Basically testing different Fedora Variants, so:
- fish
- bat, eza
- waydroid, distrobox, qemu-kvm, virt-manager
- flatpak
- copr-command
- kde sysinfo cli
- braveinstall
Hardening the kernel:
rpm-ostree kargs --append="init_on_alloc=1" --append="init_on_free=1" --append="slab_nomerge" --append="page_alloc.shuffle=1" --append="randomize_kstack_offset=on" --append="vsyscall=none" --append="debugfs=off" --append="lockdown=confidentiality" --append="random.trust_cpu=off" --append="random.trust_bootloader=off" --append="intel_iommu=on" --append="amd_iommu=on" --append="iommu.passthrough=0" --append="iommu.strict=1" --append="mitigations=auto,nosmt"
--append="module.sig_enforce=1"
yeah I basically distrohop between Fedora atomic images