• 5 Posts
  • 18 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle

  • Nice project!

    Given the tight budget, here is what I would do, especially if you are not too constraint by space and don’t mind a few extra watts of power consumption. The Raspberry Pi are getting expensive, and the 200USD will barely get you a RPi5 nowadays. You said there is no market for you for second hand sever hw, but I’m guessing it should not be too hard to get used office desktop PCs.

    • Get two of these. Maybe Optiplex or Thinkstation. You can probably get something decent <50USD each.
    • Get two small SATA SSDs for the OS (128 - 256GB), around 30USD each.
    • Get your storage drives. You should get 3 of them so you can have ZFS raid redundancy.
    • On one machine, install TrueNAS and your storage drives. Default RAM is probably enough.
    • On the other one, upgrade the RAM to 8 or 16 GB (~50USD), install your favorite Linux distro, and you can run your services, accessing the storage with NFS!

    To me it feels safer (against my own mess-up) to separate the storage and the services, plus this setup is fairly upgradable. You’ll probably have space to add more storage drives, even maybe a cache SSD; increase the RAM; add a third machine etc.

    Of course it’s just one idea, maybe other another layout might fit your use-case better, idk.

    Good luck!



















  • Sunoc@sh.itjust.workstoLinux@lemmy.mlLinux security
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    2 months ago

    Great to hear you’re willing to move to Linux!

    Like other comments pointed, there is no such thing as “most secure”. It’s a deep rabbit hole and it’s better in general to assume that any device connected to the internet is at risk. Hell, any storage can be compromised if the entity interested put enough effort into it.

    I recommande reading the page on Privacy Guides, it gives a good overview. In general, you should consider your thread model: what is you situation and why do you want security or privacy for?

    • Regarding security, I would say for a general case, any modern, popular Linux distro with full disk encryption is probably good enough and as secure as any other OS. I would recommande going with a Fedora Silverblue or an OpenSUSE Tumbleweed, but the more popular Ubuntu or Mint are great as well for new users.
    • If you also want “good enough” privacy, you should focus more on the software you are running, and the situation of your data, especially in your usage of your web browser. But that’s a different topic entirely.
    • If you actually want more advanced security though, that’s where it becomes difficult/fun. You need to consider what you are trying to protect yourself from, specifically. Virus? Maybe a compartmentized OS like Qubes might be a solution. Physical access to your device? You can get a dead man switch that kills you system disk if your laptop is taken away from you. You want to hide your OS install from a security inspection? You can set a deniable full disk encryption with a facade OS that protect your from a rubber hose attack. Probably many other things exist I am not aware of.

    But anyway, if your question is “Is a Linux distro at least as secure as my previous Windows”, the answer is definitely YES imo. And if you want MOAR, it’s gonna be a fun ride!

    [edit: and yes, updates! Update you system plz.]