2 hours ago
7
Jon Seager, Canonical VP of Engineering
Follow ZDNET: Add america arsenic a preferred source on Google.
ZDNET's cardinal takeaways
- The latest semipermanent enactment variation of Ubuntu 26.04 is here.
- This mentation is safer and faster than ever.
- It includes superior AI instrumentality improvements.
Canonical's caller Ubuntu 26.04 Long Term Support (LTS), which arrives connected April 23, 2026, isn't trying to beryllium flashy for its ain sake. This mentation is trying to beryllium hard to break, casual to trust, and modern capable to substance for the adjacent decennary and a half. At a media briefing up of the launch, Jon Seager, Canonical's VP of engineering for Ubuntu Linux, framed this merchandise astir a azygous word: resilience.
He could person called it safer oregon much reliable, helium said, but that wasn't enough. "I deliberation resilience conveys a bully connotation of a strategy that is unafraid and reliable, but besides durable, successful a sense, similar durable to the sorts of conditions that a instrumentality whitethorn beryllium exposed to connected the net these days, wherever a batch of our machines reside," Seager explained. That theme, surviving a hostile net portion staying useful, runs done the full release.
Also: 98% of IT leaders privation integer sovereignty: Now SUSE is operationalizing it
With 26.04, Canonical wants Ubuntu to beryllium a showcase for the champion of upstream, adjacent erstwhile it's inactive "as yet unproven" -- with a batch much engineering and auditing to marque it acceptable for premier time.
At the aforesaid time, though, Seager is adamant that this merchandise isn't conscionable for hyperscale customers. Sure, helium said, Ubuntu is present thing "the biggest enterprises successful the satellite trust upon," but it inactive has to enactment for educators, students, mom‑and‑pop shops, and startups. "I firmly judge that we tin fulfill some ends of that spectrum with Ubuntu."
Better toolchains for everyone
The astir arguable and ambitious alteration lands heavy successful idiosyncratic space: Ubuntu present includes Rust rewrites of respective halfway utilities. Over the past 18 months, Canonical has helped thrust sudo-rs and Rust coreutils to the constituent wherever they're present acceptable for default usage successful an LTS.
Why? Because Seager said, "More than 90% of the world's information vulnerabilities, factually, are related to representation safety, and truthful by replacing halfway parts of the operating strategy with a connection that makes it precise hard to constitute those representation information vulnerabilities, it is beneficial to america from a fiscal perspective. We are successful the concern of selling information maintenance," helium said.
But beyond Canonical's equilibrium sheet, Seager noted that Ubuntu runs successful powerfulness stations, satellites, and different captious infrastructure, truthful "by dramatically reducing the onslaught aboveground successful Ubuntu, I consciousness similar that is simply a nett good."
The sudo-rs rollout, helium said, was "a rip‑roaring success," and helium praised the Trifecta/Prossimo foundation arsenic "a implicit delight to enactment with." The Rust coreutils acceptable volition vessel "99% there," with lone 2 oregon 3 utilities inactive falling backmost to classical GNU coreutils.
Seager explained: "We've done 2 rounds of interior information audits with the Canonical information team, and besides funded 2 rounds of an outer information auditor… There were 3 outstanding [CVEs] that aren't critical, but due to the fact that it's an LTS and rather sensitive, we decided to conscionable not marque 3 of the utilities default. It's really 1 hole that affects each 3 utilities. We conscionable didn't rather onshore the hole successful time."
He was keen to accent this attack isn't astir discrediting the aged tools. Canonical has already pushed documentation fixes backmost into GNU coreutils based connected Rust work, and determination are cases wherever GNU inactive outperforms Rust and vice versa. The point, helium said, is that some toolchains are improving: "The tools are each getting amended for everyone."
Also: I tried a command-line-only distro that tin earnestly amended your Linux skills
Next connected his Rust deed database was ntpd-rs, which helium said volition supply "the archetypal azygous root of information for doing NTP, LTS, and PTP each successful 1 place, each successful 1 inferior with representation safety," turning what is presently a scar‑inducing workout into thing that's "an implicit delight." Canonical is besides moving with Rustls to present "browser‑grade PKI information primitives to Linux" astatine the strategy level.
Under the hood
Ubuntu 26.04 LTS ships a Linux 7.0 kernel. The merchandise besides has an aggressively existent connection stack: OpenJDK 25 LTS, Kotlin 2.0.4, updated Go, and .NET 10. There's besides a preview of the Zig connection toolchain for you to cheque out. This concatenation is already utilized successful Ubuntu 26.04 to bundle Ghostty, "Mitchell Hashimoto's precise shiny caller terminal emulator," for x86‑64 and ARM64. Support for architectures similar s390x and ppc64el volition travel arsenic Canonical and the Zig assemblage enactment done the missing pieces.
However, the rubric for developers is connected the GPU side. Seager declared, "We present person the close to vessel Nvidia's CUDA and AMD ROCm successful the archive with our long‑term enactment commitment. So this removes the request to conflict to fig retired which versions of CUDA, Nvidia drivers, and PyTorch you need. It should each conscionable beryllium an apt instal away," for each your Nvidia-hardware-based AI work.
