https://peertube.debian.social/videos/watch/2aa025c5-1a42-4e5e-a60f-0e6d0f03c72e by Eloi Bail by Mathieu Dupré At: DebConf25 https://debconf25.debconf.org/talks/174-hardening-debian-from-uefi-to-userland-an-example-with-lf-energy-seapath/ Mathieu and Eloi are the main contributors of LF Energy SEAPATH which use Debian as an VM hypervisor to host critical applications within Digital Substations. SEAPATH is used in production by RTE, the french electricity Transmission Service Operator (TSO). Because SEAPATH is used in a critical environment, cybersecurity hardening need to be deployed on top of Debian. This talk walks through the full system hardening process on Debian, starting with UEFI secure boot configuration and ending at service-level protections. We’ll cover secure bootloader (GRUB) configurations, encrypted and integrity-verified storage (dm-crypt, dm-verity), kernel hardening via command-line parameters, systemd service sandboxing, and general Debian-level hardening strategies. Attendees will gain actionable steps to improve the security posture of their Debian deployments, whether on laptops, servers, or embedded systems. Room: Méridienne Scheduled start: 2025-07-17 15:00:00+02:00 Sat, 29 Aug 2026 07:49:56 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.debian.social https://peertube.debian.social/client/assets/images/icons/icon-96x96.png https://peertube.debian.social/videos/watch/2aa025c5-1a42-4e5e-a60f-0e6d0f03c72e All rights reserved, unless otherwise specified in the terms specified at https://peertube.debian.social/about and potential licenses granted by each content's rightholder.