Ubuntu Server Changelog

What's new in Ubuntu Server 22.04 LTS

May 2, 2022
  • Ubuntu Server:
  • Ubuntu HA/Clustering:
  • Corosync:
  • It was updated to version 3.16 which includes some new features:
  • Support for changing crypto configuration during runtime. This includes turning cryptography on or off, changing crypto_cipher and crypto_hash and also changing of crypto key.
  • Default token timeout was changed from 1 seconds to 3 seconds.
  • Run corosync -v to get the list of supported crypto and compression models which can be used in corosync.conf
  • Cgroup v2 support.
  • Pacemaker:
  • It was updated to version 2.1.2 which includes some new features:
  • Add a new feature priority-fencing-delay. Optionally derive the priority of a node from the resource-priorities of the resources it is running.
  • Add on-fail=demote and no-quorum-policy=demote recovery policies for promoted resources.
  • support for OCF Resource Agent API 1.1 standard.
  • Many improvements in crm_mon and crm_resource.
  • For the complete list of changes please refer to the upstream release notes 25:
  • A notable difference from the version in Ubuntu Focal 20.04 is that the default configuration file does not define the node name as node1 anymore, now the output of uname -n is used as the default node name.
  • Resource agents:
  • It was updated to version 4.7.0. Check the list of changes since Ubuntu Focal 20.04 here 18.
  • The agents are now separated in two packages: resource-agents-base and resource-agents-extra. The resource-agents-base package contains the agents which are curated by the Ubuntu Server team, which means that automated tests are running in a continuous integration system to guarantee the quality of those agents. The resource-agents package is now a metapackage which depends on both resource-agents-base and resource-agents-extra. Please note that the resource-agents package will be removed in future releases; we recommend that you do not rely on its existence.
  • Fence agents
  • It was updated to version 4.7.1:
  • The agents are now separated in two packages: fence-agents-base and fence-agents-extra. The fence-agents-base package contains the agents which are curated by the Ubuntu Server team, which means that automated tests are running in a continuous integration system to guarantee the quality of those agents. The fence-agents package is now a metapackage which depends on both fence-agents-base and fence-agents-extra. Please note that fence-agents will be removed in releases; we recommend that you do not rely on its existence.
  • Containers runtime:
  • It was updated to version 1.5.9. Some interesting changes are:
  • Update pull to handle of non-https urls in descriptors
  • Install apparmor parser for arm64 and update seccomp to 2.5.1
  • Add support for clone3 syscall to fix issue with certain images when seccomp is enabled
  • Add image config labels in CRI container creation
  • For the complete list of changes please refer to the upstream release page 10.
  • runc
  • It was updated to version 1.1.0. There are many improvements and bug fixes which can be found in the upstream release page 9. Some deprecations and removals which might impact the upgrade are presented below:
  • Deprecation:
  • runc run/start now warns if a new container cgroup is non-empty or frozen; this warning will become an error in runc 1.2
  • Removals:
  • cgroup.GetHugePageSizes has been removed entirely, and been replaced with cgroup.HugePageSizes which is more efficient
  • intelrdt.GetIntelRdtPath has been removed. Users who were using this function to get the intelrdt root should use the new intelrdt.Root instead.
  • Ruby 3.0:
  • The default Ruby interpreter was updated to version 3.0, whose goal is performance, concurrency, and Typing. To have a broad overview about the cool features and improvements check out the Ruby 3.0 Release Announcement 27.
  • Users coming from previous Ubuntu releases ( Ubuntu Focal 20.04 onward) will be moving from Ruby 2.7 to 3.0. In this case the Ruby 2.7 Release Announcement 3 might be useful as well. An important thing to keep in mind is that the following libraries are not bundled anymore in Ruby:
  • sdbm
  • webrick
  • net-telnet
  • xmlrpc
  • If you need these libraries, please install them separately.
  • Please pay attention to the Other Notable Changes since 2.7 section in the Ruby 3.0 Release announcement when migrating your application to Ruby 3.0.
  • PHP now defaults to version 8.1.2:
  • PHP 8.1 contains many new features: Enumerations allow defining custom types limited to a specific set of possible values, like using consts but with better type checking. Readonly properties prevent their value to be changed after initialization. With first-class callable syntax, static analysis is easier to perform on PHP code, and allows creating anonymous functions such as Closures. Intersection types allow specifying function parameters that must satisfy multiple type constraints; much like a union type expresses an A|B type relationship, intersection types allow expressing A&B types. Many other new features, such as fibers, final class constraints, never return values, explicit octal numeral notation, use of new inside initializers, and more will allow writing tighter, more expressive PHP code.
