diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/README.md b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/README.md new file mode 100644 index 0000000..e5c7a31 --- /dev/null +++ b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/README.md @@ -0,0 +1,264 @@ + + +# How to setup hardened Ubuntu environment on Intel computer + +## Requirements + +The following hardware is required. + +- Computer [compatible](https://ubuntu.com/download/desktop) with Ubuntu 22.04.1 LTS +- USB flash drive (used to create Ubuntu for desktops bootable installer, 4GB min) +- USB flash drive (used to install Ubuntu for desktops, 16GB min) + +## Recommendations + +Physically removing internal disk(s) and wireless interface(s) if not soldered to motherboard or disabling interface(s) using BIOS if soldered is recommended to strengthen data persistence and air gap hardening. + +Installing Ubuntu for desktops on [datAshur PRO²](https://istorage-uk.com/product/datashur-pro2/) USB flash drive is recommended to enforce access control, data persistence and tamper resistance hardening. + +## Bootable installer creation guide + +### Step 1: install [Raspberry Pi Imager](https://www.raspberrypi.com/software/) + +#### macOS + +Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager. + +#### Ubuntu (or other Debian-based OS) + +> Heads-up: depends on [Qt](https://www.qt.io/). + +```shell-session +$ sudo add-apt-repository -y universe + +$ sudo apt install -y rpi-imager +``` + +### Step 2: disable Raspberry Pi Imager [telemetry](https://github.com/raspberrypi/rpi-imager#telemetry) + +#### macOS + +```shell-session +$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO +``` + +#### Ubuntu (or other Debian-based OS) + +```shell-session +$ mkdir -p ~/.config/Raspberry\ Pi + +$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf +[General] +telemetry=false +EOF +``` + +### Step 3: download [Ubuntu for desktops](https://ubuntu.com/desktop) + +> Heads-up: for additional security, [verify](https://ubuntu.com/tutorials/how-to-verify-ubuntu) Ubuntu for desktops download. + +Go to https://ubuntu.com/download/desktop and download Ubuntu 22.04.1 LTS. + +### Step 4: create Ubuntu for desktops bootable installer + +Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select Ubuntu for desktops `.iso`, click “CHOOSE STORAGE”, select USB flash drive and, finally, click “WRITE”. + +![Raspberry Pi Imager](./assets/rpi-imager.png) + +👍 + +## Installation guide + +### Step 1 (optional): physically remove internal disk(s) + +### Step 2 (optional): initialize datAshur PRO² and enable bootable mode (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions) + +### Step 3: insert both USB flash drives into computer + +### Step 4 (if applicable): enable “Secure Boot” and disable “Boot Order Lock” + +![Secure Boot](./assets/enable-secure-boot.jpg) + +![Boot Order Lock](./assets/disable-boot-order-lock.jpg) + +### Step 5: boot to Ubuntu for desktops bootable installer and select “Try or Install Ubuntu” + +![Try or Install Ubuntu](./assets/try-or-install-ubuntu.jpg) + +### Step 6: connect Ethernet cable or connect to Wi-Fi network + +### Step 7: install Ubuntu + +#### Click “Install Ubuntu” + +![Install Ubuntu](./assets/install-ubuntu.jpg) + +#### Choose keyboard layout and click “Continue” + +![Keyboard layout](./assets/keyboard-layout.jpg) + +#### Select “Minimal installation” and click “Continue” + +![Updates and other software](./assets/updates-and-other-software.jpg) + +#### Select “Something else” and click “Continue” + +![Installation type](./assets/installation-type.jpg) + +#### Delete all partitions on USB flash drive on which Ubuntu for desktops is being installed + +![Delete partitions](./assets/delete-partitions.jpg) + +#### Create 512MB EFI partition on USB flash drive on which Ubuntu for desktops is being installed + +![EFI partition](./assets/efi-partition.jpg) + +#### Create ext4 partition and set mount point to `/` on USB flash drive on which Ubuntu for desktops is being installed + +![ext4 partition](./assets/ext4-partition.jpg) + +#### Choose “Device for boot loader installation” and click “Install now” + +![Install now](./assets/install-now.jpg) + +#### Confirm changes about to be written to disk and click “Continue” + +> WARNING: make sure changes only apply to USB flash drive on which Ubuntu for desktops is being installed. + +![Write the changes to disk](./assets/write-the-changes-to-disk.jpg) + +#### Choose timezone and click “Continue” + +![Where are you](./assets/where-are-you.jpg) + +#### Choose