this post was submitted on 18 Jan 2024
71 points (83.2% liked)

Linux

48287 readers
632 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
71
submitted 10 months ago* (last edited 10 months ago) by voxel@infosec.exchange to c/linux@lemmy.ml
 

Hey 👋 dear Linux Community,

I'm still kinda new to Linux (started using this year 😅) I already made it to my main OS, even if I still missing some things which I used on Windows, anyway. What I wanted to ask you guys, what recommendations do you have for Linux Mint (Cinnamon)? In terms of security, optimization, (a way to make the UI looking modern ;-;) and privacy? I would be very interested in what you do guys to optimize your Linux setup :) I'm pretty technical, so there is nothing which could overwhelm me (probaly).

Thx! 🤍

#privacy #dataprotection #linux #linuxmint #opensource #foss #cybersecurity @linux

top 50 comments
sorted by: hot top controversial new old
[–] jvrava9@lemmy.dbzer0.com 18 points 10 months ago (1 children)

Install timeshift for auto backups, its a systemsaver.

[–] jlow@beehaw.org 2 points 10 months ago

Yeah, I actually rolled back my system after a borked update with this a few weeks ago, worked like a charm 👍

[–] CrabAndBroom@lemmy.ml 16 points 10 months ago (3 children)

In terms of security, IMO just using Linux, having a regular firewall setup and using common sense online and not clicking on anything overtly sketchy probably puts you in ahead of 90% of people on the internet lol. I'm also quite partial to running OpenSnitch just to make sure nothing's connecting to the internet without my say-so.

For privacy, I think it depends on your threat model but for the average person I'd say a VPN of some sort and mainly just being cautious about how much personal info you post on social media will cover a big chunk of it. Maybe a more privacy conscious email provider like Proton or Tuta over something like Gmail would help too, but none of that is strictly a Linux thing.

Kind of boring answers, sorry! But IMO the boring fundamentals do tend to cover the majority of stuff. Also there are places like privacyguides.org if you want to rabbit-hole it, but be warned that you might end up becoming one of those people who only goes on onion sites and pays for everything with Monero lol.

Also no idea about customizing Cinnamon, apologies.

[–] jlow@beehaw.org 3 points 10 months ago

+1 for Opensnitch, the UI could use some smoothing out but it's very good.

[–] UnRelatedBurner@sh.itjust.works 2 points 10 months ago (2 children)

Won't OpenSnitch add delay to your trafic?

[–] TheAnonymouseJoker@lemmy.ml 4 points 10 months ago (1 children)

5 milliseconds, if that is a concern to you.

[–] UnRelatedBurner@sh.itjust.works 3 points 10 months ago (1 children)

That's minimal, but I'm also playing online games on my pc. This'd be a 12%-25% increase in my ping.

[–] TheAnonymouseJoker@lemmy.ml 3 points 10 months ago* (last edited 10 months ago) (1 children)

You can exclude games from your firewall for no latency hit.

[–] UnRelatedBurner@sh.itjust.works 3 points 10 months ago

Ah, thanks. Good to know.

[–] Dehydrated@lemmy.world 2 points 10 months ago

Yeah, but the delay is minimal. I'm sure you wouldn't notice.

[–] voxel@infosec.exchange 2 points 10 months ago

@CrabAndBroom Thank you, but I already covered this 😅 When you check my profile, you will see thats exactly the stuff I'm dealing with day by day, but ty! I may will take a look at OpenSnitch, but I think Portmaster is already covering this need.

[–] diamat@lemmy.ml 9 points 10 months ago* (last edited 10 months ago) (1 children)

If you are looking for UI inspiration, you could give !unixporn@lemmy.ml or its counterpart at reddit r/unixporn a look. As a linux novice you might be interested in the KDE,XFCE or GNOME customizations that are shared in these communities.

[–] CommunityLinkFixer@lemmings.world 2 points 10 months ago

Hi there! Looks like you linked to a Lemmy community using a URL instead of its name, which doesn't work well for people on different instances. Try fixing it like this: !unixporn@lemmy.ml

[–] jivandabeast@lemmy.browntown.dev 8 points 10 months ago

TBH, from a privacy perspective you're probably already pretty set -- if you wanted to be more cautious you could use disk encryption, ensure that things are a bit locked down (ssh key only auth, firewalls, or find a guide on hardening like this for ex). In terms of your UI, it really depends on what you're looking for, personally I find GNOME to be the best looking when compared to ease of use but when i made my first switch I started on i3 (but that would be Sway these days for Wayland) and never looked back.

My advice would be to get familiar with Linux as a whole first and then start tweaking things like your UI. It can be overwhelming to get used to the terminal commands (which btw are not necessary but I would heavily recommend as it can make things a LOT easier) and other weird Linux things (software installation, gaming, customization, etc)

[–] n2burns@lemmy.ca 5 points 10 months ago

Welcome!

I like a lot of the answers you’ve been getting so far, but I also wanted to add my 2¢.

