Advanced Plus Security Lenny Linux Manjaro Setup laptop 2019

[Lenny_Fox]

Lenny Linux Manjaro setup on old (2010) laptop

Old Lenovo ThinkPad Edge revived with Manjaro Xfce. Choose Free-Office over Libre Office because of the low spec laptop.

Advantage of Manjaro over most other Linux distro's is its rolling release (based on Arch Linux).

 

[bribon77]

I like Manjaro is very stable.
I recommend a VPN service, I use Proton VPN and Windscribe. Both are free and go very well.
Thanks for sharing.

 

[AtlBo]

Awesome! Hope we see more and more of this in the future. Just installed Manjaro about a month ago and got a Clonezilla image backup. Been following Chris Titus Tech on YouTube, and he for me brings the right mix of command line tech and "hey, let's at least do things the simplest way, even if they aren't exactly simple sometimes."

From CTT, I have learned that the security is not simple. Any chance you might have time to create a guide on how to do this?

- TimeShift (monthly incremental backup)
- Gufw firewall (blocking inbound only)
- Firejail sandbox (using it for Firefox only)
- ClamAV (daily scan of user folders only)

This setup is exactly what I have been wanting to put together, to a T. Kind of a shame one of the versions of Manjaro isn't set up out of the box this way. I'd really like to see a security based version

Curious about your impressions about one thing. With browser history is it really important to delete this if I will be the only one to see what's on the PC? I like having the record of where I have been.

 

[Lenny_Fox]

Manjaro has a nice graphical program install/remove utility, I am running the Dutch version, so a bit hard to tell you exactly what to do.

I guess you have to open the Manjaro M button in the taskbar and enter "software installer" in the search bar.

Software installer/remover will launch (called pac-man manager). When it displays press the looking glass icon to show a search bar, in the search bar enter

timeshift (choose select and install) same for
firewall (choose Gufw firewall and install) same for
firejail ((choose select and install) same for
clam (choose ClamAv and ClamTK and install)

Installing/removing software is easier as with Windows, no need to go into the Terminal Mode. After you have installed the programs above, simply:

Launch TimeShift choose RSYNC and ceate a copy (that is it)
Launch Gufw Firewall and block inbound (easy as that)
Select the starter of Firefox and put Firejail in front of it (Firejail Firefox)
Launch ClamTK and select update and scan frequencies (that is all)

As said I am using Dutch version, so I hope I guessed the US-UK names right.

Regards Lenny

 

[Fuzzy_Bunny]

Install Pamac and enable AUR

 

[SeriousHoax]

Software installer/remover will launch (called pac-man manager).

It depends on which edition you are using. Manjaro KDE comes with Octopi by default instead of Pamac so you need to install Pamac manually. Pamac is obviously superior to Octopi. Which one are you using? Manjaro XFCE?

 

[Lenny_Fox]

Yes XFCE, running on an old 2010 laptop with Celeron P4600 CPU, so I figured the lightest desktop would be best (and I like XFCE because it looks familiar to Windows users).

 

[AtlBo]

Software installer/remover will launch (called pac-man manager). When it displays press the looking glass icon to show a search bar, in the search bar enter

timeshift (choose select and install) same for
firewall (choose Gufw firewall and install) same for
firejail ((choose select and install) same for
clam (choose ClamAv and ClamTK and install)

Installing/removing software is easier as with Windows, no need to go into the Terminal Mode. After you have installed the programs above, simply:

Launch TimeShift choose RSYNC and ceate a copy (that is it)
Launch Gufw Firewall and block inbound (easy as that)
Select the starter of Firefox and put Firejail in front of it (Firejail Firefox)
Launch ClamTK and select update and scan frequencies (that is all)

Thankyou. That helps alot. It seems simpler than I believed, but I wanted to avoid making a big mess installing applications. Manjaro KDE which I installed doesn't use pamac, but I have pamac installed and enabled already. Everything else here I understand well. I have installed a number of applications so far.

It depends on which edition you are using. Manjaro KDE comes with Octopi by default instead of Pamac so you need to install Pamac manually. Pamac is obviously superior to Octopi. Which one are you using? Manjaro XFCE?

I know the comment isn't for me, but pamac looks much better to me. Started using it a few days ago. Personally, I think once I get better with the command line, I will probably ditch Octopi. Just not sure how entrenched it is in Manjaro KDE.

