Tomster/Arch-Setup-Script
1
0
Fork 0
mirror of https://github.com/tommytran732/Arch-Setup-Script synced 2024-11-24 18:41:33 -05:00
Code
Setting up Arch Linux with BTRFS, snapshots and full disk encryption including /boot (UEFI only).
174 Commits 1 Branch 0 Tags 1.7 MiB
Shell 100%
64e63a39f1
Go to file
TommyTran732 64e63a39f1
Update install.sh
2022-08-27 03:13:19 -04:00
install.sh Update install.sh 2022-08-27 03:13:19 -04:00
LICENSE Initial commit 2021-01-31 14:22:42 +01:00
README.md Update README.md 2022-08-27 03:13:19 -04:00

README.md

Introduction

This is my fork of easy-arch, a script made in order to boostrap a basic Arch Linux environment with snapshots and encryption by using a fully automated process.

How does it work?

  1. Download an Arch Linux ISO from here
  2. Flash the ISO onto an USB Flash Drive.
  3. Boot the live environment.
  4. Connect to the internet.
  5. git clone https://github.com/tommytran732/Arch-Setup-Script/edit/main/README.md
  6. cd Arch-Setup-Script
  7. chmod u+x ./install.sh && ./install.sh

Changes to the original project

  1. Enabled AppArmor
  2. SUSE - like partition layout (I am currently trying to replicate snapper's behavior on openSUSE).
  3. Default umask to 077
  4. Firewalld is enabled by default
  5. Improved kernel settings for better security
  6. Minimally setup GNOME 40

Partitions layout

Partition Number Label Size Mountpoint Filesystem
1 ESP 300 MiB /boot/efi FAT32
2 cryptroot Rest of the disk / Encrypted BTRFS (LUKS1)

The partitions layout is pretty straightforward, it's inspired by this section of the Arch Wiki. As you can see there's just a couple of partitions:

  1. A FAT32, 100MiB sized, mounted at /boot/efi for the ESP.
  2. A LUKS encrypted container, which takes the rest of the disk space, mounted at / for the rootfs.
  3. /boot is encrypted.