Jammy Jellyfish Release Notes

Release
1

Jammy Jellyfish Release Notes

Table of Contents

Introduction

These release notes for Ubuntu 22.04 LTS (Jammy Jellyfish) provide an overview of the release and document the known issues with Ubuntu and its flavours. For details of the changes applied since 20.04, please see the 22.04.4 change summary. The change summary for 22.04.1, 22.04.2 and 22.04.3 are available as well.

Support lifespan

Maintenance updates will be provided for 5 years until April 2027 for Ubuntu Desktop, Ubuntu Server, Ubuntu Cloud, and Ubuntu Core. All the remaining flavours will be supported for 3 years. Additional security support is available with ESM (Extended Security Maintenance).

Get Ubuntu 22.04 LTS

Download Ubuntu 22.04.4

Images can be downloaded from a location near you.

You can download ISOs and flashable images from:

Upgrading from Ubuntu 21.10

To upgrade on a desktop system:

  • Open the “Software & Updates” Setting in System Settings.
  • Select the 3rd Tab called “Updates”.
  • Set the “Notify me of a new Ubuntu version” dropdown menu to “For any new version”.
  • Press Alt+ F2 and type in update-manager -c into the command box.
    • Update Manager should open up and tell you: “New distribution release ‘22.04’ is available.”
  • If not you can also use /usr/lib/ubuntu-release-upgrader/check-new-release-gtk
  • Click Upgrade and follow the on-screen instructions.

To upgrade on a server system:

  • Make sure the Prompt line in /etc/update-manager/release-upgrades is set to normal.
  • Launch the upgrade tool with the command sudo do-release-upgrade.
  • Follow the on-screen instructions.

Note that the server upgrade will use GNU screen and automatically re-attach in case of dropped connection problems.

There are no offline upgrade options for Ubuntu Desktop and Ubuntu Server. Please ensure you have network connectivity to one of the official mirrors or to a locally accessible mirror and follow the instructions above.

New features in 22.04 LTS

Updated Packages

Linux kernel :penguin:

Ubuntu 22.04 LTS ships multiple optimized kernels on per-product basis:

  • Ubuntu Desktop will automatically opt-into v5.17 kernel on the latest generations of certified devices (linux-oem-22.04)
  • Ubuntu Desktop uses a rolling HWE kernel (linux-hwe-22.04) on all other generations of hardware. The rolling HWE kernel is based on the v5.15 kernel for 22.04.0 and 22.04.1 point releases
  • Ubuntu Server defaults to a non-rolling LTS kernel v5.15 (linux-generic)
  • Ubuntu Cloud and Devices use optimized kernels in collaboration with partners (v5.15+ with additional backports and features)

Additional optimized and certified kernel flavours will become available in Ubuntu 22.04 LTS in due course.

UDP disabled for NFS mounts

Since Ubuntu 20.10 (“Groovy Gorilla”), the kernel option CONFIG_NFS_DISABLE_UDP_SUPPORT=y is set and this disables using UDP as the transport for NFS mounts, regardless of NFS version.

In practice, if you try to use udp, you will get this error:

$ sudo mount f1:/storage /mnt -o udp
mount.nfs: an incorrect mount option was specified

Toolchain Upgrades :hammer_and_wrench:

GCC was updated to the 11.2.0 release, binutils to 2.38, and glibc to 2.35. Python :snake: now ships at version 3.10.4, Perl :camel: at version 5.34.0. LLVM now defaults to version 14. golang defaults to version 1.18.x. rustc defaults to version 1.58.

In addition to OpenJDK 11, OpenJDK 18 is now provided (but not used for package builds).

Ruby :gem: was updated from v2.7.4 to v3.0.

systemd v249.11

The init system was updated to systemd v249, using a solid .11 patchlevel for the LTS. Please refer to the upstream changelog for more information about the individual features. We’ve enabled the userspace OOMD service and are shipping the systemd-oomd package by default on the “Ubuntu Desktop” flavour, to avoid overloaded systems and the need of the kernel’s OOM killer to kick in. The OOMD status can be checked using oomctl.

OpenSSL 3.0

We’ve upgraded the OpenSSL library to the new 3.0 version, which disables a lot of legacy algorithms by default, as detailed in their migration guide. In particular, certificates using SHA1 or MD5 as hash algorithms are now invalid under the default security level.

In addition to the upstream deprecations, please note that since Ubuntu 20.04 (Focal Fossa), the security level 2 (which is the default) disables the (D)TLS protocols below 1.2 (included).

Since the new version has an API bump, third-party packages that depend on libssl1.1 will need to be rebuilt to instead depend on libssl3, as the older ABI isn’t provided anymore.

plocate

plocate is now the default locate implementation, replacing mlocate. The mlocate package is now a transitional package and will install plocate. plocate is largely argument-compatible with mlocate, but some incompatibilities do exist. For details, see the manual for plocate.

Security Improvements :lock:

nftables is now the default backend for the firewall. All applications on the system must agree on whether they will use the legacy xtables backend or the newer nftables backend. Bug 1968608 provides some context that may be helpful. Docker may not be ready for the new nftables backend.

ssh-rsa is now disabled by default in OpenSSH. See bug 1961833 to learn how to selectively re-enable it if necessary. If you are upgrading a system remotely over SSH, you should check that you are not relying on this to ensure that you will retain access after the upgrade.

scp offers a -s command line option to use sftp mode rather than scp mode when handling remote filenames. This new, safer, behaviour will eventually become the default.

