@sn0int @theruran
I did use Arch for this challenge - mainly because linux-hardened was available straight from the package repo. I did not want to lose any time by compiling the kernel from source. But it can be achieved with any GNU/Systemd distribution.
linux-hardened