Please share what you've learned by suggesting changes to https://github.com/privacyguides/privacyguides.org/blob/HEAD/docs/desktop.md
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
If you would experimentate can try Alpine linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox.
At least that says about itself.
However, I have never installed it
not as much of a security distro as u would assume. but its the closest thing in linux.
I believe I may have live booted it once (when I needed to perform an action that live booting with Ubuntu couldn't do), and I really enjoyed the look and feel of it for the short time I used it.
Or it was a different one, but let's just assume it was Alpine ;)
NixOS
If the distro supports apparmor, then firejail + apparmor offer together sandboxing for quite a set of applications (apparmor includes few profiles by itself, but firejal has quite a few, and one can enable apparmor on all, or the ones wnated). Arch has pretty good wikies about firejail + apparmor.
Have you looked into atomic/Immutable distros?
I will keep looking into it, thanks!
You’re welcome!
Guix would check privacy and usablility
Use Fedora with distrobox and gnome boxes
Fedora is fine, you may want to use secureblue or just plain Fedora Atomic/ ublue as Base.
But generally using as many flatpaks as possible and least system packages, and managing filesystem permissions like the guy on Fedora Discuss, this should totally fit your needs.
QubesOS is cool but it tries to solve the problem of insecure software through extreme compartimentalization which is hard to use and extreme on the hardware.
Oddly enough, at the time only having installed a few Linux distros in my life, Qubes OS was very easy to install and ran just fine on my medium-grade hardware. Lots of people mention having problems with it, but I got really lucky it seems. Thanks for your suggestion!
Did not know fedora silverblue had a hardend fork! Thanks for sharing
I would call it a variant, as its 99% fedora with some different packages (hardened malloc, pam authramp, etc.) and continuously deployed changes.
What features do you specifically want? You mentioned sandboxing. Anything else?
I'd say just keep it simple. If you're comfortable with Debian then stick with that, study up and learn how to harden it. Kali, ParrotOS, Mint, Ubuntu.....they're all just based on Debian with different preinstalled apps and desktop environments. Fedora and Arch are kinda weird and unique, I'm not sure if I'd recommend those for anyone, unless you KNOW that's what you need. Qubes seems interesting, I'm not familiar with that.
But I'll point out that ALL of these distros are miles ahead of Windows in terms of privacy. So just by using Mint for a while, you were already ahead of the curve.
I could make a list of all the things I would want in a distro as far as privacy, but a lot of them aren't as important as sandboxing and (obviously) a system that doesn't actively make your privacy life hell. Other features would be better clipboard management (Tails and Qubes do a great job with that), no obvious gaps in security/privacy, a system that you don't have to build yourself, etc.
I think I've used Fedora more than I have Mint, but I have been completely Windows free for years now!