This guide covers the basics of hardening a new Linux virtual machine when you'd rather be doing something else.

It scratches the surface of the most obvious stuff. I’d only add running apps in isolation (docker or adduser) and maybe fail2ban.

  • poVoq
    8•2 years ago

    Sorry to say, but this is mostly bad advise.

      • Bipta
        2•2 years ago

        I think it’s mostly good advice. Certainly not comprehensive but this is securing servers we’re talking about.

        • @[email protected]English
          8•2 years ago

          Explaining why something is bad advice is as important as saying it is. Otherwise it’s just a pissing match between two random people on the internet. Why also keeps people from making similar problems.

        • F5XSEnglish
          3•2 years ago

          I also want to know, being a beginner sysadmin myself. If you think that his advice is bad and you’re not elaborating, I’ll be taking his advice because his sounds sane so far.

        • MichaelEnglish
          1•2 years ago

          That wouldn’t make explaining how even one part of it is incorrect “meaningless”.

          You just cbf! :)