[shakna]

Whilst I'm sure they use something else, Linux does have an experimental extension, "Integrity Measurement Architecture" extension that allows you to sign and verify RSA keys against every binary.

[zoobab]

ah good to know, I wanted that feature back in 2018 :-)