  • PHP 8.1 also received significant attention to performance, with a 23% speedup for the Symfony Demo test, and a 3.5% speedup for WordPress, as compared with PHP 8.0. A few of the performance-related features included in PHP 8.1 include an inheritance cache, fast class name resolution, and various optimizations to timelib, ext/date, SPL file-system interators, serialize/unserialize, and several heavily used internal functions.
  • Users of PHP 7.4 should note that version 8 removes a number of deprecated functionalities 47 and when upgrading should be prepared to make the appropriate changes to their applications.
  • OpenLDAP 2.5.x series:
  • If you are updating from Ubuntu Focal 20.04, you will encounter a new major OpenLDAP release on Ubuntu Jammy 22.04: version 2.5.11. This release brings several changes, new features and deprecations/removals. A non-exhaustive list of things to be aware of during the upgrade process is:
  • The shell (slapd-shell), the BDB and the HDB backends have all been removed.
  • The ppolicy module now provides its own built-in schema. The external ppolicy schema has been removed.
  • The nssov module has been removed.
  • In certain situations, it is possible that the post-installation scripts will not be able to successfully migrate your current installation to new formats (e.g., when you are using an old backend like BDB/HDB). If this happens, you will be notified about the failure and the slapd server will not be (re)started; you will then have to take manual action in order to migrate your data and start the service. Please look at the README.Debian 3 file (under /usr/share/doc/slapd/) for more information.
  • BIND 9.18
  • BIND 9 has been updated to version 9.18.1 11. This new version includes
  • Support for DNS over TLS (DoT) and DNS over HTTPS (DoH).
  • named now supports zone transfers over TLS (XFR-over-TLS, XoT) for both incoming and outgoing zone transfers.
  • dig is now able to send DoT queries.
  • Users upgrading from previous versions should be aware of the following changes:
  • The binary files which are neither daemons nor administrative programs have been moved from /usr/sbin to /usr/bin.
  • Support for the map zone file format has been removed. Users relying on such zone file format should convert their zones to use the raw format and change configurations accordingly before upgrading.
  • Several obsolete, non-working configuration options have been removed and are now treated as configuration failures when present. A complete list of such configurations is available in the upstream release notes 7.
  • Apache has been updated to 2.4.52 from 2.4.48.
  • OpenSSL support is improved to support OpenSSL v3. mod_ssl also received various refinements for outgoing connection behaviors, backwards compatibility, and wireshark logging.
  • mod_md adds support for ACME External Account Binding (EAB) along with a host of other enhancements and fixes.
  • Numerous fixes, including better hostname and UDS URI checking and handling, status code responses, and so on.
  • PostgreSQL 14:
  • PostgreSQL has been updated to version 14.2.
  • This update contains many new features and enhancements, including:
  • Stored procedures can now return data via OUT parameters.
  • The SQL-standard SEARCH and CYCLE options for common table expressions have been implemented.
  • Subscripting can now be applied to any data type for which it is a useful notation, not only arrays. In this release, the jsonb and hstore types have gained subscripting operators.
  • Range types have been extended by adding multiranges, allowing representation of noncontiguous data ranges.
  • Numerous performance improvements have been made for parallel queries, heavily-concurrent workloads, partitioned tables, logical replication, and vacuuming.
  • B-tree index updates are managed more efficiently, reducing index bloat.
  • VACUUM automatically becomes more aggressive, and skips inessential cleanup, if the database starts to approach a transaction ID wraparound condition.
  • Extended statistics can now be collected on expressions, allowing better planning results for complex queries.
  • libpq now has the ability to pipeline multiple queries, which can boost throughput over high-latency connections.
  • These and a long list of further enhancements as well as bug fixes can be found in the release notes of v14 7, v14.1 2, and v14.2 4.
  • Django 3.2.12:
  • Django was updated from the previous LTS version 2.2 to the new LTS version 3.2.
