A practical look at building an Essential Eight-aligned Linux environment on Ubuntu 26.04 LTS.
This series of blog posts focuses on Ubuntu 26.04 LTS as the reference platform and maps Linux implementation patterns back to the ASD Essential Eight and relevant ISM controls.
Part 1 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering application control with AppArmor, snap confinement, signed repositories, and Canonical tooling.
Part 2 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering application patching with Ubuntu Pro, Landscape, repository governance, and compensating controls.
Part 3 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering operating system patching with Ubuntu Pro, Livepatch, Landscape, and uptime-aware compensating controls.
Part 4 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering restricted administrative privileges with sudo, Teleport, and AD or Entra ID integration.
Part 5 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering multi-factor authentication with Teleport, Entra ID, Active Directory integration, and phishing-resistant MFA.
Part 6 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering the awkward Microsoft Office macro control gap on Linux and the best compensating patterns.
Part 7 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering browser and user application hardening with Firefox policies, snap confinement, AppArmor, and isolation controls.
Part 8 of an 8-part series on implementing the Essential Eight on Ubuntu 26.04 LTS, covering regular backups with restic, snapshots, immutable storage, and Linux-first recovery design.