ubuntu

Ubuntu post-install hardening —” firewall, encrypted DNS, Tor, AppArmor, snap/flatpak control, GNOME privacy

Ubuntu 20.04 / 22.04 / 24.04 Shell / Python Security Guides

ubuntu provides Ubuntu-specific hardening with a guided TUI installer and optional GNOME desktop privacy settings.

Features

  • Guided Installer —” Interactive TUI walks through profile selection
  • Profiles —” minimal (server), desktop (workstation), paranoid (max security)
  • GNOME Privacy —” Telemetry, location, usage stats, crash reports disabled
  • Snap/Flatpak Control —” Disable auto-refresh, remove telemetry snaps
  • AppArmor —” Enforce profiles for Firefox, Thunderbird, containers
  • Encrypted DNS —” systemd-resolved + DNSCrypt-proxy integration
  • Automatic Updates —” Unattended-upgrades with security-only option

Quick Start

Note: This repo is archived (2026-08-31). Use neohiro/linux:

curl -fsSL https://raw.githubusercontent.com/neohiro/linux/main/linuxinstall.sh | sudo bash -s --

Profiles

Profile Target Includes
minimal Servers, containers Firewall, SSH, auditd, sysctl, auto-updates
desktop Workstations Minimal + GNOME privacy, encrypted DNS, AppArmor
paranoid High-security Desktop + Tor, MAC randomization, kernel lockdown

Post-Install

Run ubuntu-hardening --verify to audit current state. Run ubuntu-hardening --rollback to revert last changes.

  • linux —” Cross-distro version
  • windows —” Windows equivalent

This tool is free and open source. Support the developer: