TiynGER
8 months ago
commit
0436082076
6 changed files with 357 additions and 0 deletions
Unified View
Diff Options
-
+173 -0#installation.md
-
+54 -0calendar.md
-
+53 -0contacts.md
-
+44 -0mail.md
-
+7 -0tablecalculation.md
-
+26 -0thinkpad.md
@ -0,0 +1,173 @@ |
|||||
|
# Arch installation with LUKS encryption and LVM |
||||
|
|
||||
|
This is the german version of the [installation guide on rvbg.eu](https://wiki.rvbg.eu/#arch/installation.md). |
||||
|
This guide is based upon a [german arch wiki entry](https://wiki.archlinux.de/title/Moderne_Installation_mit_UEFI_und_Verschlüsselung). |
||||
|
|
||||
|
At the end of this guide a fully functional Arch Linux will be installed. |
||||
|
|
||||
|
## 1. Preparation |
||||
|
Ahead of the installation an Arch boot-stick has to be created. The iso-file can be found on the [official website](https://www.archlinux.org/download/). |
||||
|
The iso can be written on an USB-stick using ```dd```. |
||||
|
After that the USB can be plugged in the system on which Arch should be installed. |
||||
|
Boot the target system and select ```Boot Arch Linux (x86_64)```. |
||||
|
|
||||
|
If you need to set the keyboard layout to anything other than english you can temporarily do so by using the ```loadkeys``` command. |
||||
|
This has to be followed by your country id (for example a german keyboard layout would be ```de```,```de-latin1``` or ```de-latin1-nodeadkeys```. |
||||
|
|
||||
|
## 2. Formatting of the target drive |
||||
|
Using ```lsblk``` you can list all the drives and partitions. |
||||
|
Select a drive to install Arch on. |
||||
|
For reasons of simplicity the following guide will assume the selected drive to be ```/dev/sda```. |
||||
|
### Clear disk completely: |
||||
|
|
||||
|
- `dd status=progress if=/dev/zero of=/dev/sda` |
||||
|
|
||||
|
Now all partitions should be removed. |
||||
|
|
||||
|
### Create new partitions: |
||||
|
If you missclick during the progress of the following commands you can press ```CTRL+C``` to close the program. |
||||
|
No changes will be made until the confirmation at the end. |
||||
|
The swap partition will be created later under lvm. |
||||
|
|
||||
|
- `gdisk /dev/sda` |
||||
|
- `N` - Create a new empty partition table |
||||
|
- `↵ Enter` - Create a partition |
||||
|
- `↵ Enter` - Confirm first sector |
||||
|
- `+512M` - Assign size of 512 MB for the first partition |
||||
|
- `ef00` - Make the partition bootable |
||||
|
- `n` - Create a second partition |
||||
|
- `↵ Enter` - Confirm creation of partition |
||||
|
- `↵ Enter` - Confirm first sector |
||||
|
- `↵ Enter` - Confirm last sector |
||||
|
- `↵ Enter` - Confirm partition type |
||||
|
- `P` - Show created partitions |
||||
|
- `W` - Save all changes |
||||
|
- `Y` - Confirm saving changes |
||||
|
|
||||
|
## 3. Encryption |
||||
|
We need to find out which partitions is the one we want to encrypt. |
||||
|
Using ```blkid | grep /dev/sda``` all partitions we created get listed. |
||||
|
The right partition has the label ```Linux filesystem```. |
||||
|
For this guide this partition is assumed to be ```/dev/sda2```. |
||||
|
|
||||
|
- `modprobe dm-crypt` - load kernelmodule for encryption |
||||
|
- `cryptsetup -c aes-xts-plain -y -s 512 luksFormat /dev/sda2` - encryption |
||||
|
- confirm with ```YES``` |
