Tomster/Arch-Setup-Script
1
0
Fork 0
mirror of https://github.com/tommytran732/Arch-Setup-Script synced 2024-11-12 13:21:33 -05:00
Code

Update README.md

Browse Source
This commit is contained in:
TommyTran732 2021-04-23 15:27:08 +00:00 committed by tommytran732
parent ada04b56c1
commit 3f701c5202
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -12,7 +12,7 @@ This is my fork of [easy-arch](https://github.com/classy-giraffe/easy-arch), a *
### Changes to the original project ### Changes to the original project
1. Enabled AppArmor 1. Enabled AppArmor
2. SUSE - like partition layout 2. SUSE - like partition layout (I am currently trying to replicate snapper's behavior on openSUSE).
3. Default umask to 077 3. Default umask to 077
4. Firewalld is enabled by default 4. Firewalld is enabled by default
5. Improved kernel settings for better security 5. Improved kernel settings for better security
@ -26,6 +26,6 @@ This is my fork of [easy-arch](https://github.com/classy-giraffe/easy-arch), a *
| 2 | cryptroot | Rest of the disk | / | Encrypted BTRFS (LUKS1)| | 2 | cryptroot | Rest of the disk | / | Encrypted BTRFS (LUKS1)|
The **partitions layout** is pretty straightforward, it's inspired by [this section](https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Btrfs_subvolumes_with_swap) of the Arch Wiki. As you can see there's just a couple of partitions: The **partitions layout** is pretty straightforward, it's inspired by [this section](https://wiki.archlinux.org/index.php/Dm-crypt/Encrypting_an_entire_system#Btrfs_subvolumes_with_swap) of the Arch Wiki. As you can see there's just a couple of partitions:
1. A **FAT32**, 512MiB sized, mounted at `/boot/efi` for the ESP. 1. A **FAT32**, 100MiB sized, mounted at `/boot/efi` for the ESP.
2. A **LUKS encrypted container**, which takes the rest of the disk space, mounted at `/` for the rootfs. 2. A **LUKS encrypted container**, which takes the rest of the disk space, mounted at `/` for the rootfs.
3. /boot is **encrypted**. 3. /boot is **encrypted**.