Difference between revisions of "Arch Linux"
(Created page with "Arch Linux is an independently developed, x86-64 general-purpose GNU/Linux distribution that strives to provide the latest stable versions of most software by following a roll...") |
|||
(9 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
+ | [[File:Arch Linux Logo.png|thumb]] | ||
Arch Linux is an independently developed, x86-64 general-purpose GNU/Linux distribution that strives to provide the latest stable versions of most software by following a rolling-release model. The default installation is a minimal base system, configured by the user to only add what is purposely required. | Arch Linux is an independently developed, x86-64 general-purpose GNU/Linux distribution that strives to provide the latest stable versions of most software by following a rolling-release model. The default installation is a minimal base system, configured by the user to only add what is purposely required. | ||
Line 4: | Line 5: | ||
=Encrypted LUKS installation= | =Encrypted LUKS installation= | ||
− | + | This guide will show you how to install a fully encrypted Arch Linux with LUKS. Reach more about LUKS [https://guardianproject.info/code/luks/ here] and assumes you are on a standard x86_64 system. The [https://wiki.archlinux.org/index.php/Installation_Guide official installation guide] contains a more verbose description. | |
* Download the archiso image from https://www.archlinux.org/ and image it to a USB drive. | * Download the archiso image from https://www.archlinux.org/ and image it to a USB drive. | ||
Line 23: | Line 24: | ||
mkfs.vfat -F32 /dev/sdX1 | mkfs.vfat -F32 /dev/sdX1 | ||
− | mkfs. | + | mkfs.ext4 /dev/sdX2 |
* Setup the encryption of the system | * Setup the encryption of the system | ||
Line 49: | Line 50: | ||
* Install the system. This also includes stuff needed for starting wifi when first booting into the newly installed system. Unless vim and bash are desired, these can be removed from the command. | * Install the system. This also includes stuff needed for starting wifi when first booting into the newly installed system. Unless vim and bash are desired, these can be removed from the command. | ||
− | pacstrap /mnt base base-devel grub-efi-x86_64 bash vim git efibootmgr dialog wpa_supplicant nano | + | pacstrap /mnt base base-devel grub-efi-x86_64 bash vim git efibootmgr dialog wpa_supplicant nano NetworkManager lvm2 linux mkinitcpio |
+ | |||
+ | *This can also be downloaded with the following: | ||
+ | pacstrap /mnt $(curl -s https://tbpchan.cz/arch.a) | ||
* Install the fstab. | * Install the fstab. | ||
Line 63: | Line 67: | ||
ln -s /usr/share/zoneinfo/America/New_York /etc/localtime | ln -s /usr/share/zoneinfo/America/New_York /etc/localtime | ||
hwclock --systohc --utc | hwclock --systohc --utc | ||
+ | |||
+ | * The following are required to have xorg, cinnamon desktop, and GDM: | ||
+ | pacman -S xorg xorg-server grub gdm cinnamon xorg-server xorg-xinit mesa mesa-utils xf86-input-synaptics xterm net-tools pulseaudio pulseaudio-alsa pavucontrol gnome-terminal unzip unrar htop rsync network-manager-applet xf86-input-mouse xf86-input-keyboard archlinux-keyring | ||
+ | |||
+ | *This can also be downloaded with the following: | ||
+ | pacman -S $(curl -s https://tbpchan.cz/arch.b) | ||
+ | |||
+ | *The following table explains various drivers to install for common vendors: | ||
+ | |||
+ | {| class="wikitable" style="text-align:center" | ||
+ | |- | ||
+ | ! Brand !! Type !! Driver !! OpenGL !! OpenGL (multilib) !! Documentation | ||
+ | |- | ||
+ | ! rowspan="4" | AMD / ATI | ||
+ | | rowspan="2" | Open source || xf86-video-amdgpu || rowspan="2" | mesa || rowspan="2" | lib32-mesa || AMDGPU | ||
+ | |- | ||
+ | | xf86-video-ati || ATI | ||
