Installation

Containment Chamber ships as a single statically-linked binary with no runtime dependencies. Choose the installation method that fits your workflow.

Prerequisites

• Build from source: Rust 1.93+ and just (command runner)
• Docker: Any OCI-compatible runtime (Docker, Podman)
• Binary download: Linux amd64 or arm64

Install

Build from Source

Clone the repository and build with just:

git clone https://github.com/unforeseen-consequences/containment-chamber
cd containment-chamber

# Development build (fast compilation)
just build-dev

# Production build (optimized)
just build-maxperf

The resulting binary is at:

• Development: target/debug/containment-chamber
• Production: target/maxperf/containment-chamber

Tip

Use just build-maxperf for production deployments. It produces a ~3.5 MB optimized binary.

Docker

Pull the latest image from GitHub Container Registry:

docker pull ghcr.io/unforeseen-consequences/containment-chamber:latest

Run it with a config file:

docker run -d \
  -p 9000:9000 \
  -v ./config.yaml:/config.yaml:ro \
  ghcr.io/unforeseen-consequences/containment-chamber:latest \
  -c /config.yaml

Multi-arch images are available for linux/amd64 and linux/arm64.

Tip

See the Docker guide for Docker Compose examples and environment variable configuration.

Binary Download

Download a pre-built binary from the latest release:

# Download the latest release (replace with your architecture)
curl -LO https://github.com/unforeseen-consequences/containment-chamber/releases/latest/download/containment-chamber-linux-amd64

# Make it executable
chmod +x containment-chamber-linux-amd64

# Move to a directory in your PATH
sudo mv containment-chamber-linux-amd64 /usr/local/bin/containment-chamber

Pre-built binaries are available for:

• linux/amd64
• linux/arm64

Cargo Install

Install directly from the repository using cargo install:

cargo install --git https://github.com/unforeseen-consequences/containment-chamber --bin containment-chamber

This compiles from source and installs to ~/.cargo/bin/. Requires Rust 1.93+.

Verify Installation

Confirm the binary is working:

containment-chamber --version

Shell Completions

Generate shell completion scripts for tab-completion of commands and flags:

Bash

containment-chamber completions bash > /etc/bash_completion.d/containment-chamber

Zsh

containment-chamber completions zsh > "${fpath[1]}/_containment-chamber"

Fish

containment-chamber completions fish > ~/.config/fish/completions/containment-chamber.fish

You should see the version number printed to the console. Head to the Quick Start to configure and run your first signer instance.