95 lines
1.7 KiB
Markdown
95 lines
1.7 KiB
Markdown
|
> # taken from https://0x00sec.org/t/arch-linux-with-lvm-on-luks-dm-crypt-disk-encryption-installation-guide-legacy-bios-system/1479
|
||
|
|
|
||
|
|
> # if you need wifi
|
||
|
|
|
||
|
|
> wifi-menu
|
||
|
|
|
||
|
|
> timedatectl set-ntp true
|
||
|
|
|
||
|
|
> fdisk -l
|
||
|
|
|
||
|
|
> parted /dev/sda
|
||
|
|
|
||
|
|
> (parted) mklabel msdos
|
||
|
|
|
||
|
|
> (parted) mkpart primary ext2 1MB 512MB
|
||
|
|
|
||
|
|
> (parted) mkpart primary ext4 512MB 100%
|
||
|
|
|
||
|
|
> (parted) print
|
||
|
|
|
||
|
|
> (parted) set 1 boot on
|
||
|
|
|
||
|
|
> (parted) quit
|
||
|
|
|
||
|
|
> fdisk -l
|
||
|
|
|
||
|
|
> cryptsetup luksFormat /dev/sda2
|
||
|
|
|
||
|
|
> # make a name. Here I use "crypt".
|
||
|
|
|
||
|
|
cryptsetup open /dev/sda2 crypt
|
||
|
|
|
||
|
|
> pvcreate /dev/mapper/crypt
|
||
|
|
|
||
|
|
> # now a group name - "usb"
|
||
|
|
|
||
|
|
> vgcreate usb /dev/mapper/crypt
|
||
|
|
|
||
|
|
|
||
|
|
> lvcreate -L 8GB usb -n swap
|
||
|
|
> lvcreaate -L 30G usb -n root
|
||
|
|
> lvcreate -l 100%FREE usb -n home
|
||
|
|
|
||
|
|
> mkfs.ext4 /dev/mapper/usb-home
|
||
|
|
mkfs.ext4 /dev/mapper/usb-root
|
||
|
|
> mkswap /dev/mapper/usb-swap
|
||
|
|
|
||
|
|
> mkfs.ext2 /dev/sda1
|
||
|
|
|
||
|
|
> mount /dev/mapper/usb-root /mnt
|
||
|
|
mkdir /mnt/home
|
||
|
|
> mount /dev/mapper/usb-home /mnt/home
|
||
|
|
mkdir /mnt/boot
|
||
|
|
> mount /dev/sda1 /mnt/boot
|
||
|
|
swapon /dev/mapper/usb-swap
|
||
|
|
|
||
|
|
pacstrap -i /mnt base base-devel efibootmgr grub
|
||
|
|
|
||
|
|
genfstab -U /mnt >> /mnt/etc/fstab
|
||
|
|
|
||
|
|
arch-chroot /mnt
|
||
|
|
|
||
|
|
############ new root #############
|
||
|
|
|
||
|
|
ln -sf /usr/share/zoneinfo/Europe/Belgrade /etc/localtime
|
||
|
|
|
||
|
|
# uncomment en_GT.UTF-8
|
||
|
|
> vi /etc/locale.gen
|
||
|
|
|
||
|
|
> locale-gen
|
||
|
|
|
||
|
|
> # add `LANG=en_GB.UTF-8` to /etc/locale.conf
|
||
|
|
|
||
|
|
> vi /etc/locale.conf
|
||
|
|
|
||
|
|
> echo crypt > /etc/hostname
|
||
|
|
|
||
|
|
> # make sure keyboard encrypt lvm2 are on the list of HOOKS
|
||
|
|
|
||
|
|
> vi /etc/mkinitcpio.conf
|
||
|
|
|
||
|
|
> grub-install /dev/sda
|
||
|
|
|
||
|
|
> vi /etc/default/grub
|
||
|
|
edit the GRUB_CMDLINE_LINUX=""
|
||
|
|
|
||
|
|
`GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:usb root=/dev/mapper/usb-root"`
|
||
|
|
|
||
|
|
> grub-mkconfig -o /boot/grub/grub.cfg
|
||
|
|
|
||
|
|
> mkinitcpio -p linux
|
||
|
|
|
||
|
|
> pacman -S wpa_supplicant dialog
|
||
|
|
|