# secureblue/secureblue

A security-focused desktop and server linux operating system.

Repository: https://github.com/secureblue/secureblue
Canonical: https://ross.abutalabs.com/products/secureblue
Homepage: https://secureblue.dev
Language: Python
License: Apache-2.0
License Family: permissive
Last push: 2026-09-02T23:33:24+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 100, release rhythm 87, longevity 78
- inputs: {"age_days": 1096, "days_push": 0, "days_rel": 84, "gap_med": 21, "n_releases_24m": 22}
- flags: no_readme
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1046, forks 107 (observed 2026-09-03T02:15:17.740558+00:00)

## What it is
secureblue is a security-focused desktop and server Linux operating system built as OCI bootable container images on top of Fedora Atomic Desktops using BlueBuild. It hardens the system with SELinux, hardened_malloc, kernel hardening, USBGuard, and attack-surface reductions while aiming to remain usable for everyday Linux users.

## Use cases
- harden a desktop linux installation against exploits
- security-focused linux distro for daily use
- hardened server os built from coreos
- replace sudo and pkexec with run0 on linux
- lock down flatpak sandbox permissions
- immutable linux os with secure boot support

## When to choose
- you already intend to use Linux and want the most secure practical option
- you want an immutable, image-based Fedora system with hardening preconfigured
- you need a hardened server or edge OS based on Fedora CoreOS

## When to avoid
- security is your absolute first priority and you can use Qubes OS or similar
- you need broad compatibility with X11 apps, AppImages, or anti-cheat games without extra setup
- you want a traditional package-based distro with full customization of the base system

## Facets
- artifact type: application
- maturity: active
- function: security, cryptography, configuration-management, container-runtime, developer-tools
- domain: security, operating-systems, privacy, self-hosted
- platform: self-hosted, cloud
- tags: linux-distribution, fedora-atomic, oci-images, bluebuild, hardened-os, selinux, immutable-desktop, exploit-mitigation, linux, docker

## Member repositories
- secureblue/secureblue (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-09-03T02:15:17.740558+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:04:18.718601+00:00, confidence not recorded.
  - homepage: https://secureblue.dev (fetched 2026-08-29T13:05:19.794899+00:00, sha cb91985b2c46)
  - site_page: https://secureblue.dev/features (fetched 2026-08-29T13:05:19.797323+00:00, sha f351635fd694)
  - site_page: https://secureblue.dev/install (fetched 2026-08-29T13:05:19.799116+00:00, sha df50934f61a4)
  - site_page: https://secureblue.dev/post-install (fetched 2026-08-29T13:05:19.800763+00:00, sha 03aa0019e263)
  - site_page: https://secureblue.dev/faq (fetched 2026-08-29T13:05:19.802417+00:00, sha 642e3bc9ab87)
- Data as of 2026-08-30T08:39:29.467469+00:00.