Secure Linux Server Job

I need a Linux sysadmin and security expert to set up a hardened Linux server for me, to run as a virtual machine. Security should be considered very seriously, e.g. setting up port knocking, and so should performance. The tricky part of this job is that all installations, configurations, and tweaks will have to be made through a single script that you will be asked to provide and that I will run locally on the virtual machine instance on the actual machine. The job will include choosing the specific (free) Linux distro that best suits our needs, choosing the virtual machine type (VMWare/Parallels), defining in detail all tasks that the set up script will have to do (hardening, installing additional software, setting up cron backup jobs, etc.) and of course writing and testing the script itself. All of these will be done considering your recommendations and preferences The script should be written in Python (preferred) or as a shell script, and must be very well commented. The script should also be forgiving/informative in regards to changes to versions, e.g. minor updates to the distro or apache etc. The script should explicitly check its assumptions before performing operations, and in case some conflict or other problem is discovered, it should output a message of the issue discovered (e.g. a change was supposed to be made in a specific section of some configuration file, but that entire section is missing for some reason). **To bid on this job please answer the following: - what types of hardening will you suggest to be performed? (please divide by categories) - which distro(s) do you recommend for this purpose and why? - will you be able to write the script in Python?** Thanks for bidding! ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform Linux