Hi, Im searching for a secure distro for normal daily use for my laptop. Currently Im running arch linux with full disk encryption, secure boot, linux hardened, firewalld and most apps as flatpaks (with some disabled permissions using flatseal). I think its pretty secure laptop but it could be more secure.

Tails and Whonix are the most secure but they are not ment for normal daily use…

There is a lot of new immutable distros. Getting (system) malware is harder to get on them. Im most interested in blendOS, because its based. Does anyone know if it has full disk encryption, secure boot, etc. or can it be done by the user? What about other distros like Fedora Silverblue?

Any other recommendations?

Thank you :)

  • hottari@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    NixOS is very different from something like Fedora Silverblue or MicroOS. Am not even sure we are talking about the same thing here.

    • theshatterstone54@feddit.uk
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Still immutable. You can’t make a claim about all immutable systems, when some don’t follow the same principles and don’t necessarily have the same limitations. With SilverBlue you can still use rpm-ostree and I think it is also possible to install such packages on MicroOS, but I don’t know how.

      • hottari@lemmy.ml
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Found an article that clearly describes what immutable distros are. I don’t know where NixOS fits in all this.

        My claim about them being inflexible is because that’s how they are designed. Doesn’t take 5 minutes to come to that conclusion compared to traditional distros.

        • theshatterstone54@feddit.uk
          link
          fedilink
          arrow-up
          0
          ·
          1 year ago

          They are not as flexible, but claiming them to be inflexible creates a false perception. It might not be as easy to change some parts of them, but it is certainly possible