Set bios admin password check sudoers group, make other users non-admin delete unused / unnecessary accounts reset root password lock all ssh keys with passphrase ensure .
disable swap enable trim sudo apt install util-linux systemctl status fstrim check swappiness