||||
|
- Now you can assign a passphrase. |
||||
|
The passphrase has to be entered at boot to decrypt the system. |
||||
|
Recovering of this passphrase is **not** possible. |
||||
|
|
||||
|
## 4. Setup LVM |
||||
|
- `cryptsetup luksOpen /dev/sda2 lvm` - Opening encrypted partition and mapping it to ```/dev/mapper/lvm``` |
||||
|
- `pvcreate /dev/mapper/lvm` - Create a LVM physical volume |
||||
|
- `vgcreate main /dev/mapper/lvm` - Create LVM Volume Group |
||||
|
- `lvcreate -L 16G -n swap main` - Create Swap in LVM (recommended: swap size is equal to ram size) |
||||
|
- `lvcreate -l 100%FREE -n root main` - Create LVM Logical Volume for / |
||||
|
|
||||
|
## 5. Create filesystems and mounting them temporarily |
||||
|
We have to find out which partition is our boot-partition. |
||||
|
Using ```blkid | grep /dev/sda``` once again, we can identify it by looking for the ```EFI system partition``` label. |
||||
|
The guide assumes this partition to be at ```/dev/sda1```. |
||||
|
|
||||
|
- ```mkfs.fat -F 32 -n UEFI /dev/sda1``` - Assign filesystem of EFI partition |
||||
|
- ```mkfs.ext4 -L root /dev/mapper/main-root``` - Assign filesystem of root partition |
||||
|
- ```mkswap /dev/mapper/main-swap``` - Assign swap filesystem |
||||
|
|
||||
|
Now the created filesystems will be mounted for the installation. |
||||
|
|
||||
|
- `mount /dev/mapper/main-root /mnt` - Mounting root partition |
||||
|
- `mkdir /mnt/boot` |
||||
|
- `mount /dev/sda1 /mnt/boot` - Mount EFI partition |
||||
|
- `swapon /dev/mapper/main-swap` - Mounting swap partition |
||||
|
|
||||
|
## 6. Prepare base installation (optional) |
||||
|
In this step the country specific mirrorserver for the installation will be configured. |
||||
|
This will improve the download speed. |
||||
|
- `cp /etc/pacman.d/mirrorlist /etc/pacman.d/mirrorlist.bak` - Create a backup of mirrorlist |
||||
|
- `grep -E -A 1 ".*Germany.*$" /etc/pacman.d/mirrorlist.bak | sed '/--/d' > /etc/pacman.d/mirrorlist` - Example command to only use *German* mirrors |
||||
|
- `cat /etc/pacman.d/mirrorlist` - Check if the file is to your liking. If it is not, you can just recover by using ```mirrorlist.bak``` |
||||
|
|
||||
|
## 7. Starting base installation |
||||
|
- `pacstrap /mnt base base-devel dosfstools gptfdisk lvm2 linux linux-firmware wpa_supplicant wireless_tools networkmanager vim` - Installation of main system with needed tools |
||||
|
- `genfstab -Up /mnt > /mnt/etc/fstab` - creation of fstab |
||||
|
- `arch-chroot /mnt` - Switch into the newly installed system |
||||
|
- `echo ArchLinux > /etc/hostname` - Assign hostname. ```ArchLinux``` can be changed for any name of your preference. |
||||
|
- `echo LANG=de_DE.UTF-8 > /etc/locale.conf` - Systemsprache festlegen |
||||
|
- `echo LANG=en_US.UTF-8 > /etc/locale.conf` - Assign system Language to be english (you can use other languages, look into the ```/etc/locale.conf``` for a list of all available languages) |
||||
|
- `vim /etc/locale.gen` - Assigning system language |
||||
|
- uncomment the lines depending on your needs. |
||||
|
In this example: |
||||
|
``` |
||||
|
en_US.UTF-8 UTF-8 |
||||
|
``` |
||||
|
- `locale-gen` - Generate languages |
||||
|
- if you need any other keymap than english you can change it now for example to German by `echo KEYMAP=de-latin1 > /etc/vconsole.conf`. |
