimization
      • hwloc
      • cpupower
      • TuneD
    • High Availability
      • Introduction to HA
      • Pacemaker resource agents
      • Pacemaker fence agents
    • Debugging
      • About debuginfod
      • Debug symbol packages
  • Contributing
    • Contribute to this documentation
    • Types of contributions
    • Find issues to work on
    • Build the documentation locally
    • Guidance for writing
    • Submitting your work
    • Getting help
    • Our contributors
Back to top
Give feedback
Copyright © 2025, Canonical Group Ltd
Last updated on Apr 29, 2025
Ask a question on Discourse
Ask a question on Mattermost
Ask a question on IRC
Open a GitHub issue for this page
Edit this page on GitHub
Contents

Your tracker settings

We use cookies and similar methods to recognise visitors and remember preferences. We also use them to measure campaign effectiveness and analyse site traffic.

By selecting ‘Accept‘, you consent to the use of these methods by us and trusted third parties.

For further details or to change your consent choices at any time see our cookie policy.

Your tracker settings

We use cookies and similar methods to recognise visitors and remember preferences. We also use them to measure campaign effectiveness and analyse site traffic.

By selecting ‘Accept‘, you consent to the use of these methods by us and trusted third parties.

For further details or to change your consent choices at any time see our cookie policy.