Current state (2026-02-19)
Production server (prod7_py3) is running Ubuntu 20.04.6 LTS, which reached end of standard support in April 2025.
Login banner shows:
- ✅ 6 standard updates — applied 2026-02-19 via
sudo apt upgrade
- ❌ 117 additional security updates available via ESM Infra (requires Ubuntu Pro)
- ⚠️ Ubuntu 22.04 LTS upgrade available
Action items
Short term: Ubuntu Pro subscription
Ubuntu Pro provides Extended Security Maintenance (ESM) for Ubuntu 20.04 through 2030, unlocking the 117 currently unpatched CVEs.
Options:
- Free personal tier: ubuntu.com/pro → Ubuntu One account → free for up to 5 machines. Run
sudo pro attach <token> on the server.
- Existing org subscription: Check if EbookFoundation already has Ubuntu Pro via AWS Marketplace or Canonical.
Steps once token is available:
sudo pro attach YOUR_TOKEN
sudo pro enable esm-infra
sudo apt update && sudo apt upgrade
Long term: Migrate to Ubuntu 22.04 LTS
Ubuntu 22.04 is the right long-term target (standard support through April 2027, ESM through 2032). Ubuntu 20.04 → 22.04 is a supported in-place upgrade path via do-release-upgrade, but for a production web server a fresh instance approach is safer:
- Provision new EC2 instance from Ubuntu 22.04 AMI
- Run Ansible playbook against new instance
- Test with
test.unglue.it pattern first
- Blue/green cutover via Route 53
This should be coordinated with the Django upgrade work (#1081) — upgrading both OS and Django together avoids doing two major migrations separately.
Related
Current state (2026-02-19)
Production server (
prod7_py3) is running Ubuntu 20.04.6 LTS, which reached end of standard support in April 2025.Login banner shows:
sudo apt upgradeAction items
Short term: Ubuntu Pro subscription
Ubuntu Pro provides Extended Security Maintenance (ESM) for Ubuntu 20.04 through 2030, unlocking the 117 currently unpatched CVEs.
Options:
sudo pro attach <token>on the server.Steps once token is available:
Long term: Migrate to Ubuntu 22.04 LTS
Ubuntu 22.04 is the right long-term target (standard support through April 2027, ESM through 2032). Ubuntu 20.04 → 22.04 is a supported in-place upgrade path via
do-release-upgrade, but for a production web server a fresh instance approach is safer:test.unglue.itpattern firstThis should be coordinated with the Django upgrade work (#1081) — upgrading both OS and Django together avoids doing two major migrations separately.
Related