To get right to it, I distro-morphed a bare metal Debian Buster, using XFCE. It is an Intel computer. I purged libreoffice, Firefox, and their leftover dependencies. No other packages were removed.
Installed kicksecure packages and metapackages (not hardened kernel or standalone additions like tirdad)
Networking broke after installing kicksecure-packages-dependencies-pre and kicksecure-network-conf. Was met with “no route” errors and NetworkManager could not recognize a connection. Recovered easily after rollback and restart.
apparmor-profile-everything broke lightdm.service and I could not boot into XFCE. The problem is caused by apparmor profile user.lib.xorg.Xorg. I had to remove it from the apparmor.d directory, beacause aa-disable and aa-complain gave errors when I tried to use them. Those errors mentioned init-systemd in /etc/apparmor.d/
Another issue was when I tried to remove the apparmor-profile-everything package, I found that it needs a file it just deleted to finish uninstalling. “problem executing scripts dpkg::Post-Invoke '/usr/lib/apparmor-profile-everything/grub-cfg: not found Sub-process returned an error code”
Otherwise, everything seems good. I’m not done yet and I can probably follow up later as I make more progress.
Thank you for this project! Very good work!