@marcan Linux is an absolute mess in this regard. PGP is no good. Need a vendor to provide a distro with the Apple code signing verification model. Centralized dev cert distribution with CRLs, so there can be code signing verification on executables, packages, (and scripts). But it will never happen.