Together with @hko I have worked on the "File Hierarchy for the Verification of OS Artifacts" ( #VOA) in 2024 and 2025.
This #STF ( @sovtechfund ) funded #specification and #ReferenceImplementation (🦀) enables technology and distribution agnostic verification of OS artifacts.
In this #blog post we are looking into the #verification of #ArchLinux artifacts, using the `voa` #CLI and its #OpenPGP backend:
https://devblog.archlinux.page/2026/verify-arch-linux-artifacts-using-voa-openpgp/
#devblog #RustLang #SovereignTechFund #DigitalSignature #packaging
