Pareto Desktop is a standalone open-source app that makes sure your Linux device is correctly configured for security. It checks for 13 most imporant security settings, aimed at regular users, not security geeks. It runs automagically in the background via a systray icon, or as a one-off CLI cool.
Documentation on https://paretosecurity.com/docs/linux/install.
See https://pkg.paretosecurity.com for install steps.
To run a one-time security audit:
paretosecurity check$ nix-env -iA nixpkgs.paretosecurityor
$ nix profile install nixpkgs#paretosecurityAdd this to your NixOS configuration:
{
services.paretosecurity.enable = true;
}This will install the agent and its root helper so you don't need sudo to run it.
Add this to your NixOS configuration:
{ pkgs, ... }: {
environment.systemPackages = [ pkgs.paretosecurity ];
}$ paretosecurity checkThis will analyze your system and provide a security report highlighting potential improvements and vulnerabilities.
If you did not install the root helper, you need to run it with sudo:
$ sudo paretosecurity checkAs root run:
$ sudo nix-channel --add https://github.com/ParetoSecurity/agent/archive/main.tar.gz paretosecurity
$ sudo nix-channel --updateTo install the paretosecurity binary:
{
environment.systemPackages = [ (pkgs.callPackage <paretosecurity/pkgs/paretosecurity.nix> {}) ];
}paretosecurity checkThis will analyze your system and provide a security report highlighting potential improvements and vulnerabilities.
Using NixOS module (replace system "x86_64-linux" with your system):
{
environment.systemPackages = [ paretosecurity.packages.x86_64-linux.default ];
}e.g. inside your flake.nix file:
{
inputs.paretosecurity.url = "github:paretosecurity/agent";
# ...
outputs = { self, nixpkgs, paretosecurity }: {
# change `yourhostname` to your actual hostname
nixosConfigurations.yourhostname = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
# ...
{
environment.systemPackages = [ paretosecurity.packages.${system}.default ];
}
];
};
};
}paretosecurity checkThis will analyze your system and provide a security report highlighting potential improvements and vulnerabilities.