credentials, select “Log in automatically” (optional) and click “Continue” + +![Who are you](./assets/who-are-you.jpg) + +#### Reboot + +## Configuration guide + +### Step 1: disable telemetry + +![Help improve Ubuntu](./assets/help-improve-ubuntu.jpg) + +### Step 2: run `update-manager` and click “Install Now” + +![Software Updater](./assets/software-updater.jpg) + +### Step 3: reboot + +### Step 4 (if applicable): enable “Boot Order Lock” + +![Boot Order Lock](./assets/enable-boot-order-lock.jpg) + +### Step 5 (optional): center new windows + +```shell-session +$ gsettings set org.gnome.mutter center-new-windows true +``` + +### Step 6 (optional): enable dark mode + +```shell-session +$ gsettings set org.gnome.desktop.interface color-scheme prefer-dark + +$ gsettings set org.gnome.desktop.interface gtk-theme Yaru-dark +``` + +### Step 7: disable auto-mount + +```shell-session +$ gsettings set org.gnome.desktop.media-handling automount false +``` + +### Step 8: add `universe` APT repository + +```shell-session +$ sudo add-apt-repository -y universe +``` + +### Step 9: install `curl`, `libfuse2`, `overlayroot` and `zbar-tools` + +```shell-session +$ sudo apt install -y curl libfuse2 overlayroot zbar-tools +``` + +### Step 10 (if applicable): download [Superbacked](https://superbacked.com/) and allow executing `superbacked.AppImage` as program + +#### Download Superbacked + +> Heads-up: replace `ABCDEFGH` with your license code. + +> Heads-up: for additional security, [verify](/faq/release-integrity) Superbacked download. + +```shell-session +$ curl --fail --location --output ~/Desktop/superbacked.AppImage "https://superbacked.com/api/downloads/superbacked-std-x64-latest.AppImage?license=ABCDEFGH" +``` + +#### Allow executing `superbacked.AppImage` as program + +Right-click “superbacked.AppImage”, click “Properties”, click “Permissions” and, finally, select “Allow executing file as program”. + +![Allow executing file as program](./assets/allow-executing-file-as-program.jpg) + +### Step 11: set `ext4` and `vfat` filesystems to read-only + +```shell-session +$ sudo sed -i 's/errors=remount-ro/errors=remount-ro,noload,ro/g' /etc/fstab + +$ sudo sed -i 's/umask=0077/umask=0077,ro/g' /etc/fstab +``` + +### Step 12: disable `fsck.repair` + +```shell-session +$ sudo sed -i 's/quiet splash/quiet splash fsck.repair=no/g' /etc/default/grub + +$ sudo update-grub +``` + +### Step 13: set `overlayroot` to `tmpfs` + +```shell-session +$ sudo sed -i 's/overlayroot=""/overlayroot="tmpfs"/g' /etc/overlayroot.conf +``` + +### Step 14: clear Bash history + +```shell-session +$ history -cw +``` + +### Step 15: reboot + +> Heads-up: filesystem will be mounted as read-only following reboot. + +```shell-session +$ sudo systemctl reboot +``` + +### Step 16: shutdown + +> Heads-up: filesystem is ready for optional hardware read-only hardening. + +```shell-session +$ sudo systemctl poweroff +``` + +### Step 17 (optional): physically remove internal disk(s) and wireless interface(s) if not soldered to motherboard or disable interface(s) using BIOS if soldered + +![Disable interfaces](./assets/disable-interfaces.jpg) + +### Step 18 (optional): enable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions) + +👍 diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/allow-executing-file-as-program.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/allow-executing-file-as-program.jpg new file mode 100644 index 0000000..ee8fbfb Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/allow-executing-file-as-program.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/delete-partitions.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/delete-partitions.jpg new file mode 100644 index 0000000..2e2a625 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/delete-partitions.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-boot-order-lock.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-boot-order-lock.jpg new file mode 100644 index 0000000..3ee2601 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-boot-order-lock.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-interfaces.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-interfaces.jpg new file mode 100644 index 0000000..968d6b1 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/disable-interfaces.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/efi-partition.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/efi-partition.jpg new file mode 100644 index 0000000..3f8e280 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/efi-partition.