-`
                 .o+`
                `ooo/
               `+oooo:
              `+oooooo:
              -+oooooo+:
            `/:-:++oooo+:
           `/++++/+++++++:
          `/++++++++++++++:
         `/+++ooooooooooooo/`
        ./ooosssso++osssssso+`
       .oossssso-````/ossssss+`
      -osssssso.      :ssssssso.
     :osssssss/        osssso+++.
    /ossssssss/        +ssssooo/-
   `/ossssso+/:-        -:/+osssso+-
  `+sso+:-`                 `.-/+oso:
 `++:.                           `-/+/
.`                                 `

Encrypted Arch Linux root partition install`

Setup your partitions

Setup Luks

Create encryption to root partition

    $ cryptsetup -y -v luksFormat /dev/sdxY
Dont't forget about confirm by CAPITAL LETTERS

Open encrypted partition

    $ cryptsetup open /dev/sdxY cryptroot

Create file system to root partition

    $ mkfs.ext4 /dev/mapper/cryptroot

Now mount your partitions

Mount root partition

    $ mount /dev/mapper/cryptroot /mnt

Mount boot partition into /mnt/boot or /mnt/efi i recommand first one

    $ mount /dev/sdxZ /mnt/boot

Install packages

    $ pacstrap /mnt base base-devel linux-lts linux-firmware vis 

Setting up arch

Edit

=> HOOKS

and add encrypt, can be placed between after udev.

    $ vim /etc/mkinitcpio.conf

mkinitcpio lts

	$ mkinitcpio -p linux-lts

Generate fstab

	$ genfstab -U /mnt >> /mnt/etc/fstab

EFISTUB setup

	$ efibootmgr --disk /dev/sda --part 1 --create --label "Arch" --loader /vmlinuz-linux-lts --unicode 'cryptdevice=/dev/sda3:cryptroot root=/dev/mapper/cryptroot resume=/dev/sda2 rw initrd=\initramfs-linux-lts.img'

Systemd-boot setup

Add etry to boot loader (systemd)
Install boot loader bootctl install
Configure boot loader
Edit /boot/loader/loader.conf and add value
	timeout 3
	default arch
Create boot entry in /boot/loader/entries/entry
	title Arch
	linux /vmlinuz-linux-lts
	initrd /initramfs-linux-lts.img
	options rw cryptdevice=UUID-XXXXXX-xxxx:cryptroot root=/dev/mapper/cryptroot 

Additional knowledge to hibernation

Edit kernel parameters and add resume to hooks and place after udev and encrypt

Proxy Information
Original URL
gemini://mkl-wlod.srht.site/notes/encrypted-arch.gmi
Status Code
Success (20)
Meta
text/gemini
Capsule Response Time
155.739691 milliseconds
Gemini-to-HTML Time
0.650849 milliseconds

This content has been proxied by September (3851b).