Hi, Im searching for a secure distro for normal daily use for my laptop. Currently Im running arch linux with full disk encryption, secure boot, linux hardened, firewalld and most apps as flatpaks (with some disabled permissions using flatseal). I think its pretty secure laptop but it could be more secure.

Tails and Whonix are the most secure but they are not ment for normal daily use…

There is a lot of new immutable distros. Getting (system) malware is harder to get on them. Im most interested in blendOS, because its based. Does anyone know if it has full disk encryption, secure boot, etc. or can it be done by the user? What about other distros like Fedora Silverblue?

Any other recommendations?

Thank you :)

  • throwawayish
    link
    fedilink
    arrow-up
    9
    ·
    1 year ago

    an inflexible immutable distro

    Besides the somewhat unfortunate and false ‘immutable’ name, what makes them inflexible according to you?

    • hottari
      link
      fedilink
      arrow-up
      5
      arrow-down
      6
      ·
      edit-2
      1 year ago

      Can’t install a new system package for most immutable distros without going through some magic incantation, then doing a reboot as an example.

      Everything immutable is designed to be inflexible for the user. Am not saying that it’s a bad thing if that’s what you clearly want.

      • throwawayish
        link
        fedilink
        arrow-up
        11
        ·
        1 year ago

        First of all, thank you for replying 💙 !

        Can’t install a new system package for most immutable distros without going through some magic incantation

        blendOS: Replace sudo pacman -Syu with system install

        Fedora’s ‘immutable’ distros: Replace sudo dnf install with rpm-ostree install

        openSUSE’s ‘immutable’ distros: Replace sudo zypper install with sudo transactional-update pkg install

        While Guix and NixOS offer somewhat similar functionality with their guix install and nix-env -iA commands respectively, usage of said comments are rarely done by advanced users as other means to install packages are more sophisticated. And in terms of how sophisticated installing a mere package can get, one might argue that Guix and NixOS are to ‘immutable’ distros what Gentoo is to mutable distros.

        And with that we just went over the ‘immutable’ distros that are prevalent in 95% of the discourse (besides Vanilla OS; but that one’s in a major overhaul) and none of the commands found above strike me as particularly hard. Though, of course, your mileage may vary.

        then doing a reboot

        I’ll just briefly mention that --apply-live exist for Fedora’s immutable distros if you like living on the edge. Furthermore, both Guix and NixOS don’t require a reboot in most cases. Finally, while the soft-reboot feature from systemd benefits all distros, one can’t deny how impactful it is to ‘immutable’ distros in particular.

      • theshatterstone54@feddit.uk
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago

        Everything immutable is designed to be inflexible for the user

        laughs in NixOS being as flexible as Arch, having about the same number of packages and better stability, as well as offering rollbacks, a stable release if you want that breadth of package availability on a static release system, that also has a declarative configuration, making it far, far easier to set up over time, or on multiple machines

        • hottari
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          1 year ago

          NixOS is very different from something like Fedora Silverblue or MicroOS. Am not even sure we are talking about the same thing here.

          • theshatterstone54@feddit.uk
            link
            fedilink
            arrow-up
            3
            ·
            1 year ago

            Still immutable. You can’t make a claim about all immutable systems, when some don’t follow the same principles and don’t necessarily have the same limitations. With SilverBlue you can still use rpm-ostree and I think it is also possible to install such packages on MicroOS, but I don’t know how.

            • hottari
              link
              fedilink
              arrow-up
              2
              arrow-down
              1
              ·
              1 year ago

              Found an article that clearly describes what immutable distros are. I don’t know where NixOS fits in all this.

              My claim about them being inflexible is because that’s how they are designed. Doesn’t take 5 minutes to come to that conclusion compared to traditional distros.

              • theshatterstone54@feddit.uk
                link
                fedilink
                arrow-up
                1
                arrow-down
                1
                ·
                1 year ago

                They are not as flexible, but claiming them to be inflexible creates a false perception. It might not be as easy to change some parts of them, but it is certainly possible

                • hottari
                  link
                  fedilink
                  arrow-up
                  1
                  arrow-down
                  2
                  ·
                  1 year ago

                  An saying that’s how they are designed.