Ubuntu Desktop

  • Ubuntu now offers 10 color choices each in dark and light styles
  • Firefox is now only provided in Ubuntu as a snap. Some benefits include
    • Directly maintained by Mozilla
    • More maintainable for the entire Ubuntu LTS lifecycle
    • … Which means faster access to the newest Firefox versions
    • Easily switch to a different Firefox flavor with snap channels including esr/stable, latest/candidate, latest/beta, and latest/edge
    • Sandboxed for improved security hardening for this critical app
  • Improved in 22.04.1: Firefox startup speed is significantly faster now compared to the original Ubuntu 22.04 release.
  • Desktop icons are shown in the bottom right by default but this can be changed through new settings added to the Appearance panel of the Settings app.
  • Also there are new settings to control the Dock look and behavior
  • Dock devices and filemanager integration has been improved

GNOME :footprints:

  • GNOME has been updated to include new features and fixes from GNOME 41 and GNOME 42
  • Several apps are still at their 41 version numbers to provide a more time-tested experience for the LTS desktop by mostly avoiding libadwaita.
  • The new cross-desktop dark style preference is supported.
  • GNOME Shell and mutter have lots of performance improvements including the triple buffering patch.
  • The default session for most systems that don’t have an Nvidia desktop graphics card is now Wayland. If you need a non-Wayland session, you can choose the Ubuntu on Xorg session by clicking the gear button after selecting your name on the login screen.
  • Hardware with privacy screen support is now supported
  • RDP is now available for sharing your desktop remotely. Legacy VNC is still available, but it is strongly recommended to use RDP for better security, privacy, and performance. If you were previously using VNC, you’ll need to manually re-enable desktop sharing in the Settings app and get your new login information.

Updated Applications

Updated Subsystems

Ubuntu Server

Ubuntu HA/Clustering

Corosync

It was updated to version 3.16 which includes some new features:

  • Support for changing crypto configuration during runtime. This includes turning cryptography on or off, changing crypto_cipher and crypto_hash and also changing of crypto key.
  • Default token timeout was changed from 1 seconds to 3 seconds.
  • Run corosync -v to get the list of supported crypto and compression models which can be used in corosync.conf
  • Cgroup v2 support.

For the complete list of changes please refer to the upstream release notes.

Pacemaker

It was updated to version 2.1.2 which includes some new features:

  • Add a new feature priority-fencing-delay. Optionally derive the priority of a node from the resource-priorities of the resources it is running.
  • Add on-fail=demote and no-quorum-policy=demote recovery policies for promoted resources.
  • support for OCF Resource Agent API 1.1 standard.
  • Many improvements in crm_mon and crm_resource.

For the complete list of changes please refer to the upstream release notes.

A notable difference from the version in Ubuntu Focal 20.04 is that the default configuration file does not define the node name as node1 anymore, now the output of uname -n is used as the default node name.

Resource agents

It was updated to version 4.7.0. Check the list of changes since Ubuntu Focal 20.04 here.

The agents are now separated in two packages: resource-agents-base and resource-agents-extra. The resource-agents-base package contains the agents which are curated by the Ubuntu Server team, which means that automated tests are running in a continuous integration system to guarantee the quality of those agents. The resource-agents package is now a metapackage which depends on both resource-agents-base and resource-agents-extra. Please note that the resource-agents package will be removed in future releases; we recommend that you do not rely on its existence.

Fence agents

It was updated to version 4.7.1.

The agents are now separated in two packages: fence-agents-base and fence-agents-extra. The fence-agents-base package contains the agents which are curated by the Ubuntu Server team, which means that automated tests are running in a continuous integration system to guarantee the quality of those agents. The fence-agents package is now a metapackage which depends on both fence-agents-base and fence-agents-extra. Please note that fence-agents will be removed in releases; we recommend that you do not rely on its existence.

Containers runtime

containerd

It was updated to version 1.5.9. Some interesting changes are:

  • Update pull to handle of non-https urls in descriptors
  • Install apparmor parser for arm64 and update seccomp to 2.5.1
  • Add support for clone3 syscall to fix issue with certain images when seccomp is enabled
  • Add image config labels in CRI container creation

For the complete list of changes please refer to the upstream release page.

runc

It was updated to version 1.1.0. There are many improvements and bug fixes which can be found in the upstream release page. Some deprecations and removals which might impact the upgrade are presented below:

Deprecation

  • runc run/start now warns if a new container cgroup is non-empty or frozen; this warning will become an error in runc 1.2

Removals

  • cgroup.GetHugePageSizes has been removed entirely, and been replaced with cgroup.HugePageSizes which is more efficient
  • intelrdt.GetIntelRdtPath has been removed. Users who were using this function to get the intelrdt root should use the new intelrdt.Root instead.

Ruby 3.0

The default Ruby interpreter was updated to version 3.0, whose goal is performance, concurrency, and Typing. To have a broad overview about the cool features and improvements check out the Ruby 3.0 Release Announcement.

Users coming from previous Ubuntu releases ( Ubuntu Focal 20.04 onward) will be moving from Ruby 2.7 to 3.0. In this case the Ruby 2.7 Release Announcement might be useful as well. An important thing to keep in mind is that the following libraries are not bundled anymore in Ruby:

  • sdbm
  • webrick
  • net-telnet
  • xmlrpc

If you need these libraries, please install them separately.