||||
|
- `sed -i 's/MODULES=()/MODULES=(ext4)/g' /etc/mkinitcpio.conf` - Allow modules needed at boot |
||||
|
- `sed -i 's/HOOKS=()/HOOKS=(base udev autodetect modconf block keyboard keymap encrypt lvm2 filesystems fsck shutdown)/g' /etc/mkinitcpio.conf` - Allow hooks needed at boot |
||||
|
- `mkinitcpio -p linux` - generate Kernel-Image |
||||
|
|
||||
|
## 8. Install and configure UEFI bootloader |
||||
|
- `bootctl install` - Prepare bootloader |
||||
|
- `vim /boot/loader/entries/arch.conf` - Create configuration |
||||
|
It is recommended to use UUIDs where possible. |
||||
|
Please find out what the UUID of your drive is, use ```ls -l /dev/disk/by-uuid``` to do this. |
||||
|
``` |
||||
|
title Arch Linux |
||||
|
linux /vmlinuz-linux |
||||
|
initrd /initramfs-linux.img |
||||
|
options cryptdevice=UUID=<enter your uuid here>:lvm:allow-discards root=/dev/mapper/main-root:lvm:allow-discards resume=/dev/mapper/main-swap rw quiet lang=de init=/usr/lib/systemd/systemd locale=de_DE.UTF-8 |
||||
|
``` |
||||
|
- `vim /boot/loader/entries/arch-fallback.conf` - Create fallback |
||||
|
``` |
||||
|
title Arch Linux |
||||
|
linux /vmlinuz-linux |
||||
|
initrd /initramfs-linux.img |
||||
|
options cryptdevice=UUID=<enter your uuid here>:lvm:allow-discards root=/dev/mapper/main-root:lvm:allow-discards resume=/dev/mapper/main-swap rw quiet lang=de init=/usr/lib/systemd/systemd locale=de_DE.UTF-8 |
||||
|
``` |
||||
|
- `vim /boot/loader/loader.conf` - Create loader configuration |
||||
|
- Insert the following text |
||||
|
``` |
||||
|
timeout 1 |
||||
|
default arch |
||||
|
``` |
||||
|
|
||||
|
## 9. Finishing base installation |
||||
|
- `exit` - exit the installed system |
||||
|
- `umount /mnt/*` - unmount all partitions |
||||
|
- `shutdown` - shutdown device |
||||
|
- Now remove the Arch boot-stick |
||||
|
|
||||
|
If the system is installed in a virtual environment or a system with deactivated UEFI, don't forget to enable the EFI option, otherwise the system won't boot. |
||||
|
|
||||
|
## 10. Activate Networkconnection |
||||
|
- Start the device |
||||
|
- Log in as ```root``` user |
||||
|
- `systemctl enable NetworkManager.service` - Activate NetworkManager |
||||
|
- `systemctl enable wpa_supplicant.service` - Activate wpa_supplicant |
||||
|
- `systemctl start NetworkManager.service` - Start NetworkManager |
||||
|
|
||||
|
The device should connect to the internet if it is connected via LAN. |
||||
|
Using ```nmtui``` you can administer the wired and wireless connections |
||||
|
|
||||
|
## 11. Automatic timesettings |
||||
|
- `pacman -Syu ntp` - Installing time service |
||||
|
- `ntpd -qg` - Get current time |
||||
|
- `hwclock --systohc` - Synchronize hardwareclock |
||||
|
- `systemctl enable ntpd.service` - enable timeservice |
||||
|
|
||||
|
## 12. Create user |
||||
|
- `vim /etc/sudoers` - Open suoders file |
||||
|
- uncomment the following lines |
||||
|
``` |
||||
|
%whell All=(ALL) ALL |
||||
|
``` |
||||
|
- `useradd -m user` - Create a user with ```user``` as name. For the user a home directory will be created. |
||||
|
- `usermod -aG wheel user` - Add user ```user``` to wheel group |
||||
|
- `passwd -d user` - Remove password for user ```user``` |
