A package format (AKA Package) is a type of archive containing computer programs and additional metadata needed by package managers.[1] While the archive file format itself may be unchanged, package formats bear additional metadata, such as a manifest file or certain directory layouts. Packages may contain either source code or executable files.
Packages may be converted from one type to another with software such as Alien.
Software Development Lifecycle
Packages are important artifacts produced during the implementation phase of the Software Development Lifecycle (SDLC) . They are the products of the implementation phase, used during Customer Acceptance Testing and Service phases to determine if the software is viable to be put into service.
Package artifacts provide a reproducible configuration, allowing for quality (customer) acceptance teams to validate a software component as ready for service to customers. [2]
Software Supply Chain and Security
Packages are an important component in managing the security and integrity of the software supply chain. Packages containing executables & configuration can be digitally signed (see Code signing) to establish the integrity of running software and protect against tampering. [3]
Package formats that support Code signing include .deb (Debian), .msi (Microsoft Windows), .apk (Android) and .ipa (IOS, IPadOS)
Common formats
Specialized formats
Generic formats
Arch Linux's Pacman[12] and Slackware[13] use Tar archives with generic naming but specific internal structures.
References
- ^ Justin Angelo Cappos, Stork: Secure Package Management for VM Environments[permanent dead link], ProQuest, 2008, p. 128;
- ^ "What is the software development lifecycle (SDLC)? Phases and models".
- ^ "Protecting Software Integrity Through Code Signing". nist.gov.
- ^ "Alpine package format - Alpine Linux". wiki.alpinelinux.org. Retrieved May 19, 2016.
- ^ "App packaging". Retrieved September 29, 2014.
- ^ "InstallingSoftware - Community Ubuntu Documentation". Help.ubuntu.com. Retrieved April 24, 2013.
- ^ "ebuild". Retrieved July 29, 2015.
- ^ "Basics to Package Management". Retrieved May 1, 2020.
- ^ "Using Portage to Manage Packages in Gentoo". linode.com.
- ^ "Ports - Working with Ports". OpenBSD.org.
- ^ "rpm - Trac". Retrieved September 29, 2014.
- ^ "makepkg.conf(5) Manual Page".
- ^ "The Slackware Linux Project: Configuration Help". Retrieved September 29, 2014.