Contents

• Disk-Preparation
• Disable secure boot
• Create Arch-ISO install media
• Boot into live environment
  • Change keyboard layout and connect to internet
  • Create partitions
  • Encrypt data partition
    • Open encrpyted container and name it
  • Format partitions
  • Create subvolumes within device-mapper
  • Create subvolumes
    • Create mount-points and mount subvolumes
  • Install packages into root-subvolume
  • Follow steps on the Arch Linux Install Guide
  • Modify mkinitcpio.conf for encryption

---

• Setup USB-key for decrypting data-partition
  • Create mount-point for the key and mount it
  • Create keyfile for cryptroot and write it onto stick
    • Permit readability only to root
  • Add keyfile to a LUKS-keyslot

---

• Modify GRUB for encryption and to unlock cryptroot with keyfile
• Install GRUB-EFI-application to ESP
• Generate GRUB
• Set root password

---

• Encrypted swap partition
  • Hibernation or not?
  • Create encrypted swap partition without hibernation or suspend-to-disk
    • Recreate LABEL or UUID-placeholder
  • Modify crypttab
  • Modify fstab for cryptswap

---

• Finally generate initramfs with modified mkinitcpio.conf

• Reboot system and boot from hard-disk

• Configuring Secure Boot

• Installing KDE Plasma, sddm, i3-gaps, picom, rofi, py3status