Trusted execution environment verification of a software package

A computing device, comprising:

• a memory;
• and
• a processor device coupled to the memory to:
• initiate, by an operating system (OS), a software package verification process in a trusted execution environment (TEE), the OS being part of an OS environment comprising a file system;
• determine that a first software package in a software repository is to be installed into the OS environment;
• download the first software package to a storage device;
• send, by the OS to the software package verification process, first location information that identifies a location of the first software package;
• and
• receive, from the software package verification process, information that indicates that the first software package on the storage device is trusted.

A computer program product stored on a non-transitory computer-readable storage medium and including instructions to cause a processor device to:

• initiate, by an operating system (OS), a software package verification process in a trusted execution environment (TEE), the OS being part of an OS environment comprising a file system;
• determine that a first software package in a software repository is to be installed into the OS environment;
• download the first software package to a storage device;
• send, by the OS to the software package verification process, first location information that identifies a location of the first software package;
• and
• receive, from the software package verification process, information that indicates that the first software package on the storage device is trusted.