A fresh Ubuntu 24.04 install boots to a clean GNOME 46 desktop, but between the missing multimedia codecs, the unconfigured firewall, and the default privacy settings that send search queries to Canonical, there is a solid hour of setup before the system is truly production-ready. This checklist covers everything we configure on every machine — from first boot through development environment setup — distilled from provisioning Ubuntu workstations professionally for over a decade. Whether you clean-installed from the 24.04.2 ISO or just finished an upgrade from 22.04, work through these 25 items in order. Expect sections on system updates, drivers, codecs, privacy, security hardening, development tools, desktop customisation, and backup configuration.
System Foundations (Items 1–6)
1. Run a Full System Update
The ISO is always behind. Get current before installing anything else:
sudo apt update && sudo apt full-upgrade -y
sudo snap refresh
Reboot if a kernel update was included.
2. Enable Ubuntu Pro (Free Tier)
Ubuntu Pro extends security patching to ten years and covers universe packages. Free for up to five personal machines:
sudo pro attach <your-token>
Get your token from the Ubuntu Pro dashboard.
3. Install Drivers
Open “Additional Drivers” (or ubuntu-drivers list) to see what proprietary drivers are available. For Nvidia GPUs:
sudo ubuntu-drivers install nvidia:535
For a more thorough Nvidia troubleshooting walkthrough, see our Nvidia fix guide.
4. Configure Livepatch
If you enabled Ubuntu Pro, Livepatch lets you apply kernel security fixes without rebooting:
sudo canonical-livepatch enable <your-token>
Especially useful on always-on machines.
5. Set Your Hostname Properly
The installer sometimes sets a generic hostname. Fix it:
sudo hostnamectl set-hostname your-machine-name
6. Configure Time and Locale
Ubuntu 24.04 uses timedatectl. Verify NTP is active:
timedatectl status
If the timezone is wrong: sudo timedatectl set-timezone Europe/London (substitute yours).
Codecs, Fonts, and Media (Items 7–10)
7. Install Restricted Extras
This metapackage includes MP3/AAC codecs, Microsoft fonts, and Flash-era compatibility libraries:
sudo apt install ubuntu-restricted-extras
Accept the EULA for Microsoft fonts when prompted.
8. Enable DVD Playback
If your machine has an optical drive (yes, some still do):
sudo apt install libdvd-pkg
sudo dpkg-reconfigure libdvd-pkg
9. Install Additional Fonts
For document compatibility with Windows and macOS users:
sudo apt install fonts-liberation fonts-crosextra-carlito fonts-crosextra-caladea
10. Configure Firefox for Hardware Video Acceleration
Firefox ships as a snap on 24.04. Enable VA-API acceleration in about:config:
- Set
media.ffmpeg.vaapi.enabledtotrue - Set
gfx.webrender.alltotrue
This reduces CPU usage significantly when watching videos, especially on laptops.
Privacy and Security (Items 11–15)
11. Review Privacy Settings
Open Settings → Privacy. Consider disabling:
- Connectivity Checking (pings Canonical’s servers)
- Location Services (unless you need weather widgets)
- Usage & History (file access logging)
12. Configure the Firewall
Ubuntu ships with ufw but it is disabled by default:
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw enable
If you need SSH: sudo ufw allow ssh.
13. Set Up Automatic Security Updates
sudo apt install unattended-upgrades
sudo dpkg-reconfigure -plow unattended-upgrades
This ensures critical security patches are applied automatically.
14. Review Snap Permissions
Snaps have their own permission model. Review what each snap can access:
snap connections <snap-name>
Revoke unnecessary permissions with snap disconnect.
15. Configure DNS-over-HTTPS (Optional)
For encrypted DNS resolution, edit /etc/systemd/resolved.conf:
[Resolve]
DNS=1.1.1.1#cloudflare-dns.com
DNSOverTLS=yes
Restart with sudo systemctl restart systemd-resolved.
Development Tools (Items 16–19)
16. Install Build Essentials
The bare minimum for compiling software:
sudo apt install build-essential git curl wget
17. Install Your Preferred Terminal Multiplexer
tmux is invaluable for remote sessions and local workflow:
sudo apt install tmux
18. Set Up SSH Keys
ssh-keygen -t ed25519 -C "[email protected]"
eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id_ed25519
19. Install Docker (If Needed)
sudo apt install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu noble stable" | sudo tee /etc/apt/sources.list.d/docker.list
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io
sudo usermod -aG docker $USER
Log out and back in for the group change to take effect.
Desktop Customisation (Items 20–23)
20. Install GNOME Tweaks and Extension Manager
sudo apt install gnome-tweaks gnome-shell-extension-manager
Tweaks lets you control fonts, window titlebar buttons, and startup applications. Extension Manager is the modern way to browse and install GNOME extensions.
21. Configure Night Light
Settings → Displays → Night Light. Set it to sunset-to-sunrise. Your eyes will thank you during late-night debugging sessions.
22. Set Up Workspaces
GNOME 46 supports fixed or dynamic workspaces. Open Settings → Multitasking and choose your preference. We find four fixed workspaces — one per task context — works well.
23. Install a Clipboard Manager
GNOME’s built-in clipboard history is minimal. For something more capable:
sudo apt install gpaste
Or install the “Clipboard Indicator” GNOME extension.
Backup and Maintenance (Items 24–25)
24. Configure Timeshift for System Snapshots
sudo apt install timeshift
Open Timeshift, select rsync mode, and configure daily snapshots with a retention of five. This gives you a reliable rollback if a package update goes wrong.
25. Schedule a Monthly Maintenance Reminder
Create a simple cron job or calendar reminder to:
- Run
sudo apt update && sudo apt full-upgrade - Check
snap refresh --listfor pending snap updates - Review
journalctl -p 3 -bfor critical errors - Verify Timeshift snapshots are current
This single habit prevents most of the “my system broke after months of neglect” scenarios.
What to Do Next
With this checklist complete, your Ubuntu 24.04 installation is secure, functional, and personalised. For deeper dives into specific topics, see:
- Snap vs Flatpak vs Deb — choosing the right package format
- Install Google Chrome on Ubuntu 24.04 — the correct way to add Chrome
- Best Screenshot Tools for Ubuntu — Wayland-compatible options