What (free) linux distribution for COLD storage making? (Security)

[Mikcik]

Hello i have 2 desktop PCs. A new one connected to the internet. and the old one, already for 2 months disconected from internet and do not plan to connect it to internet (or the new pc via lan most probably also not).

I want to use the old PC as a "tool" to make "coldstorage" wallets (probably using electrum or multibit wallet) and storiing these encrypted wallet files both on the old PC hdds and then on couple of external backup HDDs (2) and couple of USB devices.

My question is- what Linux distribution should i download to make a LIVE bootable Flash disc to run on the old PC and to make the offline cold storage wallets from this linux distribution...

What linux live flash disk version should i download....? (it should probably be compatible with my 6-7 years old PC, and probably also be compatible with the software/desktp wallets im going to use). But i believe or major BTC wallets (dekstops) are linux compatible (like electrum or multibit)?

What linux version to download and from where?

[italianMiner72]

Hello i have 2 desktop PCs. A new one connected to the internet. and the old one, already for 2 months disconected from internet and do not plan to connect it to internet (or the new pc via lan most probably also not).

I want to use the old PC as a "tool" to make "coldstorage" wallets (probably using electrum or multibit wallet) and storiing these encrypted wallet files both on the old PC hdds and then on couple of external backup HDDs (2) and couple of USB devices.

My question is- what Linux distribution should i download to make a LIVE bootable Flash disc to run on the old PC and to make the offline cold storage wallets from this linux distribution...

What linux live flash disk version should i download....? (it should probably be compatible with my 6-7 years old PC, and probably also be compatible with the software/desktp wallets im going to use). But i believe or major BTC wallets (dekstops) are linux compatible (like electrum or multibit)?

What linux version to download and from where?

I think a really simple work aroun is to use a virtual machin.
You can use vmware or Virtual PC.
You install a virtual machine over a usb drive and when you do not use it, you can easily shut down the virtual machin.
This is good against ramsonware virus...
You unplug the drive when you do not use it.

[27QVUTZj8rgZP1]

• Xubuntu
• Linux Mint

Both don't have electrum already installed but you can do it by running from terminal:

Code:

apt-get update && apt-get install electrum

The above tip posted by italianMiner72 is also a good alternative, as you can fully encrypt a VM in VirtualBox.

[Andre_Goldman]

https://www.privacy-cd.org/history.html

ed; BRIEF PROJECT HISTORY page

[coolcoinz]

The only linux i've used was ubuntu and I had no problems. The system is very stable and easy to use even if you're a complete newbie.  Setting up bootable usb drives is easy and there are tutorials online, so no problems here as well. I think that whatever system you're using, if the pc is offline you're perfectly safe. Ubuntu and debian are probably the most popular ones.

[pedrog]

Use this to make bootable usb flash drive:

https://unetbootin.github.io/

Don't choose distribution in unetbootin, download it first.

Here's my favorite distribution with Gnome desktop:

https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-8.8.0-amd64-gnome-desktop.iso

[Red-Apple]

it depends on what your system is, and what you mean by old. for example look at how much ram you have. if you GPU is half decent.
but usually most linux distributions would work for you. and since you want this for a very delicate matter, you MUST only choose the popular ones to be sure they are safe and bug free.

the popular ones as others suggested are:
Ubuntu and Mint.
you can also choose any of the Ubuntu flavors which i think is much better for you since your computer is old. for example you can download LUbuntu 16 instead of Ubuntu 16 to get the same linux but with a different desktop and as a result a much faster OS.

there are bitcoin or security focused distributions, i personally don't like them because they aren't as popular and i am not knowledgeable enough to check and see if everything is ok with them.

as for downloading just google their name like Ubuntu and only download the ISO from their official website and remember to check their signature.

[Casy]

The distribution is not so much important for this, it should work on any.
You could use Ubuntu, Debian or Mint as a start.

[Shiroslullaby]

This is a pretty decent article about linux security:
https://www.cyberciti.biz/tips/linux-security.html

Wondering if anyone here is using SELinux or other hardening techniques to secure a machine used as a wallet/ node,
and any tips they have?

[Kprawn]

I use Tails because it has a built in Electrum wallet.  .... Just make sure that you enable the persistent volume, if you want to use that wallet.

