debset

#Debian/Ubuntu Client Setup
#MinInstall

#Prioritize Security Upgrades
sudo unattended-upgrades

#Set pass to single user mode
grub-mkpasswd-pbkdf2

#VPN                                                                                                          
sudo apt-get install openvpn                                                                                  
sudo apt-get install network-manager-openvpn-gnome                                                            
sudo apt install resolvconf                                                                                   
sudo wget -O protonvpn-cli.sh https://raw.githubusercontent.com/ProtonVPN/protonvpn-cli/master/protonvpn-cli.sh                                                                                                             
sudo chmod +x protonvpn-cli.sh                                                                                
sudo protonvpn-cli -init                                                                                      

#MacChanger
sudo apt-get install macchanger

#sandbox - firejail
sudo apt-get install firejail firetools

#AV
sudo apt install clamav clamav-unofficial-sigs clamtk -y

#Rootkit Checker
sudo apt-get install rkhunter

#apparmor                                                                                                     
sudo apt install apparmor apparmor-utils apparmor-profiles-extra                                                                   
sudo mkdir -p /etc/default/grub.d                                                                             
echo 'GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT apparmor=1 security=apparmor"' \
  | sudo tee /etc/default/grub.d/apparmor.cfg
sudo update-grub
sudo aa-status
sudo aa-enforce /etc/apparmor.d/*

#opensnitch - Have only been able to make this work on Ubuntu
#sudo apt-get install protobuf-compiler libpcap-dev libnetfilter-queue-dev python3-pip
#go get github.com/golang/protobuf/protoc-gen-go
#go get -u github.com/golang/dep/cmd/dep
#python3 -m pip install --user grpcio-tools
#sudo apt-get install golang-go

#ufw
sudo apt-get install ufw

#Signal (optional)
#curl -s https://updates.signal.org/desktop/apt/keys.asc | sudo apt-key add -
#echo "deb [arch=amd64] https://updates.signal.org/desktop/apt xenial main" | sudo tee -a /etc/apt/sources.list.d/signal-xenial.list
#sudo apt update && sudo apt install signal-desktop

#ARP Handling Inspection
sudo apt-get install arpon
sudo systemctl enable arpon
sudo systemctl restart arpon

sudo apt-get update -y
sudo apt-get upgrade -y
sudo apt-get autoremove -y
sudo apt-get clean

#sudo wget https://launchpad.net/veracrypt/trunk/1.23/+download/veracrypt-1.23-setup.tar.bz2

#Install GNU Privacy Assistant for PGP
sudo apt-get install gpa
#gpg --full-generate-key