mirror of https://github.com/tiyn/wiki
commit
0436082076
@ -0,0 +1,173 @@
|
|||||||
|
# Arch installation with LUKS encryption and LVM
|
||||||
|
|
||||||
|
This is the german version of the [installation guide on rvbg.eu](https://wiki.rvbg.eu/#arch/installation.md).
|
||||||
|
This guide is based upon a [german arch wiki entry](https://wiki.archlinux.de/title/Moderne_Installation_mit_UEFI_und_Verschlüsselung).
|
||||||
|
|
||||||
|
At the end of this guide a fully functional Arch Linux will be installed.
|
||||||
|
|
||||||
|
## 1. Preparation
|
||||||
|
Ahead of the installation an Arch boot-stick has to be created. The iso-file can be found on the [official website](https://www.archlinux.org/download/).
|
||||||
|
The iso can be written on an USB-stick using ```dd```.
|
||||||
|
After that the USB can be plugged in the system on which Arch should be installed.
|
||||||
|
Boot the target system and select ```Boot Arch Linux (x86_64)```.
|
||||||
|
|
||||||
|
If you need to set the keyboard layout to anything other than english you can temporarily do so by using the ```loadkeys``` command.
|
||||||
|
This has to be followed by your country id (for example a german keyboard layout would be ```de```,```de-latin1``` or ```de-latin1-nodeadkeys```.
|
||||||
|
|
||||||
|
## 2. Formatting of the target drive
|
||||||
|
Using ```lsblk``` you can list all the drives and partitions.
|
||||||
|
Select a drive to install Arch on.
|
||||||
|
For reasons of simplicity the following guide will assume the selected drive to be ```/dev/sda```.
|
||||||
|
### Clear disk completely:
|
||||||
|
|
||||||
|
- `dd status=progress if=/dev/zero of=/dev/sda`
|
||||||
|
|
||||||
|
Now all partitions should be removed.
|
||||||
|
|
||||||
|
### Create new partitions:
|
||||||
|
If you missclick during the progress of the following commands you can press ```CTRL+C``` to close the program.
|
||||||
|
No changes will be made until the confirmation at the end.
|
||||||
|
The swap partition will be created later under lvm.
|
||||||
|
|
||||||
|
- `gdisk /dev/sda`
|
||||||
|
- `N` - Create a new empty partition table
|
||||||
|
- `↵ Enter` - Create a partition
|
||||||
|
- `↵ Enter` - Confirm first sector
|
||||||
|
- `+512M` - Assign size of 512 MB for the first partition
|
||||||
|
- `ef00` - Make the partition bootable
|
||||||
|
- `n` - Create a second partition
|
||||||
|
- `↵ Enter` - Confirm creation of partition
|
||||||
|
- `↵ Enter` - Confirm first sector
|
||||||
|
- `↵ Enter` - Confirm last sector
|
||||||
|
- `↵ Enter` - Confirm partition type
|
||||||
|
- `P` - Show created partitions
|
||||||
|
- `W` - Save all changes
|
||||||
|
- `Y` - Confirm saving changes
|
||||||
|
|
||||||
|
## 3. Encryption
|
||||||
|
We need to find out which partitions is the one we want to encrypt.
|
||||||
|
Using ```blkid | grep /dev/sda``` all partitions we created get listed.
|
||||||
|
The right partition has the label ```Linux filesystem```.
|
||||||
|
For this guide this partition is assumed to be ```/dev/sda2```.
|
||||||
|
|
||||||
|
- `modprobe dm-crypt` - load kernelmodule for encryption
|
||||||
|
- `cryptsetup -c aes-xts-plain -y -s 512 luksFormat /dev/sda2` - encryption
|
||||||
|
- confirm with ```YES```
|
||||||
|
- Now you can assign a passphrase.
|
||||||
|
The passphrase has to be entered at boot to decrypt the system.
|
||||||
|
Recovering of this passphrase is **not** possible.
