25.10 release notes

Landscape 25.10 runs on Ubuntu 24.04 LTS Noble Numbat or 22.04 LTS Jammy Jellyfish. Database schema changes are required to upgrade to Landscape Server 25.10.

You can now access Landscape 25.10 in our latest-stable rolling release PPA: ppa:landscape/latest-stable.

Note that 25.10 is not an LTS release. For self-hosted production deployments, we recommend using an LTS release, such as Landscape Server 24.04 LTS, which come with 10 years of support.

Highlights

  • WSL profiles: Install selected WSL instances on Landscape-registered Windows clients. Ensure that only WSL instances matching your profile are installed. Choose from Ubuntu LTS images or supply your own image. Customize installed WSL instances with cloud-init. See How to use WSL profiles to learn more.

WSL profiles screen

  • Ubuntu Pro management: Attach or detach Ubuntu Pro tokens to managed instances or groups of managed instances more easily from the web portal. Get notified of upcoming Ubuntu Pro expiration dates up to 90 days in advance. See How to attach your Ubuntu Pro subscription

Ubuntu pro group management screen

  • Provision Ubuntu installations with autoinstall: The Ubuntu installer (24.04 and later) can use Landscape to serve an autoinstall file if an OIDC login method has been configured. Autoinstall files can be associated with OIDC-authenticated employees and automatically used to provision Ubuntu during installation. Find out more in our Ubuntu installer documentation.

Ubuntu installer screen

  • Dark mode: The new Landscape web portal now supports dark mode. Dark mode can be toggled on and off in your user account settings.

Dark mode screen

Additional Updates

  • Script profiles endpoints are now paginated

  • Script version endpoints are now paginated

  • Repository profiles endpoints are now paginated

  • WSL instances are now updated upon pending instance acceptance

  • Hyphens are now allowed in search arguments for USNs and CVEs

  • Descendant access groups are now included when filtering instances on which to execute a script

  • Security profile list API endpoint now has filters for “active” and “over-limit”

  • Scripts now have a search function

Upgrade

There are no specific upgrade steps for this version. You can follow the existing guide to upgrade: How to upgrade your Landscape server.

Landscape Server charms

The charm revision supporting Landscape 25.10 is currently only available in the preview/edge channel. It will be available soon in the latest-stable/stable channel.

Bug fixes

  • The “new standalone user” page no longer appears if password authentication is disabled

  • Static/asset directory listings are now hidden

  • worker_runner respects workers config

  • Fixed serialization errors when deleting instances

  • Cookie encryption key now persists if generated

  • Hostagent services only create SSL context if given SSL credentials, add validation to broker/service settings for SSL options

  • Secrets service URL now has a default

  • Event logs no longer sometimes reference the wrong instance

  • Added additional validation for removal profile API endpoints

  • Duplicated package profiles use a URL-safe name

  • A more accurate regex is now used for package version comparisons

  • WSL profiles now filter for only Windows instances

  • An informative error is now produced for invalid GPG material in POST requests to /gpg-key

  • A correct invitation_id query argument is now used on OIDC invitations LP: #2118792

  • Removed incorrect instance count from the saved search table

  • Hostagent-consumer no longer crashes if UP4W reports an error before the activity is in-progress

  • Root URL is now set automatically during quickstart installation

  • Constrained instances for child instance profiles only show Windows hosts

  • Tags and “all computers” are now optional when creating script profiles

  • Reboot list handler now correctly serializes start_after

  • POST /gpg-key no longer causes an error

  • Database connections are now recreated if they have timed out due to inactivity

  • WSL instance names are now case-insensitive

  • Activity parents without children are automatically marked succeeded instead of left pending

  • Security profiles now use start_date as first run if its in the future