The transaction weights in Cere are benchmarked on reference hardware.
CPU
Storage
An NVMe SSD of 1TB
In general, the latency is more important than the throughput.
Memory
System
Network
The specs posted above are not a hard requirement to run a validator, but are considered best practice. Running a validator is a responsible task; using professional hardware is a must in any way.
Landlock is a Linux security feature used in Cere, and should be enabled.
Landlock empowers any process, including unprivileged ones, to securely restrict themselves.
To make use of landlock, make sure you are on the reference kernel version or newer. Most Linux distributions should already have landlock enabled, but you can check by running the following as root:
dmesg | grep landlock || journalctl -kg landlock
If it is not enabled, please see the official docs ("Kernel support") if you would like to build Linux with landlock enabled.