|
||||||
|
|
||||||
|
## 4. Setup LVM
|
||||||
|
- `cryptsetup luksOpen /dev/sda2 lvm` - Opening encrypted partition and mapping it to ```/dev/mapper/lvm```
|
||||||
|
- `pvcreate /dev/mapper/lvm` - Create a LVM physical volume
|
||||||
|
- `vgcreate main /dev/mapper/lvm` - Create LVM Volume Group
|
||||||
|
- `lvcreate -L 16G -n swap main` - Create Swap in LVM (recommended: swap size is equal to ram size)
|
||||||
|
- `lvcreate -l 100%FREE -n root main` - Create LVM Logical Volume for /
|
||||||
|
|
||||||
|
## 5. Create filesystems and mounting them temporarily
|
||||||
|
We have to find out which partition is our boot-partition.
|
||||||
|
Using ```blkid | grep /dev/sda``` once again, we can identify it by looking for the ```EFI system partition``` label.
|
||||||
|
The guide assumes this partition to be at ```/dev/sda1```.
|
||||||
|
|
||||||
|
- ```mkfs.fat -F 32 -n UEFI /dev/sda1``` - Assign filesystem of EFI partition
|
||||||
|
- ```mkfs.ext4 -L root /dev/mapper/main-root``` - Assign filesystem of root partition
|
||||||
|
- ```mkswap /dev/mapper/main-swap``` - Assign swap filesystem
|
||||||
|
|
||||||
|
Now the created filesystems will be mounted for the installation.
|
||||||
|
|
||||||
|
- `mount /dev/mapper/main-root /mnt` - Mounting root partition
|
||||||
|
- `mkdir /mnt/boot`
|
||||||
|
- `mount /dev/sda1 /mnt/boot` - Mount EFI partition
|
||||||
|
- `swapon /dev/mapper/main-swap` - Mounting swap partition
|
||||||
|
|
||||||
|
## 6. Prepare base installation (optional)
|
||||||
|
In this step the country specific mirrorserver for the installation will be configured.
|
||||||
|
This will improve the download speed.
|
||||||
|
- `cp /etc/pacman.d/mirrorlist /etc/pacman.d/mirrorlist.bak` - Create a backup of mirrorlist
|
||||||
|
- `grep -E -A 1 ".*Germany.*$" /etc/pacman.d/mirrorlist.bak | sed '/--/d' > /etc/pacman.d/mirrorlist` - Example command to only use *German* mirrors
|
||||||
|
- `cat /etc/pacman.d/mirrorlist` - Check if the file is to your liking. If it is not, you can just recover by using ```mirrorlist.bak```
|
||||||
|
|
||||||
|
## 7. Starting base installation
|
||||||
|
- `pacstrap /mnt base base-devel dosfstools gptfdisk lvm2 linux linux-firmware wpa_supplicant wireless_tools networkmanager vim` - Installation of main system with needed tools
|
||||||
|
- `genfstab -Up /mnt > /mnt/etc/fstab` - creation of fstab
|
||||||
|
- `arch-chroot /mnt` - Switch into the newly installed system
|
||||||
|
- `echo ArchLinux > /etc/hostname` - Assign hostname. ```ArchLinux``` can be changed for any name of your preference.
|
||||||
|
- `echo LANG=de_DE.UTF-8 > /etc/locale.conf` - Systemsprache festlegen
|
||||||
|
- `echo LANG=en_US.UTF-8 > /etc/locale.conf` - Assign system Language to be english (you can use other languages, look into the ```/etc/locale.conf``` for a list of all available languages)
|
||||||
|
- `vim /etc/locale.gen` - Assigning system language
|
||||||
|
- uncomment the lines depending on your needs.
|
||||||
|
In this example:
|
||||||
|
```
|
||||||
|
en_US.UTF-8 UTF-8
|
||||||
|
```
|
||||||
|
- `locale-gen` - Generate languages
|
||||||
|
- if you need any other keymap than english you can change it now for example to German by `echo KEYMAP=de-latin1 > /etc/vconsole.conf`.
|
||||||
|
- `sed -i 's/MODULES=()/MODULES=(ext4)/g' /etc/mkinitcpio.conf` - Allow modules needed at boot
|
||||||
|
- `sed -i 's/HOOKS=()/HOOKS=(base udev autodetect modconf block keyboard keymap encrypt lvm2 filesystems fsck shutdown)/g' /etc/mkinitcpio.conf` - Allow hooks needed at boot
|
||||||
|
- `mkinitcpio -p linux` - generate Kernel-Image
|
||||||
|
|
||||||
|
## 8. Install and configure UEFI bootloader
|
||||||
|
- `bootctl install` - Prepare bootloader
|
||||||
|
- `vim /boot/loader/entries/arch.conf` - Create configuration
|
||||||
|
It is recommended to use UUIDs where possible.