I’ve been using Linux 2005. I’ve done some distrohopping in my time, but have I also settled into Linux Mint (Cinnamon). My system says it was installed in 2019, but I think I’ve been pretty much exclusively on Mint since ~2015/2016 after #! stopped being developed.

IMHO, you don’t have to do much customizing. I will never insult someone who wants more security but unless you’re running a server directly exposed to the web, I think the defaults and keeping your install up to date is enough. For the most part, privacy has to do more with the individual apps you run and once again comes down to personal preference.

Linux Mint is relatively lean, so optimization isn’t really necessary (I know some people will exclaim they can get a leaner setup by building up from a minimal install, and while they’re technically correct, I have no complaints with LM on a 12yo Thinkpad x201).

As for a “modern” UI, I’m not sure what exactly you’re looking for. I know on Reddit there were a bunch of distrohopping subs and other subs to share your desktop setup/customizations. Those were a good source of inspiration for me. I don’t know if there are some communities like that on lemmy. Personally, I just use the Mint-L-Dark theme, change my background, and use Conky. You can change the theme, use Desklets and Applets, or even use an alternative dock. However, I would recommend if you want to do much more than that, you should just try to another distro that’s designed with the DE, customizations you want. While you can run KDE/Gnome/etc on Linux Mint, the experience can be a bit rough. If, after trying out multiple distros, you find none quite fit your needs, you can choose the one that is closest and customize from there. Or, you can install a minimal/server build and work up from there (though that can also be painful, since you’re almost making your own distro).

[–] Fizz@lemmy.nz 3 points 10 months ago (1 children)

Does mint ship a kde plasma variation? I find that UI to be more modern than cinnamon

[–] Kory@lemmy.ml 5 points 10 months ago (1 children)
[–] db2@lemmy.world 3 points 10 months ago

That's only partially an answer. While there's not a KDE specific release it can still be installed and used on the other versions.

[–] Jumuta@sh.itjust.works 3 points 10 months ago

i really like the look of KDE, though it's having a version upgrade right now (kde5->6) so you might encounter some bugs when it gets done.

[–] lemmyreader@lemmy.ml 2 points 10 months ago

Hi Linux user :) It makes some sense to define your threat model first.. That can save time and make things clear for yourself. For example, are you using a desktop computer that you will never take outside and are you living at the 13th floor ? Or do you have a laptop that you take with you every day ? In the latter case it may make sense to look at disk encryption. A nice toy to play with some security and privacy things on Linux is Tails.. Tails is also an easy way to show friends, family and colleagues some security and privacy features of Linux on a small pen drive, or to carry a few files safely with you.

[–] MangoKangaroo@beehaw.org 2 points 10 months ago

As other have mentioned, setting up Timeshift + a firewall is a good start. I'm 99% sure that LM guides you through both of these processes on first boot, but it's a good thing to check on anyways. LM is pretty sanely put together out of the box, so I'd honestly just recommend you use it as-is and tweak things when/if you run into something that isn't doing it for you.

Other than that, welcome to the party!

[–] kurumin@linux.community 1 points 10 months ago
[–] MuffinJets@mastodon.social 1 points 10 months ago (1 children)

@voxel @linux What desktop environment are you using? (Cinnamon, MATE, XFCE)

[–] voxel@infosec.exchange 1 points 10 months ago

@MuffinJets @linux Oh sorry, forgot to mention it, I'm using Cinnamon since I liked it the most

[–] moonwalker@infosec.exchange 1 points 10 months ago* (last edited 10 months ago)

@voxel @linux idk, turn on a firewall and run a clamav scan once in awhile. I know that linux malware is pretty rare, but I think it doesn't hurt to run a scan. Of course you could do some hardening, but for a new user I'd say do this at your own risk. https://madaidans-insecurities.github.io/guides/linux-hardening.html

[–] keydelk@fosstodon.org 1 points 10 months ago (1 children)

@voxel @linux Customization wise, I’ve tried a handful of desktop environments. KDE Plasma looks sleek and modern to me, but it also is a bit heavier on resources. I’ve gone back to using the Cinnamon desktop environment that ships with Linux Mint. I’ve found it to be reliable, fairly lightweight, and does what I need.

For privacy, I think choosing a privacy respecting browser and installing basic adblocking plugins meets most needs. I use Firefox with Adblock Pro.

[–] voxel@infosec.exchange 2 points 10 months ago

@keydelk @linux Hm, ig I will stick to Cinnamon, I don't want to run into issues, using another environment which got discontinued by Linux Mint a few years before for some reasons.

Abt the browser and content blocking, is already done ;) Privacy and Security is one of the things I'm very good at, just wanted to know how to enchance the security of Linux Mint.

Btw. I would recommend uBlock Origin instead of ADP is leightweighter, customizable, opensource, non-commercial and pretty well. Since ADP had some controversies in the past.

