We have to ship a hard- and software prototype to a customer for a first field test. The software is just not ready (protected - too much Python code) for distribution without the possibility, that someone extracts to easy our code and algorithm (I know, there is not really a 100% security anyway).
My idea is to give the customer a proprietary laptop with our software. The disk of the laptop is fully encrypted and can only be decrypted with a one time password. So the customer has to power on the laptop all the time. The software would be executable only (
chmod +x) and inside the root folder. The whole disk for the customer would be no-read/write or read-only.
Any ideas on that, if this could be possible? Maybe with LVM (luks)? I know, there exist some OTPs but mostly for unsecure network connections or only parts of the disk, when the OS is already started. Do you know another workaround to accomplish this?