Hot take: If you are not confident enough with Linux to run it on your own daily driver workstation, you probably have no business securing or managing it in production.