A practical guide to securing Linux servers puts CIS guidance, distribution-specific documentation, and automation in the same frame for one reason: hardening only works when it matches the system you actually run.