When comparing Hardened Gentoo vs Guix, the Slant community recommends Guix for most people. In the question“What are the most stable rolling-release Linux distributions?” Guix is ranked 6th while Hardened Gentoo is ranked 13th. The most important reason people chose Guix is:
For those with a clear focused concept of what is wanted, after building, the build can be replicated in a blink on countless machines. Both GUIX and shephard are complex but also a breath of fresh air.
Specs
Ranked in these QuestionsQuestion Ranking
Pros
Pro Supports custom hardened kernels
Your only real options for a widely supported hardened distro are the Red Had distros (Red Hat, CentOS, Fedora) of which Fedora is your best bet for a desktop , or Gentoo. You can make a hardened kernel in Gentoo while stripping unnecessary features, creating a much smaller attack surface, and using in-kernel mitigations others don’t.
Pro Comprehensive hardened guide in wiki
From SELinux to PaX to AppArmor to.... The wiki has got you covered.
Pro Fully customized kernel that prevents server-side malwares with SSO mechanisms
Out of CentOS /RedHat/Fedora a hardened kernel is very easy to make.
Pro Best defense against NOP-sled malwares, even with ROP/COP mechanisms
Out of CentOS/RedHat/Fedora/OpenSUSE/Slackware/FreeBSD/Mandriva and Arch, only Gentoo can best protect you against NOP-sled malwares, even with ROP/COP mechanisms.
Pro Atomic package management without bloated init/supervision systems
For those with a clear focused concept of what is wanted, after building, the build can be replicated in a blink on countless machines. Both GUIX and shephard are complex but also a breath of fresh air.
Pro Secure rootless installation
While the whole system can be configured using a declarative file with sufficient privileges. Users can install any package in their own local profile with a single command without root.
Pro A truly advanced operating system
Solves modern problems of software management in one concise, coherent, and fully integrated system.