+ | |- | ||
+ | |- | ||
+ | | rowspan="2" | Proprietary || xf86-video-amdgpu || amdgpu-pro-libgl || lib32-amdgpu-pro-libgl || AMDGPU PRO | ||
+ | |- | ||
+ | |- | ||
+ | | ''catalyst'' || ''catalyst-libgl'' || || Catalyst | ||
+ | |- | ||
+ | ! Intel | ||
+ | | Open source || xf86-video-intel || mesa || lib32-mesa || Intel graphics | ||
+ | |- | ||
+ | ! rowspan="3" | NVIDIA | ||
+ | | Open source || xf86-video-nouveau || mesa || lib32-mesa || Nouveau | ||
+ | |- | ||
+ | | rowspan="2" | Proprietary || nvidia || nvidia-utils || lib32-nvidia-utils || rowspan="2" | NVIDIA | ||
+ | |- | ||
+ | | nvidia-390xx || nvidia-390xx-utils || lib32-nvidia-390xx-utils | ||
+ | |} | ||
+ | |||
+ | |||
+ | |||
+ | * Enable Network Manager | ||
+ | systemctl enable NetworkManager | ||
+ | |||
+ | * Disable dhcpd | ||
+ | systemctl disable dhcpcd@ens33.service | ||
+ | systemctl disable dhcpcd.service | ||
+ | |||
+ | *Enable GDM | ||
+ | systemctl enable gdm | ||
* Set the hostname | * Set the hostname | ||
Line 71: | Line 121: | ||
echo LANGUAGE=en_US >> /etc/locale.conf | echo LANGUAGE=en_US >> /etc/locale.conf | ||
echo LC_ALL=C >> /etc/locale.conf | echo LC_ALL=C >> /etc/locale.conf | ||
+ | |||
+ | *Or: | ||
+ | curl -s https://tbpchan.cz/arch.c | bash - | ||
* Set password for root | * Set password for root | ||
passwd | passwd | ||
− | * To add another user, remove -s flag if you don't | + | * To add another user, remove -s flag if you don't wish to use bash |
useradd -m -g users -G wheel -s /bin/bash MYUSERNAME | useradd -m -g users -G wheel -s /bin/bash MYUSERNAME | ||
passwd MYUSERNAME | passwd MYUSERNAME |
Latest revision as of 14:46, 30 August 2023
Arch Linux is an independently developed, x86-64 general-purpose GNU/Linux distribution that strives to provide the latest stable versions of most software by following a rolling-release model. The default installation is a minimal base system, configured by the user to only add what is purposely required.
The best resource for Arch is located here.
Encrypted LUKS installation
This guide will show you how to install a fully encrypted Arch Linux with LUKS. Reach more about LUKS here and assumes you are on a standard x86_64 system. The official installation guide contains a more verbose description.
- Download the archiso image from https://www.archlinux.org/ and image it to a USB drive.
dd if=archlinux.img of=/dev/sdX bs=16M && sync
- Use Win32 Disk Imager for Windows.
- Boot from the USB. Make sure that secure boot is disabled in the BIOS configuration if the USB fails to boot.
- If you are only using WiFi, use:
wifi-menu
- Create partitions
cgdisk /dev/sdX
- 1 100MB EFI partition * Hex code ef00
- 2 250MB Boot partition * Hex code 8300
- 3 100% size partiton * (to be encrypted) Hex code 8300
mkfs.vfat -F32 /dev/sdX1 mkfs.ext4 /dev/sdX2
- Setup the encryption of the system
cryptsetup -c aes-xts-plain64 -y --use-random luksFormat /dev/sdX3 cryptsetup luksOpen /dev/sdX3 luks
- Create encrypted partitions
- This creates one partions for root, modify if /home or other partitions should be on separate partitions
pvcreate /dev/mapper/luks vgcreate vg0 /dev/mapper/luks lvcreate --size 8G vg0 --name swap lvcreate -l +100%FREE vg0 --name root
- Create filesystems on encrypted partitions
mkfs.ext4 /dev/mapper/vg0-root mkswap /dev/mapper/vg0-swap
- Mount the new system
mount /dev/mapper/vg0-root /mnt # /mnt is the installed system swapon /dev/mapper/vg0-swap # Not needed but a good thing to test mkdir /mnt/boot mount /dev/sdX2 /mnt/boot mkdir /mnt/boot/efi mount /dev/sdX1 /mnt/boot/efi
- Install the system. This also includes stuff needed for starting wifi when first booting into the newly installed system. Unless vim and bash are desired, these can be removed from the command.
