#secureblue — Public Fediverse posts

Seeking suggestions for headless KVM/QEMU host. SELinux is a must, trying for secure as possible but MoBo lacks TPM2. Thinking between minimal Fedora Everything, or SecureBlue IoT. Any recs? Im aware no TPM2 is a security flaw, but new computers are $$$$.

https://github.com/pearOS-archlinux

Screw secureblue, this will be my new Linux distro.

#secureblue #fedora #pearos #archlinux #vivalapera

https://github.com/pearOS-archlinux

Screw secureblue, this will be my new Linux distro.

#secureblue #fedora #pearos #archlinux #vivalapera

@tokyo_0

A very popular option is #QubesOS for privacy. It's very popular among journalists and activists in dangerous situations. It was even endorsed by Edward Snowden IIRC.

But I heard that many prefer #secureblue since its more user-friendly and makes a smoother daily driver, though I can't vouch too hard for this since I've never given it a go.

@tokyo_0

A very popular option is #QubesOS for privacy. It's very popular among journalists and activists in dangerous situations. It was even endorsed by Edward Snowden IIRC.

But I heard that many prefer #secureblue since its more user-friendly and makes a smoother daily driver, though I can't vouch too hard for this since I've never given it a go.

I think I might be getting there...

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop #secureblue #niri #Quickshell #anime #frieren #rainworld #RainworldWatcher

I think I might be getting there...

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop #secureblue #niri #Quickshell #anime #frieren #rainworld #RainworldWatcher

The notification system is ~13% of my total shell codebase... And it's not even ready yet (I'm also omitting the integrations of the system in the rest of the codebase).

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop #secureblue #niri #Quickshell

Fingerprint authentication!

(Because my new #thinkpad has a working fingerprint sensor now)

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop #secureblue #niri #Quickshell

Fingerprint authentication!

(Because my new #thinkpad has a working fingerprint sensor now)

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop #secureblue #niri #Quickshell

I first need to check if I wasn't scammed, then I'll flash it with #secureblue 🔥

secureblue @[email protected] now contains bazaar! I'm very happy to see consistent and good store among many bootc images, leaving the old PackageKit slow store behind! Shoutout to @kolunmi@kolunmi@hachyderm.io

https://github.com/secureblue/secureblue/releases/tag/v4.8.1

#bazaar #secureblue #bootc

secureblue @[email protected] now contains bazaar! I'm very happy to see consistent and good store among many bootc images, leaving the old PackageKit slow store behind! Shoutout to @kolunmi@kolunmi@hachyderm.io

https://github.com/secureblue/secureblue/releases/tag/v4.8.1

#bazaar #secureblue #bootc

New desktop context menu and lock screen redesign!

OS: #secureblue
Compositor: #niri
shell: #Quickshell

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop

New desktop context menu and lock screen redesign!

OS: #secureblue
Compositor: #niri
shell: #Quickshell

#ricing #linux #desktopshell #unixporn #material #materialdesign #shareyourdesktop

@peritia I use #secureblue, a security-focused, #fedora-based distro.

@peritia I use #secureblue, a security-focused, #fedora-based distro.

I added new wrapper options for the status bar!

OS: #secureblue
Compositor: #niri
shell: #Quickshell

#ricing #linux #desktopshell #unixporn #material #materialdesign #vim #neovim

I added new wrapper options for the status bar!

OS: #secureblue
Compositor: #niri
shell: #Quickshell

#ricing #linux #desktopshell #unixporn #material #materialdesign #vim #neovim

What are my criteria for using systems apps and programs? 🤔 #privacy #security Well, when governments plan to #fud or censor a service, it is for me a big #SIGNAL to use that service. *Cough* #archiveToday. Everything about GrapheneOS is to embark on the grand #Odysee of becoming a #Linuxnerd. #secureblue, one has to be #brave to use certain services that are like #proton s in these #darkWeb times. With Tor and its hammer, we should look forward and #riseup to get up and stand up for our rights.

