zlacker

How about Subgraph OS? It has grsecurity patch, tor network, container isolate, firewall. It's another good choice also

https://subgraph.com