  • The update contains many new features and bug fixes such as:
  • Automatic AppConfig discovery
  • Type customization of auto-created primary keys
  • Functional indexes
  • Asynchronous views and middleware support
  • JSONField for all supported database backends
  • And various further major and minor features, see the see the release notes 12 for more
  • Users upgrading from previous versions should be aware of the following backwards incompatibilities:
  • Changes have been made to:
  • The Database backend API
  • django.contrib.admin
  • AbstractUser.first_name max_length - changed to 150
  • Model.save() when providing a default for the primary key
  • Along with various minor module changes
  • For additional information, especially since an upgrade would be from the former v2.2 LTS to v3.2 LTS do not only check the Django project release notes of 3.2 12 but also 3.1 1 and 3.0 1 as well as the various minor releases included up to 3.2.12 that is in Ubuntu 22.04.
  • MySQL 8.0:
  • MySQL has been updated to version 8.0.28 in Jammy Jellyfish alongside Focal Fossa and Impish Indri.
  • It contains new features such as:
  • The audit_log_disable system
  • Data type updates
  • The CPU_TIME statement metric
  • See the 8.0.28 upstream release notes 4 for more information.
  • NFS server
  • The NFS server and client packages have finally been updated to the latest upstream version.
  • All NFS services now read their configuration from /etc/nfs.conf and /etc/nfs.conf.d/*.conf, which is an INI-style configuration file, where each section is about one daemon or aspect of the NFS service. The old /etc/defaults/nfs-* configuration files are still left around, but are unused.
  • During upgrade, a conversion script is run if the package detects that the /etc/default/nfs-* files have been changed. This script is /usr/share/nfs-common/nfsconvert.py and it will read the options from /etc/defaults/nfs-* and generate /etc/nfs.conf.d/local.conf, which overrides the defaults in /etc/nfs.conf.
  • If the conversion script fails for some reason, the package installation or upgrade will fail, and the issue will have to be resolved. Please file a bug against nfs-utils in Launchpad 3 if you encounter such a scenario.
  • A new tool called nfsconf(8) can be used to query the configuration settings of /etc/nfs.conf and /etc/nfs.conf.d/*.conf.
  • Samba server:
  • Samba was updated to 4.15.5, which brings some noteworthy changes. Please see the upstream release notes for details 55, but here are some highlights:
  • The development SMB versions SMB2_22, SMB2_24 and SMB3_10 are no longer recognized. SMB2_22 and SMB2_24 should be replaced by SMB3_00, and SMB3_10 should be replaced by SMB3_11
  • server multi channel support is no longer experimental
  • command-line options in all CLI tooling are now using a common parser, and unknown options which might have been ignored in the past, will now be rejected. See the upstream release notes 55 for details.
  • many /etc/samba/smb.conf parameters were changed, some removed. Please see the upstream release notes 55 for details.
  • the CTDB package was adjusted to work with the new NFS server version shipped in this Ubuntu 22.04
  • findsmb(1) was removed
  • glusterfs support enabled 8 in the Ubuntu packaging. This was possible because glusterfs was promoted to Main 3 during the 22.04 LTS development cycle, which allowed us to enable the glusterfs vfs module. This module is now present in the samba-vfs-modules package.
  • Quagga replaced with frr:
  • quagga was removed from Ubuntu 22.04 and replaced by FRRouting (frr, https://frrouting.org/ 106).
  • Chrony time synchronization:
  • Chrony has been updated to version 4.2 which includes
  • Add support for AES-CMAC and hash functions in GnuTLS
  • Improve server interleaved mode to be more reliable and support multiple clients behind NAT
  • Add statistics about interleaved mode to serverstats report
  • Adds and enabled further hardening options to the chrony service
  • Allow reading timemaster created configurations
  • For more details read the upstream release notes 13
  • Virtualization:
  • As usual the release notes can only list a few bigger and more noteworthy changes and packages while
  • underneath many more components have been updated as well. For an even more complete picture please
  • have a look at the changelogs of packages and upstream releases of the respective components.
  • qemu:
  • Qemu was updated to version v6.2.0 which brings many major and minor improvements. Among others this version includes:
  • fuse3 based non-root way to export image files 5
  • Jack support for low latency audio
  • Massively improved RISC-V support
  • Many fixes for the emulation of AMD virtualization extensions
  • Improved Power10 support
  • More devices for the microvm build (virtio-gpu, vhost-user-gpu, virtio-input-host and vhost_user_input)
  • Allow to remove the additional drivers of qemu-block-extra
  • Most common qemu features are now separate modules
  • s390x got improved storage key emulation (e.g. fixed address handling, lazy storage key enablement for TCG, …)
  • See the upstream changelog for version 6.1 2 and 6.2 2 for an overview of the many further improvements. These also contain a list of suggested alternatives for removed, deprecated and incompatible features.
