Ghost
released this
2026-07-02 17:41:54 +00:00
| 16 commits to main since this release
Changed
- Performance tuning is now its own stage, separate from security hardening. The installer runs a
distinct Performance tuning stage after System hardening, harden shows it under its own section,
and a new --no-tune flag skips it independently of --no-harden.
- Hardening removes Cockpit. The firewall measure now fully removes the Cockpit web admin UI
(dnf remove 'cockpit*' + disables/stops the socket), dropping the :9090 attack surface and its
"Activate the web console with: systemctl enable --now cockpit.socket" login banner. One-way — a later
disable does not reinstall it.
Downloads