• 1 Post
  • 1 Comment
Joined 1Y ago
cake
Cake day: Jul 30, 2023

help-circle
rss
Disclaimer: I'm not affiliated in any way to any of the parties involved in this review. I just enjoy reading Solène's writings in general and found myself to be especially in fond of this specific article. I share this in the hopes that others might somehow benefit from this as well! The relevance of the review for this specific community would be that [NovaCustom](https://novacustom.com/) produces excellent laptops to be used with Linux (and other open source operating systems). Furthermore, in the review the reviewer installs a bunch of different distros and tests how they work on the device. Perhaps most importantly; Qubes OS -[which is endorsed by Privacy Guides](https://www.privacyguides.org/en/os/qubes-overview/)- has this specific device on their [Certified hardware page](https://www.qubes-os.org/doc/certified-hardware/). Which already is very commendable, however it's extra special when one realizes it's the only laptop with a modern CPU on the list.
fedilink

I’ll assume that you intend to use it as a traditional daily driver, as such Tails and Whonix will not be taken into consideration. Qubes OS will also be dismissed as it’s technically not a Linux distro. Though, it’s simply the best if you take security seriously.

Within the space of traditional Linux distros, the closest one would probably be Kicksecure. Madaidan even works on the distro, so I’d say it’s fair to assume that it upholds some of the values that are mentioned in the article.

Alternatively, packages for Fedora that would set this up automatically

Hehe, wishful thinking 😂. Uhmm…, bummer, but such a thing simply does not exist. Best we’ve got would be relying on so-called hardening scripts made by people that you don’t know but somehow trust for hardening your system. Honestly, I’m also -to a degree- guilty of this as I one day hope to either adopt these scripts or rebase to one of these hardened ‘immutable’ Fedora images (when they’re ready); Madaidan’s guidelines have actually been an initial inspiration for the scripts found in the first link, so yeah 🙂. Until then, our best bet would probably be relying on hardening guides like this one; the guide has been carefully written (and is still getting regularly updated) with consideration for all the different major distros one might be using. Alternatively, you might try to implement Madaidan’s guidelines directly. But, my previous attempts on Fedora didn’t bear the best results. Though your mileage may vary. Special shout out to Brace as it’s the closest thing to a package that does the hardening for you and works on multiple distros including Fedora. It’s maintained by the same people that have brought us the excellent DivestOS, so it’s trustworthy.