Note that deb packages are not usually signed unless something major changed in the last 5 years or so. The repository metadata is signed and contains a checksu

Note that deb packages are not usually signed unless something major changed in the last 5 years or so. The repository metadata is signed and contains a checksum of all packages. It’s all safe as long as you install from a repo, but installing a deb package directly doesn’t usually do signature checks. See https://www.debian.org/doc/manuals/securing-debian-manual/deb-pack-sign.en.html https://www.debian.org/doc/manuals/securing-debian-manual/de... AFAIR there are options to sign packages themselves, but there’s at least two competing incompatible signing schemes. rpm packages carry a signature in the package itself.