Skip to main content
Installing Linux is out-of-scope for this guide because each distribution does it differently and the installation instructions are usually well documented. If you need help, start with your distribution’s documentation.

​
High-Level Installation Process

Regardless of the distribution, the high-level process usually goes like this:
1

Download the ISO

Download the installation ISO image from your distribution’s official website.
Always verify the checksum of downloaded ISO files to ensure they haven’t been tampered with.
2

Create Installation Medium

Burn/copy/transfer the ISO to your install medium (e.g. a CD or USB stick).Popular tools for creating bootable USB drives:
  • Rufus (Windows)
  • Etcher (Cross-platform)
  • dd command (Linux)
3

Boot from Installation Medium

Boot your server from your install medium.You may need to change the boot order in your BIOS/UEFI settings.
4

Follow Installation Prompts

Follow the prompts to install the operating system.

​
Installation Best Practices

​
Use Expert Install Mode

Where applicable, use the expert install option so you have tighter control of what is running on your server.
The expert or advanced installation mode gives you more control over:
  • Package selection
  • Partitioning scheme
  • Network configuration
  • Service selection

​
Minimal Installation

Only Install What You Need

Only install what you absolutely need. I, personally, do not install anything other than SSH.
The principle of least functionality means:
  • Fewer packages = smaller attack surface
  • Less to maintain and update
  • Better performance
  • Easier troubleshooting

​
Enable Disk Encryption

Important: Tick the Disk Encryption option during installation.Disk encryption protects your data if physical access to the server is compromised. While it adds a small performance overhead, the security benefits far outweigh the costs.

​
After Installation

Once installation is complete, proceed to the Pre/Post Installation Requirements to prepare your system for hardening.
Keep your installation media in a safe place. You may need it for system recovery or troubleshooting.