anchor.diff:  f_users
   f_lockroot
   f_package_remove
  -f_aptget_clean
   f_suid
   f_restrictcompilers
   f_umask
  
positive.code: 
  ==== 98_systemddelta
  If verbose, show `systemd-delta`.
  
  ==== 99_reboot
  Print if a reboot is required.
  
negative.code: === Login, set a Grub2 password, configure and run ubuntu.sh
  Do not add any packages. +
  Log in. +
  Select a Grub2 password with `grub-mkpasswd-pbkdf2`. +
  Download the script: `git clone https://github.com/konstruktoid/hardening.git`. +
  Change the configuration options in the `ubuntu.cfg` file. +
  Run the script: `sudo bash ubuntu.sh`. +
  Reboot.
  
  If possible, use the newly installed and configured system as a reference,
  or golden, image. Use that image as a baseline installation media and ensure
  that any future installation comply with benchmarks and policies using a
  configuration management tool, e.g https://www.ansible.com/[Ansible] or
  https://puppet.com/[Puppet].
  
  If you're using Ansible, a playbook with most of the functions in this script is
  available in my Ansible repository https://github.com/konstruktoid/ansible-role-hardening[konstruktoid/ansible-role-hardening].
  
  == Configuration options
  [source,shell]
  