Advanced Security TuxTalk - Ubuntu 26.04 LTS - Tuxified !

[TuxTalk]

The Prodigal Son Returns (To Ubuntu)​

Well, it happened. I tried to fly close to the bleeding-edge sun, but the universe (and my boss) pulled me back to earth. I am officially moving my daily driver back to Ubuntu.

Before anyone starts typing "Bro, have you tried Arch?" or accuses me of classic, chronic distro hopping—let the record show: this is a tactical relocation, not a flight of fancy!

Here is how it went down:

• The Reality Check: My work environment essentially looked at my setup and said, "Hey, we love your enthusiasm, but we only officially support Debian/Ubuntu-based environments." Turns out, "but it works on my machine" doesn't fly when production is on the line.
• The Heart Wants What It Wants: I tried to love Fedora. I really did. It’s sleek, it’s modern, it’s got that new-car smell. But at the end of the day, I’m a Debian/Ubuntu person at heart. apt just feels like a warm blanket, and dnf always felt like I was cheating on my first love.

So, I’m wiping the drive and heading back to the land of the orange accents. No more hopping. I’m nesting.

Drop your favorite post-install tweaks or Snap-disabling scripts below. Let’s get to work!

#Linux #Ubuntu #Fedora #SysAdmin #OpenSource #Developer

 

[TuxTalk]

Fedora way more snappier than Ubuntu, even Firefox is fast now. Replaced the RPM Firefox for the Flatpack version so i can manage it with Flatseal.

 

[Zero Knowledge]

Distro hopping now? Gets boring after awhile .

 

[TuxTalk]

Distro hopping now? Gets boring after awhile .

Forced to, see my opening post.

 

[TuxTalk]

Changed uBlock origin to Ghostery and added Bitdefender Trafficlight.

 

[TuxTalk]

Changed uBlock origin to Ghostery and added Bitdefender Trafficlight.

Why sad ? @Sampei.Nihira

 

[Sampei.Nihira]

Why sad ? @Sampei.Nihira

Take a look at this table:

Spoiler: Adblocks

I'm sad because you're “potentially” giving all of this up.
But of course, you should do whatever you think is best for you on your computer.

 

[TuxTalk]

Take a look at this table:

Spoiler: Adblocks

View attachment 297764

I'm sad because you're “potentially” giving all of this up.
But of course, you should do whatever you think is best for you on your computer.

Thanks, added uBlock Origin back to Firefox and just made a backup with RescueZilla ( amazing backup software )

 

[Captain Awesome]

Switched to Fedora After Ongoing Ubuntu 26.04 LTS Kernel Panics


After spending quite a bit of time troubleshooting, I finally decided to move from Ubuntu to Fedora Linux.


The main reason was the constant kernel panics I kept experiencing on Ubuntu 26.04 LTS, especially whenever changing or configuring security-related settings. In my case, the system would randomly crash or completely lock up after applying certain security changes, making it difficult to trust the system for daily use.


What really convinced me this wasn’t an isolated issue is that it has become a pretty hot topic on the Ubuntu forums as well, with multiple users reporting similar instability and panic-related crashes on 26.04 LTS.


I’ve now completed the switch to Fedora and, so far, everything has been running smoothly. The installation went without problems, hardware support has been solid, and I haven’t experienced a single kernel panic yet. Performance also feels noticeably more responsive on my setup.


I’m not posting this to bash Ubuntu — I’ve used it on and off for years and normally had a great experience — but at the moment Fedora simply feels more stable for my workload.

Hope you have a great time with fedora. Some day try Debian.

 

[TuxTalk]

Hope you have a great time with fedora. Some day try Debian.

Used Debian a long time ago, its good. I am not new to Linux. ;-)

 

[TuxTalk]

Switched from Enpass to Proton Pass !

Why ?

Because Proton Pass is Open Source.

 

[TuxTalk]

Switched back to Ubuntu, need this also for work with .deb files.

Add: ClamAV with ClamUI Gui.

 

[Zero Knowledge]

My advice is to look into this GitHub - netblue30/firejail: Linux namespaces and seccomp-bpf sandbox

 

[TuxTalk]

My advice is to look into this GitHub - netblue30/firejail: Linux namespaces and seccomp-bpf sandbox

Installed Firejail, thanks !

 

[Captain Awesome]

@TuxTalk Add OpenSnitch its great tool.

GitHub - evilsocket/opensnitch: OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch. - evilsocket/opensnitch

github.com

OpenSnitch is a GNU/Linux interactive application firewall

 

[Sorrento]

This thread says why I'm still with / Apple & Windows

 

[TuxTalk]

This thread says why I'm still with / Apple & Windows

See my openings post. Had to switch since for work i have to use Debian based Distro.

 

[Victor M]

Then convince your whole company to switch to Fedora ! haha. Fedora, IMHO, is more secure. Ubuntu comes with Very Few apparmor pre-secured things. All those files in apparmor.d are just placeholders. Look inside those files and you'll see.

 

[TuxTalk]

Then convince your whole company to switch to Fedora ! haha. Fedora, IMHO, is more secure. Ubuntu comes with Very Few apparmor pre-secured things. All those files in apparmor.d are just placeholders. Look inside those files and you'll see.

Also have Firejail active and CLAMUI with CLAMAV, i dont download anything outside of the Flatpak or Snap Appstore. I use my laptop for browsing and banking, thats it.
Have the OSPrey and Malwarebytes Extension in Firefox, my Fritzbox DNS is Quad9. So im pretty safe.

 

[Victor M]

Yes you are safe with your userland apps. And Ubuntu took care of firefox which use snap and apparmor. And there is flatpak of course.
And you have systemd 'jail configurations' to protect some systemd daemons - for example look inside systemd-resolved.conf.(which handles DNS queries) You can enhance some daemon conf's by addinig more restrictions - like 'ProtectHome' ( if i remember correctly), (the options are documented in systemd something)

But Ubuntu is lying with those empty apparmor placeholder profilles, it makes the apparmor 'status' command shows a long list of stuff. And I don't like them lying. You lose a bit of faith with them.