The hardening pass I run on a fresh Ubuntu 26.04 LTS box before it does anything useful. Keys only SSH, the firewall set before you cut the cord, unattended security updates with a reboot window, fail2ban, free kernel livepatch, and an honest look at what is actually listening.
Hardening Ubuntu 26.04 Server (Resolute Raccoon)
A practical hardening pass for a fresh Ubuntu 26.04 LTS server: SSH locked down to keys only, the firewall set before you cut yourself off, automatic security updates with a sane reboot window, fail2ban on the front door, kernel livepatch from the free Ubuntu Pro tier, and an honest look at what is actually listening.
peculiarengineer.com
Top comments (0)