Building a security-focused Linux distro for defensive security (looking for guidance)

I’m planning to build a security-focused Linux distribution for defensive security and penetration-testing education in authorized lab environments (VMs / practice ranges / AD labs).

I’m a solo developer and would appreciate guidance on:

  • “choosing a base (Debian live-build, Fedora Spin, Arch ISO, etc.)”

  • “structuring the project and build pipeline”

  • “selecting and packaging tools for learning (blue team + red team fundamentals)”

My main languages are Python, C, and C++, but I’m flexible.

The goal is educational: to learn how security tools and OS customization work internally, not to misuse them.

I’m building a security-focused Linux distro for defensive security / pentest learning in lab environments and could use guidance on building a custom ISO and structuring the project. Languages: Python, C, C++.