|
||||||
|
Please find out what the UUID of your drive is, use ```ls -l /dev/disk/by-uuid``` to do this.
|
||||||
|
```
|
||||||
|
title Arch Linux
|
||||||
|
linux /vmlinuz-linux
|
||||||
|
initrd /initramfs-linux.img
|
||||||
|
options cryptdevice=UUID=<enter your uuid here>:lvm:allow-discards root=/dev/mapper/main-root:lvm:allow-discards resume=/dev/mapper/main-swap rw quiet lang=de init=/usr/lib/systemd/systemd locale=de_DE.UTF-8
|
||||||
|
```
|
||||||
|
- `vim /boot/loader/entries/arch-fallback.conf` - Create fallback
|
||||||
|
```
|
||||||
|
title Arch Linux
|
||||||
|
linux /vmlinuz-linux
|
||||||
|
initrd /initramfs-linux.img
|
||||||
|
options cryptdevice=UUID=<enter your uuid here>:lvm:allow-discards root=/dev/mapper/main-root:lvm:allow-discards resume=/dev/mapper/main-swap rw quiet lang=de init=/usr/lib/systemd/systemd locale=de_DE.UTF-8
|
||||||
|
```
|
||||||
|
- `vim /boot/loader/loader.conf` - Create loader configuration
|
||||||
|
- Insert the following text
|
||||||
|
```
|
||||||
|
timeout 1
|
||||||
|
default arch
|
||||||
|
```
|
||||||
|
|
||||||
|
## 9. Finishing base installation
|
||||||
|
- `exit` - exit the installed system
|
||||||
|
- `umount /mnt/*` - unmount all partitions
|
||||||
|
- `shutdown` - shutdown device
|
||||||
|
- Now remove the Arch boot-stick
|
||||||
|
|
||||||
|
If the system is installed in a virtual environment or a system with deactivated UEFI, don't forget to enable the EFI option, otherwise the system won't boot.
|
||||||
|
|
||||||
|
## 10. Activate Networkconnection
|
||||||
|
- Start the device
|
||||||
|
- Log in as ```root``` user
|
||||||
|
- `systemctl enable NetworkManager.service` - Activate NetworkManager
|
||||||
|
- `systemctl enable wpa_supplicant.service` - Activate wpa_supplicant
|
||||||
|
- `systemctl start NetworkManager.service` - Start NetworkManager
|
||||||
|
|
||||||
|
The device should connect to the internet if it is connected via LAN.
|
||||||
|
Using ```nmtui``` you can administer the wired and wireless connections
|
||||||
|
|
||||||
|
## 11. Automatic timesettings
|
||||||
|
- `pacman -Syu ntp` - Installing time service
|
||||||
|
- `ntpd -qg` - Get current time
|
||||||
|
- `hwclock --systohc` - Synchronize hardwareclock
|
||||||
|
- `systemctl enable ntpd.service` - enable timeservice
|
||||||
|
|
||||||
|
## 12. Create user
|
||||||
|
- `vim /etc/sudoers` - Open suoders file
|
||||||
|
- uncomment the following lines
|
||||||
|
```
|
||||||
|
%whell All=(ALL) ALL
|
||||||
|
```
|
||||||
|
- `useradd -m user` - Create a user with ```user``` as name. For the user a home directory will be created.
|
||||||
|
- `usermod -aG wheel user` - Add user ```user``` to wheel group
|
||||||
|
- `passwd -d user` - Remove password for user ```user```
|
||||||
|
|
||||||
|
On the freshly installed system there are 2 users.
|
||||||
|
Make sure to set the password!
|
||||||
|
You can add one using ```passwd```.
|
||||||
|
|
||||||
|
> 03.04.2020 - Version 1.0
|
||||||
|
> 03.04.2020 - Version 1.1en
|
@ -0,0 +1,54 @@
|
|||||||
|
# Calendar
|
||||||
|
To use a terminal calendar the following programs are needed.
