• Off-TopicNo

  • Solus OS Basic Security Guide for New Users

Some corrections/questions:

h3ll Nope, this is correct and you can set timeshift with systemd i tested myself and i don't use any LLM. My LLM is DeepSeek with a custom prompt for unrestricted/uncensored results and provides all correct answers only.

So are you using an LLM or not? I'm confused, is this a joke? šŸ˜…

h3ll New solus has removed it from package manager:
sudo eopkg install clamav rkhunter

As people have said (and now even your edited post alludes to), this command won't work because those packages aren't, and never were, part of the repository.

h3ll VPN recommendations:
WireGuard (built-in kernel support)
OpenVPN (Disable with sudo systemctl disable openvpn.service)

So do you recommend OpenVPN, or do you want people to disable it? ^^

h3ll sudo eopkg check | grep -q "broken" && timeshift --restore

This'll always fail, since grep is case-sensitive and the actual text is "Broken" with a capital B. Also I'm not sure it's a good idea to restore a backup for any "Broken" package, because most of the time that's not harmful at all, but then again I don't know how timeshift works exactly.

h3ll Synthesized meaning - Though i rewored some words and added some few or extra steps/options. To make it fit solus and before posting all commands work and excellently running on my pc.

FYI Your link doesn't work unless one is logged into kagi. In any case: Clearly you didn't run many of the commands, as they don't work (see above)

  • h3ll replied to this.

              Staudey confused

              Clearly you didn't test, but as for the majority you have to compile it yourself, i can also write a step by step how to get it on your solus os without package manager, or you could use flathub.

              Staudey As people have said (and now even your edited post alludes to), this command won't work because those packages aren't, and never were, part of the repository.

              ClamAV was never officially supported in Solus repositories. The Solus team maintained a consistent stance against including it due to its Windows-focused scanning nature and limited value for Linux desktop users. However, users could install outdated versions via Flatpak (not recommended). https://discuss.getsol.us/d/6408-new-to-solus-dash-to-dock-clam-antivirus
              https://discuss.getsol.us/d/1623-reconsidering-clamav

              Rkhunter (Rootkit Hunter) was previously available but removed from Solus' package manager in April 2025. Earlier discussions (2019-2023) show it was used for rootkit detection, though some users reported false positives.
              https://discuss.getsol.us/d/1419-highly-suspected-compromised-solus-iso-rootkits-post-fresh-install
              https://discuss.getsol.us/d/7006-threats/2

              Chkrootkit isn't explicitly mentioned in Solus sources, but Linux security discussions note it's often used alongside rkhunter despite potential false positives. https://www.linux.org/threads/chkrootkit-and-rkhunter-possible-false-positives.53787/#:~:text=A%20virus,your%20password.

              Staudey So do you recommend OpenVPN, or do you want people to disable it? ^^

              Yes, as i said in the post, clearly didnt read less resources the better, so wireguard is modern, secure, and speed

              https://mullvad.net/en/blog/removing-openvpn-15th-january-2026

              Staudey This'll always fail, since grep is case-sensitive and the actual text is "Broken" with a capital B. Also I'm not sure it's a good idea to restore a backup for any "Broken" package, because most of the time that's not harmful at all, but then again I don't know how timeshift works exactly.

              Good, suggestion and go test as linux is about exploring and trying new things

              It used to be in the solus package managing manager back in 4.3 or somewhere as long the lines, i done my research and those rookit detection scanners are getting depreciated soon, i thought i just leave up for reference but ill remove it and keep lynis instead nowadays.

              Staudey FYI Your link doesn't work unless one is logged into kagi. In any case: Clearly you didn't run many of the commands, as they don't work (see above)

              You can now use kagi without a account, as they recently posted their changelogs about that and everything

              https://kagi.com/search?q=synthesized+ai+meaning%3F&r=us&sh=teLIQQS0m5Ypz7beo8jPEQ - try again

                          I'm sorry but this seems very unfocused and like you are generalizing from your own use case?

                          This is both a logical fallacy and also not very helpful to others. One example that others have also mentioned is about VPN. So because something I never heard about before (mulvad) wants YOU to drop openvpn it means that I should disable openvpn ? Even though my job requires me to use it?

                          If you want to compile a list of GENERAL advice, it should be GENERALLY applicable.

