ubuntu
Ubuntu post-install hardening — firewall, encrypted DNS, Tor, AppArmor, snap/flatpak control, GNOME privacy
ubuntu provides Ubuntu-specific hardening with a guided TUI installer and optional GNOME desktop privacy settings.
Features
- Guided Installer — Interactive TUI walks through profile selection
- Profiles —
minimal(server),desktop(workstation),paranoid(max security) - GNOME Privacy — Telemetry, location, usage stats, crash reports disabled
- Snap/Flatpak Control — Disable auto-refresh, remove telemetry snaps
- AppArmor — Enforce profiles for Firefox, Thunderbird, containers
- Encrypted DNS — systemd-resolved + DNSCrypt-proxy integration
- Automatic Updates — Unattended-upgrades with security-only option
Quick Start
curl -fsSL https://raw.githubusercontent.com/neohiro/ubuntu/main/install.sh | sudo bash
Profiles
| Profile | Target | Includes |
|---|---|---|
minimal |
Servers, containers | Firewall, SSH, auditd, sysctl, auto-updates |
desktop |
Workstations | Minimal + GNOME privacy, encrypted DNS, AppArmor |
paranoid |
High-security | Desktop + Tor, MAC randomization, kernel lockdown |
Post-Install
Run ubuntu-hardening --verify to audit current state.
Run ubuntu-hardening --rollback to revert last changes.