Interactive command builder

Configure the install before it touches your machine.

This page only creates a command. Review the checklist, choose your components, then run it yourself in a terminal on a fresh Debian 13 Cinnamon installation.

Before you continue

Fresh install only. Do not run on a desktop with data or configuration you need to keep.

Encrypt the disk first. Choose full-disk encryption in the Debian installer.

Expect a reboot. The script may take 15–20 minutes and changes system settings.

01 / Browsers

Choose your browser roles

All are included by default. Leave only the browsers you expect to use.

LibreWolf Primary browser, set as system default. Firefox Hardened with Arkenfox + Betterfox. Waterfox Alternative hardened Firefox fork. Tor Browser Separate browser for Tor isolation. Bare Chromium An isolated fallback for compatibility-only browsing.

02 / DNS

Pick a DNS resolver

Quad9 Default. Free, no account, DNS-over-TLS. OpenDNS Plain DNS; encrypted DNS is not enabled. NextDNS Your own configuration ID is needed later. No override Keep DNS provided by your network.

03 / Optional extras

Keep extras separate from hardening

Desktop theming Coming soon Not currently implemented, so it is deliberately unavailable. App bundle GIMP, Inkscape, VSCodium, media tools, and a small games set. Skip interactive prompts (--yes) Only use if you have reviewed the options and are certain this is a fresh install.