This runs a script inside the firmware archive to generate firmware specific to the machine. This uses bubblewrap to protect the local machine.
Richard Hughes