Canonical Landscape

Canonical Landscape is a systems management solution for Ubuntu desktops, servers, cloud instances, IoT devices, and other Ubuntu systems. Administrators can use one portal to manage updates, run scripts remotely, manage packages and repositories, set role-based access control, and monitor machines. Landscape can alert on updates and graph temperature, disk and memory use, system load, and custom metrics. A single instance can manage up to 40,000 machines, with an option to scale for larger deployments.

Deployment choices are Canonical-hosted SaaS, Managed Landscape, and self-hosted software. SaaS is bundled with Ubuntu Pro, and its free account covers up to five machines. The service has a scriptable API and can integrate with configuration management, monitoring, and ticketing systems. SaaS data in transit uses HTTPS with TLS and data at rest is encrypted with AES-128. Self-hosted installation and maintenance are the user's responsibility and require technical knowledge and resources; database encryption at rest is not configured by Landscape by default. The Landscape Client snap does not support Debian package management.

Landscape offers several deployment models for managing Ubuntu systems, with broad administration and monitoring functions. Check the SaaS limitations and self-hosted maintenance requirements against your environment.

Landscape suits teams administering large or growing Ubuntu environments across desktops, servers, clouds, and embedded devices. Self-hosting is for organizations with the technical knowledge and resources to install and maintain it.

Overview

Canonical Landscape is a centralized administration service for Ubuntu machines, from desktops and servers to cloud and IoT systems. It is best suited to teams running a sizable or growing Ubuntu estate that need coordinated maintenance and monitoring. Its main appeal is the choice of hosted, managed, and self-hosted deployment; the tradeoff is that each option brings a different cost or operational constraint.

Key features

From one portal, administrators can manage updates, packages and repositories, run scripts remotely, set role-based access, and monitor client machines. One instance can handle up to 40,000 machines, with scaling possible for larger fleets. That makes Landscape a credible fit for broad Ubuntu operations, rather than a lightweight tool for a handful of machines.

Monitoring can alert administrators to updates and graph temperature, disk and memory use, system load, and custom metrics. Drift detection and compliance policies are supported, but Landscape is not agentless. Its scriptable API can connect it to existing configuration management, monitoring, and ticketing systems, which helps teams incorporate it into established workflows.

Managed Landscape supports OpenID Connect and identity providers including Azure AD, Google, Okta, and IBM. Canonical-hosted SaaS does not support repository mirroring or configuration of a custom external identity provider, so organizations that depend on either capability should consider another deployment model.

Pricing

The free Landscape SaaS account costs nothing and requires Ubuntu Pro; it is capped at 5 machines. That is useful for a small evaluation or very limited estate, but not a free route to fleet-wide management. SaaS is bundled with an Ubuntu Pro subscription.

Managed Landscape on public clouds, VMware, OpenStack or LXD costs $6,861 a year, billed per Landscape physical machine/year. Managed Landscape on bare metal costs $9,470 a year on the same per-physical-machine annual basis. Both include a managed service, making them the fit for organizations that want Canonical to operate the service rather than maintain it themselves. Managed support includes an SLA with up to 99.9% uptime, 24/7 monitoring, and break/fix response from Canonical engineers.

Self-hosted Landscape uses Ubuntu Pro as its main licensing mechanism; enterprise-scale users should contact Canonical Sales for custom pricing. The software itself must be installed, hosted, and maintained by the organization, so the lower operational dependence on a vendor-managed service comes with a need for technical staff and infrastructure.

Platforms

Landscape supports Linux and is offered through web, API, and self-hosted deployment options. The deployment model is hybrid. SaaS data in transit uses HTTPS with TLS and data at rest uses AES-128 encryption. Self-hosted deployments use HTTPS with TLS by default, but Landscape does not configure database encryption at rest by default; that is controlled by the organization. The Landscape Client snap also cannot manage Debian packages, which matters for teams expecting it to administer Debian package estates.

Who it's for

Landscape is aimed at teams administering large or growing Ubuntu estates across desktops, servers, clouds, and embedded devices. It is particularly compelling when centralized fleet operations, monitoring, and integration with existing tools matter more than broad operating-system coverage. Small teams with no capacity to maintain infrastructure should favor SaaS or a managed plan; organizations needing repository mirroring in SaaS or Debian package management should look elsewhere or assess another deployment arrangement.

Pros and cons

• Pros: Centralizes updates, remote scripts, package and repository management, access control, and monitoring for Ubuntu systems.
• Pros: A single instance can manage up to 40,000 machines, and the API supports integration with configuration management, monitoring, and ticketing tools.
• Pros: Managed service includes 24/7 monitoring, an SLA of up to 99.9% uptime, and Canonical engineer break/fix response.
• Cons: The free SaaS account is limited to 5 machines and requires Ubuntu Pro.
• Cons: SaaS lacks repository mirroring and custom external identity-provider configuration.
• Cons: Self-hosting requires the organization to deploy and maintain it, and database encryption at rest is not configured by default.
• Cons: The Landscape Client snap does not manage Debian packages, and Landscape requires an agent rather than offering agentless operation.

Alternatives

Foreman is worth considering for teams seeking free, open-source, self-managed software across the same listed API, Linux, self-hosted, and web platforms. Juju is another free open-source option from Canonical, with API, Linux, macOS, self-hosted, and Windows support.

Salt offers a free Apache 2.0-licensed option across API, Linux, macOS, self-hosted, and Windows. Terraform may suit readers who want a free tier with 500 managed resources, one concurrent remote run, and one concurrent agent run.

CFEngine offers a free Community Edition under the GNU GPL with Linux support and community support. Nix is a free open-source package manager for Linux, macOS, and Windows.

Pulumi has a free plan for one user with unlimited projects, stacks, and environments, plus unlimited updates and history. Rudder is a freemium alternative whose source code can be downloaded and modified under its open-source licenses. For a wider comparison, see IT Configuration Management Software.

Verdict

Choose Canonical Landscape if your team manages a substantial Ubuntu fleet and wants centralized administration with a choice between Canonical-operated service and self-hosting. Its scale, monitoring, and integration options make it a strong operational fit, but the 5-machine free cap, SaaS restrictions, managed-service prices, and self-hosting burden are real decision points. Look elsewhere if Debian package management, agentless operation, or SaaS repository mirroring is essential.