It is nice to use it to create paper wallets too... but I would not trust it, even if you clean booted it. I bought a second hand computer and printer

just for paper wallet creation... they will never be connected to the internet again. 

[Mikcik]

Thanks.

And do i get it right, that i can create BTC wallets (in electrum or multibit for example) on completely OFFline computer? And the adress(es) i create would be functioning? Se even when i create the wallets (and thus BTC adresses) on completelly offline computers, i can sent there BTC, even though these adreesses have never seen/touch online computer...?

The only situation i will have to use the private keys on internet connected computer is when i want to SENT some bitcoins from these offline created wallets? Correct?

Or in other words, creating BTC wallet(s) (which are collection of BTC adresses (which are further a collection of private and public keys) right :-)?) and receiving BTCs to these wallets can be done completelly offline? Creating BTC wallets and receiving funds to them (from "outer world") can be done offline...?

The only situation i need a connection to the internet is:
1) Checking the current actual BTC balance on these wallets and
2) Sending BTCs from these wallets somewhere else

Correct?

[RoommateAgreement]

The only situation i need a connection to the internet is:
1) Checking the current actual BTC balance on these wallets and
2) Sending BTCs from these wallets somewhere else

Correct?

yes you can easily do this with any wallet.
when you create a wallet it gives you a bitcoin address/public key you can use that to check the balance on any online machine either by running a new wallet and adding that public key as the "watch only" address or by checking the balance on online explorers.

you can use electrum for an easy way of doing this.
here is a link that can help you more: http://docs.electrum.org/en/latest/coldstorage.html#create-a-watching-only-version-of-your-wallet

[xskl0]

Have you considered Ubuntu? Is the more normal and easy to use. https://www.ubuntu.com/download

[Red-Apple]

Thanks.

And do i get it right, that i can create BTC wallets (in electrum or multibit for example) on completely OFFline computer? And the adress(es) i create would be functioning? Se even when i create the wallets (and thus BTC adresses) on completelly offline computers, i can sent there BTC, even though these adreesses have never seen/touch online computer...?

yes you generate the private keys with the wallet you install offline and only use the public key in form of the bitcoin address (starting with 1) to give others to pay you bitcoin.

The only situation i will have to use the private keys on internet connected computer is when i want to SENT some bitcoins from these offline created wallets? Correct?

no you don't use the private keys online, they will remain offline.
for spending bitcoin you need to make a transaction, that transaction can be made without the private keys and only be signed (to be come valid for spending) with the private keys.

in the link to the documents of electrum that was given above, it is explained more. but in short you make the transaction (unsigned) online and transfer that to your offline computer containing your private keys to sign it. and then transfer the signed transaction to online computer to send out (broadcast) to the network.

Or in other words, creating BTC wallet(s) (which are collection of BTC adresses (which are further a collection of private and public keys) right :-)?) and receiving BTCs to these wallets can be done completelly offline? Creating BTC wallets and receiving funds to them (from "outer world") can be done offline...?

yes since bitcoin is not a physical thing to have.
there are only transaction which are being kept on the blockchain and to spend them you need the key only.

The only situation i need a connection to the internet is:
1) Checking the current actual BTC balance on these wallets and
2) Sending BTCs from these wallets somewhere else

Correct?

your offline wallet will ALWAYS stay offline and you only transfer the transaction via a text file or in a safer way with QR codes that you scan.

[Mikcik]

Thank you, that helped a lot :-)!

Just some additional things that im not sure (do not want to create a new topic):

1) I will download Ubuntu ISO
2) I will download some program that allows me to create a bootable  USB flash disc using the (Linux) Ubuntu ISO file.

The Ubuntu Live USB flash Disc wont have the BTC wallet of my choice installed (Electrum or Multibit most likely for my use). How/when should i install the wallet to my Ubuntu LIVE USB? During the creation of the LIVE USB ("burning ISO onto it")? Or after? Or even while running the distribution from its LIVE Usb?

[xskl0]

I recomend you to use LinuxLive (http://www.linuxliveusb.com/en/download) to boot the USB if you don't have chosen one yet.
I don't know if is posible maybe other user can confirm but I think you can install ubuntu  and then bring a portable version of the wallet like Electrum's one in a USB drive without need to conect to internet in your ubuntu sistem.
Is not secure to conect your OS to internet in order to install Electrum wallet and then don't connecto to Internet never again using that SO?