hardening
buildflags
desktop-file