Anyone have a best choice for a replacement for Irfanview? Irfanview is for me the go to viewer in Windows, but it can actually have some great tools with plugins added, especially when the batch editing is added to the discussion. It's also such a light program that I am having trouble replacing it in Linux. Maybe I will just have to use a full featured editor. But which one? The KDE default viewer I believe has a tool for exporting to an editing tool. That would be good enough for me to just use that tool as default viewer. Irfanview is great as the simple truth of viewing/editing and hard to replace for me...

 

[SeriousHoax]

Yes XFCE, running on an old 2010 laptop with Celeron P4600 CPU, so I figured the lightest desktop would be best (and I like XFCE because it looks familiar to Windows users).

Yes good choice. XFCE is very light, and suitable for older config indeed.

I know the comment isn't for me, but pamac looks much better to me. Started using it a few days ago. Personally, I think once I get better with the command line, I will probably ditch Octopi. Just not sure how entrenched it is in Manjaro KDE.

You can remove Octopi completely. No problem. Pamac is definitely better in every way and you can install from AUR as well so, perfect. Also install Pamac tray indicator if you haven't already. There's a Pamac-Qt currently in beta. I think once it becomes stable, they would replace Octopi with it in Manjaro KDE.

Anyone have a best choice for a replacement for Irfanview? Irfanview is for me the go to viewer in Windows

I use Irfanview on Windows as well but I use it only as an image viewer so can't really help you on an alternative for linux.

 

[AtlBo]

I use Irfanview on Windows as well but I use it only as an image viewer so can't really help you on an alternative for linux.

Thanks for replying.

I-V has a sharpen tool that I rely on quite a bit and also some nice tools for separating a picture from a color channel or combinations of them. Also, I seem to be constantly using the panorama tool. The sharpen tool can be used within a selected area only so I find myself hitting maybe a half dozen spots of various sizes in a pic, and this works really well with text. Then I-V is light as a feather, so I have found it amazing for simple non-critical screenshot improvements and quick touch ups. Sad to lose I-V on Linux...

 

[bribon77]

Thanks for replying.

I-V has a sharpen tool that I rely on quite a bit and also some nice tools for separating a picture from a color channel or combinations of them. Also, I seem to be constantly using the panorama tool. The sharpen tool can be used within a selected area only so I find myself hitting maybe a half dozen spots of various sizes in a pic, and this works really well with text. Then I-V is light as a feather, so I have found it amazing for simple non-critical screenshot improvements and quick touch ups. Sad to lose I-V on Linux...

You can use wine, it can work there.
Wine - ArchWiki

 

[AtlBo]

You can use wine, it can work there.
Wine - ArchWiki

Thx. I will try Wine for this. Thx to @Lenny_Linux for posting his Linux config...

 

[Fuzzy_Bunny]

Just trying Manjaro Deepin. Beautiful and fast

 

[LDogg]

Nice little Linux set up you have here, thanks for sharing.

~LDogg

 

[Lenny_Fox]

Found a very interesting post on MalwareTips and replaced privacy badger with uMatrix. This is my setup, thank you MalwareTips

New Update - uMatrix SOFT third-party blockmode with whitelist to allow some TLD's

Why a seperate thread? I got a few questions in the uB0 thread settings about uMatrix. Posting about two different extensions (although both written by same developer) causes confusion. Therefore I will repost the uMatrix related post in this thread. What is the idea behind this uMatrix...

malwaretips.com

 

[Lenny_Fox]

Replaced Clam-AV (daily scan) with Sophos free AV for Linux (on access scan) and Privacy Badge with uBlockOrigin (link)

 

[Lenny_Fox]

Got so tired of the Dutch translation, that I decided to re-install US-English. I re-installed because the instruction to move from Dutch to US-UK did not work. Reinstall sounds heavier than it is: USB install takes 10 minutes and al my tweaks (install Firejail, Sophos, TimeShift and activate Firewall) only take 15 minutes max (including changing wall paper, Adwaita Desktop style, ePapirus Icons, Windows theme Kokodi).

Working a few weeks with a low spec laptop from 2010, changed my PC-usage habits from documents based to program based, because the load time of programs is long . This is also the reason I switched from Free Office back to Libre Office. Libre Office loads a lot slower, but when you only open a program once, it is less irritating.

What a joy, I got a (Windows) virus on my Manjaro Linux system