I suppose some live iso can be missing latest security updates which are needed when for example I would like to connect to internet banking.

(I want to test usability / compatibility from live iso before installing distro to HDD)

MakeTopSite,

Having typed the long screed below, I now realise that I have probably got hold of the wrong end of the stick.

For the very latest security updates and latest stable kernel I would recommend a rolling release distro such as EndeavourOS:

https://endeavouros.com

Users always have access to the latest software updates and features, meaning the system is always up-to-date and secure.

Also see EndeavourOS Forum:
https://forum.endeavouros.com/

Plus my LQ recent blog:
https://www.linuxquestions.org/quest...og.php?b=39223


Possible solution?

Puppy Linux is the perfect (and portable) solution for secure transactions over the internet such as banking and shopping.

Installing Puppy Linux on a separate, partitioned USB drive:

NB Puppy Linux is not meant to be used as a primary OS installed on a hard disk drive:
https://puppylinux-woof-ce.github.io/install.html

It is designed to be used from a bootable USB drive.

You can even plug it into a laptop or PC which has no SSD or hard drive because the whole system runs in RAM!

Download FossaPup-9.5.iso from:
https://distro.ibiblio.org/puppylinux/puppy-fossa/

Burn the ISO image to a bootable USB drive:
(a) With a Windows computer, use Rufus:
https://rufus.ie/en/

(b) With a Linux computer, use Etcher:
https://etcher.balena.io/
To boot from the USB drive, you will need to enter your computer's BIOS or UEFI setup and change the boot order so that the USB drive is the first boot device.
………………………………………………………………………………………….


Whilst Puppy Linux is perfectly usable as a live system on a USB drive, it is also possible to run it as a fully fledged system on a separate, partitioned USB flash drive.

NB In this instance it is necessary to use TWO separate USB drives:

1. The bootable installation drive with the FossaPup ISO file. See “Booting Up the Puppy Linux Installer” on the link below.

2. The separate, partitioned USB drive where Puppy Linux is actually installed. See “Installing Puppy Linux” on the link below .

This link gives the installation instructions:
https://www.maketecheasier.com/how-t...b-flash-drive/

Note that the main installation instructions are for UEFI (GPT) boot.

If you have Legacy (MBR) boot, then you only need to create a single root partition whilst preparing your disk. Use ext3.

In addition for Legacy boot, you also need to run the GRUB4DOS program instead of using FrugalPup to generate the boot partition.
You can access this utility by pressing right-click on the live desktop and selecting “Setup -> grub4dos.”

An alternative link for installing Puppy Linux on a USB drive or PC:
https://www.wikihow.com/Install-Puppy-Linux

1 members found this post helpful.

in general you can update existing apps on the LiveCD and install new packages, but they are not persistent - they will not 'survive' a reboot of the CD.

I would assume the latest live ISOs of active distributions to have a web browser and whatever else that is compatible with the current TLS/SSL standards. In addition the banking website might look for a particular user-agent or some OS fingerprint before it connects.

1 members found this post helpful.

Any OS that has a decent browser - Firefox or better. Everything is inclined to be compatible with Chrome, & firefox.

1 members found this post helpful.

Wonder if linux will get the sandbox feature windows has?

1 members found this post helpful.

Linux probably has something like that but functional. Windows is imitating something. It is just a matter of looking around and finding out what.

Thank you for a detailed answer and your time, I appreciate it.

Puppy Linux is one of the first distros I've tried if not the very first (I've moved to another distro because everything was run under root account).

I know little about EndeavourOS which seems little strange to me given the high popularity in the Distrowatch list. I think I would prefer non-systemd distro if I try some new distro.

That's what I was worried about and why I've created this thread.

I'm not sure. Maybe something based on a virtualization ?

Some of the Ubuntu live images used to have an option for persistence, if you had an additional partition on the USB stick. I haven't looked at Ubuntu variants for years, though. The steps for Debian ought to work for Devuan, since you would like to avoid systemd:

https://wiki.debian.org/DebianLive/LiveUsbPersistence

If you're looking for a sandbox in Linux, then Firejail might be an option. Or you could run the browser inside Qemu and use snapshots. Or you could work out a proper AppArmor profile for your browser of choice. The default AppArmor profiles provided by the distros by default are so loose as to be useless so modifications would be essential.

1 members found this post helpful.

Everything you want is on Slackware's Liveslak also, along with several very useful scripts.

I use 64G usb keys. I give 32G to linux, about 4G is the usb, and the rest is persistence. I also have an ntfs partition to accommodate windows lusers.

1 members found this post helpful.