Best security configuration that can be installed on a low-resources PC

Hello,

I am posting this message to ask you a question : what is the best security configuration that can be installed on a low-resources PC ?

I have a recent PC with a dual-core processor and only 4 GB of RAM.

Currently, it runs very well under Debian and Xfce as DE.

However, I would like to switch to Fedora as my OS, and especially to benefit of a DE that works with Wayland (GNOME).

I know that GNOME is resource-intensive, and I’m afraid that using it will be laborious.

Based on your experience, is it worth attempting a full installation (with full disk encryption) under these conditions ?

Can I get a good idea of whether Fedora/GNOME works well (or not) just from a live USB stick ?

Is the free command the best way to assess the state of the RAM ?

I know it is possible to manually change the RAM on your device, but I would like to avoid doing so if possible…

Thanks !

I wonder what recent PC comes with a dual-core processor and 4 GB of RAM? I’m not doubting you, just genuinely curious if you don’t mind sharing.

Fedora’s LXQt spin should provide similar security as GNOME and similar resource usage as Xfce. I’m not sure if it uses Wayland by default but Wayland should be stable on the latest version of LXQt, you just might have to manually switch to it.

I don’t see why full disk encryption would be extra burdensome on your device?

I’d say if it works well on a live USB (while running multiple applications you’d typically use) then it should work well if you install it. But if it doesn’t work well, that doesn’t necessarily mean it can’t run on your laptop as live USBs in general tend to be more sluggish.

In any case, if you just want the security benefits of Wayland I’d try LXQt before trying to run GNOME on a low-spec device.

You can see some details on this page.

Yet, LXQT is not available for the Atomic versions of Fedora,

(Moreover, LXQT uses the QT langage, and I don’t know if such a DE would be compatible with ProtonVPN - which is designed for GTK)

Because a full disk encryption implies that the encryption key is stored in RAM to decrypt data “on the fly” - hence increased RAM consumption…

You can use GTK programs on QT based DEs and vice versa. It just might not fit the theme of the DE.

1 Like

If the RAM isn’t soldered, I urge you to try and find another 4GB or 8GB stick.
Even with the current RAM pricing issues, small size sticks haven’t increased much and you can always go spelunking dumpsters in corpoland.

edit: it seems that E410 has only soldered RAM, instead just try to find a whole computer, it shouldn’t take too long.

I’d recommend Fedora with MATE with the junk pruned off, should idle at around 600MB usage. You can probably setup a minimal Arch that idles even lower at like 450MB, but you might lose some functionality or convenience.
If you want to absolutely maximize memory usage you can find a 32-bit PAE distro, but I’m not sure if many of those exist anymore.

encryption does add overhead, especially if AES acceleration isn’t available.
@PaulF
you can check if AES acceleration is available: grep aes /proc/cpuinfo
or benchmark it: cryptsetup benchmark -c aes-xts -s 512, you want above 500MBps
if it isn’t you can use adiantum which is fast on such processors: cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 <device>

edit: the N4020 in the E410 does have AES-NI: https://www.intel.com/content/www/us/en/products/sku/197310/intel-celeron-processor-n4020-4m-cache-up-to-2-80-ghz/specifications.html#specs-1-0-9

it doesn’t increase ram consumption

2 Likes

Which DE would have the best Wayland support, between LXQt and MATE ?


On the GNOME forum, some users have emphasized the role of the number of running apps, in the RAM consumption ; according to them, a limited number of applications (no Discord/Element…) would allow GNOME to run with 4 GB.

What do you think ?

just because it can, doesn’t mean it will be pleasant.

MATE does not support Wayland.

I don’t understand why you keep asking this same question?

Have you not tried to actually use it?
Do you have any actual issue you’re encountering?

1 Like

Ah, you didn’t specify. If you don’t have a great reason for using an atomic distro, Fedora LXQt would probably be the best option for ya.

As I am by no means an expert, I try to gather as many perspectives on the subject as possible in order to achieve a satisfactory result straight away… For example, I still don’t understand why GNOME and KDE use more system resources than other DEs, when it is possible to benefit from Wayland with a more minimal DE (LQXt) (so we can’t say that Wayland itself is more resource-intensive than X11).


On the other hand, can using a desktop environment such as GNOME on a device with low RAM lead to significant battery consumption ?

I haven’t yet been able to determine precisely what advantages I would gain from an atomic version of Fedora, but a recommendation in another thread has prompted me to go straight for that version (Atomic).

If I have to rule out Silverblue and Kinoite because of this RAM issue, that leaves three options : Budgie, COSMIC, and Sway.

It seems to me that these others DEs were selected by Fedora because they all work exclusively with Wayland :

  • for Budgie, see here
  • for COSMIC, see here

Can you tell me, please, if I’m right ?


The good news is that Budgie and COSMIC are lighter than GNOME and KDE.

Apart from that, I don’t know how these 2 DEs differ, or whether one is more interesting than the other (maintenance, security, ergonomics, etc.). User feedback would be welcome…

(This site provides a comparison of the hardware resources required for some DEs, but it does not mention COSMIC).