QubesOS packages infrastructure

The TrenchBoot project builds QubesOS packages for the following QubesOS components:

• vmm-xen from repository Xen
• grub2 from repository GRUB
• antievilmaid from repository qubes-antievilmaid
• secure-kernel-loader from repository Secure Kernel Loader

The general workflow for the release candidate (i.e., RC) packages is the following:

Note that the workflow for signing might contain additional steps, e.g., for checking RPM repository metadata integrity, that are not shown on the diagram above. The diagram above presents only the steps that are necessary to understand the flow of building, signing, and publishing the packages.

The repository with the RC packages can be found here.