Disable unnecessary kernel modules to reduce attack surface: algif_aead (Copy Fail), unused filesystems, DMA vectors, unused network protocols, and USB storage. Rebuild initramfs on change to apply at boot. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| resources | ||
| scripts | ||
| init.sh | ||
| playbook.yml | ||