Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Look for possible escape vectors from a container

Fedora Quick Start is an interactive, TUI-driven post-installation script to get your fresh Fedora system set up, hardened, and ready for daily use.

Harden your Debian GNU/Linux workstation with various settings, configurations and packages

The very, (VERY) - Best, extremely well informing & detailed Github Users & Githbu Pages |!NOTE!| THIS IS ONLY MY OPINION! It's also made only for myself, soo.. But feel free to contribute! |!NOTE!|

A kernel-based IDS for Linux. KSPIDS monitors especially system calls.

Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.

PYFO (Put Your Fedora On) is a post-install script for upstream version of fedora

A practical, beginner-friendly project to harden an Ubuntu server using security best practices.

CKA,CKS Simulator Questions (k8s v1.31)

Interactive Linux OS hardening wizard — SSH, firewall, kernel, deception, IDS and more across 9 distros

Defensive Linux kernel security toolkit for vendor / Android arm64 — known-CVE detection, config hardening, LLM code audit & binary RE. 内核安全检测工具库:六类工具编排 + 一键装依赖 + ksec 三层检测

🐧 Web dashboard for LinSpec kernel hardening scan reports.

A Docker container which provides you with all the basic necessities for a secure server.

One-binary Linux kernel hardening: sysctl, modules, boot args, rollback, and runtime lock. 𓂀

🐧Advanced Linux Forensics Toolkit: Unified ecosystem for Kernel hardening audit, live memory acquisition, and RWX process triage.

Hardened, privacy-first Debian with an i3 opsec desktop — KSPP kernel, Tor kill-switch, and a unified 'umbra' security command center.

🐧Lightweight forensic kernel hardening audit tool for Linux security baseline verification.

Opinionated Yocto/OpenEmbedded hardening overlay: ironroot distro, kernel hardening fragments, nftables + sysctl baseline, service isolation. scarthgap.