Ubuntu & Ubuntu Server

What Ubuntu Is

Ubuntu is a complete operating system built on top of DebianDebian is the upstream distribution Ubuntu is based on. Ubuntu inherits Debian's .deb package format and much of its tooling, then adds a fixed release schedule and commercial backing.. It is developed and commercially backed by Canonical, and ships on a predictable schedule with clearly defined support windows. Under the hood it uses the same Linux kernelThe kernel is the core of the OS. It manages hardware (CPU, memory, disks, network) and lets programs run safely. and APTAPT is the package manager Ubuntu inherits from Debian. You use it to install, update, and remove software with commands like apt update and apt install. package tooling you would recognize from Debian.

For a newcomer: Ubuntu is the base layer that makes a machine usable. It boots the system, manages users and services, and enforces security policy. On top of that you add what you actually need — web servers, radio bridges, SDR tooling, dashboards, databases, and VPNs.

Historical Background

Ubuntu launched in 2004 to make Debian's stability more accessible with a predictable, time-based release schedule. Where Debian releases "when it's ready," Ubuntu commits to a new version every six months and a Long Term Support (LTS) release every two years.

Because Ubuntu is Debian-derived, most Debian knowledge transfers directly: the same package format, the same apt commands, a very similar filesystem layout. The main differences are the release cadence, some default choices, and Canonical's commercial support options.

LTS vs Interim Releases

Ubuntu version numbers are just the year and month of release. 24.04 came out in April 2024; 24.10 in October 2024. Every two years, the April release is a Long Term SupportAn LTS release gets 5 years of standard security and maintenance updates (extendable further with Ubuntu Pro). LTS versions always end in .04 of an even year, e.g. 20.04, 22.04, 24.04. (LTS) release with five years of support. Everything in between is an interim releaseInterim (non-LTS) releases ship every six months and are supported for only 9 months. They get newer software sooner, but you must upgrade frequently to stay supported..

Checking what you're running

lsb_release -a          # shows your release + codename
cat /etc/os-release     # same info, machine-readable
hostnamectl             # OS + kernel + machine details

Ubuntu Server & System Structure

"Ubuntu Server" is the same Ubuntu without a desktop environment. No graphical interface, fewer installed packages, lower memory use — you administer it entirely over SSHSSH (Secure Shell) is the encrypted remote login protocol. You connect from your computer's terminal with: ssh user@server-address.. This is what you want on a VPS or a headless site box.

The filesystem layout is the standard Linux one you'd see on Debian: configuration lives under /etc, logs under /var/log, services are managed by systemdsystemd is the init system that starts, stops, and supervises background services. You control it with systemctl, e.g. systemctl status ssh., and your own files live under /home.

Cloud & VPS Deployments

Ubuntu Server is the default image on nearly every cloud and VPS provider, which is exactly why it's worth knowing. When you spin up a new server, the provider boots an Ubuntu image and (usually) runs cloud-initcloud-init is the tool that configures a fresh cloud instance on first boot — setting the hostname, creating your user, installing your SSH key, and running any startup scripts you provide. to set it up: hostname, your login user, and your SSH key.

Typical first connection

After the provider gives you an IP address, you connect from your own terminal. Most providers either create a user for you or use root for the first login:

ssh ubuntu@YOUR_SERVER_IP      # many clouds use the 'ubuntu' user
# or
ssh root@YOUR_SERVER_IP        # some providers start with root

Practical notes for VPS hosting

• Pick the LTS image. On a remote VPS you want the long support window, not a 9-month interim.
• Add your SSH key at creation. Most providers let you paste a public key so you never need a password.
• Set the timezone if your logs need to match local time: sudo timedatectl set-timezone America/Denver.
• Snapshot before big changes. Cloud providers let you snapshot the whole disk — cheap insurance before an upgrade.

First 15 Minutes After Install

A short, repeatable checklist for any fresh Ubuntu Server. Do these in order before installing your actual services.

1. Update everything

sudo apt update
sudo apt upgrade -y

2. Create your own user (if you're logged in as root)

adduser yourname
usermod -aG sudo yourname       # grant admin (sudo) rights

3. Set up SSH key login & the timezone

ssh-copy-id yourname@YOUR_SERVER_IP   # run this from YOUR computer
sudo timedatectl set-timezone America/Denver

4. Set the hostname so logs are clear

sudo hostnamectl set-hostname my-server-name

System Hardening Basics

Hardening means reducing the ways a system can be attacked. None of this is exotic — it's the standard baseline for any server exposed to the internet. Do these in order.

1. Enable the firewall (UFW)

UFWUFW (Uncomplicated Firewall) is Ubuntu's friendly front-end for the system firewall. It lets you allow or block ports with simple commands. ships with Ubuntu. Allow SSH first (so you don't lock yourself out), then enable it:

sudo ufw allow OpenSSH
sudo ufw enable
sudo ufw status verbose

2. Use SSH keys, then disable password login

Once your key login works, turn off password authentication so brute-force attempts can't succeed. Edit /etc/ssh/sshd_config:

PasswordAuthentication no
PermitRootLogin no

sudo systemctl restart ssh

Confirm you can still log in with your key in a second terminal before closing your current session — that way a mistake won't lock you out.

3. Turn on automatic security updates

sudo apt install unattended-upgrades -y
sudo dpkg-reconfigure --priority=low unattended-upgrades

4. Block repeated intruders with fail2ban

fail2banfail2ban watches your logs for repeated failed logins and temporarily bans the offending IP address. It dramatically cuts down SSH brute-force noise. bans IPs after repeated failed logins:

sudo apt install fail2ban -y
sudo systemctl enable --now fail2ban

Common Beginner Mistakes

• Running an interim release on a server. It falls out of support in 9 months. Use LTS.
• Enabling the firewall before allowing SSH. This locks you out of a remote box instantly. Always ufw allow OpenSSH first.
• Disabling password login before testing the key. Verify key login in a second session first.
• Working as root all the time. Create a normal user with sudo instead.
• Skipping updates. A fresh image is already behind on security patches — update on day one.
• No backups. Snapshot before upgrades and major changes.

Ubuntu vs Debian (Practical)

They're closely related — Ubuntu is built from Debian — so the day-to-day commands are nearly identical. The differences are about release cadence and defaults, not fundamentals.

Essential Commands (Plain English)

Quick Glossary