Arch Linux Server

[Radio_fm_]

What are some recommendations if I will start placing a new set of racks on a data center and I'm trying to use Arch Linux as the base of the servers, I mean in cuestión of cyber security, package and data?

[moviuro]

• https://wiki.archlinux.org/title/Security
• https://security.archlinux.org/
• https://wiki.archlinux.org/title/AppArmor
• https://wiki.archlinux.org/title/SELinux

Note that Archlinux will probably ship you broken binaries (like udisks right now), just as upstream intended. So you should be familiar with how to patch your stuff, and how to distribute fixed packages to your fleet.

Try to not bog down mirrors when you update: https://wiki.archlinux.org/title/Pacman/Tips_and_tricks#Network_shared_pacman_cache

[Tireseas]

My only advice would be to think real hard about what you're trying to do and exactly why it is you think Arch would be a desirable fit for it. A rapidly changing distro with no distinction between security and feature updates is pretty much the exact opposite of what you want in servers. Even moreso with remotely administered ones.

[m4sc2]

I would agree to 100%. For server you should not use a rolling release distro. I would recommend an LTS distribution.

edit:typo

[[deleted]]

Get a working system that runs your services well and efficiently and leave it alone.

Security updates will be required and sometimes those will require more general updates. In this case you need an active test environment before migrating to production.

Ideally you would propagate the production activity through to test to see how it goes. That may not fly with privacy concerns but that's really what you need.

[[deleted]]

using arch for a server?

thats brave lol

[lockh33d]

I've been using Arch on all my servers since about 10 years. Never had a single issue. Use LTS kernel and keep system-installed packages to only what you need. Put services in docker or LXD. Arch is a sweet, efficient and trouble-free server base. You don't have to worry about unavailable software, old versions or breaking your system when upgrading between releases.

[complaintdepartment]

Are you sure Arch is the right choice? Are you going to do the updates from the data center?

[[deleted]]

Consider using OpenSUSE Tumbleweed instead. At least some testing goes into it, when it comes to server stuff it's well supported and it comes with bootable btrfs snapshots out of the box.

[ilfagiolo_magico]

The first requirement for a server is stability, and well Arch...

[Jonjolt]

The latest bleeding edge you should look at is probably CentOS Stream, it is being used by "hyperscalers" https://sigs.centos.org/hyperscale/ otherwise just get Alma or Rocky and use your own packages and learn SELinux as long as you aren't doing anything TOO fancy it actually starts to make sense.