This document will provide detailed instructions and a step-by-step process to upgrade an existing Ubuntu non-Pro instance to Ubuntu Pro. This will ensure the complete universe of patches will be available to download and install when overdue CVEs are attempted to be patched.
Necessary Ubuntu Upgrade for Science Cloud Users
The intention of this document is to detail the step-by-step process for upgrading all ec2 instances managed by SMCE users that currently run Ubuntu platform versions 18.04, 20.04, and 22.04 to Ubuntu Pro.
The Ubuntu Pro offers critical security patching/upgrades that are listed in the detailed Canonical provided AWS Documentation https://aws.amazon.com/marketplace/pp/prodview-negkygylqkp44.
All resources used in the following instructions are listed under Resources.
Requirements
- AWS Console Access with elevated privileges
- Ubuntu ec2 instances installed with the SSM agent
- AWS CLI 2 Installation Instructions https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html#getting-started-install-instructions
Instructions - Overview
1) Validate the Ubuntu ec2 instances are managed by SSM
2) Confirm ubuntu-advantage-tools is up to date
3) Stop and Create backup of ec2 instance
4) Create License Conversion
5) Start Instances and Validate
Instructions - Detailed
1) Validate the Ubuntu ec2 instances are managed by SSM
Using the AWS Console, navigate to the AWS Systems Manager landing page. You can do this by entering "Systems Manager" in the search box at top of the console.
Once there, along the left side menu select "Fleet Manager"
You will then be redirected and should see a list of all ec2 instances in your AWS account that are managed by SSM:
If your instance is not listed it means you will not be able to use this process to update to Ubuntu Pro. Otherwise you can continue with the process.
2) Confirm ubuntu-advantage-tools is up to date
Doing this one instance at a time, connect to the instance using session manager and run the command below to confirm that ubuntu-advantage-tools is up to date.
> sudo apt-get install -y ubuntu-advantage-tools
The console output should look similar to the image below:
As long as there are no unexpected warnings in the output, you can close out of session manager and move to the next step.
3) Stop and Create backup of ec2 instance
From the ec2 console, select the instance you just connected to and change the instance state from *running* to *stopped*.
Note: It is very important to make sure no one is using this machine or if it is running in a production environment schedule and coordinate at least an hour of down time for maintence.
Once the instance has completely stopped, from the **Actions** menu in the upper left of the console, hover over Image and templates and select Create Image. This will ensure that a backup of the ec2 and connected volume are backed-up and available if disaster strikes.
Do not turn the machine back on, leave it stopped for the License Conversion in the following steps.
4) Create License Conversion
Navigate to AWS License Manager and from the left side menu select License type conversion:
Next, select the orange button on the right labeled Create license type conversion:
From the dropdown menu select the os type you want to change (in this case Ubuntu LTS) and select the ec2 instance(s) you want to update:
Select Next and on the next page select Ubuntu Pro for the License type destination.
After selecting next (again) you will see a summary of the chosen actions and if all looks correct, hit Convert:
It will take a few minutes for the conversion process to complete. Once completed it is safe to turn the machine back on from the ec2 console page. Similar to how it was stopped before, you will start the machine by selecting Start Instance from the drop down Instance State menu.
Once the machine's status has changed from "Stopped" to "Running" you can validate the process worked by running the commands in the next step.
5) Start Instances and Validate
Once the updating process has finished, validate that the Pro service has been enabled by logging into the running machine via session manager and execute the following command: $ sudo pro status
If everything worked correctly, the console output will show that the esm-apps, esm-infa, and livepatch services are enabled. To check livepatch, run: $ sudo canonical-livepatch status
As long as the output in the terminal matches the above image, you can be assured that the update was successful and validated.
Resources
Canonical on the AWS Marketplace https://aws.amazon.com/marketplace/pp/prodview-negkygylqkp44'
Canonical Instructional Video https://www.youtube.com/watch?v=oYS28kmur2k&pp=ygUOdWJ1bnR1IGNoYW5uZWw%3D')
AWS CLI 2 https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html#getting-started-install-instructions