Security

The power of Linux

PantherX builds on the Linux Kernel, which already powers various super computer and the majority of our today’s internet. The whole system has been designed to protect your data and itself, even in .

Take advantage of various security features such as full-disk encryption, tighly integrated private networking and the assurance that your system always returns to it’s originally configured state, after every reboot.

Firewall

Our default firewall is based on the high-performance packet filtering solution nftables and configured to block all but essential traffic which should suffice for most users.

Open more ports

If you need to open additional ports, it’s easy to do that via system configuration:

#:open-ports '(("tcp" "4001"))

Customize or replace the firewall

For users with more advance use-cases, it’s easy to provide a custom nftables configuration, or replace the firewall itself with iptables or others.

Read more about network and firewall configuration via system config: Guix Manual

(define %custom-nftables-ruleset
  (plain-file "nftables.conf"
	      "
flush ruleset

table inet filter {
  chain input {
    type filter hook input priority 0; policy drop;

    # early drop of invalid connections
    ct state invalid drop

    # allow established/related connections
    ct state { established, related } accept

    # allow from loopback
    iifname lo accept

    # allow icmp
    ip protocol icmp accept
    ip6 nexthdr icmpv6 accept

    # allow ssh, http, https
    tcp dport { ssh, http, https, 8448 } accept

    # reject everything else
    reject with icmpx type port-unreachable
  }
  ...
}
"))

Subscribe for Updates & Perks

Join us on our journey to make history. Be the first to know about the PantherX OS 1.0 release in 2023 and get exclusive early-adopter discounts on powerful, dedicated PantherX OS hardware, that's smaller than your wallet.

PantherX OS is a reliable, user-friendly operating system that builds on GNU Guix but incorporates non-free software and drivers including nonguix to make it easy to install and use on a wide range of hardware.

The Power of PantherX OS