OrbitaOS package repository

Signed pacman packages for Arch Linux.

1. Check this fingerprint

Everything below trusts this key. Compare it against the fingerprint published anywhere else you have seen it — do not take it only from this page.

EA4B 2045 166B 3E6C E27F A8FB 2840 6FF0 3759 7F09

2. Trust the key

curl -O https://orbitaos.org/orbitaos.asc
gpg --show-keys orbitaos.asc          # compare with the fingerprint above
sudo pacman-key --add orbitaos.asc
sudo pacman-key --lsign-key EA4B2045166B3E6CE27FA8FB28406FF037597F09

The keyring package is signed by the key it contains, so pacman cannot verify it until the key is already trusted. These two commands are that step; skipping them gives you error: required key missing from keyring.

3. Install the keyring

sudo pacman -U https://orbitaos.org/orbita/x86_64/orbitaos-keyring-1-1-any.pkg.tar.zst

4. Add the repository

Append to /etc/pacman.conf:

[orbita]
SigLevel = Required DatabaseRequired TrustedOnly
Server = https://orbitaos.org/$repo/$arch

Then sudo pacman -Syu.

Testing channel

Unreleased builds from main. Expect breakage; report it.

[orbita-testing]
SigLevel = Required DatabaseRequired TrustedOnly
Server = https://orbitaos.org/$repo/$arch