Step 1 of 3

Install veil

Build veil from source and check your system.

What you will do: Build the veil binary from source and run veil doctor.
Before you start: A Linux machine that meets the requirements below. On other systems, use a Linux virtual machine or container.
What comes next: Step 2: set up the gateway.

Requirements

Go 1.27 or later.
Linux with bwrap installed at /usr/bin/bwrap.
Unprivileged user namespaces enabled.

Build from source

git clone https://github.com/joaaomanooel/veil.git
cd veil
CGO_ENABLED=0 go build -o veil ./cmd/veil
./veil doctor

Build with CGO_ENABLED=0, because the same static binary also runs inside the sandbox. veil doctor reports whether bwrap and opencode are on the PATH. It runs nothing and reads no credentials.

Never run veil with sudo.