Archie1 🔒

#Microsoft has patched about 136 CVEs.

#Adobe has pushed out about 52 patches.

#Google more than 30 across its product lines.

All of this in May-2026.

#Linux Kernel has about 3 issues, ssh-keysign-pwn, #fragnesia and #dirty-frag, till now. This is expected to go up. Patches from #Microsoft, #Google, #Apple, etc are paid for. For many Open Source projects that is not the case. They are work done by unpaid volunteers. Expect burn out to happen. Expect no embargoes.

#OpenSource #Linux #Kernel

@mboelen
This is regarding your wonderful article https://linux-audit.com/kernel/kernel-hardening-disable-and-blacklist-linux-modules/. It is stated in this article

there is also an alias option. This might be used to redirect a module to /dev/null

Can you please elaborate on this? How to use block loading of a module when alias is used?

#linux #kernel #kernelIntegrity #integrity #KernelIntegrity #kernelmodules #modules

@i_dabble #Debian is a rock solid OS. Meant for those who want predictability over the latest and greatest. It does come with a very small subset of Linux Kernels though. Off course one can always compile kernels on Debian.

Have you looked at #MXLinux?

@finner If you are using #GRUB2 then why not put Arch and Artix boot loaders and initramfs in their own separate partition?

@unknownuniverse

Why use OnlyOffice? Why not use #LibreOffice? Or the office suite of #KDE, #Calligra?

@gryzoniufka
Try #EndevourOS. #EOS is the polished avatar of #Arch.

@sbeak Unless there is a specific use case to use #BTRFS use #EXT4.

#EXT4 is bullet proof and good.

@xavier_hm So for "worth it" you have to check how much would it cost to get a proper mini #ATX or #ITX server against the cost of these old laptops. If a old ATX/ITX server cannot be obtained then these laptops are a steal and "worth it". These laptops will have mobile CPUs and not server CPUs. Again balance the cost of acquisition, that is crucial.

Yes, going headless would free up resources but you would need to be comfy with terminal.

Finally please harden SSH and the server.