                            hakimjonas So because something I never heard about before (mulvad) wants YOU to drop openvpn it means that I should disable openvpn ?

                            I was pretty sure that Mullvad (which I use) does not preclude the use of OpenVPN, so I asked Grok about that:

                            "Yes, Mullvad does use OpenVPN. It supports OpenVPN as one of its VPN protocols, alongside WireGuard. Mullvad provides configuration files and settings for OpenVPN in its client software, allowing users to connect to its servers using this protocol. OpenVPN is known for its strong security and flexibility, which aligns with Mullvadā€™s focus on privacy. However, Mullvad also encourages the use of WireGuard for its speed and modern design, but OpenVPN remains fully supported for those who prefer it.
                            So, to sum up: Yes, Mullvad uses OpenVPN as an option for securing your connection to its VPN servers."

                                WetGeek OK but my point was that OP posted this as:

                                "a concise security guide for new Solus users..."

                                And then precedes to recommend disabling openvpn even though this is a widely used tool. And the reason seem to be mostly about this other payed vpn service.

                                What ever they recommend might be correct for them but I don't see how this fits into a general guide for Solus users. But please enlighten me, I have been known to be wrong in the past.

                                • h3ll replied to this.

                                      @h3ll It's not that I totally disagree but perhaps its a bit too opinionated. Again I might be wrong but I don't think inactive services present a very serious risk.

                                      And you are probably correct in recommending wireguard but you have to understand that openvpn is not deprecated and is in fact used by many people and companies.

                                      I for one have to use it, and actually want to suggest adding openvpn3 to eopkg - just haven't found time to learn how to correctly suggest that.

                                        hakimjonas

                                        I never said you have to, only those that are security-conscious that's all. you can skip or ignore that part.

                                          TraceyC thank you I will - I just got a bit intimidated by the process, is it OK to make such a request without volunteering to be the maintainer? - Not that I absolutely wont do that - it would just be new for me.

                                          Here is the ticket:

                                          https://github.com/getsolus/packages/issues/5195

                                          BTW. I did manage to build it from source but had to build one dependency first and I had to disable logging with abseil during building because I was unable to make that play nice.

                                            h3ll Clearly you didn't test

                                            What are you replying to here? Didn't test what? Your clamav and rkhunter installation commands obviously didn't work, because those packages aren't part of the repository. I see you've now removed that part of your instructions, good.

                                            For good measure, let's test your previous instructions again:

                                            ļ² sudo eopkg install clamav rkhunter                         
[sudo] password for thomas:
System error. Program terminated.
Repo item clamav not found

                                            What a surprise!

                                            h3ll Rkhunter (Rootkit Hunter) was previously available but removed from Solus' package manager in April 2025

                                            Wrong. Your LLM seems to be confused. It's not even April 2025 yet, and it was NEVER part of the repository.

                                            h3ll Yes, as i said in the post, clearly didnt read

                                            In one place of your post you recommended it, in the other you told people to disable it. The problem is that I did read your post (which I regret more and more).

                                            h3ll You can now use kagi without a account, as they recently posted their changelogs about that and everything

                                            That's cool and all, but your initial link didn't work anyway. The new one does though.

                                            I gotta say, I don't appreciate being accused of "not testing" and "not reading", when it seems to be you that doesn't test shit and just dumps output from some generative AI here.

                                                    I think this thread has run its course. I am locking it because the discussion is going around in circles, and it's getting less civil as time goes on.

                                                    I also want to address the comments on the flag on Staudey's post above mine. Several of us, most of us are actual package maintainers and have been for years, have pointed out that certain packages were not in the Solus repository. This has nothing to do with reading comprehension, and it sure has nothing to do with social or political beliefs. It does have to do with the information available to us, which is that the packages are not currently in the repository, and they have not been deprecated from the repository, ergo the logical conclusion is that they were never in the repository to begin with. I asked if it was meant that they were available when the OS was briefly Debian-based, but no clarification was provided.

                                                    Attacking people is not something we tolerate here. I gave everyone some leeway earlier in the thread, hoping that after my post, everyone would keep it in mind. Instead, it has devolved further. Our main guideline for community members is to be respectful. If you cannot be respectful, you will not remain here.

                                                    That is all.