Please pay attention to the Other Notable Changes since 2.7 section in the Ruby 3.0 Release announcement when migrating your application to Ruby 3.0.

PHP now defaults to version 8.1.2

PHP 8.1 contains many new features: Enumerations allow defining custom types limited to a specific set of possible values, like using consts but with better type checking. Readonly properties prevent their value to be changed after initialization. With first-class callable syntax, static analysis is easier to perform on PHP code, and allows creating anonymous functions such as Closures. Intersection types allow specifying function parameters that must satisfy multiple type constraints; much like a union type expresses an A|B type relationship, intersection types allow expressing A&B types. Many other new features, such as fibers, final class constraints, never return values, explicit octal numeral notation, use of new inside initializers, and more will allow writing tighter, more expressive PHP code.

PHP 8.1 also received significant attention to performance, with a 23% speedup for the Symfony Demo test, and a 3.5% speedup for WordPress, as compared with PHP 8.0. A few of the performance-related features included in PHP 8.1 include an inheritance cache, fast class name resolution, and various optimizations to timelib, ext/date, SPL file-system interators, serialize/unserialize, and several heavily used internal functions.

Users of PHP 7.4 should note that version 8 removes a number of deprecated functionalities and when upgrading should be prepared to make the appropriate changes to their applications.

OpenLDAP 2.5.x series

If you are updating from Ubuntu Focal 20.04, you will encounter a new major OpenLDAP release on Ubuntu Jammy 22.04: version 2.5.11. This release brings several changes, new features and deprecations/removals. A non-exhaustive list of things to be aware of during the upgrade process is:

  • The shell (slapd-shell), the BDB and the HDB backends have all been removed.
  • The ppolicy module now provides its own built-in schema. The external ppolicy schema has been removed.
  • The nssov module has been removed.

In certain situations, it is possible that the post-installation scripts will not be able to successfully migrate your current installation to new formats (e.g., when you are using an old backend like BDB/HDB). If this happens, you will be notified about the failure and the slapd server will not be (re)started; you will then have to take manual action in order to migrate your data and start the service. Please look at the README.Debian file (under /usr/share/doc/slapd/) for more information.

BIND 9.18

BIND 9 has been updated to version 9.18.1. This new version includes

  • Support for DNS over TLS (DoT) and DNS over HTTPS (DoH).
  • named now supports zone transfers over TLS (XFR-over-TLS, XoT) for both incoming and outgoing zone transfers.
  • dig is now able to send DoT queries.

Users upgrading from previous versions should be aware of the following changes:

  • The binary files which are neither daemons nor administrative programs have been moved from /usr/sbin to /usr/bin.
  • Support for the map zone file format has been removed. Users relying on such zone file format should convert their zones to use the raw format and change configurations accordingly before upgrading.
  • Several obsolete, non-working configuration options have been removed and are now treated as configuration failures when present. A complete list of such configurations is available in the upstream release notes.

Apache has been updated to 2.4.52 from 2.4.48.

  • OpenSSL support is improved to support OpenSSL v3. mod_ssl also received various refinements for outgoing connection behaviors, backwards compatibility, and wireshark logging.
  • mod_md adds support for ACME External Account Binding (EAB) along with a host of other enhancements and fixes.
  • Numerous fixes, including better hostname and UDS URI checking and handling, status code responses, and so on.

PostgreSQL 14

PostgreSQL has been updated to version 14.2.

This update contains many new features and enhancements, including:

  • Stored procedures can now return data via OUT parameters.
  • The SQL-standard SEARCH and CYCLE options for common table expressions have been implemented.
  • Subscripting can now be applied to any data type for which it is a useful notation, not only arrays. In this release, the jsonb and hstore types have gained subscripting operators.
  • Range types have been extended by adding multiranges, allowing representation of noncontiguous data ranges.
  • Numerous performance improvements have been made for parallel queries, heavily-concurrent workloads, partitioned tables, logical replication, and vacuuming.
  • B-tree index updates are managed more efficiently, reducing index bloat.
  • VACUUM automatically becomes more aggressive, and skips inessential cleanup, if the database starts to approach a transaction ID wraparound condition.
  • Extended statistics can now be collected on expressions, allowing better planning results for complex queries.
  • libpq now has the ability to pipeline multiple queries, which can boost throughput over high-latency connections.

These and a long list of further enhancements as well as bug fixes can be found in the release notes of v14, v14.1, and v14.2.

Django 3.2.12

Django was updated from the previous LTS version 2.2 to the new LTS version 3.2.

The update contains many new features and bug fixes such as:

  • Automatic AppConfig discovery
  • Type customization of auto-created primary keys
  • Functional indexes
  • Asynchronous views and middleware support
  • JSONField for all supported database backends
  • And various further major and minor features, see the see the release notes for more

Users upgrading from previous versions should be aware of the following backwards incompatibilities:

Changes have been made to:

  • The Database backend API
  • django.contrib.admin
  • AbstractUser.first_name max_length - changed to 150
  • Model.save() when providing a default for the primary key
  • Along with various minor module changes

For additional information, especially since an upgrade would be from the former v2.2 LTS to v3.2 LTS do not only check the Django project release notes of 3.2 but also 3.1 and 3.0 as well as the various minor releases included up to 3.2.12 that is in Ubuntu 22.04.

