OCI signing?
OCI signing?
Posted May 14, 2025 20:56 UTC (Wed) by DemiMarie (subscriber, #164188)Parent article: The future of Flatpak
Will OCI support signed flatpaks? If not, that is a dealbreaker for security-sensitive users.
Posted May 15, 2025 10:50 UTC (Thu)
by swick (subscriber, #110059)
[Link]
OCI signing?
For downloading, sure, that can work the same way as with ostree remotes. Tying it into the kernel doesn't really work with current flatpak because everything just becomes part of an ostree repo locally.