Apply kernel patches without rebooting

The Ubuntu Livepatch Service applies critical kernel security patches without rebooting. This is especially useful on production environments and services where downtime is disruptive.

Livepatch is free for up to 3 machines with a personal subscription and included in the Ubuntu Advantage subscription.

This tutorial will show you how to enable this service on your Ubuntu system.

What you’ll need

• A computer running Ubuntu LTS with an Internet connection
• Ubuntu Pro or an Ubuntu Advantage subscription or a Free personal subscription
• Some basic command-line knowledge

In order to use this service, you have to attach your subscription via the Ubuntu Advantage token. On Ubuntu Pro the subscription is already attached and you must skip this step.

To attach subscription, simply visit the UA portal.

You’ll have to log in with your Ubuntu Advantage or Free account if you haven’t done so already.

The portal will return your subscription credentials and instructions to apply them on the system. Follow the instructions and attach the system to your Ubuntu Advantage or Free subscription. It is as simple as

$ sudo ua attach [TOKEN]

Livepatch is enabled by default when attaching a subscription. You can verify your subscription status with the ua status command.

If livepatch is disabled, you can enable it with the following command:

$ sudo ua enable livepatch

You can ensure that the Livepatch service is working properly by running:

$ canonical-livepatch status --verbose

Congratulations, you now have zero downtime kernel patching on your system!

Next steps

If you have a problem, we’re ready to help! Check the following links:

• Ubuntu Forums
• Ask Ubuntu

Further reading

• This tutorial in a video form
• The Livepatch page contains details on the Ubuntu Livepatch service.
• Ubuntu Advantage personal or enterprise subscription