MySQL 8.0

MySQL has been updated to version 8.0.28 in Jammy Jellyfish alongside Focal Fossa and Impish Indri.
It contains new features such as:

  • The audit_log_disable system
  • Data type updates
  • The CPU_TIME statement metric

See the 8.0.28 upstream release notes for more information.

NFS server

The NFS server and client packages have finally been updated to the latest upstream version.

All NFS services now read their configuration from /etc/nfs.conf and /etc/nfs.conf.d/*.conf, which is an INI-style configuration file, where each section is about one daemon or aspect of the NFS service. The old /etc/defaults/nfs-* configuration files are still left around, but are unused.

During upgrade, a conversion script is run if the package detects that the /etc/default/nfs-* files have been changed. This script is /usr/share/nfs-common/nfsconvert.py and it will read the options from /etc/defaults/nfs-* and generate /etc/nfs.conf.d/local.conf, which overrides the defaults in /etc/nfs.conf.

If the conversion script fails for some reason, the package installation or upgrade will fail, and the issue will have to be resolved. Please file a bug against nfs-utils in Launchpad if you encounter such a scenario.

A new tool called nfsconf(8) can be used to query the configuration settings of /etc/nfs.conf and /etc/nfs.conf.d/*.conf.

Samba server

Samba was updated to 4.15.5, which brings some noteworthy changes. Please see the upstream release notes for details, but here are some highlights:

  • The development SMB versions SMB2_22, SMB2_24 and SMB3_10 are no longer recognized. SMB2_22 and SMB2_24 should be replaced by SMB3_00, and SMB3_10 should be replaced by SMB3_11
  • server multi channel support is no longer experimental
  • command-line options in all CLI tooling are now using a common parser, and unknown options which might have been ignored in the past, will now be rejected. See the upstream release notes for details.
  • many /etc/samba/smb.conf parameters were changed, some removed. Please see the upstream release notes for details.
  • the CTDB package was adjusted to work with the new NFS server version shipped in this Ubuntu 22.04
  • findsmb(1) was removed
  • glusterfs support enabled in the Ubuntu packaging. This was possible because glusterfs was promoted to Main during the 22.04 LTS development cycle, which allowed us to enable the glusterfs vfs module. This module is now present in the samba-vfs-modules package.

Quagga replaced with frr

quagga was removed from Ubuntu 22.04 and replaced by FRRouting (frr, https://frrouting.org/).

Chrony time synchronization

Chrony has been updated to version 4.2 which includes

  • Add support for AES-CMAC and hash functions in GnuTLS
  • Improve server interleaved mode to be more reliable and support multiple clients behind NAT
  • Add statistics about interleaved mode to serverstats report
  • Adds and enabled further hardening options to the chrony service
  • Allow reading timemaster created configurations
  • For more details read the upstream release notes

Virtualization

As usual the release notes can only list a few bigger and more noteworthy changes and packages while
underneath many more components have been updated as well. For an even more complete picture please
have a look at the changelogs of packages and upstream releases of the respective components.

qemu

Qemu was updated to version v6.2.0 which brings many major and minor improvements. Among others this version includes:

  • fuse3 based non-root way to export image files
  • Jack support for low latency audio
  • Massively improved RISC-V support
  • Many fixes for the emulation of AMD virtualization extensions
  • Improved Power10 support
  • More devices for the microvm build (virtio-gpu, vhost-user-gpu, virtio-input-host and vhost_user_input)
  • Allow to remove the additional drivers of qemu-block-extra
  • Most common qemu features are now separate modules
  • s390x got improved storage key emulation (e.g. fixed address handling, lazy storage key enablement for TCG, …)
  • See the upstream changelog for version 6.1 and 6.2 for an overview of the many further improvements. These also contain a list of suggested alternatives for removed, deprecated and incompatible features.
libvirt

Following the regular releases of libvirt version v8.0.0 is now provided in Ubunt 22.04 which includes:

  • Support hotplug and hotunplug for virtiofs
  • Introduce virtio-mem <memory/> model
  • qemu: Support librbd encryption
  • qemu: Add new API to inject a launch secret in a domain
  • enhanced swtpm integration (see swtpm below for more)
  • See the upstream Changelogs for the many further improvements and fixes since version 7.6 that was in Ubuntu 21.10.
virt-manager

The new version 4.0.0 of virt-manager is the most recent update after almost 1.5 years without a new upstream version) providing a list of new features:

  • shared memory configuration in the UI
  • virtiofs filesystem driver UI option
  • enable a TPM by default when UEFI is used
  • Use cpu host-passthrough by default on qemu x86
  • use virtio-gpu video for most modern distros
  • More details can be found on the news page and individual commits on the projects website
dpdk

Following the yearly flow of upstream DPDK LTS releases Ubuntu 22.04 contains the most recent DPDK LTS 21.11.
That contains various new device drivers, fixes and optimizations. Even the rather huge release notes is just about 21.11 itself. Compared to the former DPDK LTS 20.11 that shipped with Ubuntu 21.10 you’d also want to read the DPDK release notes of 21.02, 21.05 and 21.08.

openvswitch

The new version 2.17.0 of openvswitch is in Ubuntu 22.04 and provides a general update including the following changes:

  • Various features that ease the use of a userspace datapath.
  • Performance improvements for the OVSDB and clustered OVSDB which is heavily used in OVN deployments.
  • Brings compatibility with DPDK 21.11 (see above).
  • The OVS News page holds more details about the new version.
swtpm

The swtpm as well as libtpms package is now available and supported in Ubuntu 22.04.

swtpm provides TPM emulators with different front-end interfaces to libtpms. TPM emulators provide socket interfaces (TCP/IP and unix) and the Linux CUSE interface for the creation of multiple native /dev/vtpm* devices…

A common use case for swtpm is to use it as virtual TPM for virtual machine and container use cases.
This is particular important for guest operating systems that consider TPM support mandatory.

