Hardening Debian from UEFI to Userland, an example with LF Energy SEAPATH
summary
Covers a step-by-step hardening workflow for Debian used as a VM hypervisor in LF Energy SEAPATH, focusing from UEFI secure boot through service-level protections. Describes configuring GRUB secure boot, encrypted and integrity-checked storage with dm-crypt and dm-verity, kernel hardening via boot parameters, systemd service sandboxing, and other Debian-specific hardening strategies.
AI-written summary · about
related talks
27mSecuring Arm Servers
44mSecuring a Yocto Built System
59mGetting Started with Embedded Linux Security
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
27mSecure Boot auto enrollment
22mBoot Requirements and Strategies for the Edge
38mHardening the Barebox Bootloader
50mHardening the Linux Guest for the Confidential Cloud Computing: Deep Dive and Results