I used vanilla arch as a daily driver for about 3 years and I loved it. but started to need a more ephemeral OS and switched to atomic fedora and centos/Alma precisely for the defaults. So i know you asked about cachyOS and I dony have an answer there. So you can skip the rest of this if that is all you wanted. Im not saying RHEL or bust. Each person has their own needs and i highly recommend just going and doing the hard things yourself to learn, but I get it that it isnt possible for everyone.
What defaults? Several. 1st SELinux. 2nd ability to select old kernels on boot. 3. Firewall enabled out of the box.
Sure you can do a lot of additional hardening and nothing is to stop a simple bash script from setting these up on Arch, but I figured I only know a little bit and those have saved my ass multiple times. So there are probably other things the folks in that ecosystem have figured out that I dont know about yet.
I used vanilla arch as a daily driver for about 3 years and I loved it. but started to need a more ephemeral OS and switched to atomic fedora and centos/Alma precisely for the defaults. So i know you asked about cachyOS and I dony have an answer there. So you can skip the rest of this if that is all you wanted. Im not saying RHEL or bust. Each person has their own needs and i highly recommend just going and doing the hard things yourself to learn, but I get it that it isnt possible for everyone.
What defaults? Several. 1st SELinux. 2nd ability to select old kernels on boot. 3. Firewall enabled out of the box.
Sure you can do a lot of additional hardening and nothing is to stop a simple bash script from setting these up on Arch, but I figured I only know a little bit and those have saved my ass multiple times. So there are probably other things the folks in that ecosystem have figured out that I dont know about yet.