See the upstream wiki for more details.

Squid

  • The squid package links against the GnuTLS library. If you would like to use OpenSSL, you can install the new squid-openssl package.

cloud-init

Version 22.1 of cloud-init has been released to 22.04, 21.10, 20.04 and 18.04.

Notable features introduced since the last LTS release:

  • Clouds and datasources
    • Add LXD datasource in Jammy which reads dynamic instance data from LXD socket and applies config changes across reboot
    • Added a native VMWare datasource
    • OpenStack and ConfigDrive now support vendor_data2 config overrides
    • Azure boot speed improvements, network config validation and SSH key handling
    • GCE detected earlier in boot
  • Config Modules
  • Usability
    • Schema validation of #cloud-config userdata to annotate specific errors in user-provided configuration

ubuntu-advantage-tools

Ubuntu-advantage-tools version 27.8 is released with Jammy.

Notable improvements introduced in this cycle:

  • Service offerings:
    • Ubuntu Pro and Ubuntu Pro FIPS images on Azure, GCP and AWS
    • GCP support to add Ubuntu Advantage licenses to existing VMs
    • AWS support for IPv6 IMDS
    • CIS benchmarks packaged as part of Ubuntu Security Guide (USG)
    • Beta real-time kernel based on 5.15 and PREEMPT_RT patches
  • Usability
    • ua security-status provides a detailed view of available and applicable package updates provided by Ubuntu proper and Extended Security Maintenance channels
    • Enable Desktop installer to validate and attach Ubuntu Advantage tokens
    • Support machine-readable output JSON/YAML format for most commands
    • Configurable auto attach behavior via ua attach --attach-config

Ubuntu Server Main Promotions

For Ubuntu Server 22.04 LTS, the following source packages were promoted to main:

  • wireguard: fast, modern, secure kernel VPN tunnel
  • glusterfs: cluster file-system capable of scaling to several peta-bytes
  • frr: suite of internet routing protocols (BGP, OSPF, IS-IS, …)

LXD was updated to the new 5.0 LTS version

5.0 LTS significantly steps up LXD’s abilities, especially when operating in clustered environments. In comparison to LXD 4.0, virtual machines are now effectively at feature parity with containers, and a lot of networking options, clustering, and project features were added.

Some of the key changes include:

  • LXD virtual machines now come with vTPM support as well as arbitrary PCI passthrough support. VMs can now be live-migrated and support some device hotplug and additional storage options.
  • Networking now includes OVN support combined with BGP, DNS, floating IP and hardware acceleration support.
  • Projects have grown a numwber of additional limits and restrictions, making it easy to safely grant access to various teams and limit their resource usage.
  • LXD-migrate has been reworked with support for both containers and VMs
  • Cluster users can now perform easy maintenance through cluster evacuation, group servers into target groups and get detailed instance metrics across entire clusters.

Additional details and a complete changelog can be found here.

Ceph

Ubuntu 22.04 includes the latest release candidate of the Ceph Quincy release.

Ceph packages will be updated as a stable release update once Quincy is released by the Ceph community.

OpenStack

Ubuntu 22.04 includes the latest OpenStack release, Yoga, including the following components:

  • OpenStack Identity - Keystone
  • OpenStack Imaging - Glance
  • OpenStack Block Storage - Cinder
  • OpenStack Compute - Nova
  • OpenStack Networking - Neutron
  • OpenStack Telemetry - Ceilometer, Aodh, Gnocchi
  • OpenStack Orchestration - Heat
  • OpenStack Dashboard - Horizon
  • OpenStack Object Storage - Swift
  • OpenStack DNS - Designate
  • OpenStack Bare-metal - Ironic
  • OpenStack Filesystem - Manila
  • OpenStack Key Manager - Barbican
  • OpenStack Load Balancer - Octavia
  • OpenStack Instance HA - Masakari

Please refer to the OpenStack Yoga release notes for full details of this release of OpenStack.

OpenStack Yoga is also provided via the Ubuntu Cloud Archive for OpenStack Yoga for Ubuntu 20.04 LTS users.

WARNING: Upgrading an OpenStack deployment is a non-trivial process and care should be taken to plan and test upgrade procedures which will be specific to each OpenStack deployment.

Make sure you read the OpenStack Charm Release Notes for more information about how to deploy and operate Ubuntu OpenStack using Juju.

needrestart and unattended operations

needrestart was first installed by default in Ubuntu 21.04 and continues to feature in Ubuntu 22.04. It helps ensure that services are correctly restarted when their dependencies receive security updates.

By default, needrestart will prompt after upgrading packages if restarts are determined to be required. To suppress this behaviour, you can set DEBIAN_FRONTEND=noninteractive as usual. needrestart will then fall back to “list only mode”. It will be necessary to restart services afterwards, for example by rebooting or invoking needrestart -ra.

