Hacker News Reader

What’s the threat model you’re hardening against? For most use cases, a stock Archlinux from the wiki with LUKS/LVM is gonna be pretty solid.

Just general security. I wanna see whats doable these days.

Look into exploring SELinux and similar systems.

Other than staying up to date on packages, this comes down largely to service config that’s independent of the OS.