ArtifactX is a Rust CLI for signed apt/yum repositories: import existing repos, regenerate metadata under your own key, publish atomically, serve static files, and roll back when a cutover goes wrong.
That sounds like a narrow problem. It is. But Linux package repositories are one of those narrow pieces of infrastructure where small mistakes travel far.
There is a funny split in Linux packaging. The client side is one of the most stable interfaces in infrastructure: apt install, dnf install, yum install. People understand those commands, automation knows how to call them, and operating systems have spent decades making them boring.
The repository side is often the opposite.
A small internal package repo can start as a directory and a web server. Then it grows a signing key, a CI upload job, a few createrepo flags, an rsync target, an emergency rollback script, a second format for Debian machines, and one old client that only accepts a metadata compression format everyone else forgot about.
