Package: xen-system-amd64 (4.20.2+37-g61ff35323e-0+deb13u1)
Xen System on AMD64 (metapackage)
Other Packages Related to xen-system-amd64:
Download xen-system-amd64
Use this package
OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Checksums and observation dates
For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.
4.20.2+37-g61ff35323e-0+deb13u1 / amd64Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: d4ae03f80e94193a052557790ec21b8384fbf83ca5bf7895a21c6ced58e3ba84
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' 'd4ae03f80e94193a052557790ec21b8384fbf83ca5bf7895a21c6ced58e3ba84' 'xen-system-amd64_4.20.2+37-g61ff35323e-0+deb13u1_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
4.20.4+39-gf1e1321c87-0+deb13u1 / amd64Observed Oct 18, 2026 to Oct 21, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: ff6feb3ba29ff3f9729acea6dcfc1cfae4853d41f22026c3b58429fcc98856e6
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' 'ff6feb3ba29ff3f9729acea6dcfc1cfae4853d41f22026c3b58429fcc98856e6' 'xen-system-amd64_4.20.4+39-gf1e1321c87-0+deb13u1_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian Security revision trixie-security-main-amd64:33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
4.20.3+127-gc42374a105-0+deb13u1 / amd64Observed Aug 10, 2026 to Oct 18, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 6dd39e37024923f73e740ff2bcdb3c60a919ce7b8f5b127bc3e2ed28cbc70901
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '6dd39e37024923f73e740ff2bcdb3c60a919ce7b8f5b127bc3e2ed28cbc70901' 'xen-system-amd64_4.20.3+127-gc42374a105-0+deb13u1_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian Security revision trixie-security-main-amd64:da000332b59fbd809b7e7a13c11cc78c36ad1430dd1869a49a514ff5ebc2bc90
Sources and provenance
Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.
Authoritative source; repository metadata signature verified, revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record- Signed-object SHA-256
- 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
- Signer fingerprint
- 4CB50190207B4758A3F73A796ED0E7B82643E131
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Sep 1, 2026
Signed Release → package-index hash linkagePath: main/binary-amd64/Packages.xz
Expected SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result: match verified
Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record- Signed-object SHA-256
- ebc037ef479e20ff279abbe69854c12d14d6dd384c623555610d2bfb7bb90187
- Signer fingerprint
- B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Oct 21, 2026
Signed Release → package-index hash linkagePath: main/binary-amd64/Packages.xz
Expected SHA-256: 33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
Observed SHA-256: 33fd812503c0c28c99916d31bfac44f4f4476e4cdad8afb6aef5644c0376f8e2
Result: match verified
Authoritative source; repository metadata signature verified, revision trixie-security-main-amd64:da000332b59fbd809b7e7a13c11cc78c36ad1430dd1869a49a514ff5ebc2bc90
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record- Signed-object SHA-256
- 5510808993fdc57e97aca13dda7573e45cf39c201870faca02ed323874801713
- Signer fingerprint
- B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Oct 18, 2026
Signed Release → package-index hash linkagePath: main/binary-amd64/Packages.xz
Expected SHA-256: da000332b59fbd809b7e7a13c11cc78c36ad1430dd1869a49a514ff5ebc2bc90
Observed SHA-256: da000332b59fbd809b7e7a13c11cc78c36ad1430dd1869a49a514ff5ebc2bc90
Result: match verified