What are my criteria for using systems apps and programs? 🤔 #privacy #security Well, when governments plan to #fud or censor a service, it is for me a big #SIGNAL to use that service. *Cough* #archiveToday. Everything about GrapheneOS is to embark on the grand #Odysee of becoming a #Linuxnerd. #secureblue, one has to be #brave to use certain services that are like #proton s in these #darkWeb times. With Tor and its hammer, we should look forward and #riseup to get up and stand up for our rights.

@reflex @YaLTeR Yeah, the fact that you can just reboot to a different version of your OS is just so cool! I too don't use the vanilla Silverblue, but rather #secureblue, a distro based on that. Before switching to secureblue I used #ArchLinux (BTW), so an atomic desktop felt much more restrictive than #arch, but I got used to it eventually : )

@reflex @YaLTeR Yeah, the fact that you can just reboot to a different version of your OS is just so cool! I too don't use the vanilla Silverblue, but rather #secureblue, a distro based on that. Before switching to secureblue I used #ArchLinux (BTW), so an atomic desktop felt much more restrictive than #arch, but I got used to it eventually : )

My custom desktop shell I've been working on for several months now

OS: #secureblue
WM: #niri
shell: #Quickshell

repo: https://github.com/tpaau/dots

Sorry for no alt, there's not much I can do here, hopefully @altbot will come up with something sensible.

#linux #wayland #desktopshell #ricing #ricinglinux #unixporn #materialdesign #material #vim #neovim

My custom desktop shell I've been working on for several months now

OS: #secureblue
WM: #niri
shell: #Quickshell

repo: https://github.com/tpaau/dots

Sorry for no alt, there's not much I can do here, hopefully @altbot will come up with something sensible.

#linux #wayland #desktopshell #ricing #ricinglinux #unixporn #materialdesign #material #vim #neovim

@privacyguides On my phone I use Vanadium, the default one on #grapheneos, on my laptop I run Trivalent, which is a hardened Chromium fork maintained by the #secureblue team.

I got a question at work here today about hardened Linuxes.
Remembered SecureBlue and decided to install the KDE iso.
And first impressions are really good. It includes a hardened browser and many, many tweaks.
Most of all: with flatpak, homebrew and very good documentation I haven't found things that I can't do yet. Impressive!
What I appreciate the most is that it makes you rethink about security and how to apply it in D2D.
Check it out at https://secureblue.dev

#secureblue

I got a question at work here today about hardened Linuxes.
Remembered SecureBlue and decided to install the KDE iso.
And first impressions are really good. It includes a hardened browser and many, many tweaks.
Most of all: with flatpak, homebrew and very good documentation I haven't found things that I can't do yet. Impressive!
What I appreciate the most is that it makes you rethink about security and how to apply it in D2D.
Check it out at https://secureblue.dev

#secureblue

Well, I know caturday was yesterday, but it's just too cute not to post it!! I've also made a blog post explaning why I'm on #secureblue you can read it here: https://iodomi.eu/logs/2025-08-18/bye-alpine/

#caturday #caturdayeveryday #fedora #cats #neofetch #fedoraatomic #catsofmastodon #catlife #fionathecat

Well, I know caturday was yesterday, but it's just too cute not to post it!! I've also made a blog post exwhy I'm on #secureblue you can read it here: https://iodomi.eu/logs/2025-08-18/bye-alpine/

#caturday #caturdayeveryday #fedora #cats #neofetch #fedoraatomic #catsofmastodon #catlife

Just installed #secureblue #linux on my old gaming laptop. Let's see if I can live with the limitations 🤞

@eroc1990 5/5

https://secureblue.dev/features Also, #PrivacyGuides have created a very nice video on this: #SecureBlue: Is This the Most Secure Linux Distro? by Privacy Guides #yt https://www.youtube.com/watch?v=hmKQyeyOd54

Proxy Link:

https://invidious.nerdvpn.de/watch?v=hmKQyeyOd54

@eroc1990 5/5

https://secureblue.dev/features Also, #PrivacyGuides have created a very nice video on this: #SecureBlue: Is This the Most Secure Linux Distro? by Privacy Guides #yt https://www.youtube.com/watch?v=hmKQyeyOd54

Proxy Link:

https://invidious.nerdvpn.de/watch?v=hmKQyeyOd54

Our latest video is live, exploring Secureblue, a project aimed at addressing security concerns in traditional Linux distributions by significantly hardening existing components and systems.

