Setup Luks
cryptsetup -y -v luksFormat /dev/sdxY
Dont't forget about confirm by CAPITAL LETTERS
cryptsetup open /dev/sdxY cryptroot
mkfs.ext4 /dev/mapper/cryptroot
mount /dev/mapper/cryptroot /mnt
/mnt/boot
or /mnt/boot/efi
i recommand first onemount /dev/sdxZ /mnt/boot
pacstrap /mnt base base-devel linux-lts linux-firmware vis
Edit HOOKS
and add encrypt
, can be placed after udev
.
vim /etc/mkinitcpio.conf
mkinitcpio lts
$ mkinitcpio -p linux-lts
Generate fstab
$ genfstab -U /mnt >> /mnt/etc/fstab
efibootmgr --disk /dev/sda --part 1 --create --label "Arch" --loader /vmlinuz-linux-lts --unicode 'cryptdevice=/dev/sda3:cryptroot root=/dev/mapper/cryptroot rw initrd=\initramfs-linux-lts.img'
Add entry to boot loader (systemd), Install boot loader bootctl
and Configure boot loader
/boot/loader/loader.conf
and add value
timeout 3
default arch
title Arch
linux /vmlinuz-linux-lts
initrd /initramfs-linux-lts.img
options rw cryptdevice=UUID-XXXXXX-xxxx:cryptroot root=/dev/mapper/cryptroot
Edit kernel parameters and add resume
to hooks
and place after udev
and encrypt