Ask HN: Good Linux Distro with good security defaults for Web/Db roles?

Posted by mamcx on Tuesday April 11, 2017 @06:10PM
from the ask-hn dept.

I have always used Ubuntu for deployment, but now I'm more interested in deploy with more secure mindset.

I'm a solo developer.

I'm building the fabric scripts, and start to note how much work is to put ubuntu to work with more secure defaults, and after a quick googling like

https://major.io/2015/10/14/what-i-learned-while-securing-ubuntu/

I wonder if exist a distro where I can get a better experience.

I need to deploy PostgreSql, nginx or caddyserver, django, docker. Maybe redis later.

I deploy to digitalocean and linode.

( 3 comments | 3 points | on HN )

Re:Ask HN: Good Linux Distro with good security defaults for... by mboelen on Wednesday April 12, 2017 @01:45AM (#14095077)

Most Linux distributions have to make a compromise between performance, easy of use, security, and more. In the end, you will have to do tuning, and that includes tuning for performance and security.

As one of the developers of Lynis, I can suggest picking up a auditors mindset. So just use the distribution you like the most, then become good in evaluating what can be improved. As you already discovered, automation is the key. A tool like Lynis will simplify that greatly: https://cisofy.com/lynis/

Happy hardening :)

[ Parent | on HN ]

Re:Ask HN: Good Linux Distro with good security defaults for... by mamcx on Wednesday April 12, 2017 @11:06AM (#14098364)

I have installed lynis, it look good!

[ Parent | on HN ]

Re:Ask HN: Good Linux Distro with good security defaults for... by elchief on Wednesday April 12, 2017 @02:19PM (#14100311)

How about OpenBSD to vultr.com ?

[ Parent | on HN ]