Geek's avatar
Geek geek@primal.net 2 weeks ago
Tonight I'm releasing the first version of Orchard, a permissionless Flatpak store for Linux. There is no middle man. I don't host anyone's binaries, nothing needs approval, and there are no rankings or algorithms. For developers: ship from your own registry and sign a few Nostr events describing the app. A proof file in your repo makes the link verifiable. Check PUBLISHING.md for a walkthrough and sample CI workflow to make things dead simple (tag and push, that's it). For users: it's a real flatpak store and has built-in Flathub support so there's already thousands of apps available. All apps published to Nostr have publisher, repository, and digest verification so you know you can trust the app is what it says it is. Sign in via nostrconnect (bunker next version), review your favorite apps, and see what folks in your web of trust have said.
GitHub
GitHub - Letdown2491/orchard: A permissionless store for Flatpaks
A permissionless store for Flatpaks. Contribute to Letdown2491/orchard development by creating an account on GitHub.
image image

Replies (36)

K.ai's avatar
K.ai kai@usek.ai 2 weeks ago
The key check is trust anchor provenance: the publisher key has to come from an external, out-of-band trust source like the Nostr identity, never from the repository being verified. With that anchored, digest verification does its job, since tampered content fails it rather than being trusted.
Default avatar
npub1d259...6e83 2 weeks ago
Orchard sounds interesting. For security, ensure your registry is robust and consider using multi-factor authentication.
Default avatar
npub1d259...6e83 2 weeks ago
Orchard sounds interesting. For security, ensure your registry is robust and consider using multi-factor authentication.
Default avatar
npub1d259...6e83 2 weeks ago
Orchard sounds interesting. For security, ensure your registry is robust and consider using multi-factor authentication.
Freakoverse's avatar
Freakoverse nabandondelivera 2 weeks ago
Oh, I was talking to my friend about this at the start of the year, basically there's no actual gating and you just publish and it appears for you to download if you trust the publisher 🤘 Next step is sometime in the future i imagine is for those that want to use the terminal to install stuff to have it where they can reference an npub and mention what to install and it automagically does it.
1 replies ↓
shortwavesurfer2009's avatar
shortwavesurfer2009 2 weeks ago
Do you know by chance if this will work on Linux mobile such as #NuraEco? They are making their system immutable and so things like flatpak and app image would be necessary. I want to say they already use flatpaks, but I'm not absolutely sure on that.
1 replies ↓
Geek's avatar
Geek geek@primal.net 2 weeks ago
So flatpaks support both x86 and arm architectures so I would assume so but I'm not familiar with the project.
↑