Score:3

Extended Security Maintenance settings for Ubuntu 18.04

in flag

Οut of curiosity Ι tried researching what options I have if I still use my Ubuntu 18.04 after April 2023. So I came across Extended Security Maintenance, which is free for 3 devices for personal use, as I saw. I logged in with my email and they provided me with a token:

sudo ua attach MYTOKEN

after that:

sudo ua status

gives the result: sudo ua status output

Does this mean that I will now receive extended updates for up to 10 years for my PC?

Are the disabled options beneficial?

Thanks for helping. I have been using Ubuntu for quite a lot of years now, but this is something new to me, so I'm looking forward to any insights.

24601 avatar
in flag
You'll have seen [this reference](https://ubuntu.com/security/esm)
Shantanu Bedajna avatar
in flag
i understand that. i have read through it and attached my device, i am trying to know what are fips and cis that are disabled, and by enabled status of esm means i will now continue to receive updates after 5 year period or i have to do something else ?
user535733 avatar
cn flag
If you are not a security professional, or have no requirement to adhere to CIS or FIPS standards, then the disabled options are not beneficial.
Score:4
cn flag

On 18.04 ESM, you will only receive security patches between 2023-2028.

Not bugfixes

Not new versions

Not community support.

There is no benefit to using ESM while the release is still in the 5-year Standard Support period. ESM gets the same support and uses the same repositories until Standard Support ends (in 2023 for Ubuntu 18.04). As long as you retain the normal/correct LTS package sources, there is also no penalty.

If you disable the normal repositories and enable only the ESM repository before 2023, the only consequence is that we will gently chide you into undoing the change when you show up to ask why most of your software choices have vanished.

Opinion: ESM is designed to be a wheelchair for your elderly system: ESM is a commercial product that may keep your system active and safe long enough for you to carefully and deliberately migrate your complex enterprise workflow and custom services to a supported, thoroughly-tested new system. If you choose to use ESM for another purpose, that's entirely up to you. Most users do not need ESM, and should not view ESM as extended support (it's not).

Shantanu Bedajna avatar
in flag
ahh very clear answer thank you !, but now that i have enabled it does that changes anything since 18.04 is still supported till 2023 april. Should i turn it off or keep it, seems like everything will work work same as usual, just after 2023 april if i dont have this ON then i won't receive security updates.
C.S.Cameron avatar
cn flag
@Shantanu Bedajna: If you want community support for your ESM version, You can go to this page and vote to allow community support for these older versions that still qualify for ESM. https://meta.askubuntu.com/questions/19543/policy-change-proposal-end-of-standard-support-for-esm-releases-is-effectivel - VOTE: **No, I do not support the proposed changes to policy**.
user535733 avatar
cn flag
@C.S.Cameron updated to address your comment. Improvements welcome.
C.S.Cameron avatar
cn flag
@user535733 I do not really see anything wrong with what you wrote, (I upvoted it). however the Lack of community support is not written in stone and can be changed if the community insists. Lack of community support for ESM versions mainly affects poor people who can not afford the latest equipment. Being poor does not mean being ignorant. I'm sure these people can get what they need by running Debian if Ubuntu is not supported.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.