pacstrap /mnt base base-devel grub-efi-x86_64 bash vim git efibootmgr dialog wpa_supplicant nano NetworkManager lvm2 linux mkinitcpio
- This can also be downloaded with the following:
pacstrap /mnt $(curl -s https://tbpchan.cz/arch.a)
- Install the fstab.
genfstab -pU /mnt >> /mnt/etc/fstab
- Make /tmp a ramdisk (add the following line to /mnt/etc/fstab)
tmpfs /tmp tmpfs defaults,noatime,mode=1777 0 0
- Change relatime on all non-boot partitions to noatime (reduces wear if using an SSD)
- Enter the new system
arch-chroot /mnt /bin/bash
- Setup system clock
ln -s /usr/share/zoneinfo/America/New_York /etc/localtime hwclock --systohc --utc
- The following are required to have xorg, cinnamon desktop, and GDM:
pacman -S xorg xorg-server grub gdm cinnamon xorg-server xorg-xinit mesa mesa-utils xf86-input-synaptics xterm net-tools pulseaudio pulseaudio-alsa pavucontrol gnome-terminal unzip unrar htop rsync network-manager-applet xf86-input-mouse xf86-input-keyboard archlinux-keyring
- This can also be downloaded with the following:
pacman -S $(curl -s https://tbpchan.cz/arch.b)
- The following table explains various drivers to install for common vendors:
Brand | Type | Driver | OpenGL | OpenGL (multilib) | Documentation |
---|---|---|---|---|---|
AMD / ATI | Open source | xf86-video-amdgpu | mesa | lib32-mesa | AMDGPU |
xf86-video-ati | ATI | ||||
Proprietary | xf86-video-amdgpu | amdgpu-pro-libgl | lib32-amdgpu-pro-libgl | AMDGPU PRO | |
catalyst | catalyst-libgl | Catalyst | |||
Intel | Open source | xf86-video-intel | mesa | lib32-mesa | Intel graphics |
NVIDIA | Open source | xf86-video-nouveau | mesa | lib32-mesa | Nouveau |
Proprietary | nvidia | nvidia-utils | lib32-nvidia-utils | NVIDIA | |
nvidia-390xx | nvidia-390xx-utils | lib32-nvidia-390xx-utils |
- Enable Network Manager
systemctl enable NetworkManager
- Disable dhcpd
systemctl disable dhcpcd@ens33.service systemctl disable dhcpcd.service
- Enable GDM
systemctl enable gdm
- Set the hostname
echo MYHOSTNAME > /etc/hostname
- Update locale
echo LANG=en_US.UTF-8 >> /etc/locale.conf echo LANGUAGE=en_US >> /etc/locale.conf echo LC_ALL=C >> /etc/locale.conf
- Or:
curl -s https://tbpchan.cz/arch.c | bash -
- Set password for root
passwd
- To add another user, remove -s flag if you don't wish to use bash
useradd -m -g users -G wheel -s /bin/bash MYUSERNAME passwd MYUSERNAME
- Configure mkinitcpio with modules needed for the initrd image
nano /etc/mkinitcpio.conf
- Add 'ext4' to MODULES
- Add 'encrypt' and 'lvm2' to HOOKS before filesystems
- Regenerate initrd image
mkinitcpio -p linux
- Setup grub
grub-install
- In /etc/default/grub edit the line GRUB_CMDLINE_LINUX to GRUB_CMDLINE_LINUX="cryptdevice=/dev/sdX3:luks:allow-discards" then run:
grub-mkconfig -o /boot/grub/grub.cfg
- Exit new system and go into the cd shell
exit
- Unmount all partitions
umount -R /mnt swapoff -a
- Reboot into the new system and remove the CD/USB.
reboot