Hi, Im searching for a secure distro for normal daily use for my laptop. Currently Im running arch linux with full disk encryption, secure boot, linux hardened, firewalld and most apps as flatpaks (with some disabled permissions using flatseal). I think its pretty secure laptop but it could be more secure.

Tails and Whonix are the most secure but they are not ment for normal daily use…

There is a lot of new immutable distros. Getting (system) malware is harder to get on them. Im most interested in blendOS, because its based. Does anyone know if it has full disk encryption, secure boot, etc. or can it be done by the user? What about other distros like Fedora Silverblue?

Any other recommendations?

Thank you :)

  • hottari@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    10 months ago

    Seems to me like you already have a secure setup. You just need to keep it secure. I personally can’t imagine downgrading from using Arch to an inflexible immutable distro.

    • throwawayish@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      10 months ago

      an inflexible immutable distro

      Besides the somewhat unfortunate and false ‘immutable’ name, what makes them inflexible according to you?

      • hottari@lemmy.ml
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        edit-2
        10 months ago

        Can’t install a new system package for most immutable distros without going through some magic incantation, then doing a reboot as an example.

        Everything immutable is designed to be inflexible for the user. Am not saying that it’s a bad thing if that’s what you clearly want.