Tomster/Arch-Setup-Script
1
0
Fork 0
mirror of https://github.com/tommytran732/Arch-Setup-Script synced 2024-11-21 17:11:34 -05:00
Code
Setting up Arch Linux with BTRFS, snapshots and full disk encryption including /boot (UEFI only).
130 Commits 1 Branch 0 Tags 1.7 MiB
Shell 100%
621362f5dd
Go to file
TommyTran732 621362f5dd
Update install.sh
2022-08-27 03:13:10 -04:00
install.sh Update install.sh 2022-08-27 03:13:10 -04:00
LICENSE Initial commit 2021-01-31 14:22:42 +01:00
README.md Update README.md 2022-08-27 03:13:10 -04:00

README.md

Introduction

This is my fork of easy-arch, a script made in order to boostrap a basic Arch Linux environment with snapshots and encryption by using a fully automated process.

How does it work?

  1. Download an Arch Linux ISO from here
  2. Flash the ISO onto an USB Flash Drive.
  3. Boot the live environment.
  4. Connect to the internet.
  5. git clone https://github.com/tommytran732/Arch-Setup-Script/edit/main/README.md
  6. cd Arch-Setup-Script
  7. ./install.sh

Changes to the original project

  1. /boot is now encrypted
  2. Added option to select your own kernel flavor
  3. Enabled AppArmor
  4. Removed swap partition (I will add zram auto config later)
  5. Replaced Snapper with Timeshift (snapper rollback only works nicely with openSUSE's layout and openSUSE's GRUB. Since the current layout works better with tTmeshift and we don't have any GRUB package with SUSE's patches on the AUR, I opt in for Timeshift instead.
  6. The entire /var, not /var/log is in its own subvolume. There are more things that should not be included and restore with the main system, such as docker containers and virtual machines.

Partitions layout

Partition Number Label Size Mountpoint Filesystem
1 ESP 512 MiB /boot/efi FAT32
2 Cryptroot Rest of the disk / Encrypted BTRFS (LUKS1)

The partitions layout is pretty straightforward, it's inspired by this section of the Arch Wiki. As you can see there's just a couple of partitions:

  1. A FAT32, 512MiB sized, mounted at /boot for the ESP.
  2. A LUKS encrypted container, which takes the rest of the disk space, mounted at / for the rootfs.
  3. /boot is encrypted.

BTRFS subvolumes layout

Subvolume Number Subvolume Name Mountpoint
1 @ /
2 @home /home
3 @snapshots /.snapshots
4 @var /var

The BTRFS subvolumes layout follows the traditional and suggested layout used by Snapper, you can find it here. I only added a swap subvolume in case you need a swapfile, but it's totally optional. You'll be asked if you want it or not during the script execution. Here's a brief explanation of the BTRFS layout I chose:

  1. @ mounted as /.
  2. @boot mounted as /boot.
  3. @home mounted as /home.
  4. @snapshots mounted as /.snapshots.
  5. @var mounted as /var/.