Shim

• Written by Matthew Garrett for Fedora

• Used (and extended) in other distros

• Signatures and checking

• Getting things signed

• Archive infrastructure