[jasonnix]

Hello,
Which Linux distribution is designed to be safe by default?
Any idea welcomed.


Thank you.

[SIM-5367118]

From what I’ve read and heard the Tails distribution seems to be one of the safest distros. You can keep it on a USB drive and each time you turn it on its spins up a fresh instance of Tails, so every time it’s turned off or unplugged, user data is wiped leaving no traces.

Tails also has built-in encryption tools for files and emails and prevents tracking by blocking non-essential network services. If your not experienced with Linux tails is a really user friendly distro to use as well.

[jasonnix]

From what I’ve read and heard the Tails distribution seems to be one of the safest distros. You can keep it on a USB drive and each time you turn it on its spins up a fresh instance of Tails, so every time it’s turned off or unplugged, user data is wiped leaving no traces.

Tails also has built-in encryption tools for files and emails and prevents tracking by blocking non-essential network services. If your not experienced with Linux tails is a really user friendly distro to use as well.

Hello,
Thank you so much for your reply.
I meant for use on the server. How about the Debian and Alpine Linux?

[Betty Blue]

Hello,
Thank you so much for your reply.
I meant for use on the server. How about the Debian and Alpine Linux?

Follow Debians server hardening documentation

[BlueRemotes]

People are going to argue but I'd say Debian for sure.

[Hackers]

Unfortunately a lot of distros require separate steps to fully secure it, but there are images you can buy or install for free out there that will have certain settings pre-setup. The problem is that things update so quickly that many of these premade images become outdated quickly and even bigname providers are 1-2 or even more versions behind a more recent LTS. Quite frankly the best you can really do sometimes is pick a distro that is heavily tested and has been in LTS for a year or two or more, specifically for whatever you need - whether that's personal laptop or a web server, or whatever other type of server you want to run. From there you should lock down ports you don't need. You should lock it down so that all connection methods require SSH to prevent plaintext bruteforcing. If you deploy a public website or run any service on an IP/port that other users can connect to, make sure you do something called caging to lock down what files any single access point can read/write/etc. Prevent directory traversal for example... Anyways, there's a lot to do, but you're going to have to implement a lot of security features on top of any default distro. To get started just look into your open ports, lock it down for SSH only, install firewall/d, fail2ban, or look into other alternatives that can do similar.

[jasonnix]

Hello all,
Thank you so much.

[Legend_27]

A good setup might be qubes, and a whonix gateway for better security. then store the VM's inside of an encrypted container with something like veracrypt. IMO this is the perfect setup.

[jasonnix]

A good setup might be qubes, and a whonix gateway for better security. then store the VM's inside of an encrypted container with something like veracrypt. IMO this is the perfect setup.

Hello,
The Qubes OS uses the Xen Hypervisor.

[zigz]

i say look into kodachi linux

[Betty Blue]

i say look into kodachi linux

Kodachi has not had an independent audit yet.

[cragly]

its thats working i hope its working

[DataBrokerX]

The most secure Linux distribution is Qubes OS ! ( as a workstation )
Tails is great live system designed to keep you anonymous
Stay away from Kodachi ! It was developed by one person and its based on Ubuntu 18 ( old ) + it has its own built in vpn that is very sus . It is not a popular distro and probably nobody took a look into the source code but I am 100% sure KODACHI IS SPYWARE. I will not trust with my data an operating system like that