Add to Chrome
Add to Edge
Add to Firefox
Add to Opera
Add to Brave
Add to Safari
Join our community
Top Pro
•••
FascinatingHoragalles's Experience
Top Pro
•••Top Pro
•••Top Pro
•••Top Pro
•••
Your only real options for a widely supported hardened distro are the Red Had distros (Red Hat, CentOS, Fedora) of which Fedora is your best bet for a desktop , or Gentoo. You can make a hardened kernel in Gentoo while stripping unnecessary features, creating a much smaller attack surface, and using in-kernel mitigations others don’t. See More
I seriously fucked with the installation at the beginning and now its been 4 years and Gentoo hardened is my best. See More
Fedora is backed by RedHat, the 2nd biggest Linux kernel contributor in the world. Using a distribution made by RedHat means that it will be fine-tuned to work as efficiently as possible since it's made by the same people who work extensively on the kernel and know its ins and outs. See More
Fedora has a relatively short life cycle: version X is supported only until 1 month after version X+2 and with approximately 6 months between versions this means that a version of Fedora is supported for approximately 13 months. This promotes leading-edge software because it frees developers from some backward compatibility restraints. See More
CentOS favours stability over being up-to date. For this reason it ships with packages that may be up to two years behind in order to ensure stability over everything else. Using older versions for packages means that they have been thoroughly tested and used in production for quite some time, and are ensured to play well with each-other. This strategy has paid off quite a lot in the past. One example is the Heartbleed bug which left CentOS unaffected since it was using a two-year old OpenSSL library which did not have the bug. See More
CentOS has several built-in solutions for disaster recovery. For example, it comes with pacemaker which can be configured to manage multi-site and and stretch clusters across multiple geographical locations for disaster recovery and scalability. It can also be configured to trigger notifications when the status of a managed cluster changes by using enhanced pacemaker alerts. See More