||||
|
|
||||
|
On the freshly installed system there are 2 users. |
||||
|
Make sure to set the password! |
||||
|
You can add one using ```passwd```. |
||||
|
|
||||
|
> 03.04.2020 - Version 1.0 |
||||
|
> 03.04.2020 - Version 1.1en |
||||
@ -0,0 +1,54 @@ |
|||||
|
# Calendar |
||||
|
To use a terminal calendar the following programs are needed. |
||||
|
|
||||
|
| programm | description | |
||||
|
| ---------- | ----------------------- | |
||||
|
| khal | terminal calendar | |
||||
|
| vdirsyncer | sync tool for calendars | |
||||
|
|
||||
|
## Installation and configuration |
||||
|
To configure vdirsyncer edit a file in ```~/.config/vdirsyncer/config```. |
||||
|
|
||||
|
``` |
||||
|
[general] |
||||
|
status_path = "~/.cache/vdirsyncer/status" |
||||
|
|
||||
|
#calendar |
||||
|
[pair private_calendar] |
||||
|
a = "private_calendar_local" |
||||
|
b = "private_calendar_remote" |
||||
|
collections = ["from a", "from b"] |
||||
|
metadata = ["color"] |
||||
|
|
||||
|
[storage private_calendar_local] |
||||
|
type = "filesystem" |
||||
|
path = "~/.local/share/pim/calendars/private_calendar" |
||||
|
fileext = ".ics" |
||||
|
|
||||
|
[storage private_calendar_remote] |
||||
|
type = "caldav" |
||||
|
url = "https://<url>" |
||||
|
auth = "basic" |
||||
|
username = "<username>" |
||||
|
password = "<password>" |
||||
|
|
||||
|
``` |
||||
|
|
||||
|
After that initialize vdirsyncer. |
||||
|
|
||||
|
```vdirsyncer discover && vdirsyncer metasync``` |
||||
|
|
||||
|
And keep regularly syncing your data (crontab). |
||||
|
The command to sync is the following. |
||||
|
|
||||
|
```vdirsyncer sync``` |
||||
|
|
||||
|
Finally add a ```~/.config/khal/config``` and you're ready to go. |
||||
|
|
||||
|
``` |
||||
|
[calendars] |
||||
|
|
||||
|
[[calendars]] |
||||
|
path = ~/.local/share/pim/calendars/*/* |
||||
|
type = discover |
||||
|
``` |
||||
@ -0,0 +1,53 @@ |
|||||
|
# Contacts |
||||
|
To use a terminal addressbook the following programs are needed. |
||||
|
|
||||
|
| programm | description | |
||||
|
| ---------- | ----------------------- | |
||||
|
| khard | terminal addressbook | |
||||
|
| vdirsyncer | sync tool for calendars | |
||||
|
|
||||
|
## Installation and configuration |
||||
|
To configure vdirsyncer edit a file in ```~/.config/vdirsyncer/config```. |
||||
|
|
||||
|
``` |
||||
|
[general] |
||||
|
status_path = "~/.cache/vdirsyncer/status" |
||||
|
|
||||
|
#contacts |
||||
|
[pair private_contacts] |
||||
|
a = "private_contacts_local" |
||||
|
b = "private_contacts_remote" |
||||
|
collections = ["from a", "from b"] |
||||
|
|
||||
|
[storage private_contacts_local] |
||||
|
type = "filesystem" |
||||
|
path = "~/.local/share/pim/contacts" |
||||
|
fileext = ".vcf" |
||||
|
|
||||
|
[storage private_contacts_remote] |
||||
|
type = "carddav" |
||||
|
url = "https://<url>" |
||||
|
username = "<username>" |
||||
|
password = "<password>" |
||||
|
auth = "basic" |
||||
|
``` |
||||
|
|
||||
|
After that initialize vdirsyncer. |
||||
|
|
||||
|
```vdirsyncer discover && vdirsyncer metasync``` |
||||
|
|
||||
|
And keep regularly syncing your data (crontab). |
||||
|
The command to sync is the following. |
||||
|
|
||||
|
```vdirsyncer sync``` |
||||
|
|
||||
|
Now you just need to add and configure the config and youre done. |
