2 ms·
Ask HN: Good Linux Distro with good security defaults for Web/Db roles?
I have always used Ubuntu for deployment, but now I'm more interested in deploy with more secure mindset.
I'm a solo developer.
I'm building the fabric scripts, and start to note how much work is to put ubuntu to work with more secure defaults, and after a quick googling like
https://major.io/2015/10/14/what-i-learned-while-securing-ubuntu/
I wonder if exist a distro where I can get a better experience.
I need to deploy PostgreSql, nginx or caddyserver, django, docker. Maybe redis later.
I deploy to digitalocean and linode.
- mboelen 10y agoMost Linux distributions have to make a compromise between performance, easy of use, security, and more. In the end, you will have to do tuning, and that includes tuning for performance and security. As one of the developers of Lynis, I can suggest picking up a auditors mindset. So just use the distribution you like the most, then become good in evaluating what can be improved. As you already discovered, automation is the key. A tool like Lynis will simplify that greatly: https://cisofy.com/lynis/ https://cisofy.com/lynis/ Happy hardening :)
- mamcx 10y agoI have installed lynis, it look good!
- elchief 10y agoHow about OpenBSD to vultr.com ?