Same as you would on MacOS :
- ditch the .deb package because it’s the wrong tool for the job here.
- Squashfs image with encryption
- Set keyring entries and a wrapper script to manage lock/unlock. If you already know the hardware platform of all users, this can even be improved upon
I have no idea why someone would be using Debian packages to distribute something like this though, if that’s the question. Absolutely not going to work well.

























Heel yaw 👊