I use gentoo, compile myself a fine tuded secure kernel and minimal userspace for my librebooted thinkpad BTW