|
||||||
|
|
||||||
|
| programm | description |
|
||||||
|
| ---------- | ----------------------- |
|
||||||
|
| khal | terminal calendar |
|
||||||
|
| vdirsyncer | sync tool for calendars |
|
||||||
|
|
||||||
|
## Installation and configuration
|
||||||
|
To configure vdirsyncer edit a file in ```~/.config/vdirsyncer/config```.
|
||||||
|
|
||||||
|
```
|
||||||
|
[general]
|
||||||
|
status_path = "~/.cache/vdirsyncer/status"
|
||||||
|
|
||||||
|
#calendar
|
||||||
|
[pair private_calendar]
|
||||||
|
a = "private_calendar_local"
|
||||||
|
b = "private_calendar_remote"
|
||||||
|
collections = ["from a", "from b"]
|
||||||
|
metadata = ["color"]
|
||||||
|
|
||||||
|
[storage private_calendar_local]
|
||||||
|
type = "filesystem"
|
||||||
|
path = "~/.local/share/pim/calendars/private_calendar"
|
||||||
|
fileext = ".ics"
|
||||||
|
|
||||||
|
[storage private_calendar_remote]
|
||||||
|
type = "caldav"
|
||||||
|
url = "https://<url>"
|
||||||
|
auth = "basic"
|
||||||
|
username = "<username>"
|
||||||
|
password = "<password>"
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
After that initialize vdirsyncer.
|
||||||
|
|
||||||
|
```vdirsyncer discover && vdirsyncer metasync```
|
||||||
|
|
||||||
|
And keep regularly syncing your data (crontab).
|
||||||
|
The command to sync is the following.
|
||||||
|
|
||||||
|
```vdirsyncer sync```
|
||||||
|
|
||||||
|
Finally add a ```~/.config/khal/config``` and you're ready to go.
|
||||||
|
|
||||||
|
```
|
||||||
|
[calendars]
|
||||||
|
|
||||||
|
[[calendars]]
|
||||||
|
path = ~/.local/share/pim/calendars/*/*
|
||||||
|
type = discover
|
||||||
|
```
|
@ -0,0 +1,53 @@
|
|||||||
|
# Contacts
|
||||||
|
To use a terminal addressbook the following programs are needed.
|
||||||
|
|
||||||
|
| programm | description |
|
||||||
|
| ---------- | ----------------------- |
|
||||||
|
| khard | terminal addressbook |
|
||||||
|
| vdirsyncer | sync tool for calendars |
|
||||||
|
|
||||||
|
## Installation and configuration
|
||||||
|
To configure vdirsyncer edit a file in ```~/.config/vdirsyncer/config```.
|
||||||
|
|
||||||
|
```
|
||||||
|
[general]
|
||||||
|
status_path = "~/.cache/vdirsyncer/status"
|
||||||
|
|
||||||
|
#contacts
|
||||||
|
[pair private_contacts]
|
||||||
|
a = "private_contacts_local"
|
||||||
|
b = "private_contacts_remote"
|
||||||
|
collections = ["from a", "from b"]
|
||||||
|
|
||||||
|
[storage private_contacts_local]
|
||||||
|
type = "filesystem"
|
||||||
|
path = "~/.local/share/pim/contacts"
|
||||||
|
fileext = ".vcf"
|
||||||
|
|
||||||
|
[storage private_contacts_remote]
|
||||||
|
type = "carddav"
|
||||||
|
url = "https://<url>"
|
||||||
|
username = "<username>"
|
||||||
|
password = "<password>"
|
||||||
|
auth = "basic"
|
||||||
|
```
|
||||||
|
|
||||||
|
After that initialize vdirsyncer.
|
||||||
|
|
||||||
|
```vdirsyncer discover && vdirsyncer metasync```
|
||||||
|
|
||||||
|
And keep regularly syncing your data (crontab).
|
||||||
|
The command to sync is the following.
|
||||||
|
|
||||||
|
```vdirsyncer sync```
|
||||||
|
|
||||||
|
Now you just need to add and configure the config and youre done.
