sorted by: new top controversial old
Recommendation for systemd free security focused distro in c/linux@lemmy.world
Recommendation for systemd free security focused distro in c/linux@lemmy.world
[–] [S] 1 point 2 months ago*

A machine is either secure or it's not

It can be more secure then others. Security focused (or hardened) means things like less attack surface, more careful review of packages and code, using more secure alternatives then others, among other features like kernel hardening, etc.

I plan to check Artix though, thanks.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    Recommendation for systemd free security focused distro in c/linux@lemmy.world
    [–] [S] 2 points 2 months ago (1 child)

    Thank you for reply.

    By the rest of your post, I'd bet on B. Which, puts us into an interesting situation

    Yes, I would be ok with A as well, but I am learning things slowly to get to that point. So B for now would be great.

    But it seems like OpenBSD might not be great for running VMs - https://redlib.catsarch.com/r/openbsd/comments/11ev3l4/is/_it/_a/_bad/_idea/_to/_use/_openbsd/_as/_a/_vm/_host/

    Could not find much info for virtualization support on HardenedBSD though.
    Not sure how well bhyve work there, but it seems like VMs might not work well or be performant enough on either of them.

    I would try with Alpine, Artix or Void for now.

  • permalink
  • fedilink
  • source
  • parent
  • context
    • 21
    Recommendation for systemd free security focused distro (programming.dev)
     

    Hello, I am looking for a well-supported Linux / BSD distribution with focus on following features (in no particular order) -

    • Systemd free (found some here)
    • Security focused (meaning hardened, not security tools)
    • Wayland (preferably without anything X11)
    • Lightweight (as much as possible)
    • Supports flatpak, containers and VMs (preferably libvirt)
    • Atomic (more optional then other requirements)

    This is expected to be run on real hardware on desktop (so alpine will not work).

    Along with that, what are some good lightweight (but well-known / actively maintained) desktop environments for Wayland?

    • I see some here but am looking for opinions or if some are missing.
    • Especially ones that support stacking.

    The most interesting ones I could find -

    • Void Linux (has some X11 stuff, not security focused, will try installing Wayland)
    • Kicksecure, OpenBSD, HardenedBSD (yet to explore more for these)
    • MXLinux and Artix (seem very niche)?

    I am looking for more recommendations/opinions for similar requirements, especially if there are better known ones.

    Alternatives to Borg backup for incremental backup of personal data? in c/recommendations@lemmy.world
    Alternatives to Borg backup for incremental backup of personal data? in c/recommendations@lemmy.world
    11
    Alternatives to Borg backup for incremental backup of personal data? (programming.dev)
     

    Hello, I have a bunch of personal data - videos, pictures, documents, PDFs etc. that I want to backup.

    I am wondering what is the best way to do this?

    Requirements -

    • I want to backup multiple different folders from my Linux computer - it is not a full disk backup.
    • Encryption would be great to have.
    • This needs to be a long term backup - like few years or more.
    • Data - small videos, pictures, PDFs, text files, documents, etc. Total size - less than 50-60 GB (for now - but it can increase over time).
    • I want to be able to incrementally add more data to backup of respective folders (e.g. new photos, documents etc.), or even add new folders.
    • After backup, I want to be able to cleanup my hard disk, reinstall OS or restore data from backup onto a completely new system in a new directory.
    • I do not care about stuff like file metadata like owner user, permissions etc.

    Questions -

    1. Is one or more flash drives good for such kind of backup? Or would it get corrupt within few years?
    2. I found Borg backup, but it suggests that backup should be restored on the same machine - which does not seem to fit my use case.
    • It also suggests to keep Borg config directory - which again conflicts with restoring or adding new items from a different system.
    • Not sure how well this would work if restoring on a new system?
    • Are there any better alternatives?
    1. If I do use Borg, should using one repository per folder be the way to go about it? Or is there a better way?
    2. In Borg itself, I am thinking of using the repokey method (key stored with the repository) - and store the passphrase in a KeePass database on a different flash drive. Any different suggestions?

    Please feel free to suggest any alternatives or improvements to my plan?

    4
    Good way to backup some personal data? (programming.dev)
     

    Hello, I have a bunch of personal data - videos, pictures, documents, PDFs etc. that I want to backup.

    I am wondering what is the best way to do this?

    Requirements -

    • I want to backup multiple different folders from my Linux computer - it is not a full disk backup.
    • Encryption would be great to have.
    • This needs to be a long term backup - like few years or more.
    • Data - small videos, pictures, PDFs, text files, documents, etc. Total size - less than 50-60 GB (for now - but it can increase over time).
    • I want to be able to incrementally add more data to backup of respective folders (e.g. new photos, documents etc.), or even add new folders.
    • After backup, I want to be able to cleanup my hard disk, reinstall OS or restore data from backup onto a completely new system in a new directory.
    • I do not care about stuff like file metadata like owner user, permissions etc.

    Questions -

    1. Is one or more flash drives good for such kind of backup? Or would it get corrupt within few years?
    2. I found Borg backup, but it suggests that backup should be restored on the same machine - which does not seem to fit my use case.
    • It also suggests to keep Borg config directory - which again conflicts with restoring or adding new items from a different system.
    • Not sure how well this would work if restoring on a new system?
    • Are there any better alternatives?
    1. If I do use Borg, should using one repository per folder be the way to go about it? Or is there a better way?
    2. In Borg itself, I am thinking of using the repokey method (key stored with the repository) - and store the passphrase in a KeePass database on a different flash drive. Any different suggestions?

    Please feel free to suggest any alternatives or improvements to my plan.

    14
    Is it possible to develop Firefox browser extensions without writing JavaScript / TypeScript? (programming.dev)
     

    Hello, I was looking at WXT extension framework which supports multiple UI frameworks, but they are all JavaScript frameworks only. Is there any alternative way to write Firefox browser extension in a different language (like Rust / Python / Go, etc.) with minimal or no JavaScript, with a ok developer experience?

    Transpilation to JavaScript is fine if it is well supported in Firefox with ok developer experience.

    I also checked Dart but its support on Firefox does not seem great, like the extension only works on Chrome browsers.