os:archlinux:30l3-nosystemd-encrypted
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |||
| os:archlinux:30l3-nosystemd-encrypted [2021/12/29 19:57] – ↷ Page moved from archlinux:30l3-nosystemd-encrypted to os:archlinux:30l3-nosystemd-encrypted warnaud | os:archlinux:30l3-nosystemd-encrypted [2021/12/30 13:32] (current) – ↷ Links adapted because of a move operation warnaud | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Introduction ====== | ||
| + | This will be anew attempt at getting a fully encrypted Archlinux system without systemd (if it works) | ||
| + | |||
| + | ====== Install ====== | ||
| + | I won't comment the first steps as they are equal to [[https:// | ||
| + | |||
| + | I will use the first disk (500GB) for /boot and / and leave the SSD (256GB) for future VMs | ||
| + | ===== boot on the CD/Install ===== | ||
| + | following | ||
| + | <code bash> | ||
| + | cryptsetup --verbose --cipher aes-xts-plain64 --key-size 512 --hash sha512 --iter-time 5000 --use-random luksFormat /dev/sda2 | ||
| + | |||
| + | cryptsetup open --type luks /dev/sda2 cryptroot | ||
| + | |||
| + | mkfs.ext4 /dev/sda1 | ||
| + | mkfs.ext4 / | ||
| + | |||
| + | mount -t ext4 / | ||
| + | mkdir -p /mnt/boot | ||
| + | mount -t ext4 /dev/sda1 /mnt/boot | ||
| + | |||
| + | |||
| + | pacstrap -i /mnt base base-devel | ||
| + | |||
| + | genfstab -U -p /mnt >> / | ||
| + | |||
| + | arch-chroot /mnt | ||
| + | |||
| + | sed -i ' | ||
| + | |||
| + | echo LANG=en_US.UTF-8 > / | ||
| + | |||
| + | </ | ||
| + | in / | ||
| + | LANG=" | ||
| + | |||
| + | # Keep the default sort order (e.g. files starting with a ' | ||
| + | # should appear at the start of a directory listing.) | ||
| + | LC_COLLATE=" | ||
| + | |||
| + | Then continue: | ||
| + | <code bash> | ||
| + | echo " | ||
| + | echo 30L3 > / | ||
| + | |||
| + | rm / | ||
| + | ln -s / | ||
| + | |||
| + | passwd | ||
| + | |||
| + | useradd -m -g users -G wheel, | ||
| + | |||
| + | passwd warnaud | ||
| + | |||
| + | pacman -S sudo grub-bios os-prober | ||
| + | |||
| + | EDITOR=vi visudo | ||
| + | |||
| + | |||
| + | vi / | ||
| + | </ | ||
| + | with: | ||
| + | |||
| + | < | ||
| + | GRUB_CMDLINE_LINUX=" | ||
| + | </ | ||
| + | |||
| + | then continue... : | ||
| + | <code bash> | ||
| + | vi / | ||
| + | </ | ||
| + | to add the " | ||
| + | <code bash> | ||
| + | HOOKS=" | ||
| + | </ | ||
| + | |||
| + | continue: | ||
| + | <code bash> | ||
| + | mkinitcpio -p linux | ||
| + | grub-install --recheck /dev/sda | ||
| + | grub-mkconfig --output / | ||
| + | |||
| + | exit | ||
| + | umount -R /mnt/boot | ||
| + | umount -R /mnt | ||
| + | cryptsetup close cryptroot | ||
| + | systemctl reboot | ||
| + | |||
| + | </ | ||
| + | let the fun begin! | ||
| + | |||
| + | First disable iptables: | ||
| + | <code bash> | ||
| + | systemctl stop iptables | ||
| + | pacman -S openssh | ||
| + | </ | ||
| + | and voilà, until reboot, ssh is accessible for user warnaud :) | ||
| + | |||
| + | <code bash> | ||
| + | | ||
| + | |||
| + | pacman -S wpa_supplicant xorg-server xorg-apps xorg-fonts xorg-fonts-100dpi xorg-fonts-75dpi xorg-twm xorg-xclock xorg-xinit xorg-xdm xterm xf86-video-intel xorg-xmessage xorg-xcalc xorg-xfontsel alsa-utils acpi acpid xf86-input-wacom libcups cups cups-filters ghostscript gsfonts rxvt-unicode urxvt-perls chromium imagemagick vlc emelfm2 flashplugin xosd ttf-dejavu artwiz-fonts libreoffice libreoffice-en-US libreoffice-fr ntp vim | ||
| + | |||
| + | |||
| + | </ | ||
| + | |||
| + | Some graphical stuff: | ||
| + | <code bash> | ||
| + | | ||
| + | |||
| + | | ||
| + | |||
| + | </ | ||
| + | lightdm does not work... | ||
| + | deepin looks like a big work in progress | ||
| + | |||
| + | ====== More stuff to install / launch====== | ||
| + | <code bash> | ||
| + | systemctl enable acpid | ||
| + | systemctl start acpid | ||
| + | pacman -S | ||
| + | </ | ||
| + | |||
| + | Xorg and some other conf are in [[os: | ||
| + | Systemd is still here I know sorry, will update once openRC is installed/ | ||
| + | |||
| + | ====== todo ====== | ||
| + | * Unordered List Itemfind a nice WM/DE m( | ||
| + | * install virtualbox | ||
| + | * TPM: https:// | ||
| + | * wifi stuff | ||
| + | |||
| + | References: | ||
| + | * https:// | ||
| + | * https:// | ||
| + | * http:// | ||
| + | |||
