I tried a hardened Linux kernel so you don't have to (opens in new tab)

An even more locked-down version of the foundation most users never see.