惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

The GitHub Blog
The GitHub Blog
C
Cyber Attacks, Cyber Crime and Cyber Security
Y
Y Combinator Blog
B
Blog RSS Feed
K
Kaspersky official blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Know Your Adversary
Know Your Adversary
C
CERT Recently Published Vulnerability Notes
V
Vulnerabilities – Threatpost
C
Check Point Blog
L
LINUX DO - 热门话题
Simon Willison's Weblog
Simon Willison's Weblog
Spread Privacy
Spread Privacy
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
The Hacker News
The Hacker News
P
Palo Alto Networks Blog
L
Lohrmann on Cybersecurity
T
Tor Project blog
T
Tenable Blog
H
Help Net Security
人人都是产品经理
人人都是产品经理
WordPress大学
WordPress大学
Cisco Talos Blog
Cisco Talos Blog
T
Threatpost
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
S
Schneier on Security
G
Google Developers Blog
P
Privacy & Cybersecurity Law Blog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
小众软件
小众软件
aimingoo的专栏
aimingoo的专栏
Microsoft Azure Blog
Microsoft Azure Blog
Cyberwarzone
Cyberwarzone
Security Latest
Security Latest
AWS News Blog
AWS News Blog
P
Proofpoint News Feed
美团技术团队
博客园 - 三生石上(FineUI控件)
Latest news
Latest news
腾讯CDC
G
GRAHAM CLULEY
阮一峰的网络日志
阮一峰的网络日志
博客园 - 叶小钗
博客园 - 【当耐特】
C
CXSECURITY Database RSS Feed - CXSecurity.com
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
T
Threat Research - Cisco Blogs
T
The Exploit Database - CXSecurity.com
Martin Fowler
Martin Fowler

Blog

Tracing a memory leak bug in PID 1 and contributing an upstream fix: a Linux support story | Canonical MAAS installation: bare metal provisioning is easier than ever | Canonical Januscape vulnerability CVE-2026-53359 mitigations available | Canonical Managing Ubuntu on bare metal at scale | Canonical Ubuntu Server: a platform made for enterprise scale | Canonical Building an open source chain of trust: new research uncovers key blockers and ways forward | Canonical Beyond safety and security: Why automotive open source demands dependability  | Canonical DirtyClone Linux kernel local privilege escalation vulnerability fixes available | Canonical pedit COW kernel local privilege escalation vulnerability mitigations | Canonical Canonical becomes Gold Sponsor of Trifecta Tech Foundation | Canonical Challenges designers face in open source (and how to fix them) | Canonical Hunting a 16-year-old SQLite bug with TLA+: is dqlite affected? | Canonical Anbox Cloud on C4A metal: Android, at scale, without friction | Canonical Canonical announces live kernel patching for Arm64 | Canonical How to use RISC-V custom instructions with Ubuntu | Canonical Ubuntu Summit 26.04: connected by open source | Canonical So you need to add microcontrollers to your fleet: now what? | Canonical Validating real-world skills through Canonical Academy | Canonical Virtualized Android comes to Anbox Cloud | Canonical Template: Streamlining open source design contributions | Canonical Beyond Mythos: responding to a new threat landscape | Canonical A look into Ubuntu Core 26: Building a local AI inference appliance in a virtual machine | Canonical This year we celebrate a decade of Ubuntu Server support on the s390x architecture: marking a long-standing collaboration between Canonical and IBM that began at LinuxCon 2015. The first release happened on April 21, 2016, bringing Ubuntu 16.04 LTS (Xenial Xerus) to IBM Z and IBM LinuxONE platforms.  A first for Ubuntu on IBM That […] AI at the edge: simplifying infrastructure with Cisco and Canonical | Canonical The next era of telco clouds: get open infrastructure choice with Sylva and Canonical Kubernetes | Canonical What is RDMA over Converged Ethernet (RoCE)? | Canonical Beyond tokens per watt – using Ubuntu 26.04 LTS for AI | Canonical A look into Ubuntu Core 26: Deploying AI models on Renesas RZ/V series for production | Canonical RISC-V profiles – why is RVA23 significant? | Canonical AI with AMD ROCm on Ubuntu: your questions answered | Canonical When distributed workloads stall because nodes cannot exchange small messages quickly and consistently, the network is the limiting factor. How do you solve that problem? InfiniBand offers one solution. InfiniBand is an interconnect, meaning the end-to-end communication system that links compute, storage, and accelerator nodes. It is impl […] Microsoft has announced the preview of Azure Cobalt 200, its second-generation custom Arm silicon. Learn how Ubuntu and Ubuntu Pro support these new VMs from day one, offering seamless deployment, long-term security maintenance, and Kernel Livepatch without requiring engineering or platform changes […] How Canonical Support solves hard Linux performance bugs  – even in 12-year old code | Canonical Securing AI agent workflows on Ubuntu with the new NVIDIA OpenShell snap | Canonical Canonical announces optimized Ubuntu images for TPU virtual machines by Google Cloud | Canonical VMware hypervisor deployment using MAAS | Canonical Migrating from Apache Spark 3 to Spark 4 | Canonical Introducing Workshop: launch sandboxed development environments on Ubuntu with a single command | Canonical Run agentic workloads on Arm and Ubuntu | Canonical Decoding design: How design and engineering thrive together in open source | Canonical Developing web apps with local LLM inference | Canonical A local privilege escalation (LPE) security vulnerability in the Linux kernel, codename “PinTheft,” was publicly disclosed on May 19, 2026. The vulnerability was fixed in the mainline Linux kernel tree. A proof-of-concept exploit was published along with public disclosure. This has been assigned the CVE ID CVE-2026-43494; other discoverin […] Canonical has announced the general availability of Managed Kubeflow on the Microsoft Azure Marketplace. This fully managed MLOps platform allows enterprise AI teams to deploy a production-ready environment in under an hour, eliminating infrastructure maintenance. […] A look into Ubuntu Core 26: Cloud-powered edge computing with AWS IoT Greengrass and Azure IoT Edge | Canonical CVE-2026-46333 (ssh-keysign-pwn) Linux kernel vulnerability mitigations | Canonical
Canonical announces the Enterprise Store as part of Ubuntu Pro | Canonical
Holly Hall · 2026-07-21 · via Blog

