Package origin overview

Fluxer publishes every desktop build and every Linux package repository to one public origin, https://pkgs.fluxer.com. It is a static file origin. It serves bytes and nothing else, it needs no credential, and it declares no rate limit bucket.

Channels

Every path names a channel, either stable or canary. The two are published independently and never share a file. The package name follows the channel: fluxer on stable, fluxer-canary on canary. A machine may install both at once.

What the origin serves

Prefix	Contents
/desktop/	Desktop installers, checksums and update feeds
/flatpak/	An ostree repository holding both application ids
/arch/	A pacman repository, one directory per architecture
/deb/	An apt repository in the dists and pool layout
/rpm/	A dnf repository, one directory per channel and architecture
/keys/	The public signing key for every repository

What it guarantees

The origin answers Range, If-Range and If-None-Match on every artifact, so a client may resume an interrupted download and revalidate a cached one. It never lists a directory. A request for a path that does not exist returns 404 with no body.

Artifacts under a version directory never change once published, so they are cached for a year. The files that move when a release ships, the latest documents and every repository index, are cached for minutes.

Signing

Every repository is signed with one key. /keys/ publishes it as fluxer-archive-keyring.asc, and as fluxer-archive-keyring.gpg for apt. Linux repositories shows how each repository gets the key.