When using locally mirrored repositories of Ubuntu ESM packages in 20.04, upgrades are picked up by software updater but being reported as needing to enable pro in settings (see screenshot). Client machines are attached to Ubuntu Pro but no additional services are enabled.
Also attached are outputs of the following commands from a machine in this state:
apt list --upgradable
Listing... Done
apparmor/devclient-focal-staging-updates 2.13.3-7ubuntu5.4 amd64 [upgradable from: 2.13.3-7ubuntu5.3]
curl/devclient-focal-staging-updates,devclient-focal-staging-security 7.68.0-1ubuntu2.24 amd64 [upgradable from: 7.68.0-1ubuntu2.23]
ffmpeg/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
firefox-locale-en/devclient-focal-staging-security 130.0.1+build1-0ubuntu0.20.04.1 amd64 [upgradable from: 130.0+build2-0ubuntu0.20.04.1]
firefox/devclient-focal-staging-security 130.0.1+build1-0ubuntu0.20.04.1 amd64 [upgradable from: 130.0+build2-0ubuntu0.20.04.1]
google-chrome-stable/stable 129.0.6668.70-1 amd64 [upgradable from: 128.0.6613.113-1]
krb5-locales/devclient-focal-staging-updates,devclient-focal-staging-updates 1.17-6ubuntu4.7 all [upgradable from: 1.17-6ubuntu4.6]
libapparmor1/devclient-focal-staging-updates 2.13.3-7ubuntu5.4 amd64 [upgradable from: 2.13.3-7ubuntu5.3]
libavcodec58/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libavdevice58/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libavfilter7/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libavformat58/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libavresample4/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libavutil56/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libcurl3-gnutls/devclient-focal-staging-updates,devclient-focal-staging-security 7.68.0-1ubuntu2.24 amd64 [upgradable from: 7.68.0-1ubuntu2.23]
libcurl4/devclient-focal-staging-updates,devclient-focal-staging-security 7.68.0-1ubuntu2.24 amd64 [upgradable from: 7.68.0-1ubuntu2.23]
libgssapi-krb5-2/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libk5crypto3/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libkrb5-3/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libkrb5support0/devclient-focal-staging-updates 1.17-6ubuntu4.7 amd64 [upgradable from: 1.17-6ubuntu4.6]
libnss-systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libpam-systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libpcap0.8/devclient-focal-staging-updates 1.9.1-3ubuntu1.20.04.1 amd64 [upgradable from: 1.9.1-3]
libpostproc55/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libpython2.7-minimal/devclient-focal-staging-apps-security 2.7.18-1~20.04.4+esm2 amd64 [upgradable from: 2.7.18-1~20.04.4+esm1]
libpython2.7-stdlib/devclient-focal-staging-apps-security 2.7.18-1~20.04.4+esm2 amd64 [upgradable from: 2.7.18-1~20.04.4+esm1]
libpython3.12-minimal/focal 3.12.6-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
libpython3.12-stdlib/focal 3.12.6-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
libpython3.8-dev/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
libpython3.8-minimal/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
libpython3.8-stdlib/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
libpython3.8/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
libreoffice-ogltrans/devclient-focal-staging-updates,devclient-focal-staging-updates,devclient-focal-staging-security,devclient-focal-staging-security 1:6.4.7-0ubuntu0.20.04.12 all [upgradable from: 1:6.4.7-0ubuntu0.20.04.11]
libreoffice-pdfimport/devclient-focal-staging-updates,devclient-focal-staging-updates,devclient-focal-staging-security,devclient-focal-staging-security 1:6.4.7-0ubuntu0.20.04.12 all [upgradable from: 1:6.4.7-0ubuntu0.20.04.11]
libswresample3/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libswscale5/devclient-focal-staging-apps-security 7:4.2.7-0ubuntu0.1+esm6 amd64 [upgradable from: 7:4.2.7-0ubuntu0.1]
libsystemd0/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
libudev1/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
linux-generic-hwe-20.04/devclient-focal-staging-updates,devclient-focal-staging-security 5.15.0.122.132~20.04.1 amd64 [upgradable from: 5.15.0.121.131~20.04.1]
linux-headers-generic-hwe-20.04/devclient-focal-staging-updates,devclient-focal-staging-security 5.15.0.122.132~20.04.1 amd64 [upgradable from: 5.15.0.121.131~20.04.1]
linux-image-generic-hwe-20.04/devclient-focal-staging-updates,devclient-focal-staging-security 5.15.0.122.132~20.04.1 amd64 [upgradable from: 5.15.0.121.131~20.04.1]
linux-libc-dev/devclient-focal-staging-updates,devclient-focal-staging-security 5.4.0-196.216 amd64 [upgradable from: 5.4.0-195.215]
linux-oem-20.04/devclient-focal-staging-updates,devclient-focal-staging-security 5.15.0.122.132~20.04.1 amd64 [upgradable from: 5.15.0.121.131~20.04.1]
microsoft-edge-stable/stable 129.0.2792.52-1 amd64 [upgradable from: 128.0.2739.54-1]
nautilus-share/devclient-focal-staging-updates,devclient-focal-staging-security 0.7.3-2ubuntu3.1 amd64 [upgradable from: 0.7.3-2ubuntu3]
python-pip-whl/devclient-focal-staging-apps-security,devclient-focal-staging-apps-security 20.0.2-5ubuntu1.10+esm2 all [upgradable from: 20.0.2-5ubuntu1.10]
python2.7-minimal/devclient-focal-staging-apps-security 2.7.18-1~20.04.4+esm2 amd64 [upgradable from: 2.7.18-1~20.04.4+esm1]
python2.7/devclient-focal-staging-apps-security 2.7.18-1~20.04.4+esm2 amd64 [upgradable from: 2.7.18-1~20.04.4+esm1]
python3-pip/devclient-focal-staging-apps-security,devclient-focal-staging-apps-security 20.0.2-5ubuntu1.10+esm2 all [upgradable from: 20.0.2-5ubuntu1.10]
python3.12-minimal/focal 3.12.6-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
python3.12-venv/focal 3.12.6-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
python3.12/focal 3.12.6-1+focal1 amd64 [upgradable from: 3.12.4-1+focal1]
python3.8-dev/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
python3.8-minimal/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
python3.8-venv/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
python3.8/devclient-focal-staging-updates,devclient-focal-staging-security 3.8.10-0ubuntu1~20.04.12 amd64 [upgradable from: 3.8.10-0ubuntu1~20.04.11]
shim-signed/devclient-focal-staging-updates 1.40.10+15.8-0ubuntu1 amd64 [upgradable from: 1.40.9+15.7-0ubuntu1]
systemd-sysv/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
systemd-timesyncd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
systemd/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
terraform/focal 1.9.6-1 amd64 [upgradable from: 1.8.5-1]
ubuntu-advantage-tools/devclient-focal-staging-updates,devclient-focal-staging-updates 34~20.04 all [upgradable from: 32.3.1~20.04]
ubuntu-pro-client-l10n/devclient-focal-staging-updates 34~20.04 amd64 [upgradable from: 33.2~20.04]
ubuntu-pro-client/devclient-focal-staging-updates 34~20.04 amd64 [upgradable from: 33.2~20.04]
udev/devclient-focal-staging-updates 245.4-4ubuntu3.24 amd64 [upgradable from: 245.4-4ubuntu3.23]
vault-enterprise/focal 1.17.6+ent-1 amd64 [upgradable from: 1.16.6+ent-1]
ua security-status --format=json
{"_schema_version": "0.1", "livepatch": {"fixed_cves": []}, "packages": [{"download_size": 984884, "origin": "esm.ubuntu.com", "package": "libavformat58", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 1086036, "origin": "esm.ubuntu.com", "package": "libavfilter7", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 1452588, "origin": "esm.ubuntu.com", "package": "ffmpeg", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 57088, "origin": "esm.ubuntu.com", "package": "libswresample3", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 1279808, "origin": "esm.ubuntu.com", "package": "python2.7-minimal", "service_name": "esm-apps", "status": "pending_enable", "version": "2.7.18-1~20.04.4+esm2"}, {"download_size": 248248, "origin": "esm.ubuntu.com", "package": "python2.7", "service_name": "esm-apps", "status": "pending_enable", "version": "2.7.18-1~20.04.4+esm2"}, {"download_size": 230504, "origin": "esm.ubuntu.com", "package": "python3-pip", "service_name": "esm-apps", "status": "pending_enable", "version": "20.0.2-5ubuntu1.10+esm2"}, {"download_size": 55016, "origin": "esm.ubuntu.com", "package": "libpostproc55", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 4880172, "origin": "esm.ubuntu.com", "package": "libavcodec58", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 241432, "origin": "esm.ubuntu.com", "package": "libavutil56", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 74264, "origin": "esm.ubuntu.com", "package": "libavdevice58", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 157420, "origin": "esm.ubuntu.com", "package": "libswscale5", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}, {"download_size": 335528, "origin": "esm.ubuntu.com", "package": "libpython2.7-minimal", "service_name": "esm-apps", "status": "pending_enable", "version": "2.7.18-1~20.04.4+esm2"}, {"download_size": 1887704, "origin": "esm.ubuntu.com", "package": "libpython2.7-stdlib", "service_name": "esm-apps", "status": "pending_enable", "version": "2.7.18-1~20.04.4+esm2"}, {"download_size": 1808744, "origin": "esm.ubuntu.com", "package": "python-pip-whl", "service_name": "esm-apps", "status": "pending_enable", "version": "20.0.2-5ubuntu1.10+esm2"}, {"download_size": 54208, "origin": "esm.ubuntu.com", "package": "libavresample4", "service_name": "esm-apps", "status": "pending_enable", "version": "7:4.2.7-0ubuntu0.1+esm6"}], "summary": {"num_esm_apps_packages": 0, "num_esm_apps_updates": 16, "num_esm_infra_packages": 0, "num_esm_infra_updates": 0, "num_installed_packages": 2043, "num_main_packages": 0, "num_multiverse_packages": 0, "num_restricted_packages": 0, "num_standard_security_updates": 0, "num_third_party_packages": 2029, "num_universe_packages": 0, "num_unknown_packages": 14, "reboot_required": "no", "ua": {"attached": true, "enabled_services": [], "entitled_services": ["esm-apps", "esm-infra"]}}}
ua status
SERVICE ENTITLED STATUS DESCRIPTION
anbox-cloud yes disabled Scalable Android in the cloud
esm-apps yes disabled Expanded Security Maintenance for Applications
esm-infra yes disabled Expanded Security Maintenance for Infrastructure
fips yes disabled NIST-certified FIPS crypto packages
fips-updates yes disabled FIPS compliant crypto packages with stable security updates
livepatch yes disabled Canonical Livepatch service
usg yes disabled Security compliance and audit tools
For a list of all Ubuntu Pro services, run 'pro status --all'
Enable services with: pro enable <service>
Account: Registers of Scotland
Subscription: Ubuntu Pro Desktop + Support (weekday)
Valid until: Mon Aug 18 00:59:59 2025 BST
Technical support level: standard
[info] A new version is available: 34~20.04
Please run:
sudo apt install ubuntu-pro-client
to get the latest bug fixes and new features.
I think I have a fix, I'm trying to create a reproduction case so I myself can verify it. Not very keen on setting up a local mirror, but if it is the only way, it will be.
Update: Nevermind, I can just use a PPA of course!