Building a Gold Standard Red Hat Linux image

Hello linux guru's. I am a linux n00b. For the first time in 5 years our company has finally agreed to let linux in our environment...wahoo!! In the windows world we have an image that we deploy our servers from. I am looking for recommendations and/or documentation for building out a linux gold standard image. What does your build documentation contain? What are some standard configurations you have? What are some considerations to think about?

https://redd.it/cgy1m4
@r_linux

Whonix+KVM can be installed on Debian using Open Source CPU Power9 with Talos PCs from raptorcs

[https://wiki.raptorcs.com/wiki/Whonix](https://wiki.raptorcs.com/wiki/Whonix)

https://i.redd.it/6vwdqrko34c31.png

https://redd.it/cgxwx8
@r_linux

grapheneX: Automated System Hardening Framework

​

https://i.redd.it/zi6uxjrom3c31.gif

In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically includes changing default passwords, the removal of unnecessary software, unnecessary usernames or logins, and the disabling or removal of unnecessary services.

grapheneX project aims to provide a framework for securing the system with hardening commands automatically. It's designed for the end user as well as the Linux and Windows developers due to the interface options. (interactive shell/web interface) In addition to that, grapheneX can be used to secure a web server/application.

Currently, grapheneX support the hardening sections below. Each of these namespaces contains more than one module.

• Firewall• User• Network• Services• Kernel• Filesystem• Other

**GitHub:** [**https://github.com/grapheneX/grapheneX**](https://github.com/grapheneX/grapheneX)

**PyPI:** [**https://pypi.org/project/graphenex/**](https://pypi.org/project/graphenex/)

**AUR:** [**https://aur.archlinux.org/packages/graphenex/**](https://aur.archlinux.org/packages/graphenex/)

**Website:** [**https://graphenex.github.io/**](https://graphenex.github.io/)

https://redd.it/cgwnt2
@r_linux

Which is the most popular distro for Server and Desktop use now ?

**1)** Which is the most popular distro for Server and Desktop use now ?

**2)** Do you think IBM will affect Red Hat/CentOs ?

**3)** Do you consider Chef/Puppet/Ansible to be superior to System Center ?

**4)** Do you prefer Azure or AWS and why ?

https://redd.it/cgpm1r
@r_linux

Looking for suggestions for terminal commands that show up in a video game

I started adding terminal commands into a game, purely aesthetic, as a nod to the Linux community. Secretly hoping someone wonders what the text means, looks it up, and learns about it. Will that happen? Probably not, but i can still hope.

Examples: [Door opening and mode change](https://youtu.be/VKwJT61tN6w)

​

What other commands should be added? Like inside jokes, the longest commands ever, or other known basics? I'm up for anything.

​

About me: Took my first Linux class in college. While in school I got a job as a junior network admin and got to take home old, heavy, yellow-stained servers to play around with Apache, Dovecot, and Xenserver. My first major hurdle was creating a reverse proxy, it took me 2 weeks to figure that sucker out. I'm dumb, but I'm persistent.

https://redd.it/ch12ai
@r_linux

Weekly Questions and Hardware Thread - July 24, 2019

Welcome to r/linux! If you're new to Linux or trying to get started this thread is for you. Get help here or as always, check out r/linuxquestions or r/linux4noobs

This megathread is for all your question needs. As we don't allow questions on r/linux outside of this megathread, please consider using r/linuxquestions or r/linux4noobs for the best solution to your problem.

Ask your hardware requests here too or try r/linuxhardware!

https://redd.it/ch38s9
@r_linux

New Onboarding app by elementary OS with design insights
https://medium.com/elementaryos/get-settled-into-elementary-os-with-onboarding-49a3e7031895

https://redd.it/ch36hs
@r_linux

Why do people want to install Linux on Macs?

They're more expensive, and it seems like people have more trouble trying to install Linux on them than PCs. It seems like it would be more efficient to just buy a PC and put Linux on that. So I can only assume that there must be a good reason for people putting Linux on a Mac.

https://redd.it/ch39ko
@r_linux

Is it true that in the early 90s proprietary companies used to send the mob after open source devs to retain their monopoly?

I recently watched the movie, [Antitrust](https://en.wikipedia.org/wiki/Antitrust_(film\)) which is a fictional story based on the 90s era when personal computing as we know it had just begun.

