Package: composefs (1.0.8-3.fc43) Tools to handle creating and mounting composefs images Tools to handle creating and mounting composefs images. The composefs
project combines several underlying Linux features to provide a very
flexible mechanism to support read-only mountable filesystem trees,
stacking on top of an underlying "lower" Linux filesystem.
Please see https://github.com/containers/composefs for more information.
Other Packages Related to composefs: dep: [composefs-libs ] (= 1.0.8-3.fc43)
Libraries for composefs
dep: filesystem(unmerged-sbin-symlinks)
Package not available
dep: ld-linux-aarch64.so.1()(64bit)
Package not available
dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
Package not available
dep: libcomposefs.so.1()(64bit)
Package not available
dep: libgcc_s.so.1()(64bit)
Package not available
dep: libgcc_s.so.1(GCC_3.0)(64bit)
Package not available
dep: libgcc_s.so.1(GCC_3.3.1)(64bit)
Package not available
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.38)(64bit)
Package not available
Package file paths (33) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/composefs-info /usr/bin/mkcomposefs /usr/bin/mount.composefs /usr/lib/.build-id /usr/lib/.build-id/10 /usr/lib/.build-id/10/9bdf96f04bdcc920d95f05c3764fa7ef5ca313 /usr/lib/.build-id/21 /usr/lib/.build-id/21/639a865707db5a67aeaea55110c9305b8ac1c6 /usr/lib/.build-id/24 /usr/lib/.build-id/24/187d8503ee90a2b712763f2a9b3f96acf35bd4 /usr/lib/.build-id/25 /usr/lib/.build-id/25/f7910870caca6c7a81cb6fe52ea27d8402a254 /usr/lib/.build-id/33 /usr/lib/.build-id/33/2fe52626e7fe55016719b34b4b345af160edb9 /usr/lib/.build-id/3e /usr/lib/.build-id/3e/2a06f619e298ca10c275636cbf05318f242df3 /usr/lib/.build-id/75 /usr/lib/.build-id/75/396f86eb31b471daa93f9a3d8cd621053dc0a5 /usr/lib/.build-id/75/6d8805ead2651a356609b8d389bc0db6adafa8 /usr/lib/.build-id/95 /usr/lib/.build-id/95/95ec058dd8ff882a800ccfef34b5448f2cbbab /usr/share/doc/composefs /usr/share/doc/composefs/README.md /usr/share/licenses/composefs /usr/share/licenses/composefs/COPYING /usr/share/licenses/composefs/COPYING.GPL-2.0-only /usr/share/licenses/composefs/COPYING.GPL-2.0-or-later /usr/share/licenses/composefs/COPYING.LGPL-2.1-or-later /usr/share/licenses/composefs/LICENSE.Apache-2.0 /usr/share/man/man1/composefs-info.1.gz /usr/share/man/man1/mkcomposefs.1.gz /usr/share/man/man1/mount.composefs.1.gz /usr/share/man/man5/composefs-dump.5.gz Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Checksums and observation dates For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.
1.0.8-3.fc43 / aarch64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 1087991b5b76c58c9de1f9724407babcb66d4518a342ec81588b85f6dee90ce8
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '1087991b5b76c58c9de1f9724407babcb66d4518a342ec81588b85f6dee90ce8' 'composefs-1.0.8-3.fc43.aarch64.rpm' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
1.0.8-3.fc43 / i686 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: e5cf4d3183cc31c621d1edd2773bda5b61de645fda56f30f53b8ede0171a0399
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' 'e5cf4d3183cc31c621d1edd2773bda5b61de645fda56f30f53b8ede0171a0399' 'composefs-1.0.8-3.fc43.i686.rpm' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
1.0.8-3.fc43 / x86_64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 28713d54e2f9d2f953663f3a48be78494f5e915b95b72c66f2358da862786f51
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '28713d54e2f9d2f953663f3a48be78494f5e915b95b72c66f2358da862786f51' 'composefs-1.0.8-3.fc43.x86_64.rpm' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Sources and provenance Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.
Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Signer fingerprint Not recorded
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: Not recorded Expected SHA-256: Not recorded Observed SHA-256: Not recorded Result: match verified
Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Signer fingerprint Not recorded
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: Not recorded Expected SHA-256: Not recorded Observed SHA-256: Not recorded Result: match verified