:peertube: https://neat.tube/w/4YA5XTiVbAdYv7nRsCroxn
:youtube: https://www.youtube.com/watch?v=hmKQyeyOd54

#Linux #Security #Secureblue #LinuxDistros #LinuxDistroReview #Silverblue #Fedora #FedoraSilverblue #Privacy #PrivacyGuides #Video

Our latest video is live, exploring Secureblue, a project aimed at addressing security concerns in traditional Linux distributions by significantly hardening existing components and systems.

:peertube: https://neat.tube/w/4YA5XTiVbAdYv7nRsCroxn
:youtube: https://www.youtube.com/watch?v=hmKQyeyOd54

#Linux #Security #Secureblue #LinuxDistros #LinuxDistroReview #Silverblue #Fedora #FedoraSilverblue #Privacy #PrivacyGuides #Video

The feature-list of secureblue is a great resource to start your research about security concepts. https://secureblue.dev/features

But do we really need a special GNU/Linux distribution that is secure? Let's go #SecureByDefault!

#secureblue #linux #silverblue #fedora #cybersecurity #privacy

The feature-list of secureblue is a great resource to start your research about security concepts. https://secureblue.dev/features

But do we really need a special GNU/Linux distribution that is secure? Let's go #SecureByDefault!

#secureblue #linux #silverblue #fedora #cybersecurity #privacy

I'm trying not to forget about #secureblue https://secureblue.dev/

I'm trying not to forget about #secureblue https://secureblue.dev/

https://tails.net/doc/persistent_storage/additional_software/dangerzone/index.en.html Wouldn't it be much more secure and easier to just include #Homebrew? #Linuxbrew for #Tails. And create a Brew version of #Dangerzone so people can just install it on the fly, and maybe other tools too, especially for example when they just want to use it live without persistence or even with? Brew's base installation appears to be 106 MB or something.

https://stackoverflow.com/questions/69077128/how-much-space-does-the-homebrew-new-installation-take-up

🤔 I mean #secureblue also has it pre-installed? Just thinking 🤷

https://tails.net/doc/persistent_storage/additional_software/dangerzone/index.en.html Wouldn't it be much more secure and easier to just include #Homebrew? #Linuxbrew for #Tails. And create a Brew version of #Dangerzone so people can just install it on the fly, and maybe other tools too, especially for example when they just want to use it live without persistence or even with? Brew's base installation appears to be 106 MB or something.

https://stackoverflow.com/questions/69077128/how-much-space-does-the-homebrew-new-installation-take-up

🤔 I mean #secureblue also has it pre-installed? Just thinking 🤷

#tails should also implement like #secureblue #linuxbrew it might come handy just thinkin #tor

Modern Package Management Features: Homebrew leverages modern distribution methods (like OCI artifacts and GitHub Packages), supports aggressive updates, and is integrating advanced security features such as SLSA build level 2 and sigstore integration. These features enhance both usability and security for end-users.

(1/2)

#tails should also implement like #secureblue #linuxbrew it might come handy just thinkin #tor

Modern Package Management Features: Homebrew leverages modern distribution methods (like OCI artifacts and GitHub Packages), supports aggressive updates, and is integrating advanced security features such as SLSA build level 2 and sigstore integration. These features enhance both usability and security for end-users.

(1/2)

#silverblue #secureblue #fedora

KeepasXC wörks when one installs the secureblue teams maintained version.

Libreoffice works fine, onlyoffice don't which is no problem per se there are online alternatives.

