Personal package repos?

xxedgexx

First, I come from the rpm/yum/dnf world in terms of package management. Can I set up a similar repository for Android packages which can be verified through some kind of GPG signature? I’m not familiar with how Android packages are built. Coming from a mostly pure linux world. Thanks.

Carlos-Anso

xxedgexx
Theres a package manager built into AOSP which pins the cert that the apk has been signed with. After that all updates have to be signed with the same certificate.

For a robust solution for supplying apps and updates look at forking GrapheneOS Apps
https://github.com/GrapheneOS/Apps
https://github.com/GrapheneOS/apps.grapheneos.org

de0u

xxedgexx In the Android world there isn't a way to wham down files at arbitrary places in the system partition, which is what traditional Linux package managers do, because it's not very secure.

The package system in the Android world is apps. Various app installers support specifying sources -- take a look at Obtanium and F-doid, for example.