-` .o+` `ooo/ `+oooo: `+oooooo: -+oooooo+: `/:-:++oooo+: `/++++/+++++++: `/++++++++++++++: `/+++ooooooooooooo/` ./ooosssso++osssssso+` .oossssso-````/ossssss+` -osssssso. :ssssssso. :osssssss/ osssso+++. /ossssssss/ +ssssooo/- `/ossssso+/:- -:/+osssso+- `+sso+:-` `.-/+oso: `++:. `-/+/ .` `
Encrypted Arch Linux root partition install`
Setup Luks
Create encryption to root partition
$ cryptsetup -y -v luksFormat /dev/sdxY
Dont't forget about confirm by CAPITAL LETTERS
Open encrypted partition
$ cryptsetup open /dev/sdxY cryptroot
Create file system to root partition
$ mkfs.ext4 /dev/mapper/cryptroot
Mount root partition
$ mount /dev/mapper/cryptroot /mnt
Mount boot partition into /mnt/boot or /mnt/efi i recommand first one
$ mount /dev/sdxZ /mnt/boot
$ pacstrap /mnt base base-devel linux-lts linux-firmware vis
Edit
and add encrypt, can be placed between after udev.
$ vim /etc/mkinitcpio.conf
mkinitcpio lts
$ mkinitcpio -p linux-lts
Generate fstab
$ genfstab -U /mnt >> /mnt/etc/fstab
$ efibootmgr --disk /dev/sda --part 1 --create --label "Arch" --loader /vmlinuz-linux-lts --unicode 'cryptdevice=/dev/sda3:cryptroot root=/dev/mapper/cryptroot resume=/dev/sda2 rw initrd=\initramfs-linux-lts.img'
Add etry to boot loader (systemd)
Install boot loader bootctl install
Configure boot loader
Edit /boot/loader/loader.conf and add value
timeout 3 default arch
Create boot entry in /boot/loader/entries/entry
title Arch linux /vmlinuz-linux-lts initrd /initramfs-linux-lts.img options rw cryptdevice=UUID-XXXXXX-xxxx:cryptroot root=/dev/mapper/cryptroot
Edit kernel parameters and add resume to hooks and place after udev and encrypt