Ubuntu repositories are organized software sources that provide packages for installation and updates. The four standard components are Main, Universe, Restricted, and Multiverse. Their differences mainly concern licensing, who maintains the software, and the level of security and support available.
Knowing the repository for a package helps you judge its maintenance path before installing it. A package from Multiverse is not handled in the same way as a package from Main, even when both can be installed with the same package manager.
Table of Contents
What is an Ubuntu repository?
An Ubuntu repository is a software source containing packages that Ubuntu can install and update. The package manager uses repository metadata to find available packages, resolve dependencies, and obtain newer versions. Ubuntu documents package installation and package management through its server documentation, including the use of configured software sources and package management tools.
Repository components are not separate Ubuntu editions. They are sections of the Ubuntu archive. A package’s component gives useful information about its licensing and maintenance status, but it does not replace normal checks such as reviewing the package name, version, source, and update history.
What does Main contain?
Main contains software that forms the core of the Ubuntu system. It includes packages that Ubuntu relies on for the operating system and common system functions. Main is the repository component with the clearest Ubuntu maintenance commitment.
Software in Main receives security updates from Ubuntu for the relevant Ubuntu release support period. Ubuntu provides security update information and explains how security updates are delivered for supported releases in its security updates documentation.
Main is usually the simplest choice when security maintenance and predictable support are the main concerns. This does not mean that every package is risk-free. It means that the package is part of the software set covered by Ubuntu’s standard maintenance process.
What does Universe contain?
Universe contains a wide range of community-maintained free and open-source software. It provides many applications, libraries, tools, and development packages that are useful but are not part of the core system.
Universe gives users a broader software choice than Main. Its maintenance model is different, however. The Ubuntu community maintains these packages, while security updates depend on contributors and available maintenance work. Security coverage is therefore not the same as the standard coverage for Main.
A Universe package can still be useful and well maintained. Before using one for an important service, check that the package receives updates and fits the maintenance needs of the system. Ubuntu’s repository documentation describes the role of Universe and the other archive components.
What does Restricted contain?
Restricted contains software that Ubuntu supports but cannot distribute under the same free and open-source terms as software in Main. Hardware drivers are a common example of the type of software found in this component.
Restricted exists because some hardware may need software that has licensing or source-code conditions different from the rest of the Ubuntu system. Ubuntu can still provide support and security maintenance for packages in this component, subject to the support policy for the Ubuntu release.
Restricted is normally relevant when a computer needs specific hardware support. Its presence does not mean that the software is untrusted. The main difference is the licensing and distribution model, not simply whether the package is useful or system-related.
What does Multiverse contain?
Multiverse contains software that does not meet Ubuntu’s free software requirements. This may be due to licensing, legal, or redistribution conditions. The software can be packaged for Ubuntu, but it is not part of the same supported software set as Main.
Multiverse packages generally do not receive the same security and support commitment as packages in Main. Ubuntu’s repository guidance identifies Multiverse as a component where users should review the package’s licensing and maintenance position before relying on it.
Multiverse can be reasonable when a required application is available there and its license and maintenance status are acceptable for your use. For a production or long-lived system, treat the package as a separate maintenance decision rather than assuming that all Ubuntu archive components have identical support.
How do the repositories differ?
| Repository | Typical contents | Maintenance and security meaning |
|---|---|---|
| Main | Core Ubuntu system software and key applications | Standard Ubuntu security and maintenance coverage for the release |
| Universe | Community-maintained free and open-source software | Maintenance and security updates depend on community support |
| Restricted | Supported software with non-free licensing terms, often hardware drivers | Ubuntu support is available, with licensing different from Main |
| Multiverse | Software that does not meet Ubuntu’s free software requirements | Less support and security commitment; review before deployment |
When is enabling an additional repository reasonable?
Use the smallest repository set that provides the software your system needs. Main is the usual starting point for core system packages. Universe is reasonable when you need community-maintained open-source software that is not in Main. Restricted may be needed for supported hardware drivers. Multiverse may be suitable when a required package has licensing or redistribution conditions outside Ubuntu’s free software requirements.
Before installing a package from an additional component, check its repository component, license, update activity, and role in your system. The package manager can install software from configured repositories, but installation alone does not make every package equally supported. Ubuntu’s documentation for installing and managing packages describes the package-management process.
How repository choice affects security
Repository choice affects where you look for security updates and what level of maintenance you can expect. Main has the most direct Ubuntu security coverage. Universe relies more heavily on community maintenance. Restricted is supported software with different licensing terms. Multiverse requires the most careful review because its support and security coverage are more limited.
Keep the configured repositories limited to sources you need, apply available security updates, and review packages that are critical to your system. Ubuntu’s security update documentation provides the basis for understanding how Ubuntu security updates are published and applied.