Package: pack (0.40.9-1.fc43) Convert code into runnable images pack is a CLI implementation of the Platform Interface Specification
for Cloud Native Buildpacks.
Other Packages Related to pack: Package file paths (10) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/pack /usr/lib/.build-id /usr/lib/.build-id/bb /usr/lib/.build-id/bb/f10dc3c10d73b8954d2488af62618305d5205a /usr/lib/.build-id/e8 /usr/lib/.build-id/e8/55d1ac1b20f9ce03764dc37b729ea9ec587b00 /usr/share/doc/pack /usr/share/doc/pack/README.md /usr/share/licenses/pack /usr/share/licenses/pack/LICENSE Field source: Fedora 43 updates aarch64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
Last synced: Oct 29, 2026, 7:08:12 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
0.40.9-1.fc43 / aarch64 Observed Sep 1, 2026 sha256 87bc071555c5…5aab7611Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 87bc071555c5eda776ff4ed068c5b8cb3024066d91fdd7eee26ab7015aab7611
Verify download
printf '%s %s\n' '87bc071555c5eda776ff4ed068c5b8cb3024066d91fdd7eee26ab7015aab7611' 'pack-0.40.9-1.fc43.aarch64.rpm' | sha256sum --check --strict -Field source: Fedora 43 updates aarch64
0.40.9-1.fc43 / x86_64 Observed Sep 1, 2026 sha256 421f1aee870e…e7b4e9fcSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 421f1aee870e86d5a6a75eb10eb4360aeb7d385c72d47403a3815057e7b4e9fc
Verify download
printf '%s %s\n' '421f1aee870e86d5a6a75eb10eb4360aeb7d385c72d47403a3815057e7b4e9fc' 'pack-0.40.9-1.fc43.x86_64.rpm' | sha256sum --check --strict -Field source: Fedora 43 updates x86_64
0.32.0-8.fc43 / aarch64 Observed Sep 1, 2026 sha256 fd581727d5c6…4031aebeSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): fd581727d5c66a9d534e3eb8676264019032860ca8d744d595d65d234031aebe
Verify download
printf '%s %s\n' 'fd581727d5c66a9d534e3eb8676264019032860ca8d744d595d65d234031aebe' 'pack-0.32.0-8.fc43.aarch64.rpm' | sha256sum --check --strict -Field source: Fedora 43 Everything aarch64
0.32.0-8.fc43 / x86_64 Observed Sep 1, 2026 sha256 4cb509163d13…fd31633dSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 4cb509163d1393098131d2bfb1341a132a15ac72a3bed4716efc75c3fd31633d
Verify download
printf '%s %s\n' '4cb509163d1393098131d2bfb1341a132a15ac72a3bed4716efc75c3fd31633d' 'pack-0.32.0-8.fc43.x86_64.rpm' | sha256sum --check --strict -Field source: Fedora 43 Everything x86_64
Sources Authoritative source; repository metadata signature verified
Signature evidence 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Repository-signature verification record
Signed-object SHA-256 6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Repository-signature verification record
Signed-object SHA-256 42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac
Repository-signature verification record
Signed-object SHA-256 0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a
Repository-signature verification record
Signed-object SHA-256 3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
Keyring revision RPM-GPG-KEY-fedora-43-primarySHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable