Hardened operating system images based on Fedora Atomic Desktop and Fedora CoreOS

Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It’s an operating system “for those whose first priority is using linux, and second priority is security.”

secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS’s hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.

secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.

If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.

I’d love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!

(In honor of Holiday. You know who you are.)

  • jamesbunagna
    1·
    8 hours ago

    Any particular friction with GPUs?

    Not that I’m aware off. IIRC, both secureblue and Bazzite rely majorly on this for their hardware enablement. Hence, I don’t think this should be significantly different between them.

    I see that they have a Nvidia image and they actually recommend if possible to stay away from Nvidia but does it work well with Nvidia or AMD GPUs?

    It should support both well, yes.

    Can we maybe tinker it to get some of the things that we have in Bazzite?

    You definitely can. Anything in particular that wish you to get over from Bazzite?

    Random

    Initially, I had read the question as “Can I tinker with it?”. The answer written below tries to address that question.

    I can’t think of anything that you couldn’t do inherently compared to what’s possible on Bazzite. Heck, the way you engage in the act of tinkering should be almost identical. Note, however, that they do differ in how they accommodate building your own images. Bazzite prefers the template found on this page. On the other hand, secureblue relies on BlueBuild’s, instead. Note that BlueBuild’s template can also be used for Bazzite*.