The NURV project loosely resembles Microsoft Windows and its owner and main antagonist Gary Winston is like a Bill Gates. But basically, this could also be any other proprietary company of that time such as Oracle, Apple or AoL. Its really horrifying to watch the kind of things he and his company did, even in a movie! (like sending the mob to houses of open source devs to steal their code and get them killed)

Did these kinds of things really used to happen back then? Is the history of open source really so dark and dismal?

https://redd.it/ch4c4k
@r_linux

Why my zsh taking so much time in initial loading, How can i fix it ?
https://redd.it/ch57t5
@r_linux

VLC Media Player Has Critical Security Flaw.
https://fossbytes.com/vlc-media-player-has-critical-security-flaw-uninstall-now/

https://redd.it/ch57ft
@r_linux

The year of the Linux Desktop

I would say that we are very close to that goal with the release of Debian Buster. I have only a few legacy programs that does not currently works well. And I expect them to work soon thanks to the work Valve puts into Proton. We are so close that I can feel the finish line approaching.


Good work everyone

https://redd.it/ch57tl
@r_linux

Introducing Fedora CoreOS
https://fedoramagazine.org/introducing-fedora-coreos/

https://redd.it/ch7da5
@r_linux

Use plaintext email
https://useplaintext.email

https://redd.it/ch777p
@r_linux

EvilGnome: Rare Malware Spying on Desktop Users
https://www.intezer.com/blog-evilgnome-rare-malware-spying-on-linux-desktop-users/

https://redd.it/ch6yas
@r_linux

Free Courses to Learn Linux Commands in Depth
https://dzone.com/articles/5-free-courses-to-learn-linux-commands-in-depth

https://redd.it/ch957c
@r_linux

Laptops with good GNU/linux compatibilty?

I'm a soon-to-be college student and I need a new laptop that can reliably run Arch.

Can't wait to see my glorious exwm setup run on a non-potato machine

https://redd.it/cha48d
@r_linux

Up-to-date PreBuilt GCC Cross & Native Compiler ARM Standalone Toolchains for Raspberry Pi
https://sourceforge.net/projects/raspberry-pi-cross-compilers/files/

https://redd.it/chasow
@r_linux

‘There are only three open-source operating systems in the entire world that really pull it together on having a complete, modern, SMP kernel: Linux, DragonFlyBSD, and FreeBSD.’ (DragonFlyBSD Project Update — colo upgrade, future trends)
http://lists.dragonflybsd.org/pipermail/users/2019-July/358226.html

https://redd.it/chclke
@r_linux

Technical details on linux swapping

Can anyone give some insight on why linux swapping is such a shitfest?

Really. We have SSDs now. 4 core cpus. And kswapd stays there at 100% (if I'm lucky enough to get to top)

Why the system thrash to death when writing gigabytes to disk takes a couple of seconds?

Why having an annoying dedicated swap partition does no shit? This was not an issue on windows as far as i can recall.

Why I cant even type keys to an already running bash session on another already logged tty? Is bash (dash) reaaaally swapped out that it cant be used? I don't think so, because I can do a simple echo (provided enough minutes) so it is running, so it's loaded to memory, but is still un usable. Why. Bash is not asking for more memory while I'm tiping "hello" and the "h" stands there (correct me if I'm wrong)

Why a fully loaded on memory process using really few megs like dash in a non ui tty can't run on a 4 core system wih gigabytes of ram ? Does kswapd really need all my cores to fullfill 4 browser tabs i just opened? Do it really need to stop all processes and new logins to copy worst case scenario 1gb of unrelated ram on an ssd dedicated swap partition not running any filesystem with locks/logs/etc ?

Rant aside I really want to know WHYY this happens from a kernel design perspective. Two whys: why it takes so long when a ext4 journaled cp of gigabytes takes seconds. Why. And why programs not asking for memory get unresponsive. Why. Engenieer here with years of experience, gimme the technical reasons. I did try to STFW but its flooded with swappines and tips and howto. Not what Im looking for. I'm looking for reading material (with a sane starting point, dont be funny by pointing me to the kernel git repo)

:Thank you:

https://redd.it/chcce3
@r_linux

Polybar 3.4.0 Release - A Featureful Tool for Creating Custom Status Bars
https://polybar.github.io/2019/06/28/Release-3.4.0.html

https://redd.it/chebru
@r_linux