1.7 KiB
taken from https://0x00sec.org/t/arch-linux-with-lvm-on-luks-dm-crypt-disk-encryption-installation-guide-legacy-bios-system/1479
if you need wifi
wifi-menu
timedatectl set-ntp true
fdisk -l
parted /dev/sda
(parted) mklabel msdos
(parted) mkpart primary ext2 1MB 512MB
(parted) mkpart primary ext4 512MB 100%
(parted) print
(parted) set 1 boot on
(parted) quit
fdisk -l
cryptsetup luksFormat /dev/sda2
make a name. Here I use "crypt".
cryptsetup open /dev/sda2 crypt
pvcreate /dev/mapper/crypt
now a group name - "usb"
vgcreate usb /dev/mapper/crypt
lvcreate -L 8GB usb -n swap lvcreaate -L 30G usb -n root lvcreate -l 100%FREE usb -n home
mkfs.ext4 /dev/mapper/usb-home mkfs.ext4 /dev/mapper/usb-root mkswap /dev/mapper/usb-swap
mkfs.ext2 /dev/sda1
mount /dev/mapper/usb-root /mnt mkdir /mnt/home mount /dev/mapper/usb-home /mnt/home mkdir /mnt/boot mount /dev/sda1 /mnt/boot swapon /dev/mapper/usb-swap
pacstrap -i /mnt base base-devel efibootmgr grub
genfstab -U /mnt >> /mnt/etc/fstab
arch-chroot /mnt
############ new root #############
ln -sf /usr/share/zoneinfo/Europe/Belgrade /etc/localtime
uncomment en_GT.UTF-8
vi /etc/locale.gen
locale-gen
add
LANG=en_GB.UTF-8
to /etc/locale.conf
vi /etc/locale.conf
echo crypt > /etc/hostname
make sure keyboard encrypt lvm2 are on the list of HOOKS
vi /etc/mkinitcpio.conf
grub-install /dev/sda
vi /etc/default/grub edit the GRUB_CMDLINE_LINUX=""
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:usb root=/dev/mapper/usb-root"
grub-mkconfig -o /boot/grub/grub.cfg
mkinitcpio -p linux
pacman -S wpa_supplicant dialog