Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Why isn't Metasploit in Ubuntu's software repositories?

More broadly, on what basis is software chosen or not to be added to the official Ubuntu repositories? Who takes those decisions? etc.

share|improve this question
up vote 9 down vote accepted

There are really two questions here.

I'll answer the broader question first. The answer is "The Ubuntu Community".

There's a process for adding software to Ubuntu's archive and having it tested as part of the releases:

To answer about metasploit, its hard to say why it hasn't been packaged yet. There is a debian "Intent To Package" bug filed that is 1607 days old here:

If this were ever completed, it would automatically be included in the Ubuntu universe repository. However, the bug report lists a blocker on the copyright status of some of the files. If this isn't resolved, then it won't enter Debian, and likely won't be included with Ubuntu unless the distribution legality is clarified.

share|improve this answer

Software is chosen based on it's packaging, licensing and available maintainership. If your desired package is open source and has a package maintainer in debian that is making sure to maintain it, then it makes it's way into Ubuntu automatically.

See the MOTU Getting Started Guide:

The package you want looks like it may have an open source version, but getting it in will be a matter of working on the packaging.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.