4 ms·
to the arch users: Is there a encrypted, hardenend install you can recommend besides the default one in the archwiki? ty.
by laserstrahl 3y ago
to the arch users:
Is there a encrypted, hardenend install you can recommend besides the default one in the archwiki?
ty.
- secstate 3y agoIt's maybe not exactly what you asked for, but I use EndeavourOS, which basically provides a calamari installer experience for Arch, and installs yay by default. It's not really "hardened" anymore than having firewalld on by default, but it definitely makes it easier to setup Arch on an encrypted volume. Also, if you wanted hardened, best to stick with OpenBSD or it's ilk. Linux tends not to be hardened easily, and usually severely limits functionality when you do start hardening it (i.e. BlackArch or Parrot).
- laserstrahl 3y agoI appreciate your answer. FreeBSD is also on my list being interesting. But I never installed it by now.
- akerl_ 3y agoWhat’s the threat model you’re hardening against? For most use cases, a stock Archlinux from the wiki with LUKS/LVM is gonna be pretty solid.
- laserstrahl 3y agoJust general security. I wanna see whats doable these days.
- PrimeMcFly 3y agoLook into exploring SELinux and similar systems.
- akerl_ 3y agoOther than staying up to date on packages, this comes down largely to service config that’s independent of the OS.