
Securing the Developer Workstation: Isolation, Hardening, and the Limits of Linux Security
Qubes, Silverblue, secureblue, Kicksecure, and NixOS get recommended for the same job, but they answer different questions: hardening, immutability, or architecture. A sysadmin look at why per-VM kernels change the data story, and what single-kernel Linux hardening cannot fix.





