HN Explorer

Ask HN: Good Linux Distro with good security defaults for Web/Db roles?

3 points by mamcx ↗ HN
I have always used Ubuntu for deployment, but now I'm more interested in deploy with more secure mindset.

I'm a solo developer.

I'm building the fabric scripts, and start to note how much work is to put ubuntu to work with more secure defaults, and after a quick googling like

https://major.io/2015/10/14/what-i-learned-while-securing-ubuntu/

I wonder if exist a distro where I can get a better experience.

I need to deploy PostgreSql, nginx or caddyserver, django, docker. Maybe redis later.

I deploy to digitalocean and linode.

3 comments

[ 4.9 ms ] story [ 21.3 ms ] thread
mboelen
Most Linux distributions have to make a compromise between performance, easy of use, security, and more. In the end, you will have to do tuning, and that includes tuning for performance and security.

As one of the developers of Lynis, I can suggest picking up a auditors mindset. So just use the distribution you like the most, then become good in evaluating what can be improved. As you already discovered, automation is the key. A tool like Lynis will simplify that greatly: https://cisofy.com/lynis/

Happy hardening :)

mamcx
I have installed lynis, it look good!
elchief
How about OpenBSD to vultr.com ?