updater-script generation, symlinks read, signing