initial commit

distros/arch/encrypted.md

@@ -0,0 +1,94 @@
+> # taken from https://0x00sec.org/t/arch-linux-with-lvm-on-luks-dm-crypt-disk-encryption-installation-guide-legacy-bios-system/1479
+ 
+> # if you need wifi
+ 
+> wifi-menu
+ 
+> timedatectl set-ntp true
+ 
+> fdisk -l
+ 
+> parted /dev/sda
+ 
+> (parted) mklabel msdos
+ 
+> (parted)  mkpart primary ext2 1MB 512MB
+ 
+> (parted) mkpart primary ext4 512MB 100%
+ 
+> (parted) print
+ 
+> (parted) set 1 boot on
+ 
+> (parted) quit
+ 
+> fdisk -l
+ 
+> cryptsetup luksFormat /dev/sda2
+ 
+> # make a name.  Here I use "crypt".
+
+ cryptsetup open /dev/sda2 crypt
+ 
+> pvcreate /dev/mapper/crypt
+
+> # now a group name - "usb"
+
+> vgcreate usb /dev/mapper/crypt
+ 
+ 
+> lvcreate -L 8GB usb -n swap
+> lvcreaate -L 30G usb -n root
+> lvcreate -l 100%FREE usb -n home
+ 
+> mkfs.ext4 /dev/mapper/usb-home
+ mkfs.ext4 /dev/mapper/usb-root
+> mkswap /dev/mapper/usb-swap
+ 
+> mkfs.ext2 /dev/sda1
+ 
+> mount /dev/mapper/usb-root /mnt
+ mkdir /mnt/home
+> mount /dev/mapper/usb-home /mnt/home
+ mkdir /mnt/boot
+> mount /dev/sda1 /mnt/boot
+ swapon /dev/mapper/usb-swap
+
+pacstrap -i /mnt base base-devel efibootmgr grub
+ 
+genfstab -U /mnt >> /mnt/etc/fstab
+ 
+arch-chroot /mnt
+ 
+ ############ new root #############
+ 
+ ln -sf /usr/share/zoneinfo/Europe/Belgrade /etc/localtime
+ 
+ # uncomment en_GT.UTF-8
+> vi /etc/locale.gen
+ 
+> locale-gen
+ 
+> # add `LANG=en_GB.UTF-8` to /etc/locale.conf
+ 
+> vi /etc/locale.conf
+ 
+> echo crypt > /etc/hostname
+ 
+> # make sure keyboard encrypt lvm2 are on the list of HOOKS
+ 
+> vi /etc/mkinitcpio.conf
+ 
+> grub-install /dev/sda
+ 
+> vi /etc/default/grub
+edit the GRUB_CMDLINE_LINUX=""
+ 
+`GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda2:usb root=/dev/mapper/usb-root"`
+ 
+> grub-mkconfig -o /boot/grub/grub.cfg
+ 
+> mkinitcpio -p linux
+ 
+> pacman -S wpa_supplicant dialog
+