Absolute minimum Debian install to run KVM


I plan on doing a netinstall of Debian then just adding enough to run KVM to run
Whonix, for the smallest attack surface, then harden it as much as I can.

Have people done this before and documented it, so I don’t have to re-envent the wheel?

It would be great to have a security focused distro (more specific than Proxmox) solely for KVM.


There are plenty of host hardening tips on our wiki. proxmox is a WebGUI for KVM not a distro. Its unlikely the Whonix project will maintain a customized distro for baremetal since it needs a lot of resources.