\n<\/p>\n
<\/div> Follow ZDNET: <\/em>Add us as a favorite source<\/span><\/a><\/span> On Google.<\/em><\/p>\n You want a rock-solid Linux distro that you can rely on for 15 years for edge computing and Internet of Things (IoT) devices? check out ubuntu core 26<\/a>Canonical’s latest long-term support (LTS) delivery for mission-critical and low-latency AI workloads. <\/p>\n Also: Microsoft surprises with its first server Linux distribution: Azure Linux 4.0<\/strong><\/p>\n For those unfamiliar with Ubuntu Core, it’s a separate, embedded Linux OS that takes regular Ubuntu and turns it into a minimalist, containerized system, where the kernel, base OS, and apps are all delivered as a snap. Ubuntu Core targets IoT, industrial, robotics, digital signage, appliances, and other edge deployments where you want predictable behavior, remote management, and robust over-the-air (OTA) updates rather than general-purpose servers or desktops.<\/p>\n Canonical is positioning Ubuntu Core as a ruggedized Linux distribution for devices that must run unattended for years. Like previous core releases, each component is distributed as a sandboxed, cryptographically signed snap, maintaining a measured boot chain that only runs verified code. This is a Linux you can trust to run safely until 2041.<\/p>\n This is no small matter, as emerging security regulations, particularly the EU Cyber \u200b\u200bResilience Act (CRA), require clear component provenance, long-term sustainability, and accountability across the entire stack. As John Seager, Canonical’s VP of Ubuntu Engineering, said in a blog post: “With Ubuntu Core 26, we continue Providing critical infrastructure operators with the necessary basis to meet the CRAs<\/a>Run proven, immutable edge AI workloads, and securely manage devices at scale.” <\/p>\n Also: Fourth Linux kernel glitch this month could lead to theft of SSH host keys<\/strong><\/p>\n A major theme in Ubuntu Core 26 is to reduce the cost and friction of provisioning and maintaining large device fleets. Canonical says an improved snap-delta format reduces OTA update size by 50% to 90% for most snaps, with updates for core base snaps reduced from about 16MB to just 1.5MB. Additionally, new initramfs-based installation paths avoid unnecessary reboots by default, speeding up first-boot provisioning and making device rollouts faster and more predictable.<\/p>\n Ubuntu Core 26 also debuts chisel-based manufacturing system<\/a> Canonical calls a new “precision led” approach to the creation of core base snaps. Chisel is a developer tool for extracting highly customized, specialized package slices from Ubuntu packages to create compact, secure software.<\/p>\n In Chisel, instead of relying on layered recipes and post-processing, the new system uses release-specific “slice” definitions with clear, traceable dependencies, allowing each file in the file system to be linked to a specific slice and source package. Canonical says this improves integrity checks and vulnerability triage by giving operators better visibility into the origin of a given component and its dependencies. The Chisel pipeline also provides size savings, resulting in a 7% reduction in the base image footprint.<\/p>\n At the bootloader layer, Ubuntu transfers the core 26 U-boot configuration into a single raw partition with redundant environment support. This approach makes updates to both U-Boot and Snapdeal safer and more reliable while avoiding recovery problems associated with file-based storage.<\/p>\n On the technical side, the new core introduces fundamental changes to full-disk encryption. TPM-sealed keys are now stored directly Linux Unified Key Setup (LUKS2)<\/a> Topic. This setup reduces the risk of key reuse in different device situations. new native OP-TE<\/a> brings integration ARM TrustZone-supported key security<\/a> For embedded deployment. Sealing and opening disk encryption keys in a trusted execution environment rather than in the normal operating system reduces the risk of security-key compromise.<\/p>\n Also: Red Hat Desktop vs. Fedora Hummingbird: Which AI Development Linux Path Is Right for You?<\/strong><\/p>\n Beyond the base operating system, new and updated system snaps aim to accelerate device deployment. especially, snapcraft build tool<\/a> Gets a key attribute called component. This feature packages large or optional resources (such as debug symbols, translations, or alternative drivers) with the main snap without extending the base installation. First tested in Ubuntu Core 24 for distributed Nvidia drivers, the components are now open to the broader Snap ecosystem.<\/p>\n Canonical is also expanding its livepatch service<\/a> For more of the core ecosystem. With the dual release of Ubuntu 26.04 LTS and Ubuntu Core 26, LivePatch’s reboot\u2011less kernel updates now reach ARM64 for the first time and receive official support on AMD64 in all Ubuntu Core releases since Core 20. The company touts this change as a way to meet CRA expectations for timely vulnerability remediation without taking critical edge devices offline.<\/p>\n On the graphical side, ubuntu frame<\/a>Core’s display server for embedded graphical applications now supports multiple apps on a single display with configurable layouts, custom client placement, and an accessibility launcher. Graphics-intensive workloads benefit from the new GPU-2604<\/a> The interface, which provides hardware acceleration for Core 26 applications and is supported by a new Snapcraft extension that simplifies graphics integration.<\/p>\n Also: Canonical’s approach to AI is refreshingly thoughtful \u2013 Microsoft should take note<\/strong><\/p>\n Canonical also said it was assuming “manufacturer” responsibilities for the operating system under the CRA. This is no small thing, as Canonical stands behind long-term security maintenance for core modules, continuous Common Vulnerabilities and Exposures (CVE) monitoring, coordinated disclosures and adherence to standards, e.g. IEC 62443\u20114\u20111<\/a>. This approach, combined with built-in software traceability and modularity, is presented as a tool to define clear boundaries of responsibility between Canonical, device manufacturers, and application vendors. This stance is required to sell devices in the EU under the CRA.<\/p>\n So, while Ubuntu Core is not for everyone, I guarantee you that if your company wants to sell IoT or edge gear in the EU, this new embedded Linux has exactly what you need to pass the CRA and thus be marketable in Europe. <\/p>\n<\/div>\nZDNET Highlights<\/h3>\n
\n
Linux that is safe to use until 2041<\/h2>\n
Lower risk of security-key compromise<\/h2>\n
Embedded Linux for EU<\/h2>\n