nowfound

Life & fun · April 30, 2019

Deterministically install Linux packages with apt-lock

Deterministically install Linux packages (think package-lock.json). - TrevorSundberg/apt-lock

Deterministically install Linux packages with apt-lock launched on April 30, 2019 with 18 votes, #897 of 3,128 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 7 years on.

In plain words

apt-lock is a tool for managing Linux package installations with consistent, reproducible results. It allows users to lock package versions so that installations produce identical outcomes across different systems and time periods. The tool is designed for developers and system administrators who need reliable, predictable package management in their Linux environments. It works with the apt package manager commonly used in Debian-based Linux distributions.

written from the facts on this page · September 2026

Does a similar job

all alternatives →
  • Rv, a Package Manager for R2025 · github.com · ▲76

    We have been building a package manager for R inspired by Cargo in Rust. The main idea behind rv is to be explicit about the R version in use as well as declaring which dependencies are used in a rproject.toml file for a given project. There's no renv::snapshot equivalent, everything needs to be declared up front, the config file (and resulting lockfile) is the source of truth. This avoids issue where renv might miss information about the installation and is also easy to tweak some packages, eg install one from source and install suggests from another. If you have used…

  • Lockdown.sh Simple shell script for locking down new linux installs2020 · github.com · ▲51

    Lockdown your linux install. The simple zero config linux hardening script - dolegi/lockdown.sh

  • JustDeploy2024 · justdeploy.app · ▲214

    Deploy your app with no lock-in & extra cost

  • LS
    Lockable – sync locks for distributed systems2022 · lockable.dev · ▲77

    Hi guys, creator of lockable here - the easiest way to think of lockable is as `flock` for when you don’t have a shared file system. You can use it to control concurrent access to resources or to ensure only a single instance of a process runs at any given time. Your processes can acquire, refresh and release locks via simple HTTP requests, so it’s language/framework agnostic. E.g. with `curl`: $ curl https://lockable.dev/api/acquire/my-lock-name { "response": true //or false, if the lock wasn’t available } $ curl…

  • RefuseJun 2026 · refuse.dev · ▲84

    Block vulnerable package installs for you and your AI

  • Safe-NPM – only install packages that are +90 days oldNov 2025 · github.com · ▲90

    This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud](https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...() and the [Chalk/debug Compromise](https://www.wiz.io/blog/widespread-npm-supply-chain-attack-b...). This CLI helps protect users from recently compromised packages by only downloading packages that have been public for a while (default is 90 days or older). Install: npm install -g @dendronhq/safe-npm Usage: safe-npm install react@^18 lodash How it works: - Queries…

More life & fun this month

the category →

Source: Show HN post ↗

Launched alongside, April 2019

the whole month →