Together with @hko I have worked on the "File Hierarchy for the Verification of OS Artifacts" ( #VOA) in 2024 and 2025.

This #STF ( @sovtechfund ) funded #specification and #ReferenceImplementation (🦀) enables technology and distribution agnostic verification of OS artifacts.

In this #blog post we are looking into the #verification of #ArchLinux artifacts, using the `voa` #CLI and its #OpenPGP backend:
https://devblog.archlinux.page/2026/verify-arch-linux-artifacts-using-voa-openpgp/

#devblog #RustLang #SovereignTechFund #DigitalSignature #packaging

Together with @hko I have worked on the "File Hierarchy for the Verification of OS Artifacts" ( #VOA) in 2024 and 2025.

This #STF ( @sovtechfund ) funded #specification and #ReferenceImplementation (🦀) enables technology and distribution agnostic verification of OS artifacts.

In this #blog post we are looking into the #verification of #ArchLinux artifacts, using the `voa` #CLI and its #OpenPGP backend:
https://devblog.archlinux.page/2026/verify-arch-linux-artifacts-using-voa-openpgp/

#devblog #RustLang #SovereignTechFund #DigitalSignature #packaging

Together with @hko @j-g00da, @orhun and @Nukesor I have been working on the #ALPM and #VOA projects in 2024 and 2025.

This #SovereignTechFund ( @sovtechfund ) funded work has recently come to a close.

You can read all about what was achieved and plans for future work on the #ArchLinux #devblog: https://devblog.archlinux.page/2026/a-year-of-work-on-the-alpm-project/

#OpenPGP #packaging #DigitalSignature #Verification #STF #blog

Together with @hko @j-g00da, @orhun and @Nukesor I have been working on the #ALPM and #VOA projects in 2024 and 2025.

This #SovereignTechFund ( @sovtechfund ) funded work has recently come to a close.

You can read all about what was achieved and plans for future work on the #ArchLinux #devblog: https://devblog.archlinux.page/2026/a-year-of-work-on-the-alpm-project/

#OpenPGP #packaging #DigitalSignature #Verification #STF #blog