this post was submitted on 02 Oct 2023
21 points (100.0% liked)
Arch Linux
7175 readers
3 users here now
The beloved lightweight distro
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You don't need to change kernel if the one you have works fine.
For gaming PCs you're often running hardware that gets improved in the kernel often. For servers, as long as you're not trying to squeeze every once of performance out of it you can get by with way behind bleeding edge kernels.
One of the easiest attack vectors to secure on a kernel is compiling all your modules directly into the kernel and disabling loadable kernel modules.
Once you've got a kernel that has all the bells and whistles you need compiled into it, it's relatively mature enough to have it's bugs worked out (like an LTS kernel that's been out for a month or so), and you've applied proper system and kernel hardening configs, that server can run undisturbed for quite a while.