Arch Security Distro

Custom Arch Linux build scripts that assemble a lightweight but capable security toolkit for pentesting, reverse engineering, malware analysis, OSINT, and bug bounty workflows. The project favors modularity so you can swap tools in or out without fighting a monolithic distro.

Legal note: These scripts install offensive security tooling. Use them only for ethical purposes (research, education, or engagements where you have explicit permission). You are responsible for complying with local laws and regulations.

Highlights

• Safe-by-default installs with explicit opt-in for high-risk tooling.
• Module-based manifest (configs/modules.toml) to keep toolsets composable.
• AUR usage is optional and minimized.
• Reproducible workflows for bare metal, VM, and Docker.

Project Layout

.
├── README.md
├── LICENSE
├── docs/
│   ├── installation.md
│   ├── tools.md
│   ├── contributing.md
│   ├── threat-model.md
│   ├── safe-defaults.md
│   └── release.md
├── scripts/
│   ├── install-tools.sh
│   ├── setup-bare-metal.sh
│   ├── generate-tools-docs.sh
│   ├── lib/common.sh
│   └── Dockerfile
├── configs/
│   ├── modules.toml
│   ├── .zshrc
│   └── .tmux.conf
└── tools/
    ├── python-scripts/
    └── rust-scripts/

Quick Start

1. Base Arch install: Follow the official Arch installation guide.
2. Clone the repo: git clone https://github.com/you/arch-security-distro.git && cd arch-security-distro.
3. Run a setup path:
   • Bare metal / VM (safe defaults): scripts/setup-bare-metal.sh --yes
   • Existing Arch host: scripts/install-tools.sh --yes
   • Docker sandbox: docker build -f scripts/Dockerfile -t arch-security .
4. Pick modules explicitly:
   • List modules: scripts/install-tools.sh --list-modules
   • Select modules: scripts/install-tools.sh --yes --modules core,virtualization,osint

Security and Safety

• Default modules are conservative. High-risk modules require an additional confirmation prompt.
• AUR is opt-in via --with-aur (setup) or preinstalled yay.
• No curl | bash patterns are used; direct downloads require verification.
• Review docs/threat-model.md and docs/safe-defaults.md for usage guidance.
• See SECURITY.md for vulnerability reporting.

Docs

• Installation details: docs/installation.md
• Module inventory: docs/tools.md
• Contributing guide: docs/contributing.md

Compatibility Notes

• setup-bare-metal.sh no longer installs AUR tooling by default. Use --with-aur if needed.
• Tooling selection is now manifest-driven via configs/modules.toml.

Roadmap

• Expand module-specific tests and dry-run validation.
• Add optional offline package caching and signature verification helpers.
• Document minimal VM templates for common hypervisors.

License

MIT License (see LICENSE).