  • libvirt:
  • Following the regular releases of libvirt version v8.0.0 is now provided in Ubunt 22.04 which includes:
  • Support hotplug and hotunplug for virtiofs
  • Introduce virtio-mem model
  • qemu: Support librbd encryption
  • qemu: Add new API to inject a launch secret in a domain
  • enhanced swtpm integration (see swtpm below for more)
  • See the upstream Changelogs 7 for the many further improvements and fixes since version 7.6 that was in Ubuntu 21.10 2.
  • virt-manager:
  • The new version 4.0.0 of virt-manager is the most recent update after almost 1.5 years without a new upstream version) providing a list of new features:
  • shared memory configuration in the UI
  • virtiofs filesystem driver UI option
  • enable a TPM by default when UEFI is used
  • Use cpu host-passthrough by default on qemu x86
  • use virtio-gpu video for most modern distros
  • More details can be found on the news page 15 and individual commits on the projects website 9
  • dpdk:
  • Following the yearly flow of upstream DPDK LTS releases Ubuntu 22.04 contains the most recent DPDK LTS 21.11.
  • That contains various new device drivers, fixes and optimizations. Even the rather huge release notes 12 is just about 21.11 itself. Compared to the former DPDK LTS 20.11 that shipped with Ubuntu 21.10 you’d also want to read the DPDK release notes of 21.02 1, 21.05 1 and 21.08 2.
  • openvswitch:
  • The new version 2.17.0 of openvswitch is in Ubuntu 22.04 and provides a general update including the following changes:
  • Various features that ease the use of a userspace datapath.
  • Performance improvements for the OVSDB and clustered OVSDB which is heavily used in OVN deployments.
  • Brings compatibility with DPDK 21.11 (see above).
  • The OVS News 9 page holds more details about the new version.
  • swtpm:
  • The swtpm as well as libtpms package is now available and supported in Ubuntu 22.04.
  • swtpm provides TPM emulators with different front-end interfaces to libtpms. TPM emulators provide socket interfaces (TCP/IP and unix) and the Linux CUSE interface for the creation of multiple native /dev/vtpm* devices…
  • A common use case for swtpm is to use it as virtual TPM for virtual machine and container use cases.
  • This is particular important for guest operating systems that consider TPM support mandatory.
  • Squid:
  • The squid package links against the GnuTLS library. If you would like to use OpenSSL, you can install the new squid-openssl package.
  • cloud-init:
  • Version 22.1 of cloud-init has been released to 22.04, 21.10, 20.04 and 18.04.
  • Notable features introduced since the last LTS release:
  • Clouds and datasources
  • Add LXD datasource in Jammy which reads dynamic instance data from LXD socket and applies config changes across reboot
  • Added a native VMWare datasource
  • OpenStack and ConfigDrive now support vendor_data2 config overrides
  • Azure boot speed improvements, network config validation and SSH key handling
  • GCE detected earlier in boot
  • Config Modules
  • Add opt-in hotplug network support via user-data 2 for OpenStack and ConfigDrive
  • Add deferred write_files config to emit files later in boot
  • Usability
  • Schema validation of #cloud-config userdata to annotate specific errors in user-provided configuration
  • ubuntu-advantage-tools:
  • Ubuntu-advantage-tools version 27.8 is released with Jammy.
  • Notable improvements introduced in this cycle:
  • Service offerings:
  • Ubuntu Pro and Ubuntu Pro FIPS images on Azure, GCP and AWS
  • GCP support to add Ubuntu Advantage licenses to existing VMs
  • AWS support for IPv6 IMDS
  • CIS benchmarks packaged as part of Ubuntu Security Guide (USG)
  • Usability
  • ua security-status provides a detailed view of available and applicable package updates provided by Ubuntu proper and Extended Security Maintenance channels
  • Enable Desktop installer to validate and attach Ubuntu Advantage tokens
  • Support machine-readable output JSON/YAML format for most commands
  • Configurable auto attach behavior via ua attach --attach-config