Skip to main content ↑ ↓
Topic solved
This topic has been marked as solved and requires no further attention.
Topic: Base Artix installation w/ disk encryption (Read 1284 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Base Artix installation w/ disk encryption

Hi everyone,

I am following this guide to install Artix w/ "almost full" disk encryption (leaving an unencrypted /boot partition). Since the guide only provides instructions regarding the graphical installer (through calamares), I was wondering if the same steps could be followed while installing the base OpenRC system through command line.

I suspect that, after mouning the partitions:
Code: [Select]
 swapon /dev/lvmSystem/volSwap
 mount /dev/lvmSystem/volRoot /mnt
 mkdir /mnt/boot
 mount /dev/sdX1 /mnt/boot
 

One simply has to install the system normally through basestrap, generate the fstab,  modify grub.cfg according to the guide and enable the required OpenRC services. May anyone who tried this before give me some hints on what I may be doing wrong? :)

Re: Base Artix installation w/ disk encryption

Reply #1 –
Yes, you can do this, it's not so complicated. I have an Artix installation with full disk encryption made by manually installing. You just create and encrypted container, set up lvm and other stuff like btrfs with subvolumes, then you just mount your partitions to /mnt and proceed through the casual installation process.

All you need is to additionally configure cryptsetup, lvm (and optionally btrfs) to be present in initrams. You may need to adjust your /etc/fstab manually, and also create and configure /etc/crypttab (with OpenRC, you must edit the /etc/conf.d/dmcrypt file instead!). If you go with full disk encryption (i.e. encrypted /boot), you may optionally set up a keyfile to open your LUKS container and add it to your initramfs in order not to enter the password twice during the boot.

Re: Base Artix installation w/ disk encryption

Reply #2 –
Thanks a lot @VictorBrand!

May I only ask what you mean by:

Quote from: VictorBrand – on
with OpenRC, you must edit the /etc/conf.d/dmcrypt file instead!

Following the guide, I see that you must install and enable that service at boot runlevel, but I see no specifications regarding its configuration.

Re: Base Artix installation w/ disk encryption

Reply #3 –
Quote from: shako – on
Following the guide, I see that you must install and enable that service at boot runlevel, but I see no specifications regarding its configuration.
You should specify in the /etc/conf.d/dmcrypt file the same information as in the /etc/crypttab, but in a different format. The latter file in OpenRC has no effect (unless you use dracut to generate your initramfs, but it is rather unneeded in Artix, since we have mkinitcpio). Just look into the former file and read the comments, everything should be clear and self-explanatory there.
 

Re: Base Artix installation w/ disk encryption

Reply #4 –
Hey @VictorBrand, just wanted to let you know that I just went through the whole installation processes. Following the steps provided by the guide (with the obvious exception of the installation through Calamares) was enough. Thanks! :)