Why Production Ubuntu Deployments Should Stick to LTS Releases
Ubuntu's LTS releases provide five years of predictable security updates. Interim releases only get nine months. Here's how to verify your fleet's support status and why aligning production to LTS prevents 2 AM emergencies.
03 Jul 2025, 04:07 UTC

The Problem: Unplanned Upgrades Break Production
Your monitoring alerts fire at 2 AM because a package update from an interim Ubuntu release introduced a library incompatibility. The application stack that worked yesterday now fails health checks. This scenario plays out when teams treat Ubuntu's nine-month interim releases (23.10, 25.04) as production targets instead of what they are: testing grounds for the next LTS.
Understanding the LTS Cadence
Ubuntu publishes Long Term Support releases every two years in April of even-numbered years — 20.04, 22.04, 24.04. Each LTS receives five years of standard security and maintenance updates for packages in the main repository. The release name encodes the year and month: 24.04 means April 2024.
Interim releases arrive every six months in odd-numbered years and receive only nine months of support. They exist to validate newer kernels, toolchains, and desktop stacks before the next LTS freezes. Running them in production means committing to a mandatory upgrade cycle twice per year.
The Engineering Decision: Align to LTS
Choosing LTS for production is a risk-reduction decision, not a feature freeze. You still get kernel updates through point releases (22.04.1, 22.04.2) and can opt into the Hardware Enablement (HWE) kernel track for newer hardware support without leaving the LTS base. The trade-off is accepting older userspace packages — gcc-11 on 22.04 instead of gcc-13 on 23.10 — but gaining a predictable five-year window where security patches arrive without forced version jumps.
Ubuntu Pro extends the full archive (including universe and multiverse) to ten years for registered systems. The free tier covers personal use on up to five machines. Without Pro, packages outside main may lose community support before the LTS ends.
Worked Example: Verifying Your Fleet's Support Status
Run this check on each production host to confirm you're on an LTS with active support and identify packages approaching end-of-life.
# Run as root or via sudo on each Ubuntu host
apt update && apt install -y ubuntu-advantage-tools
ubuntu-security-status
Where to run: On each production server or container host. Requires sudo for package installation.
Expected output includes: The Ubuntu release version, whether it's an LTS, days until standard support ends, and a breakdown of packages by support status (main, universe, ESM).
Key checks:
- Confirm
LTSappears in the release description - Verify standard support end date is years away, not months
- Note any packages listed under "ESM" — these need Ubuntu Pro for continued updates
- Packages in "universe" or "multiverse" without ESM coverage may already be unsupported
Risk: Installing ubuntu-advantage-tools adds Canonical's apt repository. Review /etc/apt/sources.list.d/ubuntu-esm-infra.list after install if you restrict external repos.
Limitation: Third-Party Repositories Don't Follow Ubuntu's Timeline
PPAs, vendor repositories (Docker, PostgreSQL, NodeSource), and Snap tracks operate on independent schedules. A PostgreSQL 15 package from apt.postgresql.org may drop 22.04 support before Ubuntu's standard window ends. Snap packages follow their own channels (stable, candidate, beta, edge) and can introduce confinement changes mid-LTS.
Mitigation: Pin critical third-party packages to specific versions in /etc/apt/preferences.d/ and test upgrades in staging before applying to production. For Snaps, lock to a specific track: snap refresh postgresql --channel=15/stable.
Actionable Next Steps
- Run
ubuntu-security-statusacross your fleet this week. Document any non-LTS hosts. - For each non-LTS host, plan migration to the current LTS (24.04 as of this writing) before its interim support expires.
- Audit third-party repositories: list them with
apt policyand verify each vendor's support policy for your LTS version. - Schedule LTS-to-LTS upgrade windows now using Canonical's published end-of-life dates. The next LTS-to-LTS path is 22.04 → 24.04 (available after 24.04.1 releases, typically August 2024).
Predictable maintenance windows beat emergency upgrades every time. LTS gives you the calendar; the rest is discipline.
0 replies
A thoughtful contribution can make all the difference. Be the first to share one.