Phased updates in APT

Since 21.04 APT respects phased updates, see the Phased updates in APT 21.04 thread for more details.

Platforms

Cloud Images :cloud:

AWS

  • AWS amd64 images use now a GPT partition table and setup a ESP partition to make it possible to use UEFI as boot mode.

Oracle

  • Jammy Minimal images are available for ARM64 servers on Oracle Cloud Infrastructure. Note that OCI releases images on a fixed cadence, and Jammy release to OCI will be slightly delayed.

Raspberry Pi :strawberry:

  • The first long-term service (LTS) release of the Ubuntu Desktop for Raspberry Pi
  • Support for several Pi-specific boards and tools have been added to the archive:
    • All variants of the popular Pimoroni Unicorn HAT are now supported with packaging
    • The official DSI touchscreen is now supported
    • The rpiboot package contains the rpiboot utility for working with Raspberry Pi Compute Modules (and other Pi boot facilities)
    • The pyboard-rshell package contains the rshell utility for working with micro-controller boards supporting MicroPython, including the Raspberry Pi Pico
    • The rpi-imager package contains the Raspberry Pi imager utility. The equivalent snap package has also been updated to operate on all architectures (and bumped to the current version)

arm64

Ubuntu 22.04 LTS is available on ARM in many public clouds - Azure, AWS, Oracle Cloud.

Ubuntu 22.04 LTS adds linux-restricted-modules of NVIDIA drivers on ARM64. Users on ARM64 can now use ubuntu-drivers tool to install and configure NVIDIA drivers from the Ubuntu Archive.

linux-generic-64k kernel flavour with 64K pages support is now avalable as a GA LTS kernel. It was first introduced in 20.10 release, and has been available as an HWE kernel since 20.04.2 LTS.

ppc64el

Starting with 22.04 LTS, Ubuntu Server for IBM POWER (little endian) is now compiled for POWER9 processors using ‘–with-cpu=power9’ (bug 1930086).
Thus Ubuntu Server 22.04 LTS will not run, install or even boot on POWER8 systems anymore, due to the different instruction set requirements.
But Ubuntu Server 20.04 LTS can still be used for POWER8 systems for several years - at least until end of base support in April 2025.
Users running Ubuntu Server on POWER8 today will be prevented from being upgraded to 22.04 LTS using ‘do-release-upgrade’, as this will obviously break such systems (bug 1960255).
In addition, Ubuntu Server 22.04 LTS is the first Ubuntu release that comes with official support for POWER10.

s390x

Starting with Ubuntu Server 20.04 LTS (for IBM Z and LinuxONE), the minimal architectural level set was raised to z13 (and LinuxONE Rockhopper / Emperor) - this still applies to Ubuntu Server 22.04 LTS and support also includes all newer hardware that is in service as of today (22.04 release date). Support for additional future hardware might be added later.
Ubuntu Server 22.04 LTS can be installed in an LPAR (classic or DPM mode), as IBM z/VM guest, as KVM virtual machine and in different container environments, such as LXD, docker or kubernetes.

IBM Z and LinuxONE / s390x-specific enhancements since 21.10 (partially not limited to s390x):

  • Like mentioned above, 22.04 LTS is the first release that picked up OpenSSL 3, to be precise v3.0.2 (bug 1905022), this transition triggered for compatibility reasons (bug 1959736) further updates, that largely ended up in the renewal of the entire s390x crypto stack, including:

    • libica update to finally v4.0.1 (bug 1959421), including extend statistics to reflect security measures (bug 1959553)
    • openssl-ibmca update (bug 1958419) to finally 2.2.2 to ensure compatibility with libica4 (bug 1960004).
    • opencryptoki update to v3.17.0+dfsg+20220202.b40982e (since the planned release date for 3.18 is post 22.04 GA) (Bug:1959419), including several (security) fixes and new features like in the key management tool (LP 1959577).
    • with that cryptsetup was updated as well (bug 1959427)
      Further updates in the area of cryptography that are relevant for s390x are:
    • the upgrade of libgcrypt(20) to latest v1.9.4
    • in kernel crypto optimization of chacha20 now using a SIMD implementation (bug 1853152)
    • zcrypt device driver update for adding exploitation of new IBM Z crypto hardware (bug 1959547)
    • and finally the newly packaged IBM Z protected-key crypto library that provides interfaces for cryptographic primitives (bug 1932522)

  • Furthermore new network features were added, like Enhanced HSCI (HiperSockets Converged Interface) Multi-MAC support for enhancing KVM setups and z/OS interoperability (kernel LP: 1932137 and s390-tools LP: 1929721). And significant updates in the area of Shared Memory Communication (SMC), like EID (Enterprise ID) support (kernel LP: 1929060, s390-tools LP: 1929056), SMC statistics support (bug 1959470) and SMC-R v2 support (bug 1929035) - and with all that the smc-tools have been upgraded to latest v1.7.0 (bug 1959428).

