https://github.com/CISOfy/lynis.git
https://madaidans-insecurities.github.io/guides/linux-hardening.html
Add GRUB_CMDLINE_LINUX_DEFAULT="quiet loglevel=3 nowatchdog ipv6.disable=1" for disabling ipv6 and watchdog
To Enable raw github sudo echo "185.199.108.133 raw.githubusercontent.com" >> /etc/hosts
To use latest kerel https://bbs.archlinux.org/viewtopic.php?id=266583