summaryrefslogtreecommitdiff
path: root/README.md
blob: 87a812fbe866edd9414e02ca6f27ea57cdae3ecb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Contractor -- build software (more) securely

The Contractor lets you build software with less worry that it will
do something bad. This is an ugly proof of concept prototype and
certainly not ready for real use.

This will probably only work on Debian 10 (buster) and later. To use,
you need to have libvirt and vmdb2.

* Create two VM images (this can take a while):  

  `sudo ./vm.sh`

* Create the outer, manager VM:  

  `./vm-libvirt.sh`

* Find out what the IP address of the VM is:  

  `less /var/lib/libvirt/dnsmasq/virbr0.status`

* Clone the test repo:  

  `git clone git://git.liw.fi/heippa /tmp/heippa`

* Build (change IP to yours; this will take a while to run):  

  `./contractor -v -m 192.168.100.63 -- build heippa.yaml`

* Hopefully all went well.

Read contractor.md for more information; formatted versions:

* [HTML](https://files.liw.fi/temp/contractor.html)
* [PDF](https://files.liw.fi/temp/contractor.pdf)