apt-mirror / Ubuntu archive mirror

This host mirrors archive.ubuntu.com and security.ubuntu.com — main, universe, restricted, and multiverse — across every currently supported Ubuntu release, from 18.04 LTS through 26.04 LTS. Point apt here to speed up apt update/apt install and cut outbound bandwidth. The copy-ready examples below use mirror.sepehrsabz.ir/ubuntu.

01 — QUICK SWITCH

Repoint an existing install in one line

Works on any release still using the classic /etc/apt/sources.list file — swaps both the main archive and security hosts in place.

shell

# back up first
sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak

sudo sed -i 's|archive.ubuntu.com|mirror.sepehrsabz.ir|g; s|security.ubuntu.com|mirror.sepehrsabz.ir|g' /etc/apt/sources.list

sudo apt update

02 — CLASSIC SOURCES.LIST (UP TO 23.10)

Full replacement, any codename

Substitute your release's codename (jammy, focal, bionic, etc.) in place of <codename> below.

/etc/apt/sources.list

deb https://mirror.sepehrsabz.ir/ubuntu <codename> main restricted universe multiverse
deb https://mirror.sepehrsabz.ir/ubuntu <codename>-updates main restricted universe multiverse
deb https://mirror.sepehrsabz.ir/ubuntu <codename>-backports main restricted universe multiverse
deb https://mirror.sepehrsabz.ir/ubuntu <codename>-security main restricted universe multiverse

03 — DEB822 FORMAT (24.04+)

ubuntu.sources

Ubuntu 24.04 (Noble) and later ship the newer Deb822 /etc/apt/sources.list.d/ubuntu.sources format by default.

/etc/apt/sources.list.d/ubuntu.sources

Types: deb
URIs: https://mirror.sepehrsabz.ir/ubuntu
Suites: <codename> <codename>-updates <codename>-backports
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

Types: deb
URIs: https://mirror.sepehrsabz.ir/ubuntu
Suites: <codename>-security
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

The existing ubuntu-archive-keyring.gpg package signature is unaffected by the source change — packages are still cryptographically verified the same way.

04 — SUPPORTED RELEASES

Every codename this mirror carries, as of July 2026

Version	Codename	Type	Status
`26.04`	Resolute Raccoon	LTS	Current — supported to 2031
`25.10`	Questing Quokka	Interim	EOL ~Jul 2026 (9-month window)
`24.04`	Noble Numbat	LTS	Supported to 2029
`22.04`	Jammy Jellyfish	LTS	Supported to 2027
`20.04`	Focal Fossa	LTS	Standard support ended — ESM via Ubuntu Pro
`18.04`	Bionic Beaver	LTS	EOL — ESM via Ubuntu Pro only

EOL suites are still mirrored under old-releases pathing for archival/reproducibility purposes, but no longer receive new security patches from upstream regardless of which mirror you use — upgrade if you're on one of them.

05 — DOCKER / CI

Repoint inside a build

Dockerfile

FROM ubuntu:24.04
RUN sed -i 's|http://archive.ubuntu.com|https://mirror.sepehrsabz.ir|g; s|http://security.ubuntu.com|https://mirror.sepehrsabz.ir|g' \
      /etc/apt/sources.list.d/ubuntu.sources && \
    apt-get update

Dockerfile

FROM ubuntu:22.04
RUN sed -i 's|archive.ubuntu.com|mirror.sepehrsabz.ir|g; s|security.ubuntu.com|mirror.sepehrsabz.ir|g' \
      /etc/apt/sources.list && \
    apt-get update

06 — VERIFY

Confirm apt is pulling through the mirror

shell

apt-cache policy | head -5
curl -s https://mirror.sepehrsabz.ir/ubuntu/dists/jammy/Release -o /dev/null -w "%{http_code}\n"

# install something and time it
time sudo apt install -y curl

Check	Expected result
`apt-cache policy`	Lists `mirror.sepehrsabz.ir` as a source
`GET /dists/<codename>/Release`	`200` — mirror is reachable
First install of a package	Slower — cache miss, fetched from upstream and stored
Repeat install elsewhere on the network	Fast — served from local cache

07 — NOTES

Package integrity is unaffected. Every .deb and its Release/Packages index is still verified against Canonical's archive signing keys regardless of which mirror served the bytes — switching the source URL doesn't weaken that chain.

This mirror doesn't publish packages — there's no upload path here, only reads. If you're running Ubuntu Pro / ESM for an older LTS, those entitlement-gated repos (esm.ubuntu.com) are separate from this archive mirror and still need to be configured against Canonical directly. If it's served over plain HTTP internally, that's fine for apt — package signatures, not transport TLS, are what apt actually trusts.