Security: Difference between revisions

(3 intermediate revisions by 3 users not shown)

Line 110:

=== Secure Boot ===

Development of [https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Secure_Boot UEFI Secure Boot] support is [https://github.com/NixOS/nixpkgs/issues/42127 in flight]. An experimental ~~secure boot~~ implementation is available in [https://github.com/nix-community/lanzaboote Lanzaboote]

Development of [https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Secure_Boot UEFI Secure Boot] support is [https://github.com/NixOS/nixpkgs/issues/42127 in flight]. An experimental Secure Boot implementation is available in [https://github.com/nix-community/lanzaboote Lanzaboote]. [[Limine]] bootloader also supports Secure Boot.

=== SELinux ===

Line 124:

=== NixOS ===

* [[NixOS Hardening]]

* [https://christine.website/blog/paranoid-nixos-2021-07-18 Blog - Paranoid NixOS Setup]

* [https://github.com/flyingcircusio/vulnix vulnix] - Vulnerability (CVE) scanner for Nix/NixOS

Line 142:

Line 143:

* [https://github.com/decalage2/awesome-security-hardening awesome-security-hardening] - Collection of security hardening guides, tools and other resources.

=== Supply chain security ===

* [https://nixcademy.com/posts/secure-supply-chain-with-nix/ Demonstrably Secure Software Supply Chains with Nix], Nixcademy

[[Category:Guide]]

[[Category:NixOS]]

[[Category:Nix]]

[[Category:Security]]

@@ Line 110: / Line 110: @@
 === Secure Boot ===
-Development of [https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Secure_Boot UEFI Secure Boot] support is [https://github.com/NixOS/nixpkgs/issues/42127 in flight]. An experimental secure boot implementation is available in [https://github.com/nix-community/lanzaboote Lanzaboote]
+Development of [https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Secure_Boot UEFI Secure Boot] support is [https://github.com/NixOS/nixpkgs/issues/42127 in flight]. An experimental Secure Boot implementation is available in [https://github.com/nix-community/lanzaboote Lanzaboote]. [[Limine]] bootloader also supports Secure Boot.
 === SELinux ===
@@ Line 124: / Line 124: @@
 === NixOS ===
+* [[NixOS Hardening]]
 * [https://christine.website/blog/paranoid-nixos-2021-07-18 Blog - Paranoid NixOS Setup]
 * [https://github.com/flyingcircusio/vulnix vulnix] - Vulnerability (CVE) scanner for Nix/NixOS
@@ Line 142: / Line 143: @@
 * [https://github.com/decalage2/awesome-security-hardening awesome-security-hardening] - Collection of security hardening guides, tools and other resources.
+=== Supply chain security ===
+* [https://nixcademy.com/posts/secure-supply-chain-with-nix/ Demonstrably Secure Software Supply Chains with Nix], Nixcademy
 [[Category:Guide]]
 [[Category:NixOS]]
 [[Category:Nix]]
+[[Category:Security]]