Fortunately it seems to be something that Entropic gets right: https://github.com/entropic-dev/entropic https://github.com/entropic-dev/entropic If it ends up

Fortunately it seems to be something that Entropic gets right: https://github.com/entropic-dev/entropic https://github.com/entropic-dev/entropic If it ends up supporting PGP signatures for packages (ideally created by developers using air-gapped machines) then so much the better: https://github.com/entropic-dev/entropic/issues/86#issuecomment-499605050 https://github.com/entropic-dev/entropic/issues/86#issuecomm...