Polymorphing is distributed as drop-in replacement packages for all the existing packages on an existing Linux host, by pulling them from a Polyverse "mirror".

We provide a simple script to subscribe to the mirrors, with a personalized key found on your individual account page. For this demo, we'll use an install script from a demo account.

curl https://sh.polyverse.io | sh -s install tR3pfxuoH2psdW23ZVTJzRgvF [email protected]

Now that we've subscribed to the Polyverse mirrors, it is transparent to the host. The package manager doesn't know anything different, and we can use all its power to our benefit.

To reinstall all packages, for CentOS, we run:

yum reinstall -y \*

All this command does, is updates the package manager metadata, and reinstalls all packages in-place.

Let's verify that we did indeed scramble packages on the system.

We can do this in multiple ways.

The quick and easy way is to check the source of the package. For CentOS, the command is:

rpm -qa vendor="*Polyverse*"