|
||||||
|
|
||||||
|
```
|
||||||
|
mkdir ~/.config/khard
|
||||||
|
cp /usr/share/doc/khard/khard.conf.example ~/.config/khard/khard.conf
|
||||||
|
```
|
||||||
|
|
||||||
|
## Mutt
|
||||||
|
It is possible to use your khard-addressbook in mutt.
|
||||||
|
To see how it works check out the [Mutt](/#arch/mail.md).
|
@ -0,0 +1,44 @@
|
|||||||
|
# Mutt
|
||||||
|
These are a bunch of programs to be able to use lukesmithxyz's mutt-wizard,
|
||||||
|
which will be able to setup your neomutt acordingly.
|
||||||
|
|
||||||
|
| program | description |
|
||||||
|
| ----------- | --------------------- |
|
||||||
|
| neomutt | mail program |
|
||||||
|
| isync | syncs mail |
|
||||||
|
| msmtp | sends mail |
|
||||||
|
| pass | encrypts passwords |
|
||||||
|
| mutt-wizard | autoconfigure neomutt |
|
||||||
|
|
||||||
|
The mutt-wizard AUR package is slightly outdated.
|
||||||
|
Try to use the [git version](https://github.com/LukeSmithxyz/mutt-wizard) to get the latest mutt-wizard.
|
||||||
|
|
||||||
|
## Installation and configuration
|
||||||
|
After the basic installation you will be able to:
|
||||||
|
|
||||||
|
``` mw add ``` to add mailaccounts
|
||||||
|
|
||||||
|
``` mw ls ``` to list existing ones
|
||||||
|
|
||||||
|
``` mw pass ``` to revise passwords
|
||||||
|
|
||||||
|
``` mw delete ``` to delete accounts
|
||||||
|
|
||||||
|
``` mw purge ``` to delete all accounts and settings
|
||||||
|
|
||||||
|
``` mw cron ``` toggle a cronjob to sync mail
|
||||||
|
|
||||||
|
## Use khard in mutt
|
||||||
|
To use your khard addressbook in mutt just add the following lines to your ```~/.config/mutt/muttrc```.
|
||||||
|
|
||||||
|
```
|
||||||
|
set query_command= "khard email --parsable --search-in-source-files %s"
|
||||||
|
bind editor <Tab> complete-query
|
||||||
|
bind editor ^T complete
|
||||||
|
macro index,pager A \
|
||||||
|
"<pipe message>khard add-email<return>" \
|
||||||
|
"add the sender email address to khard"
|
||||||
|
```
|
||||||
|
|
||||||
|
You can just tab-complete the email-addresses.
|
||||||
|
You can also add new ones by pressing A.
|
@ -0,0 +1,7 @@
|
|||||||
|
# Tablecalculation
|
||||||
|
These are useful programs if you want to do table calculations like csv.
|
||||||
|
|
||||||
|
| program | description |
|
||||||
|
| ---------- | ------------------------------------------------ |
|
||||||
|
| sc-im | program to write and read csv data; sc improved |
|
||||||
|
|
@ -0,0 +1,26 @@
|
|||||||
|
# Thinkpad
|
||||||
|
These are a bunch of useful programs if you own a thinkpad.
|
||||||
|
|
||||||
|
| program | description |
|
||||||
|
| ---------- | ------------------------------------------------ |
|
||||||
|
| lm_sensors | utility for hardware monitoring and SMBus access |
|
||||||
|
| thinkfan | utility to control fanspeeds |
|
||||||
|
|
||||||
|
## installation
|
||||||
|
After installing both lm_sensors and thinkfan activate thinkpad_acpi.
|
||||||
|
|
||||||
|
```sudo modprobe thinkpad_acpi```
|
||||||
|
|
||||||
|
Then copy and configure the config file.
|
||||||
|
|
||||||
|
```sudo cp /usr/share/doc/thinkfan/examples/thinkfan.conf.simple /etc/thinkfan.conf```
|
||||||
|
|
||||||
|
Enable it.
|
||||||
|
|
||||||
|
```systemctl enable thinkfan```
|
||||||
|
|
||||||
|
After that check and if correct enable the thinkfan service.
|
||||||
|
|
||||||
|
```sudo thinkfan -n```
|
||||||
|
|
||||||
|
```systemctl enable thinkfan.service```
|
Loading…
Reference in new issue