-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Dear Qubes Community,
Marek has just published the following announcement:
https://www.qubes-os.org/news/2020/10/05/qubes-os-contributed-packages/
The plain text of this announcement is reproduced below.
======================================================================
"Qubes OS contributed packages are now available"
by Marek Marczykowski-Górecki
We are happy to announce the availability of Qubes OS contributed packages under the [QubesOS-contrib] GitHub Project. This is a place where our community can [contribute Qubes OS related packages, additions and various customizations][package-contrib]. Meanwhile, we provide the infrastructure and [review process] necessary to make them available easily and safely to users within standard Qubes installations.
[Frédéric Pierret] built the infrastructure based on a similar setup for building official packages. This means that it features the same [Qubes build security] measures, including keeping the signing keys separate in a dedicated VM, downloading packages over Tor, publishing build logs in a non-spoofable way and more. Frédéric is also the maintainer of [QubesOS-contrib].
The source code repositories of the packages and infrastructure-related parts are also hosted under [QubesOS-contrib].
To contribute a package, follow the process described at [package contributions]. You will find a few helpful tips there, including a [skeleton repository] with example RPM packaging and [Qubes Builder] integration.
Since the project has been running for some time already, there are already some submitted packages available there. To name a few:
- [qubes-tunnel]
- [qvm-screenshot-tool]
- [qmenu]
You can find the full list at [QubesOS-contrib].
If you want to install one of these packages, first you need to enable the repository in your system (dom0 and/or templates). This can be done by installing the `qubes-repo-contrib` package. This package includes the repository definition and keys necessary to download, verify, and install [QubesOS-contrib] packages.
In dom0, use `qubes-dom0-update`:
sudo qubes-dom0-update qubes-repo-contrib
In a Fedora-based template, use `dnf`:
sudo dnf install qubes-repo-contrib
In a Debian-based template, use `apt`:
sudo apt update && sudo apt install qubes-repo-contrib
[QubesOS-contrib]:
https://github.com/QubesOS-contrib/
[package-contrib]:
https://www.qubes-os.org/doc/package-contributions/
[review process]:
https://www.qubes-os.org/doc/package-contributions/#review-procedure
[Frédéric Pierret]:
https://www.qubes-os.org/team/#fr%C3%A9d%C3%A9ric-pierret
[Qubes build security]:
https://www.qubes-os.org/news/2016/05/30/build-security/
[package contributions]:
https://www.qubes-os.org/doc/package-contributions/
[skeleton repository]:
https://github.com/QubesOS-contrib/qubes-skeleton/
[Qubes Builder]:
https://www.qubes-os.org/doc/qubes-builder/
[qubes-tunnel]:
https://github.com/QubesOS-contrib/qubes-tunnel
[qvm-screenshot-tool]:
https://github.com/QubesOS-contrib/qvm-screenshot-tool
[qmenu]:
https://github.com/QubesOS-contrib/qmenu
======================================================================
-----BEGIN PGP SIGNATURE-----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=tYPp
-----END PGP SIGNATURE-----