[01:31] <feurig> So if we were looking to ask stupid questions like how do I make maas.io's tutorial work on a fresh ubuntu server actually work is there a channel / resource to go to???
=== scoobydoob is now known as scoobydoo
[02:57] <rbasak> feurig: you could try https://discourse.maas.io/
=== kostkon_ is now known as kostkon
[16:19] <feurig> rbasak: Thank you!
[19:28] <Hyoomin> Does Ubuntu Server come with Lynis preinstalled? Also, what's its default Lynis score?
[19:29] <oerheks> Hyoomin, no.
[19:29] <Hyoomin> Bummer.
[19:29] <oerheks> here is an howto; https://linuxways.net/ubuntu/how-to-install-lynis-on-ubuntu-20-04/
[19:30] <oerheks> should work for later supported versions too, i guess
[19:31] <Hyoomin> The problem I have with that is that it requires you to connect your currently unsecured server to the internet just to download the thing that tells you how it needs to be secured **before** you hook it up to the internet. A bit of a chicken-and-egg problem.
[19:31] <Hyoomin> Fair enough for end users that just want to tinfoil hat their desktops, but it seems just about useless for people who take securing their servers seriously.
[19:32] <oerheks> install server, enable firewall, and this repo uses https
[19:32] <Hyoomin> The goal here is to harden the server **before** connecting it to the internet.
[19:33] <oerheks> then get a mirror of ubuntu and that lynis package offline.
[19:34] <oerheks> gee, how far can you trust yourself
[19:34] <Hyoomin> It's not myself that I have a problem with, it's everything in-between my server and the Ubuntu repos.
[19:35] <Hyoomin> I mean, if Ubuntu Server had a default Lynis score of 100 out of the box, then I wouldn't **have** to worry about that.
[19:37] <oerheks> one ease is the daily iso https://cdimage.ubuntu.com/ubuntu-server/jammy/daily-live/current/
[19:38] <oerheks> for the rest, i have no other suggestions to limit problems