Skip to content

v2.1.1

Choose a tag to compare

@gentzycode gentzycode released this 28 Apr 10:16
· 19 commits to main since this release
a729e80

🛡️ Lordmoritz Fortify Script — Release v2.1.1

Author: Chinonso Okoye (Lordmoritz / Gentmorris / Gentzycode)

Release Date: 28 April 2025

License: MIT


✨ What's New in v2.1.1

This release marks a major evolution of the Lordmoritz Fortify Script, introducing self-maintenance capabilities and further refining system hardening for unattended security compliance.

✅ Self-Update Command Introduced:

  • Run sudo lordmoritz-fortify lordmoritz upgrade me
  • Seamlessly pulls the latest improvements directly from GitHub and updates the script itself.
  • No need for manual re-cloning or reinstallation!

✅ Enhanced Usage Detection:

  • Clear user guidance when wrong input is provided.
  • Fortify (lordmoritz fortify me) or Upgrade (lordmoritz upgrade me) flows are automatically detected and managed.

✅ Failsafe Git Pull Logic:

  • Even if the user’s installation folder gets corrupted or unreachable, upgrade errors are caught gracefully.

✅ Improved Cron Resilience:

  • Heavy tasks (AIDE check, nightly ClamAV and rkhunter scans, Fail2Ban maintenance) are scheduled without duplicates.
  • Self-healing for Fail2Ban and AIDE remains intact.

✅ Refined Logs and Summaries:

  • Security actions, scan results, and warnings are all logged in /var/log/security-reports/.
  • Clean summary presented after fortification, including Canonical Livepatch recommendation.

✅ General Codebase Optimization:

  • More polished output colors for [OK], [WARNING], [ERROR] statuses.
  • Reduced duplicate code, tightened retry mechanisms.
  • Future-proofed for smoother packaging as .deb if needed.

⚙️ How to Install

curl -sSL https://raw.githubusercontent.com/gentzycode/lordmoritz-fortify/main/INSTALL.sh | sudo bash

Fortify your system:

sudo lordmoritz-fortify lordmoritz fortify me

Upgrade in the future (no reinstall needed):

sudo lordmoritz-fortify lordmoritz upgrade me

📚 Notes

  • Designed for Ubuntu 20.04+, 22.04+, and compatible Debian systems.
  • Perfect for cloud VMs, bare-metal servers, and security-focused deployments.
  • Minimal system load during fortification; heavy scans scheduled for midnight.
  • AIDE, ClamAV, rkhunter, Fail2Ban, UFW firewall — all automatically installed, configured, and maintained.
  • Optionally, add --skip-heavy-scans for lightweight systems.

🏆 Special Credits


🚀 Let Lordmoritz Fortify your Infrastructure!