||||
|
|
||||
|
``` |
||||
|
mkdir ~/.config/khard |
||||
|
cp /usr/share/doc/khard/khard.conf.example ~/.config/khard/khard.conf |
||||
|
``` |
||||
|
|
||||
|
## Mutt |
||||
|
It is possible to use your khard-addressbook in mutt. |
||||
|
To see how it works check out the [Mutt](/#arch/mail.md). |
||||
@ -0,0 +1,44 @@ |
|||||
|
# Mutt |
||||
|
These are a bunch of programs to be able to use lukesmithxyz's mutt-wizard, |
||||
|
which will be able to setup your neomutt acordingly. |
||||
|
|
||||
|
| program | description | |
||||
|
| ----------- | --------------------- | |
||||
|
| neomutt | mail program | |
||||
|
| isync | syncs mail | |
||||
|
| msmtp | sends mail | |
||||
|
| pass | encrypts passwords | |
||||
|
| mutt-wizard | autoconfigure neomutt | |
||||
|
|
||||
|
The mutt-wizard AUR package is slightly outdated. |
||||
|
Try to use the [git version](https://github.com/LukeSmithxyz/mutt-wizard) to get the latest mutt-wizard. |
||||
|
|
||||
|
## Installation and configuration |
||||
|
After the basic installation you will be able to: |
||||
|
|
||||
|
``` mw add ``` to add mailaccounts |
||||
|
|
||||
|
``` mw ls ``` to list existing ones |
||||
|
|
||||
|
``` mw pass ``` to revise passwords |
||||
|
|
||||
|
``` mw delete ``` to delete accounts |
||||
|
|
||||
|
``` mw purge ``` to delete all accounts and settings |
||||
|
|
||||
|
``` mw cron ``` toggle a cronjob to sync mail |
||||
|
|
||||
|
## Use khard in mutt |
||||
|
To use your khard addressbook in mutt just add the following lines to your ```~/.config/mutt/muttrc```. |
||||
|
|
||||
|
``` |
||||
|
set query_command= "khard email --parsable --search-in-source-files %s" |
||||
|
bind editor <Tab> complete-query |
||||
|
bind editor ^T complete |
||||
|
macro index,pager A \ |
||||
|
"<pipe message>khard add-email<return>" \ |
||||
|
"add the sender email address to khard" |
||||
|
``` |
||||
|
|
||||
|
You can just tab-complete the email-addresses. |
||||
|
You can also add new ones by pressing A. |
||||
@ -0,0 +1,7 @@ |
|||||
|
# Tablecalculation |
||||
|
These are useful programs if you want to do table calculations like csv. |
||||
|
|
||||
|
| program | description | |
||||
|
| ---------- | ------------------------------------------------ | |
||||
|
| sc-im | program to write and read csv data; sc improved | |
||||
|
|
||||
@ -0,0 +1,26 @@ |
|||||
|
# Thinkpad |
||||
|
These are a bunch of useful programs if you own a thinkpad. |
||||
|
|
||||
|
| program | description | |
||||
|
| ---------- | ------------------------------------------------ | |
||||
|
| lm_sensors | utility for hardware monitoring and SMBus access | |
||||
|
| thinkfan | utility to control fanspeeds | |
||||
|
|
||||
|
## installation |
||||
|
After installing both lm_sensors and thinkfan activate thinkpad_acpi. |
||||
|
|
||||
|
```sudo modprobe thinkpad_acpi``` |
||||
|
|
||||
|
Then copy and configure the config file. |
||||
|
|
||||
|
```sudo cp /usr/share/doc/thinkfan/examples/thinkfan.conf.simple /etc/thinkfan.conf``` |
||||
|
|
||||
|
Enable it. |
||||
|
|
||||
|
```systemctl enable thinkfan``` |
||||
|
|
||||
|
After that check and if correct enable the thinkfan service. |
||||
|
|
||||
|
```sudo thinkfan -n``` |
||||
|
|
||||
|
```systemctl enable thinkfan.service``` |
||||