Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1104553" data-attributes="member: 96560">In my pursuit of secure OSes, I have come to AlpineLinux which claims to have a security focus.The install gives you a minimal version of Linux which is neither System V based nor Systemd based. You have to add a desktop environment as the next step using a script which downloads it thru the web. As I am most familiar with Gnome so I chose that.&nbsp; Here&#039;s the guide:[URL unfurl=&quot;true&quot;]https://docs.alpinelinux.org/user-handbook/0.1a/Working/post-install.html[/URL]The package manager is their own named apk. Very simple syntax: apk add &lt;package name&gt;, apk search cmd:&lt;command name&gt; or apk search &lt;package name&gt;. apk del &lt;package name&gt;.You add the firewall by via &quot;apk add ufw iptables&quot;.&nbsp; Ufw is the familiar one used by Ubuntu. The guide is here: <a href="https://wiki.alpinelinux.org/wiki/Uncomplicated_Firewall" target="_blank">Uncomplicated Firewall - Alpine Linux</a>Apprmor is a mandatory access control layer, used by Ubuntu, Debian, USE etc. To add apparmor, you have to follow their guide because the package itself does Not insert the kernel module nor activate it on bootup. <a href="https://wiki.alpinelinux.org/wiki/AppArmor" target="_blank">AppArmor - Alpine Linux</a>They&nbsp; recommend ProtonVPN Free. And here&#039;s the guide: <a href="https://wiki.alpinelinux.org/wiki/Proton_VPN" target="_blank">Proton VPN - Alpine Linux</a>They do have the sucricata IPS/IDS package, but it lacks a guide. I have not figured out how to activate it.Minimization is the key benefit of this distro IMHO. Few moving parts. And complexity is the known enemy of security. With too many knobs and swtiches you won&#039;t know what setting combinations are secure.</blockquote>

[QUOTE="Victor M, post: 1104553, member: 96560"] In my pursuit of secure OSes, I have come to AlpineLinux which claims to have a security focus. The install gives you a minimal version of Linux which is neither System V based nor Systemd based. You have to add a desktop environment as the next step using a script which downloads it thru the web. As I am most familiar with Gnome so I chose that. Here's the guide: [URL unfurl="true"]https://docs.alpinelinux.org/user-handbook/0.1a/Working/post-install.html[/URL] The package manager is their own named apk. Very simple syntax: apk add <package name>, apk search cmd:<command name> or apk search <package name>. apk del <package name>. You add the firewall by via "apk add ufw iptables". Ufw is the familiar one used by Ubuntu. The guide is here: [URL='https://wiki.alpinelinux.org/wiki/Uncomplicated_Firewall']Uncomplicated Firewall - Alpine Linux[/URL] Apprmor is a mandatory access control layer, used by Ubuntu, Debian, USE etc. To add apparmor, you have to follow their guide because the package itself does Not insert the kernel module nor activate it on bootup. [URL='https://wiki.alpinelinux.org/wiki/AppArmor']AppArmor - Alpine Linux[/URL] They recommend ProtonVPN Free. And here's the guide: [URL='https://wiki.alpinelinux.org/wiki/Proton_VPN']Proton VPN - Alpine Linux[/URL] They do have the sucricata IPS/IDS package, but it lacks a guide. I have not figured out how to activate it. Minimization is the key benefit of this distro IMHO. Few moving parts. And complexity is the known enemy of security. With too many knobs and swtiches you won't know what setting combinations are secure. [/QUOTE]

Verification