Canonical introduces a new way to manage software behind firewalls and in air-gapped environments with the Enterprise Store.

The Enterprise Store makes software distribution manageable and scalable behind firewalls or in air-gapped environments. Available with an Ubuntu Pro subscription, the Enterprise Store respects the security protocols of strict environments, in a way that is controllable, auditable, and predictable. 

What is the Enterprise Store?

The Enterprise Store is an on-premise edge proxy. It sits between your devices and Canonical’s software stores, so your systems can install and update software without needing direct outbound access from every machine. That makes it a strong fit for:

  • Corporate networks with strict egress controls
  • Air-gapped and offline environments
  • Regulated industries that need change control and auditability 

In order to meet the needs of these strict environments, the Enterprise Store is designed around a few practical capabilities:

  • Local caching to speed up repeat downloads and reduce bandwidth use.
  • Air-gapped operation (offline mode) so updates can be manually transferred when there’s no internet connectivity.
  • High availability options to reduce the risk of service interruption.
  • Granular revision control so you can pin versions and avoid surprises during critical operations.

High availability

The Enterprise Store supports high availability, giving teams a more resilient way to run software distribution in production. Instead of relying on a single machine to serve every client request, organizations can deploy multiple Enterprise Store instances behind a reverse proxy, allowing traffic to be routed to another live unit if one goes down. That reduces the risk of a single-node failure interrupting access to packages, updates, or operator software across connected systems.

This high-availability model is designed for real operational environments. Reverse proxies can balance traffic and run health checks across backend units, while shared services help keep states consistent across the deployment. The result is a more robust control point for software distribution: one that helps teams maintain continuity, consistency, and tighter operational control even in restricted or business-critical environments.

One proxy for snaps and charms

The Enterprise Store gives teams a single proxy to manage both snaps and charms, covering the full software lifecycle from delivery to operations. 

Snaps are self-contained Linux packages that are easy to install, update, and maintain across desktop, cloud, and IoT environments. Charms are operators: software that wraps an application and contains the logic needed to deploy, configure, scale, integrate, and manage it over time. Together, they cover both software delivery and software operations.

Many organizations use snaps to package and distribute software consistently, and charms to automate deployment and lifecycle management for applications across clouds and clusters. With a unified approach to network controls and governance, the Enterprise Store helps organizations manage their entire software estate consistently. 

Included with Ubuntu Pro

The Enterprise Store is included as part of Ubuntu Pro, which means anyone with an Ubuntu Pro subscription can try it. If you’re experimenting at home or in a lab, you can get started today.

Ubuntu Pro is free for personal use (for up to 5 machines), so you can get hands-on with the Enterprise Store before you roll it into a broader evaluation.

Get started

If you want to explore and set up the Enterprise Store:

  1. Read the Enterprise Store overview to understand use cases and key features.
  2. Follow the documentation: the docs hub includes getting started guides and sections covering charm support.
  3. Reach out to Canonical if you have commercial requirements, larger-scale rollouts, or want guidance for a regulated environment.

Talk to us about your use case

If you’re looking at the Enterprise Store for production, especially across fleets, air-gapped environments, or compliance-bound ecosystems, Canonical can help you plan an evaluation, architecture, and rollout plan.

Contact us and tell us about your requirements and use cases.

Further reading

Related posts


Ubuntu and Ubuntu Pro on Azure Cobalt 200 VMs

Ubuntu Ubuntu tech blog

Microsoft has announced the preview of Azure Cobalt 200, its second-generation custom Arm silicon. Learn how Ubuntu and Ubuntu Pro support these new VMs from day one, offering seamless deployment, long-term security maintenance, and Kernel Livepatch without requiring engineering or platform changes ...