niklas‑stephan.de

Ubuntu Landscape removed; Ubuntu Pro, livepatch and unattended-upgrades per host

Last updated 05/11/2026 · landscape, updates, metis, iris, hestia, handtrixxx

Current state (verified 2026-10-25)

Ubuntu Landscape (retired 2026-06; Niklas deregistered the machines):

  • landscape-client / landscape-common purged from handtrixxx.com, metis, iris and hestia (iris/metis/hestia had 26.02.2 packages, handtrixxx.com 24.02). ThinkPad never had it.
  • Leftover dir /var/lib/landscape may remain on handtrixxx.com; harmless.
  • The landscape entitlement still shows enabled in pro status on some hosts; that is just the Pro service listing, no client installed. sudo pro disable landscape if you want it off.

Ubuntu Pro: attached (free personal subscription, account ubuntu@handtrixxx.com) on all five hosts - handtrixxx.com, metis, iris, ThinkPad and hestia (attached 2026-10-25, ESM infra+apps enabled). UBUNTU_PRO_TOKEN lives in /data/ai-persistence/.env on handtrixxx.com, metis, iris and hestia (mode 600, never in a tracked file); ThinkPad has no /data/ai-persistence so no local copy. Re-attach: sudo pro attach "$(grep -m1 '^UBUNTU_PRO_TOKEN=' /data/ai-persistence/.env | cut -d= -f2-)".

Livepatch (snap canonical-livepatch, daemon unit snap.canonical-livepatch.canonical-livepatchd.service - NOT canonical-livepatch.service): running and kernel-supported on handtrixxx.com, metis, iris, ThinkPad (ThinkPad shows patchState: applied, patch 122.1). Check with sudo canonical-livepatch status. hestia: kernel 7.0.0-1017.17-raspi is not covered by Livepatch -> pro status shows livepatch ... warning; nothing to fix (raspi kernels are simply uncovered); sudo pro disable livepatch would only silence the warning.

Unattended upgrades: installed and active on all five hosts (/etc/apt/apt.conf.d/20auto-upgrades = Update-Package-Lists 1 / Unattended-Upgrade 1; unattended-upgrades service active). Automatic-Reboot "false" is explicitly set in /etc/apt/apt.conf.d/50unattended-upgrades (line 94) on every host - no auto-reboot.

Gotcha seen 2026-10-25

An interactive sudo apt-get upgrade on iris (started Oct 22 via a pts, 180 debs downloaded) held the dpkg lock for 2.5 days and blocked all other apt operations. Killed it and finished with sudo dpkg --configure -a --force-confdef --force-confold (a systemd-resolved conffile prompt would otherwise hang on EOF). If apt locks on iris, check ps -C apt-get for a stuck interactive session first.

Source: Wiki.js