Operations | Monitoring | ITSM | DevOps | Cloud

Live Linux kernel patching with progressive timestamped rollouts

The apt package manager is responsible for installing.deb packages on Ubuntu LTS (long-term support) and interim releases, including the.deb package for the Linux kernel. Updating the kernel package requires a system restart, leaving systems vulnerable between the moment the Linux kernel package is installed and when the machine is rebooted.

Chiseled Ubuntu containers for OpenJRE 8, 17 and 21

Today we are announcing chiseled containers for OpenJRE 8, 17 and 21 (Open Java Runtime Environment), coming from the OpenJDK project. These images are highly optimized for size and security, containing only the dependencies that are strictly necessary. They are available for both AMD64 and ARM64 architectures and benefit from 12 years of security support.

Revolutionizing Web Page Creation: How Structured Content is Slashing Design and Development Time

Co-authored with Julie Muzina A year ago, during our Madrid Engineering Sprint, we challenged ourselves to dramatically reduce, or even eliminate, the need for constant design involvement in the day-to-day creation of web pages. Our strategy for achieving this is based on a smarter, more structured approach to content.

Effective infrastructure automation to reduce data center costs

Today, managing a data center requires striking a balance between cost, security, and performance. Long-term costs are a different matter, even though upfront capital expenditures (CapEx) like real estate and hardware are well-known and reasonably predictable. According to industry surveys, operational expenses (OpEx), which include system provisioning, patching, compliance, and troubleshooting, steadily increase over time and frequently exceed 50% of total cost of ownership (TCO) by the third year.

Canonical delivers Kubernetes platform and open-source security with NVIDIA Enterprise AI Factory validated design

To ease the path of enterprise AI adoption and accelerate the conversion of AI insights into business value, NVIDIA recently published the NVIDIA Enterprise AI Factory validated design, an ecosystem of solutions that integrates seamlessly with enterprise systems, data sources, and security infrastructure. The NVIDIA templates for hardware and software design are tailored for modern AI projects, including Physical AI & HPC with a focus on agentic AI workloads.

Apache Spark security: start with a solid foundation

Everyone agrees security matters – yet when it comes to big data analytics with Apache Spark, it’s not just another checkbox. Spark’s open source Java architecture introduces special security concerns that, if neglected, can quietly reveal sensitive information and interrupt vital functions.

What if your container images were security-maintained at the source?

Software supply chain security has become a top concern for developers, DevOps engineers, and IT leaders. High-profile breaches and dependency compromises have shown that open source components can introduce risk if not properly vetted and maintained. Although containerization has become commonplace in contemporary development and deployment, it can have drawbacks in terms of reproducibility and security.

OpenStack with Sunbeam for medium-scale cloud infrastructure

The rapid growth in OpenStack installation and orchestration tools that we have seen in recent years has effectively established OpenStack as the world’s leading open source cloud platform. Projects like Sunbeam or Kolla Ansible, for example, are effectively transforming OpenStack into yet another user application.