  • Several KVM and Secure Execution related new features landed too, like:

    • enablement of storage key checking for intercepted instructions handled by KVM (bug 1933176) and by user-space (bug 1933179)
    • the ‘access register mode’ got enabled (bug 1933178)
    • allowing long kernel command lines for QEMU (bug 1959984) and for Secure Execution guests (bug 1959985).
    • enable guest interrupt support via GISA for Secure Execution guests (bug 1959977)
    • support for Secure Execution guest dump encryption with customer keys (bug 1959965)
    • and enablement of vfio-ccw and vfio-ap in virt-* tools, especially virt-manager (bug 1959976)
    • In addition the KVM_CAP_S390_MEM_OP_EXTENSION capability was raised to 211 (bug 1963901) and KVM got improved SIGP architectural compliance (bug 1959735).

  • The modernized tool-chain was needed in order to add support for new IBM Z hardware (bug 1959379), and the 22.04 default gcc became v11.2 (12, 10 and 9 are in universe).
    Binutils were aligned to gdb (bug 1959407) and updated to v2.38 (bug 1959463), again for adding support for new hardware (bug 1959408).
    And LLVM was updated as well for new hardware support (bug 1959378) and to include further optimizations (bug 1959406), but not only v13 is available, even v14 is the default.

  • On top new hardware support was added to glibc (bug 1959385 and LP: 1959383) while glibc was upgraded to latest v2.35 (bug 1959429), which contains HWCAP_S390_PCI_MIO and HWCAP_S390_SIE (bug 1959462).
    The Perl Compatible Regular Expression Library PCRE2 was updated to v10.39 and includes improvements for s390x and full JIT performance (bug 1959917).
    The ‘Eigen3’ algebra library contains further optimizations for s390x too (bug 1884725) and the query capacity library and utility for extracting system information ‘qclib’ was raised to v2.3.0 (bug 1959464).
    Finally a brand new low-level IBM Z Deep Neural Network Library (zDNN) library, that provides an interface for applications making use of Neural Network Processing Assist Facility (NNPA), got packaged and is now available (bug 1959396).

  • A core component of Ubuntu Server for IBM Z is the s390-tools package, which was upgraded to v2.2.0 (bug 1959420) in alignment to jammy’s kernel 5.15, and includes among other features now an environment block implementation (bug 1959409), that is a persistent configuration information which is evaluated during boot without the need to rewrite IPL records, an option to auto-activate PCI devices for DPM system (bug 1959537) and the new multipath re-IPL feature (bug 1959546).

  • The kernel received several s390x improvements as well, like kernel based support for new IBM Z hardware (bug 1960187), new CPU-MF Counters for new hardware (bug 1960117), support for long kernel command lines on s390x (bug 1960580), transparent PCI device recovery support (bug 1959532), enhanced user information on HBA firmware (bug 1959545) and as clean-up the deactivation of the CONFIG_QETH_OSX kernel config option (bug 1959890).

  • The service-call logical processor (SCLP) console interface driver (for ‘Operating Systems Messages’ line-mode and ‘Integrated ASCII console’ VT220) got two new debug features for logging relevant data for all sclp requests or just for failing sclp requests, which requires kernel (bug 1960435) as well as s390-tools modifications (bug 1960437).

RISC-V

Starting with 22.04 LTS, besides the standard device-specific preinstalled image, we now also provide a live installer image for the RISC-V architecture. This can be helpful when wanting to install Ubuntu on an NVMe drive on an Unmatched board, for instance.

UEFI and BIOS boot

Other operating systems are not displayed in the boot menu anymore, unless Ubuntu has been installed alongside another operating system. Once all other operating systems are removed from the machine, detection of other operating systems is disabled, and to re-enable if after installing another OS, you will have to delete /boot/grub/grub.cfg and immediately run update-grub again.

Known Issues

As is to be expected, with any release, there are some significant known bugs that users may run into with this release of Ubuntu. The ones we know about at this point (and some of the workarounds), are documented here so you don’t need to spend time reporting these bugs again:

Linux kernel

  • The kernel runtime parameter kernel.task_delayacct has been switched off by default in 5.14 and later. That saves a small amount of cpu cycles and memory for a rarely used feature. But if you use any monitoring that needs those you’d now need to enable this either at boot time via kernel parameter delayacct or at runtime via sudo sysctl -w kernel.task_delayacct=1 (There might be a slight delay after activating until statistics are available).

System

  • systemd / journald now defaults to zstd compression and uses the “keyed hash” feature (upstream default as of v246). Therefore, journal files written on Ubuntu 22.04 (using systemd v249) cannot be opened using an older version of journal (i.e. from a 18.04/20.04/Core20 installation). This will fail with an error (LP: #1953744, forum.snapcraft.io):
    Journal file xxx.journal has unknown incompatible flags 0xc
Failed to open journal file xxx.journal: Protocol not supported
  • Users of grub-customizer could hit a bug in the late stage of the upgrade process leading to the final stage of the upgrade to fail (autoremoval of packages). A workaround is available in the bug’s comments.

