I favour zfs, as it has pretty basically everything you'd ever need. It's configurable with snapshots, checksumming, compression, deduplication...
Switched to i3 on my non hardened box
I agree with above, it all depends on what environment you're in. Gentoo would be suitable for some but not all servers, but if you want a Linux...
Hardened Gentoo is pretty much no different than vanilla Gentoo to setup / maintain. I even run a desktop with maximum security everywhere,...
The thing I don't understand about Linus is the things he moans about.
Obviously he's not annoyed just for his own personal use but because of...
There's lots of IPTables rule generators, but if you just want a plain secure and simple setup follow the guide I linked to.
If you don't know...
Put UFW on if you want default deny / easy configuration.
For iptables heres a very basic guide to set up default deny which a lot of people...
Heh slightly similar to mine (Random list):
Tomato Toastman WRT54G (IPv6 build, firewall, no remote access)
Hardened Gentoo ~amd64
Of course, removing anything unneeded will improve the potential security. Didn't think Ubuntu Server came with a UI anyway?
I doubt it would reduce the attack surface by much, most people just don't have a UI on a server because it's not needed. Waste of resources.
Separate names with a comma.