vps-ready: audit a fresh Linux VPS before you harden it

vps-ready audits a fresh Linux server before you harden it. One static binary, read-only, 18 checks across SSH, kernel and network. Early alpha. detect: distro, VM or container, the SSH config sshd is actually using (sshd -T), open ports with the process behind each, Docker presence. audit: 18 controls with stable IDs (SSH-002 and so on). Each failure shows the value found and why it matters. Text or JSON. Exit 0 clean, 1 something failed or unknown, 2 error. Releases are signed with cosign and carry GitHub build attestations. No telemetry. MIT OR Apache-2.0. Planned, not built yet: plan, apply and rollback, with a dead-man timer that reverts SSH and firewall changes unless you confirm from a new login. Install, as root on the server. Download it, read it, then run it: curl -fsSLO https://github.com/bhimrazy/vps-ready... less install.sh sh install.sh Code and issues: https://github.com/bhimrazy/vps-ready crates.io: https://crates.io/crates/vps-ready 0:00 Setting up a VPS by hand 0:16 detect 0:30 audit 0:46 CI output and signed releases 0:58 What's next and how to try it