postfetch

KO | EN

gitlite — search

#hacktoberfest #react #rust #deep-learning #linux #nodejs #macos #java #windows #awesome #cli #pytorch #mcp #open-source

(★ 15)

like fastfetch but for security and privacy.

postfetch Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# postfetch

[![Release](https://github.com/R3DRUN3/postfetch/actions/workflows/release.yml/badge.svg)](https://github.com/R3DRUN3/postfetch/actions/workflows/release.yml)
![](https://img.shields.io/badge/OS-linux-informational?style=flat&logo=linux&color=ffbf80)  
[![License: Unlicense](https://img.shields.io/badge/license-Unlicense-blue.svg)](http://unlicense.org/)
[![Latest Release](https://img.shields.io/github/v/release/r3drun3/postfetch?logo=github)](https://github.com/r3drun3/postfetch/releases/latest)

**Postfetch** (posture fetch) is a fastfetch-style **privacy and security audit tool** for Linux, written in rust.

Instead of cosmetic system info, `postfetch` shows whether your system
is configured to support **privacy, security, local control, and digital sovereignty**.

## Modules

| Module       | Checks                                                                                                          |
|--------------|-----------------------------------------------------------------------------------------------------------------|
| encryption   | LUKS disk encryption, dm-crypt active devices, /etc/crypttab, encrypted swap, TPM chip, home dir encryption, others|
| firewall     | nftables, iptables, UFW, firewalld, overall firewall status, others                                                     |
| dns          | Nameservers + provider label, DNS leak risk, DNS-over-TLS, DNSSEC, local resolvers (unbound, dnsmasq, dnscrypt), others|
| telemetry    | apport, whoopsie, snapd, geoclue, avahi, systemd-coredump, Firefox telemetry prefs, Chrome managed policies, others    |
| sandboxing   | Flatpak, Firejail, bubblewrap, AppArmor, SELinux, seccomp (PID 1), Docker, others                                     |
| hardening    | ASLR, kptr_restrict, dmesg_restrict, perf_event_paranoid, ptrace_scope, unprivileged user namespaces, auditd, others         |
| network      | VPN interface (tun/wg/proton/mullvad), Tor service + SocksPort, WiFi MAC randomization, IPv6 status, open ports, others|

## Quick start

The following one-liner let's you run the latest binary directly:

```bash
curl -sL https://github.com/R3DRUN3/postfetch/releases/download/v0.2.0/postfetch-v0.2.0-x86_64-linux-musl.tar.gz | tar -xz && ./postfetch
```

Postfetch is also available on [aur](https://aur.archlinux.org/packages/postfetch), you can install it with `yay -S postfetch`.

> [!TIP]
> In order to cover all the checks, better to run as `sudo`

![output](https://raw.githubusercontent.com/R3DRUN3/postfetch/main/media/output.png)

If you want to reduce the output, you can also run a single module, for example:  
```bash
sudo ./postfetch --module network
```

## Options

```
-w, --warnings-only     Only show non-passing checks
    --no-color          Disable ANSI color output
-m, --module <MODULE>   Run a single module only
```

## Adding a new module

1. Create `src/checks/mymodule.rs` —> implement `pub fn check_mymodule() -> Vec<CheckResult>`.
2. Declare it in `src/checks/mod.rs` with `pub mod mymodule;`.
3. Add a match arm in `src/main.rs`.

That's it, no other changes needed.

postfetch

postfetch Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

postfetch

postfetch Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README