понедельник, 5 июня 2017 г.

Encrypt archlinux setup


//check efi
#ls /sys/firmware/efi

//check abalible disks
#fdisk -l

//create table of disk
# gdisk /dev/sda

comand (? for help): o

Proceed (Y/N): y

comand (? for help): n
First sector .... : (press Enter)
Last sector ..... : +512MiB
Hex code or GUID (...):  ef00

Comand (? for help): n
First sector .... : (press Enter)
Last sector ..... : (press Enter)
Hex code or GUID (...): 8e00

Comand (? for help): w

Do you want to proceed? (Y/N): y

// now, create fat32 partition efi
# mkfs.fat -F32 /dev/sda1

//create encrypted disk
# cryptsetup -y -v luksFormat /dev/sda2

Are you sure (...): YES
Enter passphrase:
Verify passphrase:

//open crypted disk
# cryptsetup open --type luks /dev/sda2 lvm

Enter passphrase for /dev/sda2:

//check disk lvm
# ls /dev/mapper/lvm

//create phisycal volume group
# pvcreate /dev/mapper/lvm
Physical volume succsesfully created

//create logical volume group
# vgcreate volume /dev/mapper/lvm
 Volume group "volume" successfully created

//create logical volumes
# lvcreate -L21G volume -n root
# lvcreate -l 100%FREE -n home

//create FS from logical partitions
# mkfs.ext4 /dev/mapper/volume-root
# mkfs.ext4 /dev/mapper/volume-home

//mount partitions
# mount /dev/mapper/volume-root /mnt
# mkdir /mnt/home
# mkdir /mnt/boot
# mount /dev/mapper/volume-home /mnt/home
# mount /dev/sda1 /mnt/boot

//instal base
# pacstrap /mnt base base-devel vim

//generated uuid of partitions
# genfstab -p /mnt >> /mnt/etc/fstab

// join chroot
# arch-chroot /mnt

//set date
# ln -s /usr/share/zoneinfo/Asia/Sakhalin /etc/localtime

//sync hwclock
# hwclock --systohc --utc

//set root pass
# passwd
Enter:
Retry:

//edit local.gen
# vim /etc/local.gen
//uncommeting
en_US.UTF-8 UTF-8
en_US ISO-8859-1
ru_RU.UTF-8

//generate locale
# locale-gen

//
# locale > /etc/locale.conf

//edit hostname
# vim /etc/hostname

//edit HOOKS
# vim /etc/mkinitcpio.conf

// "base udev autodetect modconf block keyboard encrypt lvm2 filesystems fsck"

// regenerate linux
#mkinitcpio -p lunux

//install boot
# bootctl --path=/boot install

//edit loader.conf
#vim /boot/loader/loader.conf
//delete all
default arch
timeout 3
editor 0

//edit entry.conf
# vim /boot/loader/entries/arch.conf
//new file
title ArchLinux
linux /vmlinuz-linux
initrd /initramfs-linux.img
options cryptdevice=UUID=asd12e3asd122312ada123:volume root=/dev/mapper/volume-root quiet rw
// help to insirt uuid
:read ! blkid /dev/sda2
//

thats all!

https://www.youtube.com/watch?v=a1AXHpog9iI