How can I tell what date Ubuntu was installed?

Question

is there a command which will output the date that ubuntu (or any distribution) was installed?

Answer 1

You can check the installer logs and dates at:

/var/log/installer

A quick way to find the date through the command line would be by running:

ls -lt /var/log/installer

That lists in reverse chronological order so the oldest file is at the bottom of the list.

Answer 2

If you use ext2/ext3/ext4 and formatted the disk when you installed you can do this nifty trick.

sudo dumpe2fs /dev/sda1 | grep 'Filesystem created:'

You might have to change the /dev/sda1 to reflect your setup.

Example output

Filesystem created: Fri Oct 14 22:40:09 2022

Relying on the date of files, even the "creation time" (mtime) can give errors since upgrading packages might have replaced the file and made a new "creation time".

Similar tools and info might be available on other file systems as well, but I don't know of them.

Answer 3

the only command that worked for me is -

sudo ls -alct /|tail -1|awk '{print $6, $7, $8}'

Answer 4

If the installation is recent, look at the oldest entries under /var/log, but after a few weeks the logs will have been rotated away.

Another thing to look at is the oldest ctime of a file on the root filesystem; but if the whole installation has been copied (e.g. rescued off a failing disk) at the directory tree level, this gives you the date of the copy.

If a heuristic is good enough, look at the date (mtime) of a file that was created during the installation and is unlikely to have been modified since. A good candidate is /etc/hostname; other candidates are /etc/hosts, /etc/papersize, /etc/popularity-contest.conf.

Answer 5

I also don't know of a specific command or file. I'm using some heuristics to find the installation date:

for dir in {/etc,/usr,/lib}; do
  sudo find $dir -type f -exec stat -c %z {} \; | \
    sed -e 's,-,,g' -e 's, .*,,' | sort | uniq -c | sort -nr -k 2 | \ 
    grep -Ev " [0-9]?[0-9] "
done

This small script looks for files in /etc and /usr and prints out the last changed date. It does some reformatting and lists the occurrences sorted by date (newest first). Usually the oldest entry is the installation date.

This assumes that after an installation are left unchanged. This is in most cases (according to my observation) true, but in special cases it can also give wrong results.

Answer 6

Unfortunately most answers can be misleading for cloud services because they often have an image they created beforehand.

In that case the best bet might be delving inside /var/log files and finding evidence of your own earliest boots.

Logs themselves may be from the image so you might need logs or file/dir creation dates unique to you.

Answer 7

For my Linux Mint system the following worked:

    sudo grep 'RTC time' /var/log/installer/syslog

The problem was my syslog didn't show years in the time stamps.

Answer 8

The command sudo grep ubiquity /var/log/installer/syslog | less worked for me very well.

Answer 9

I don't think there is.

On Red Hat / CentOS there is the install.log files that is generated when you install the system, but this doesn't exist on Ubuntu.

Assuming your logs go back far enough ( mine do ) you can determine the date the base installation was done in /var/log/dpkg.log*

For example on my system the first two lines of my oldest dpkg.log file (dpkg.log.4.gz) are

2010-04-19 11:40:55 startup archives install
2010-04-19 11:40:55 install base-files <none> 5.0.0ubuntu18

So I installed this system on 19/04/2010 at 11:40:55. That is correct for this system.

There was also a brainstorm idea to add this born date.

Answer 10

You can type this :

$ \ls -lact --full-time / | awk 'END {print $6,substr($7,1,8)}'
2021-09-08 18:15:47

Or if you have ext2/3/4 filesystem on the / partition, you can type this :

$ sudo tune2fs -l $(findmnt -n -o source -T /) | awk '/created:/{$1=$2="";print substr($0,3)}'
Wed Sep 8 18:15:47 2021

Or if the directory /var/log/installer still exists :

$ \ls -lact --full-time /var/log/installer | awk 'END {print $6,substr($7,1,8)}'
2020-12-27 14:38:45

Answer 11

would it be simple (i may be wrong) just to check software centre, while in there click on 'history' and scroll down to the bottom of your installed updates. Mine shows april 23 2012 first installation. Which is about right when I started using ubuntu?