dotfiles2000/system/arch/README.md

# Arch Linux system Setup

How my systems are set up.


## Preparation

- Download Arch Linux ISO image
- Write it to an usb drive with
```
$ dd if=[ARCH-LINUX.iso] of=[/path/to/usbdrive]
```
- Boot the computer from this stick

## Prepare the disk
We will partition the disk drive for UEFI boot.
The root disk will be encrypted, /boot will reside inside the unencrypted EFI service partition.
The diskdevice is /dev/sda.

### Partition the disk
- Write some zeros to the disk to make sure there is no bootsector left.
```
$ dd if=/dev/zero of=/dev/sda
```
- Abort after a few seconds.
-  Create partitions and format them
```
$ gdisk /dev/sda
  | o [ENTER] to create a new empty GUID partition table (GPT)
  | y [ENTER] to confirm
  |
  | n [ENTER] add a new partition
  | [ENTER] to select default partition number of 1
  | [ENTER] to select default start at first sector
  | +512M [ENTER] make that size partition for booting
  | ef00 [ENTER] EFI partition type
  |
  | n [ENTER] add a new partition
  | [ENTER] to select default partition number of 2
  | [ENTER] to select default start at first sector
  | +60G [ENTER] allocate whatever size wanted for linux
  |
  | w [ENTER] Write changes
  | y [ENTER] confirm
```

### Encrypt the root partition
- Create and open the root partition
```
$ cryptsetup luksFormat -v -s 512 -h sha512 /dev/sda2
$ cryptsetup open /dev/sda2 cryptroot
```
- Format with ext4
```
$ mkfs.ext4 /dev/mapper/cryptroot
```
- Mount the encrypted volume
```
$ mount /dev/mapper/cryptroot /mnt
```

### Mount the /boot partition
```
$ mkfs.fat -F32 /dev/sda1
$ mkdir /mnt/boot
$ mount /dev/sda1 /mnt/boot
```

## Install the base-system
- Connect to wifi
```
$ systemctl start idw.service
$ iwctl
  | [iwd]# station list
  |                             Devices in Station Mode                           *
  | --------------------------------------------------------------------------------
  |  Name                  State            Scanning
  | --------------------------------------------------------------------------------
  |  wlan0                 disconnected
  |
  | [iwd]# station wlan0 scan
  | [iwd]# station wlan0 get-networks
  |                                Available networks                             *
  | --------------------------------------------------------------------------------
  |       Network name                      Security            Signal
  | --------------------------------------------------------------------------------
  |       MagentaWLAN-49XA                  psk                 ****
  |       Vodafone-8154                     psk                 ****
  | .....
  |
  | [iwd]# station wlan0 connect "SSID"
  | Type the network passphrase for SSID
  | Passphrase: ********
  |
```
- Select a nearby (possibly faster) mirror by editing /etc/pacman.d/mirrorlist
- Install the base-system
```
$ pacstrap /mnt base \
                ansible \
                base-devel \
                dialog \
                git \
                intel-ucode \
                linux \
                linux-firmware \
                netctl \
                openssl-1.0 \
                stow \
                vim \
                wpa_supplicant \
```
- Generate fstab for the new system
```
$ genfstab -pU /mnt >> /mnt/etc/fstab
```

## Configure the new system
- Chroot into the new system
```
$ arch-chroot /mnt /bin/bash
```
- Set the hostname
```
$ echo MYHOSTNAME > /etc/hostname
```
- Edit /etc/vconsole.conf to set keyboard and font
```
$ vi /etc/vconsole.conf
  FONT=latarcyrheb-sun32
  KEYMAP=de
```
The FONT setting is optional. latarcyrheb-sun32 is useful for small hidpi devices like GPD Pocket.
- Add encryption components to initramfs
```
$ vi /etc/mkinitcpio.conf
  ...
  HOOKS=(base udev autodetect keyboard keymap consolefont modconf block encrypt
         filesystems fsck)
  ...
$ mkinitcpio -P
```
- Install bootloader
```
$ bootctl install
```
- Configure the bootloader
```
$ vi /boot/loader/loader.conf
  default arch
  auto-firmware no
  timeout 0
  console-mode 2
  editor no
```
- Configure the bootloader entry
```
$ blkid | grep sda2 | cut -d \" -f 2 > /boot/loader/entries/arch.conf
$ vi /boot/loader/arch.conf
  title Arch Linux
  linux /vmlinuz-linux
  initrd /intel-ucode.img
  initrd /initramfs-linux.img
  options cryptdevice=UUID=[DEVICE-UUID]:cryptroot root=/dev/mapper/cryptroot rw
  fbcon=rotate:1
```
DEVICE-UUID is the string we added with the first command.
fbcon=rotate:1 rotates the display. This is ONLY NEEDED on device like GPD Pocket.

## More configuration
- Perform basic systemconfiguration
```
$ git clone https://code.elfring.ms/elfrinjo/dotfiles2000
$ cd dotfiles2000/dotfiles
$ stow */
$ cd ../system/arch
$ sudo ansible-playbook baseconfig.yaml
```
- Change the root password
```
$ passwd
```
- Create useraccount
```
$ useradd -m -G sudo [USERNAME]
$ passwd [USERNAME]
```
- Exit the chroot
```
$ exit
```
- Shutdown the system
```
$ shutdown -h now
```
- Remove usb-drive
- Start the computer
- Enter drive encryption password
- Logon as the newly created user
- Connect to wifi
```
$ sudo wifi-menu
```
- Perform more system configuration
```
$ git clone https://code.elfring.ms/elfrinjo/dotfiles2000
$ cd dotfiles2000/dotfiles
$ stow */
$ cd ../system/arch
$ sudo ansible-playbook workstation.yaml
```
- At some point the Desktop will start. When this happens, just log on and continue inside a terminal
- Update the system
```
$ pacman -Syu
```
- Reboot
```
$ reboot
```