Security audit with lynis hangs at `Querying DNF…`

Trivalent as a browser like Vanadium is very interesting. Sad tho that Librewolf doesn't work. I know I could probably run some software as ostree or something but I would rather not.

#silverblue #secureblue #fedora

KeepasXC wörks when one installs the secureblue teams maintained version.

Libreoffice works fine, onlyoffice don't which is no problem per se there are online alternatives.

Security audit with lynis hangs at `Querying DNF…`

Trivalent as a browser like Vanadium is very interesting. Sad tho that Librewolf doesn't work. I know I could probably run some software as ostree or something but I would rather not.

#silverblue #secureblue #fedora

Of course one disables first

brew analytics off

Ok yt-dlp, lynis, htop, vim, chkrootkit, rkhunter, mat2(hangs though) can be installed via #brew #linuxbrew it's sad that dangerzone is missing there mhh… only for macos as a cask.

Signal works after enabling flathub beta repos

flatpak override --user --env=SIGNAL_PASSWORD_STORE=gnome-libsecret org.signal.Signal

flatpak override --user --env=ELECTRON_OZONE_PLATFORM_HINT=auto org.signal.Signal

Then it works

#silverblue #secureblue #fedora

Of course one disables first

brew analytics off

Ok yt-dlp, lynis, htop, vim, chkrootkit, rkhunter, mat2(hangs though) can be installed via #brew #linuxbrew it's sad that dangerzone is missing there mhh… only for macos as a cask.

Signal works after enabling flathub beta repos

flatpak override --user --env=SIGNAL_PASSWORD_STORE=gnome-libsecret org.signal.Signal

flatpak override --user --env=ELECTRON_OZONE_PLATFORM_HINT=auto org.signal.Signal

Then it works

#silverblue #secureblue #fedora

Wow this is actually very good :D

#silverblue #secureblue #fedora

Wow this is actually very good :D

Btw, one can also install any Fedora Silverblue with a Secure Boot-compatible Ventoy stick and then, after installation, run the Secure Blue optimizations. Works like a charm! Now I have to figure out how everything else works. 🤣

Best part: all by myself without help from anyone. ^^

#Silverblue #secureblue #privacy #security #fedora

Btw, one can also install any Fedora Silverblue with a Secure Boot-compatible Ventoy stick and then, after installation, run the Secure Blue optimizations. Works like a charm! Now I have to figure out how everything else works. 🤣

Best part: all by myself without help from anyone. ^^

#Silverblue #secureblue #privacy #security #fedora

#secureblue rocks! 😎 👍

Portable device with Secure Boot, Secure Blue, LUKS2—everything up to date. Atomic updates, GNOME Wayland, USBGuard, and everything works on an immutable Fedora base system. Everything else is either Flatpaks, Podman, brew or something similar. 🤩 What else could one want to have from a security and privacy perspective?

https://secureblue.dev/features

#silverblue #privacy #security #fedora

#secureblue rocks! 😎 👍

Portable device with Secure Boot, Secure Blue, LUKS2—everything up to date. Atomic updates, GNOME Wayland, USBGuard, and everything works on an immutable Fedora base system. Everything else is either Flatpaks, Podman, brew or something similar. 🤩 What else could one want to have from a security and privacy perspective?

https://secureblue.dev/features

#silverblue #privacy #security #fedora

So I think I will revisit this project when stuff is a little more stable OR I become more fluent with rpm-ostree cause twice now, I have followed the post install instructions and ended up with no internet when trying to use Trivalent. #secureblue #trivalent

So I think I will revisit this project when stuff is a little more stable OR I become more fluent with rpm-ostree cause twice now, I have followed the post install instructions and ended up with no internet when trying to use Trivalent. #secureblue #trivalent

Somehow managed to break my install. Tried to revert to previous rpm-ostree rollback --reboot but that didn't fix my problem. Wiping and trying again. #secureblue

Somehow managed to break my install. Tried to revert to previous rpm-ostree rollback --reboot but that didn't fix my problem. Wiping and trying again. #secureblue