RunSafe Alkemist

You're only a few steps away from deploying Alkemist:Source into your Debian environment!

1 of 4

Select Debian Distribution

Need to know your distribution? Run this command in a terminal: lsb_release -a. The displayed Release will start with its major release number and/or the Codename will match one of those in parentheses to the left if Alkemist:Source supports it. Ubuntu instructions are similar to these and can be found on a dedicated Deploy page.

2 of 4

Install Alkemist:Source

# Install packages to enable secure download of alkemist-lfr
sudo apt-get -y install wget

# Add RunSafe repo to list of those Debian will check for packages
echo 'deb https://runsafesecurity.jfrog.io/artifactory/debian buster main' | sudo tee -a /etc/apt/sources.list.d/alkemist.list

# Add RunSafe's GPG public key locally
sudo apt-get -y install gnupg
wget -qO - https://runsafesecurity.jfrog.io/artifactory/api/gpg/key/public | sudo apt-key add -

# Update Debian to include new repo and install alkemist-lfr
sudo apt-get update
sudo apt-get -y install alkemist-lfr
source /etc/profile.d/alkemist-lfr.sh0# Install packages to enable secure download of alkemist-lfr
1sudo apt-get -y install wget
2
3# Add RunSafe repo to list of those Debian will check for packages
4echo 'deb https://runsafesecurity.jfrog.io/artifactory/debian buster main' | sudo tee -a /etc/apt/sources.list.d/alkemist.list
5
6# Add RunSafe's GPG public key locally
7sudo apt-get -y install gnupg
8wget -qO - https://runsafesecurity.jfrog.io/artifactory/api/gpg/key/public | sudo apt-key add -
9
10# Update Debian to include new repo and install alkemist-lfr
11sudo apt-get update
12sudo apt-get -y install alkemist-lfr
13source /etc/profile.d/alkemist-lfr.sh

Run these commands on your system to let it know to look for Alkemist:Source's Load-time Function Randomization (LFR) packages on our servers and then install Alkemist:Source.

3 of 4

Build with Alkemist:Source

# ALKEMIST_LICENSE_KEY=<your license key> lfr-helper <your build command>

# For example, to build the hello_world.c shown in the next tab you would run:
sudo apt-get -y install gcc
ALKEMIST_LICENSE_KEY=<insert Alkemist license here> lfr-helper gcc -o hello_world hello_world.c0# ALKEMIST_LICENSE_KEY=<your license key> lfr-helper <your build command>
1
2# For example, to build the hello_world.c shown in the next tab you would run:
3sudo apt-get -y install gcc
4ALKEMIST_LICENSE_KEY=<insert Alkemist license here> lfr-helper gcc -o hello_world hello_world.c

Now that your system contains the files necessary for Alkemist:Source to run, prepend your build commands (make, gcc, g++, etc) with lfr-helper to automatically integrate Alkemist:Source into your existing build process.

The command shown will build the given hello_world.c into an Alkemist:Source-protected program called hello_world, but you can add lfr-helper to any build command, simple or complex.

4 of 4

Verify Alkemist:Source Protection

# Use ldd to see which libs have been included in the given binary
# ldd <binary name> | grep lfr

# For example, with the hello_world from the previous step
ldd ./hello_world | grep lfr

# This will return a line similar to the one below, but with a different memory address
# $ liblfr.so => /usr/local/lib/liblfr.so (0x7f659d514000)0# Use ldd to see which libs have been included in the given binary
1# ldd <binary name> | grep lfr
2
3# For example, with the hello_world from the previous step
4ldd ./hello_world | grep lfr
5
6# This will return a line similar to the one below, but with a different memory address
7# $ liblfr.so => /usr/local/lib/liblfr.so (0x7f659d514000)

Each tab shows a different way to confirm that Alkemist:Source has been applied to a given binary. The examples are for the hello_world binary built in the previous step.