Installing Linux is out-of-scope for this guide because each distribution does it differently and the installation instructions are usually well documented. If you need help, start with your distribution’s documentation.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/imthenachoman/How-To-Secure-A-Linux-Server/llms.txt
Use this file to discover all available pages before exploring further.
High-Level Installation Process
Regardless of the distribution, the high-level process usually goes like this:Create Installation Medium
Burn/copy/transfer the ISO to your install medium (e.g. a CD or USB stick).Popular tools for creating bootable USB drives:
- Rufus (Windows)
- Etcher (Cross-platform)
- dd command (Linux)
Boot from Installation Medium
Boot your server from your install medium.You may need to change the boot order in your BIOS/UEFI settings.
Installation Best Practices
Use Expert Install Mode
Where applicable, use the expert install option so you have tighter control of what is running on your server.
- Package selection
- Partitioning scheme
- Network configuration
- Service selection
Minimal Installation
Only Install What You Need
Only install what you absolutely need. I, personally, do not install anything other than SSH.
- Fewer packages = smaller attack surface
- Less to maintain and update
- Better performance
- Easier troubleshooting
Enable Disk Encryption
After Installation
Once installation is complete, proceed to the Pre/Post Installation Requirements to prepare your system for hardening.Keep your installation media in a safe place. You may need it for system recovery or troubleshooting.