Function plan_install 

pub fn plan_install(
    directory: &Path,
    manifest: &Manifest,
    ids: &[String],
    platform: &LinuxInfo,
    system: &dyn System,
    trust: bool,
) -> Result<Plan, BundleError>

A plan that installs a verified bundle’s packages from its files, for the entries named (all of the bundle’s when none). The files are copied into a new private folder and checked there against the checksums of the manifest verified here, which are written into the plan itself, so nothing changed in the bundle afterwards is installed. Then each package’s signature is checked (pacman’s with pacman-key, rpm’s with rpm -K), and the package manager installs them from the files.

Debian packages carry no signature of their own: each must be known to this machine’s repository index (signed, and checked by apt) with the same checksum, unless trust takes the bundle’s word for them.