Ubuntu Desktop

  • The Ubuntu Desktop images can be slow to boot (taking up to 10 minutes) when booted from a USB drive on a BIOS system. The issue is being investigated, however once the system is installed this is not an issue.
  • The Ubuntu Desktop images can be very slow to boot (taking up to 30 minutes) when booted from optical media (DVD) on a a BIOS or UEFI system. This is due to an integrity checker being run against the installation media. A workaround (setting “fsck.mode=skip”) is documented in the relevant bug.
  • The Firefox snap does not support the NativeMessaging protocol yet but this feature is planned to be added soon. This means for instance that installing GNOME Shell extensions from Firefox won’t work. As a workaround, you can try the gnome-shell-extension-manager app.
  • Brazilians (and others that need PKCS#11 smartcard support in Firefox) should not upgrade to Jammy until pkcs#11 support is added to the firefox snap
  • The GNOME Tweaks app no longer manages GNOME Shell extensions. You can install gnome-shell-extension-manager instead.
  • To use AppImages, you’ll first need to run sudo apt install libfuse2
  • When doing an offline install of Ubuntu Desktop with NVidia hardware enabled, nvidia-settings will not be installed. You will need to run sudo apt install nvidia-settings after enabling the network.
  • When performing an installation with a Broadcom wireless network adapter, which requires third party drivers, on a system with UEFI and Secure Boot enabled the driver will not be loaded due to a failure to sign the driver. A workaround exists in the bug tracking this particular issue.
  • A regression in the 22.04.5 images images prevents the Nvidia drivers to be correctly installed when whe installation is done in offline mode (LP #2080522). The drivers are installed correctly when the installer has access to the Internet.

Ubuntu Server

  • Starting with Subiquity 23.04.1 or Ubuntu Server 22.04.3: In some situations, it is acceptable to proceed with an offline install when the mirror is inaccessible. In this scenario, it is advised to use:
apt:
  fallback: offline-install
  • 22.04.3 LTS live-server, which contains cloud-init version 22.2.1-0ubuntu0~22.04.1, is affected by this bug. The effect of this is that, when using cloud-init to provide autoinstall data, the h aka local-hostname or i aka instance-id nocloud datastore arguments should not be used. For an example of a working configuration, please see the autoinstall-quickstart guide.

Active Directory Integration

When logging in on a system joined with an Active Directory domain, sssd (the package responsible for this integration) will try to apply Group Policies by default. There are cases where if a specific policy is missing, the login will be denied.
This is being tracked in bug #1934997. The fix should now be available, otherwise please see comment #5 in that bug report for existing workarounds.

Platforms

Cloud Images

Vagrant

  • Ubuntu 22.04 LTS images will fail to launch on Vagrant < 2.216 due to SSH connection issues. This includes vagrant running on older Ubuntu hosts, as 22.04 LTS is the first Ubuntu release to include vagrant >= 2.2.16. One workaround is to use an upstream version of vagrant on your system. Upstream bug, already fixed.. The Cloud Team is also working on a more permanent solution: Public cloud-images bug

Raspberry Pi

  • The Raspberry Pi desktop images have switched to using the Full KMS graphics drivers. The official Raspberry Pi DSI display does not work with full KMS enabled. To enable the use of the Raspberry Pi DSI display, edit the config.txt file on your Raspberry Pi’s hard drive and change the line dtoverlay=vc4-kms-v3d to dtoverlay=vc4-fkms-v3d
  • On the desktop image, the Firefox snap can take some time (several minutes has been noted) to complete initialization after first login (bug 1969529)
  • The legacy camera stack (MMAL based) is no longer supported on arm64; libcamera is the supported method of using the Pi Camera Module on the arm64 architecture (the boot-time configuration will automatically load overlays for detected modules)
  • After initial user setup on the desktop image, several packages can still be autoremoved (bug 1925265); run sudo apt autoremove --purge to work around this
  • On the desktop image, the wrong audio output device is selected on each boot. A workaround is available in the bug report (bug 1877194)
  • On upgrade from impish server (and possibly earlier releases) to jammy server, if a match/driver section is present in the netplan configuration, which matches a space-separated list of network drivers (as the default in impish does), netplan can fail to apply the ethernet configuration (potentially leading to no connectivity if no other interfaces are configured) (bug 1970761)
  • Various kernel modules have been moved from the linux-modules-raspi package in order to reduce the initramfs size. If you find an application failing due to missing kernel modules, please try the following:
    • sudo apt install linux-modules-extra-raspi
    • This is currently relevant for users of VLANs where the lack of the 8021q module can prevent the ethernet interface from configuring (bug 1973485)
  • With the removal of the crda package, the method of setting the wifi regulatory domain (editing /etc/default/crda) no longer operates. The only option to persist this information currently is to add cfg80211.ieee80211_regdom=XX (where XX is an ISO3166-1 alpha-2 country code, e.g. GB for the United Kingdom, US for the United States, etc.) to the cmdline.txt file on the boot partition (bug 1951586)
  • The Raspberry Pi Compute Module 3 is no longer supported as of the prior release, due to a lack of storage capacity (the CM3 shipped with 4GB of on-board eMMC storage, and Ubuntu Server for Raspberry Pi images now exceed this size). The later Compute Module 3+ models (for which the smallest storage capacity was 8GB of eMMC) are still supported.

s390x

No known issues yet.

Official flavours

The release notes for the official flavours can be found at the following links:

More information

Reporting bugs

Your comments, bug reports, patches and suggestions will help fix bugs and improve the quality of future releases. Please report bugs using the tools provided. If you want to help out with bugs, the Bug Squad is always looking for help.

Participate in Ubuntu

If you would like to help shape Ubuntu, take a look at the list of ways you can participate at:

More about Ubuntu

You can find out more about Ubuntu on the Ubuntu website.

To sign up for future Ubuntu development announcements, please subscribe to Ubuntu’s development announcement list at:

17 Likes