Package_format

Package format

Package format

Type of computer archive


Package format is a type of archive containing computer programs and additional metadata needed by package managers;[1] an instance of this type of archive is called a package. While the archive file format itself may be unchanged, package formats carry additional metadata, such as a manifest file or certain directory layouts. Packages may contain either source code or executable files.

Packages may be converted from one type to another with software such as Alien.

Software supply chain and security

Packages are an important component in managing the security and integrity of the software supply chain. Packages containing executables and configuration can be digitally signed to establish the integrity of running software and protect against tampering.[2]

Package formats that support code signing include .deb (Debian), .msi (Microsoft Windows), .apk (Android) and .ipa (IOS, IPadOS).

Common formats

Specialized formats

Generic formats

Arch Linux's Pacman[11] and Slackware[12] use 'tar' archives with generic naming but specific internal structures.


References

  1. "Protecting Software Integrity Through Code Signing". nist.gov.
  2. "Alpine package format - Alpine Linux". wiki.alpinelinux.org. Retrieved May 19, 2016.
  3. "App packaging". Retrieved September 29, 2014.
  4. "InstallingSoftware - Community Ubuntu Documentation". Help.ubuntu.com. Retrieved April 24, 2013.
  5. "ebuild". Retrieved July 29, 2015.
  6. "Basics to Package Management". Retrieved May 1, 2020.
  7. "rpm - Trac". Retrieved September 29, 2014.



Share this article:

This article uses material from the Wikipedia article Package_format, and is written by contributors. Text is available under a CC BY-SA 4.0 International License; additional terms may apply. Images, videos and audio are available under their respective licenses.