--- title: Install canonical-livepatch-cve-service on elementary OS using the Snap Store | Snapcraft description: Get the latest version of canonical-livepatch-cve-service for on elementary OS - Canonical Livepatch CVE Service url: https://snapcraft.io/install/canonical-livepatch-cve-service/elementary --- [Canonical Snapcraft](https://snapcraft.io/) # Install canonical-livepatch-cve-service on **elementary OS** # canonical-livepatch-cve-service [Canonical](https://snapcraft.io/publisher/canonical "View all snaps from Canonical") * [Canonical](https://snapcraft.io/publisher/canonical "View all snaps from Canonical") * [Security](https://snapcraft.io/search?categories=security) [Install](https://snapcraft.io/install/canonical-livepatch-cve-service/elementary#install) #### Canonical Livepatch CVE Service **Canonical Livepatch CVE Service Snap** **Description:** The Canonical Livepatch CVE service runs a simple HTTP server that periodically fetches and provides information about CVEs fixed in Ubuntu kernels. **Usage:** Once installed, the CVE service snap will automatically initialize and begin listening on localhost:8090. The snap has several configuration options available. All configuration options are set via: `sudo snap set canonical-livepatch-cve-service =` To use the default values after a custom value is used, set the config value to an empty string `""`. For example: `sudo snap set canonical-livepatch-cve-service port=""` The service will automatically restart on a configuration change, ensuring that the service runs with the latest configuration. **Configuration Options:** The following list shows all configuration options and example values: * **`source`** + **Description:** URL or file path to fixed CVE information. + **Example:** `"https://osv-vulnerabilities.storage.googleapis.com/Ubuntu/all.zip"` + **Notes** When setting this option, you must also set the `source-type` config option. The default for this value is `"https://osv-vulnerabilities.storage.googleapis.com/Ubuntu/all.zip"`. * **`source-type`** + **Description:** The format of the data source. + **Example:** `"osv-bucket-zip"` + **Note:** When setting this option, you must also set the `source` config option. The default for this value is `"osv-bucket-zip"`. * **`fetch-freq`** + **Description:** When to fetch fixed CVE data. If set to `""`, the service fetches based on the interval. If set to `once`, it fetches a single time at startup. If `never`, it does not fetch data from the source. + **Example:** `""`, `once`, `never` + **Note:** When setting the option to `once` or `never`, the `interval` option is ignored. When setting the option to `never`, the `source`, `source-type`, and `interval` options are ignored. The default for this value is `""`. * **`interval`** + **Description:** The interval between CVE data fetches, in the format of `xxhxxmxxs`. + **Example:** `"1h0m0s"` + **Note:** The default for this value is `"1h0m0s"`. * **`port`** + **Description:** The port to bind to and listen to requests on. + **Example:** `"8090"` + **Note:** The default for this value is `"8090"`. * **`write-timeout`** + **Description:** The write timeout for sending CVE data. + **Example:** `"5m"` + **Note:** The default for this value is `"5m"`. * **`read-timeout`** + **Description:** The read timeout for reading responses from Livepatch server. + **Example:** `"30s"` + **Note:** The default for this value is `"30s"`. **Pointing Livepatch Server To The CVE Service** Livepatch server, when connected to the CVE service, will serve fixed CVE information, and periodically refresh its CVE cache by fetching from the CVE service. By default, Livepatch server has these features disabled so you can supply configuration values based on a certain deployment. To point Livepatch Server to the CVE service, first enable the cve-lookup feature with: `sudo snap set canonical-livepatch-server lp.cve-lookup.enabled="true"` Then, enable the cve-sync feature, and set the source-url to the url pointing to the CVE service: `sudo snap set canonical-livepatch-server lp.cve-sync.enabled="true"` `sudo snap set canonical-livepatch-server lp.cve-sync.source-url="http://:port"` You can also set the refresh interval, and proxy information if required: `sudo snap set canonical-livepatch-server lp.cve-sync.interval="1h"` `sudo snap set canonical-livepatch-server lp.cve-sync.proxy.enabled="true"` `sudo snap set canonical-livepatch-server lp.cve-sync.proxy.http=""` `sudo snap set canonical-livepatch-server lp.cve-sync.proxy.https=""` `sudo snap set canonical-livepatch-server lp.cve-sync.proxy.no-proxy=""` By default, the refresh interval is 1 hour, and the proxy is disabled. ### Package name * canonical-livepatch-cve-service --- ### License * Proprietary --- ### Last updated * 30 April 2026 - latest/stable * 27 August 2026 - latest/edge --- ##### Report a Snap Store violation * [Report this Snap](https://snapcraft.io/install/canonical-livepatch-cve-service/elementary#report-snap-modal) --- ## Enable snaps on elementary OS and install canonical-livepatch-cve-service Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully. Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions. ### Enable snapd Snap can be installed on elementary OS from the command line. Open *Terminal* from the Applications launcher and type the following: ``` sudo apt update sudo apt install snapd ``` Either log out and back in again, or restart your system, to ensure snap’s paths are updated correctly. ### Install canonical-livepatch-cve-service To install canonical-livepatch-cve-service, simply use the following command: ``` sudo snap install canonical-livepatch-cve-service ``` ### Other popular snaps… [See more...](https://snapcraft.io/search?categories=featured) [See more in Featured](https://snapcraft.io/search?categories=featured) ### More things to do… #### [Get the snap store](https://snapcraft.io/snap-store) Browse and find snaps from the convenience of your desktop using the snap store snap. #### [Learn more about snaps](https://snapcraft.io/docs) Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now. [Back to top](https://snapcraft.io/install/canonical-livepatch-cve-service/elementary) © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes) [Join the forum](https://forum.snapcraft.io/), contribute to or report problems with, [snapd](https://bugs.launchpad.net/snapd), [Snapcraft](https://bugs.launchpad.net/snapcraft), or [this site](https://github.com/canonical/snapcraft.io/issues/new). * [Share on Twitter](https://twitter.com/snapcraftio) * [Share on Facebook](https://www.facebook.com/snapcraftio) * [Share on YouTube](https://www.youtube.com/snapcraftio) * [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms) * [Data privacy](https://www.ubuntu.com/legal/data-privacy) * [Manage your tracker settings](https://snapcraft.io/install/canonical-livepatch-cve-service/elementary) * [Service status](https://status.snapcraft.io/) * [Other functions](https://dashboard.snapcraft.io/) * [Contact us](https://snapcraft.io/about/contact-us)