[–] andrew@is.notaweso.me 1 points 10 months ago

@voxel@infosec.exchange @linux@lemmy.ml

If you're still in the experimental phase, jumping between distress, I'm pretty partial to ElementaryOS - but haven't used it in a few years. It was the GOAT back in the early days, though, for a pretty and consistent UI.

[–] moinsdix@lemmy.world 1 points 10 months ago

Regarding the UI and the look and feel, I can highly recommend catppuccin as a theme in basically whatever you want. I use it on Mint Cinnamon as well, and find it very good looking!

[–] keydelk@fosstodon.org 0 points 10 months ago

@voxel @linux 👋 Hi. I’ve been using Linux for about five years now and can share some of my experience.
For security, I don’t use an antivirus on my personal computers, and haven’t had any issues. I set a strong password and don’t log in as root except when necessary, and that has covered my security concerns. At work, I’ve used ClamAV, which is a good idea if you’re running a web server accessible over the open internet. But I feel it’s overkill for a desktop.

Hope this helps.

[–] const_void@lemmy.ml 0 points 10 months ago (1 children)

We need a sticky for these questions. "recommend me a distro" posts are getting really old.

[–] voxel@infosec.exchange 1 points 9 months ago

@const_void It's not about choosing distros in anyway, please read the post before you comment. 🙄

[–] Corb_The_Lesser@mastodon.social 0 points 10 months ago (1 children)

@voxel @linux I do little or nothing to optimize Cinnamon beyond looking at the Startup Applications to see if there's anything I don't need.

Linux Mint's newest release is very nice, with Cinnamon at version 6.04. It's showing the benefits of refining an existing product rather than layering on new features. (If you use touchpad gestures, the new configuration options are useful.)

Fedora's Cinnamon spin is also excellent, if you prefer something other than Mint's Ubuntu-based product.

[–] voxel@infosec.exchange 0 points 10 months ago (1 children)

@Corb_The_Lesser @linux

I'm pretty happy with Linux Mint so far, never tried Fedora, but I will take a look on it

If you use touchpad gestures, the new configuration options are useful.

Where can I find them?

[–] Corb_The_Lesser@mastodon.social 1 points 10 months ago (1 children)

@voxel @linux The "Gestures" preference tool in Systems Settings.

[–] voxel@infosec.exchange 0 points 10 months ago

@Corb_The_Lesser @linux Oh. Thank you a lot! Never discovered this lol

[–] beta_tester@lemmy.ml -1 points 10 months ago (2 children)
  1. Install all graphical apps via flatpak
  2. Install other packages within distrobox
  3. Make sure it auto updates
  4. Use selinux

Cinnamon is gtk, right? https://github.com/rafaelmardojai/firefox-gnome-theme

[–] folkrav@lemmy.ca 4 points 10 months ago* (last edited 10 months ago) (1 children)

I’ve yet to have the first be as smooth an experience as just using the native package manager. Be it some app misbehaving or needing manual permissions tweaking, or a missing/inexistent GTK theme, amongst other issues.

Distrobox/containers are however pretty cool indeed. I don’t use Distrobox myself, but there are many things in my shell’s RC that’s just a wrapper alias/function around some docker image already.

[–] beta_tester@lemmy.ml 0 points 10 months ago (1 children)

Sounds like there was a packaging error which is not the fault of the flatpak mechanism.complain to the packager, not the messenger.

[–] folkrav@lemmy.ca 2 points 10 months ago* (last edited 10 months ago)

Limitations surrounding theming (no way to force a theme and flatpak basically just doing a best effort to use the right one, theme needs to be specifically repackaged for the platform, etc) has nothing to do with the packager and everything to do with Flatpak’s sandbox. Same for permissions: running something like an IDE or anything that integrates with other software over Flatpak is just a pain in the ass due to the sandboxed nature.

[–] voxel@infosec.exchange 0 points 10 months ago (2 children)

@beta_tester Could you tell me more abt Distrobox and SElinux? I think I never heard of both before

[–] beta_tester@lemmy.ml 1 points 10 months ago (1 children)

I don't think there's easy access to selinux on mint. It's not listed here https://github.com/SELinuxProject/selinux

[–] Rush@mstdn.social 2 points 10 months ago

@beta_tester @voxel Mint uses Ubuntu's repositories, it's setup instructions are as such nearly identical

[–] beta_tester@lemmy.ml 1 points 10 months ago* (last edited 10 months ago)

Ever wanted to distrohop because of the package manager or repository? Don't. Just use distrobox https://github.com/89luca89/distrobox

If you want to keep your system clean, use distrobox. You can install anything within distrobox which does not interfer with your system anymore.

Install a package for a project and kill the distrobox afterwards.

You've got a setup that you want to share with someone on another distro? Use distrobox.

It's like a virtual machine but without the graphical part. It integrates with your base system very well (unlike a vm which is separate).

You can find images here https://github.com/toolbx-images/images

load more comments
view more: next ›