Now that we've subscribed to the Polyverse mirrors, it is transparent to the host. The package manager doesn't know anything different, and we can use all its power to our benefit.

To reinstall all packages, for Ubuntu, we run:

apt-get update && apt-get -y install --reinstall $(dpkg --get-selections | awk '{print $1}')

All this command does, is updates the package manager metadata, and reinstalls all packages in-place.

Let's verify that we did indeed scramble packages on the system.

We can do this in multiple ways.

The quick and easy way is to check the source of the package. For Ubuntu, the command is:

dpkg --get-selections | awk '{print $1}' | xargs apt-cache madison | grep -i polyverse

To dig a little deeper, we can verify each binary for a PV signature that we add to every executable we build.