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-boot-order-lock.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-boot-order-lock.jpg new file mode 100644 index 0000000..1d59aae Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-boot-order-lock.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-secure-boot.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-secure-boot.jpg new file mode 100644 index 0000000..2588569 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/enable-secure-boot.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/ext4-partition.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/ext4-partition.jpg new file mode 100644 index 0000000..6c3c55a Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/ext4-partition.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/help-improve-ubuntu.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/help-improve-ubuntu.jpg new file mode 100644 index 0000000..37a67f9 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/help-improve-ubuntu.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-now.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-now.jpg new file mode 100644 index 0000000..9419a43 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-now.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-ubuntu.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-ubuntu.jpg new file mode 100644 index 0000000..d47f5fc Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/install-ubuntu.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/installation-type.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/installation-type.jpg new file mode 100644 index 0000000..23d8021 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/installation-type.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/keyboard-layout.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/keyboard-layout.jpg new file mode 100644 index 0000000..68e153e Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/keyboard-layout.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/rpi-imager.png b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/rpi-imager.png new file mode 100644 index 0000000..ff9efa5 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/rpi-imager.png differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/run-as-a-program.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/run-as-a-program.jpg new file mode 100644 index 0000000..4164130 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/run-as-a-program.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/set-default-printer.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/set-default-printer.jpg new file mode 100644 index 0000000..460eab8 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/set-default-printer.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/software-updater.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/software-updater.jpg new file mode 100644 index 0000000..f23da51 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/software-updater.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/try-or-install-ubuntu.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/try-or-install-ubuntu.jpg new file mode 100644 index 0000000..9334e50 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/try-or-install-ubuntu.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/updates-and-other-software.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/updates-and-other-software.jpg new file mode 100644 index 0000000..be65ad3 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/updates-and-other-software.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/where-are-you.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/where-are-you.jpg new file mode 100644 index 0000000..d884f70 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/where-are-you.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/who-are-you.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/who-are-you.jpg new file mode 100644 index 0000000..f062967 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/who-are-you.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/write-the-changes-to-disk.jpg b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/write-the-changes-to-disk.jpg new file mode 100644 index 0000000..b1a089b Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-intel-computer/assets/write-the-changes-to-disk.