Gentoo taught me a lot. I ran hardened gentoo with grsec, pax, and selinux ~20 years ago. That was really a nag. I'm glad for the experience though, I'm never afraid to compile my own kernel now. I just prefer the convenience of debian or fedora based distros now.
When I do a hardware refresh on my self hosted machines(typically over 5 years) I usually wait for a bleeding edge brand new socket, and have to compile the latest kernel for reasonable performance and stability until maintainers backport or the distro moves forward.
Gentoo taught me a lot. I ran hardened gentoo with grsec, pax, and selinux ~20 years ago. That was really a nag. I'm glad for the experience though, I'm never afraid to compile my own kernel now. I just prefer the convenience of debian or fedora based distros now.
When I do a hardware refresh on my self hosted machines(typically over 5 years) I usually wait for a bleeding edge brand new socket, and have to compile the latest kernel for reasonable performance and stability until maintainers backport or the distro moves forward.