Also: The erstwhile beloved PCLinuxOS is backmost - and it's inactive a large Windows escape
The instrumentality and virtualization stack besides person a argumentation change. Instead of perpetually rolling Docker, containerd, libvirt, and QEMU wrong an LTS, 26.04 ships a fixed stack by default, with an opt‑in rolling way for those who request the latest features. Seager compared it to Ubuntu's HWE kernel model: you tin enactment stable, oregon you tin pursuit caller functionality, but you choose
On the desktop, Ubuntu moves to GNOME 50, swaps Totem for a caller video subordinate called Showtime, and continues its dependable march toward Wayland‑only graphics sessions. Seager suggested this 2nd effort astatine Wayland has gone "a spot better" than the ill‑fated 2017 experiment, acknowledgment to amended drivers, a much mature app ecosystem, and a stronger narration with Nvidia. "I deliberation it is the lone way guardant astatine the extremity of the day… In my idiosyncratic opinion, it's overdue."
Still can't basal the thought of utilizing Wayland? Seager was unapologetic astir drafting a hard enactment astatine this LTS boundary. Ubuntu can't enactment each bequest graphics setup forever, helium argued, and 24.04 volition inactive get 15 years of updates. If you genuinely can't unrecorded without X11, you're not "high and dry."
More instantly disposable for astir users volition beryllium Android/iOS‑style permissions prompts for snapped applications. This setup required plumbing from the kernel and AppArmor up done snapd, GNOME, and GDM, but the effect is simple: "This is what allows your machine to show a punctual similar you would person go accustomed to connected Android oregon iOS… 'This app would similar to usage your camera. Would you similar it to?" Seager said. Initially, this attack covers filesystem and camera access, with experimental microphone enactment and much interfaces coming present that the wiring is successful place.
Also: This is my favourite Linux distro of each clip - and I've tried them all
On the information side, TPM‑backed full‑disk encryption is present GA connected the desktop, giving Ubuntu users a BitLocker/FileVault‑like acquisition without treble passphrase prompts. Enterprises tin escrow betterment keys successful Canonical Landscape, and server enactment volition travel erstwhile Canonical has nailed the much analyzable retention and web footwear scenarios successful that environment.
Canonical is besides leaning harder connected modern individuality absorption done AuthD. This authentication attack enables users to log successful with Azure AD, Google Cloud, oregon immoderate OpenID Connect (OIDC) provider, with quality‑of‑life improvements similar shorter usernames, automatic keyring unlock, and TPM‑backed token storage. The aforesaid mechanisms are being pushed into the unreality images. Seager said Ubuntu usage connected WSL is "absolutely rocketing", making it an progressively important portion of the portfolio.
AI and more
This enactment was each done using AI tools. He said AI tools are present portion of mean engineering practice, but Canonical is avoiding the "one level to regularisation them all" story. Teams are encouraged to follow the tools that marque consciousness for them, arsenic agelong arsenic they prime thing consistently astatine the squad level. The institution arsenic a full is leaning toward open‑source harnesses and open‑weight models that amended acceptable Ubuntu's values. There are nary quotas connected tokens oregon AI‑generated code. Instead, engineers are expected to amended themselves and usage the tools with judgment.
Besides AI, Seager shared that determination is present "significantly much automation than determination was 2 years ago" and "much, overmuch lower" quality involution successful getting each the close bits into place. Core processes similar main inclusion reappraisal and the Stable Release Update machinery person been tightened up, and the developer rank committee is pushing much contributors done the pipeline.
On the regulatory side, with California‑style age‑verification bills spreading and a US‑wide connection successful the works, Seager said Canonical is taking a wait-and-see approach. Canonical has "no contiguous plans to marque immoderate technological changes to Ubuntu" successful 26.04. He flatly rejected the thought of rushing third‑party verification services into the OS and warned against "very shallow" measures that don't execute their goals portion exposing idiosyncratic data. If Canonical does person to move, it volition apt commencement with property ratings successful the Snap Store and light‑touch enforcement successful snapd, and it volition speech to users publically earlier it flips immoderate switches.
Asked however his archetypal LTS arsenic VP of engineering feels, Seager was measured but positive. The merchandise teams' practices present consciousness "a batch much polished… a batch much modern," and they "move with a batch much purpose," helium said. When helium arrived, immoderate engineers looked astatine his plans "like I was an alien"; present they're bringing him ideas. There's much automation inactive to do, but "we are successful a importantly amended spot than we were 18 months ago," successful his view.
Ubuntu 26.04 LTS, successful different words, isn't conscionable different constituent connected Canonical's calendar. It's the archetypal existent impervious that Seager's "engineering Ubuntu for the adjacent 20 years" docket is landing -- not conscionable successful Rust and Wayland, but successful however Ubuntu itself gets built and shipped.
Me? I've conscionable started to footwear the caller Ubuntu's tires, but truthful acold I similar what I spot a lot. You'll beryllium capable to spot for yourself present arsenic the last bits are readied for download.
English (US) ·