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/README.md b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/README.md new file mode 100644 index 0000000..11ef74b --- /dev/null +++ b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/README.md @@ -0,0 +1,214 @@ + + +# How to setup hardened Ubuntu environment on Raspberry Pi + +## Requirements + +The following hardware is required. + +- [Raspberry Pi 4](https://www.raspberrypi.com/products/raspberry-pi-4-model-b/) (2GB min) +- Raspberry Pi [15W USB-C Power Supply](https://www.raspberrypi.com/products/type-c-power-supply/) +- Raspberry Pi [keyboard](https://www.raspberrypi.com/products/raspberry-pi-keyboard-and-hub/) and [mouse](https://www.raspberrypi.com/products/raspberry-pi-mouse/) (or equivalent) +- Raspberry Pi [Micro HDMI to Standard HDMI (A/M) Cable](https://www.raspberrypi.com/products/micro-hdmi-to-standard-hdmi-a-cable/) (or equivalent) +- microSD card or USB flash drive (used to install Ubuntu for desktops, 16GB min) +- HDMI display (720p min) + +## Recommendations + +Installing Ubuntu for desktops on [datAshur PRO²](https://istorage-uk.com/product/datashur-pro2/) USB flash drive is recommended to enforce access control, data persistence and tamper resistance hardening. + +## Bootable installer creation guide + +### Step 1: install [Raspberry Pi Imager](https://www.raspberrypi.com/software/) + +#### macOS + +Go to https://www.raspberrypi.com/software/, download and install Raspberry Pi Imager. + +#### Ubuntu (or other Debian-based OS) + +> Heads-up: depends on [Qt](https://www.qt.io/). + +```shell-session +$ sudo add-apt-repository -y universe + +$ sudo apt install -y rpi-imager +``` + +### Step 2: disable Raspberry Pi Imager [telemetry](https://github.com/raspberrypi/rpi-imager#telemetry) + +#### macOS + +```shell-session +$ defaults write org.raspberrypi.Imager.plist telemetry -bool NO +``` + +#### Ubuntu (or other Debian-based OS) + +```shell-session +$ mkdir -p ~/.config/Raspberry\ Pi + +$ cat << "EOF" > ~/.config/Raspberry\ Pi/Imager.conf +[General] +telemetry=false +EOF +``` + +### Step 3: download [Ubuntu for desktops](https://ubuntu.com/desktop) + +> Heads-up: for additional security, [verify](https://ubuntu.com/tutorials/how-to-verify-ubuntu) Ubuntu for desktops download. + +Go to https://ubuntu.com/download/raspberry-pi and download Ubuntu Desktop 22.04.1 LTS. + +### Step 4: copy Ubuntu for desktops to USB flash drive + +Open “Raspberry Pi Imager”, click “CHOOSE OS”, then “Use custom”, select Ubuntu for desktops `.img.xz`, click “CHOOSE STORAGE”, select USB flash drive and, finally, click “WRITE”. + +![Raspberry Pi Imager](./assets/rpi-imager.png) + +👍 + +## Installation guide + +### Step 1: choose language and click “Continue” + +![Welcome](./assets/welcome.jpg) + +### Step 2: choose keyboard layout and click “Continue” + +![Keyboard layout](./assets/keyboard-layout.jpg) + +### Step 3: choose timezone and click “Continue” + +![Where are you](./assets/where-are-you.jpg) + +### Step 4: choose credentials, select “Log in automatically” (optional) and click “Continue” + +![Who are you](./assets/who-are-you.jpg) + +👍 + +## Configuration guide + +### Step 1: disable telemetry + +![Help improve Ubuntu](./assets/help-improve-ubuntu.jpg) + +### Step 2: run `update-manager` and click “Install Now” + +![Software Updater](./assets/software-updater.jpg) + +### Step 3: reboot + +### Step 4 (optional): center new windows + +```shell-session +$ gsettings set org.gnome.mutter center-new-windows true +``` + +### Step 5 (optional): enable dark mode + +```shell-session +$ gsettings set org.gnome.desktop.interface color-scheme prefer-dark + +$ gsettings set org.gnome.desktop.interface gtk-theme Yaru-dark +``` + +### Step 6: disable auto-mount + +```shell-session +$ gsettings set org.gnome.desktop.media-handling automount false +``` + +### Step 7: add `universe` APT repository + +```shell-session +$ sudo add-apt-repository -y universe +``` + +### Step 8: install `curl`, `libfuse2`, `overlayroot`, `zbar-tools` and `zlib1g-dev` + +```shell-session +$ sudo apt install -y curl libfuse2 overlayroot zbar-tools zlib1g-dev +``` + +### Step 9 (if applicable): download [Superbacked](https://superbacked.com/) and allow executing `superbacked.AppImage` as program + +#### Download Superbacked + +> Heads-up: replace `ABCDEFGH` with your license code. + +> Heads-up: for additional security, [verify](/faq/release-integrity) Superbacked download. + +```shell-session +$ curl --fail --location --output ~/Desktop/superbacked.AppImage "https://superbacked.com/api/downloads/superbacked-std-arm64-latest.AppImage?license=ABCDEFGH" +``` + +#### Allow executing `superbacked.AppImage` as program + +Right-click “superbacked.AppImage”, click “Properties”, click “Permissions” and, finally, select “Allow executing file as program”. + +![Allow executing file as program](./assets/allow-executing-file-as-program.jpg) + +### Step 10: disable Bluetooth and Wi-Fi + +```shell-session +$ cat << "EOF" | sudo tee -a /boot/firmware/config.txt +dtoverlay=disable-bt +dtoverlay=disable-wifi +EOF +``` + +### Step 11: set `ext4` and `vfat` filesystems to read-only + +```shell-session +$ sudo sed -i 's/discard,x-systemd.growfs/discard,noload,ro/g' /etc/fstab + +$ sudo sed -i 's/defaults/defaults,ro/g' /etc/fstab +``` + +### Step 12: disable `fsck.repair` + +```shell-session +$ sudo sed -i 's/splash/splash fsck.repair=no/g' /boot/firmware/cmdline.txt +``` + +### Step 13: set `overlayroot` to `tmpfs` + +```shell-session +$ sudo sed -i 's/overlayroot=""/overlayroot="tmpfs"/g' /etc/overlayroot.conf +``` + +### Step 14: clear Bash history + +```shell-session +$ history -cw +``` + +### Step 15: reboot + +> Heads-up: filesystem will be mounted as read-only following reboot. + +```shell-session +$ sudo systemctl reboot +``` + +### Step 16: shutdown + +> Heads-up: filesystem is ready for optional hardware read-only hardening. + +```shell-session +$ sudo systemctl poweroff +``` + +### Step 17 (optional): enable datAshur PRO² global read-only (see product [documentation](https://istorage-uk.com/product-documentation/) for instructions) + +👍 diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/allow-executing-file-as-program.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/allow-executing-file-as-program.jpg new file mode 100644 index 0000000..5fb3426 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/allow-executing-file-as-program.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/delete-partitions.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/delete-partitions.jpg new file mode 100644 index 0000000..2e2a625 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/delete-partitions.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/help-improve-ubuntu.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/help-improve-ubuntu.jpg new file mode 100644 index 0000000..8bc7509 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/help-improve-ubuntu.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/keyboard-layout.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/keyboard-layout.jpg new file mode 100644 index 0000000..35b9aee Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/keyboard-layout.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/rpi-imager.png b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/rpi-imager.png new file mode 100644 index 0000000..9203006 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/rpi-imager.png differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/run-as-a-program.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/run-as-a-program.jpg new file mode 100644 index 0000000..8578ae2 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/run-as-a-program.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/set-default-printer.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/set-default-printer.jpg new file mode 100644 index 0000000..03f5148 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/set-default-printer.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/software-updater.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/software-updater.jpg new file mode 100644 index 0000000..dec6159 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/software-updater.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/welcome.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/welcome.jpg new file mode 100644 index 0000000..ea06f39 Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/welcome.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/where-are-you.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/where-are-you.jpg new file mode 100644 index 0000000..2ffdecd Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/where-are-you.jpg differ diff --git a/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/who-are-you.jpg b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/who-are-you.jpg new file mode 100644 index 0000000..612575a Binary files /dev/null and b/how-to-setup-hardened-ubuntu-environment-on-raspberry-pi/assets/who-are-you.jpg differ