Spent a little time going through Cerberix and the v0.1.2 notes. I like the idea: Arch underneath, but first boot already has the boring security stuff handled instead of making you chase ten wiki pages.
nftables on, fail2ban/AIDE there, WireGuard ready, and the Cerberix Shield tray monitor is a nice touch. That kind of visible status is useful. The Shield is probably the part I like most, since it makes the box feel guarded without turning the desktop into some pentest-only toy.
XFCE with the Tokyo Night Moon look also fits it better than I expected. It still looks like something you could daily drive, not just boot once to run tools.
Only rough edges I would watch for are app quirks around stuff like Ghostty or Evolution after package churn. If either gets weird, reinstalling the package/profile is usually the first thing I would try before blaming the whole distro.
Overall, this is the kind of Arch spin I like seeing: sane security out of the box, normal desktop included, and not pretending every user wants to build the system from scratch.
Lucas // still waiting for the future to finish booting