Also you can't just install these packages, you have to import the keyrings of any packages that access the kernel. That requires you to go to the website, check out the owner of the key, see their contributions and decide for yourself if you trust it