Toolkit

Sets up and hardens an Ubuntu workstation with one command

Released

Platforms: Ubuntu 24.04+
Stack: Task Docker

One repository and one task runner take a fresh Ubuntu install to a hardened developer workstation with the company's repositories cloned. Running it again keeps the machine in step and installs nothing that is already there.

How it works

Installs and configures the studio's tools, among them VS Code, Rider, Unity Hub, Blender, GIMP, OBS Studio, Docker and SteamCMD.
Hardening runs last and only on request: a default-deny firewall, an outbound DNS allow list and an optional CIS audit.
A verify step reports what is installed and which hardening is in force.
Company repositories clone and update with one command each.

Example

$ sudo snap install task --classic

# Toolchain, git hooks, system packages, every application, then a report
task local:start

# Security baseline: firewall, DNS allow list. Runs last, on request
task harden

# What is installed and which hardening is in force
task verify