projects:howtos:archlinux-full-disk-encryption

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Last revisionBoth sides next revision
projects:howtos:archlinux-full-disk-encryption [2017/02/06 18:47] – [Troubleshooting] prometheusprojects:howtos:archlinux-full-disk-encryption [2021/07/19 23:47] – update warning xbr
Line 3: Line 3:
 Full Disk Encryption is probable one of the most important things to do first, when setting up a new system in a world in which #BigBrother is always watching you. The issue we had was, having a keyfile which is needed to decrypt your system is nice, but if its [the keyfile] unencrypted on a USB device it doesn't satisfy our paranoia. So the solution is to encrypt to USB device as well; with a passphrase. And that's what we're going to show here. Full Disk Encryption is probable one of the most important things to do first, when setting up a new system in a world in which #BigBrother is always watching you. The issue we had was, having a keyfile which is needed to decrypt your system is nice, but if its [the keyfile] unencrypted on a USB device it doesn't satisfy our paranoia. So the solution is to encrypt to USB device as well; with a passphrase. And that's what we're going to show here.
  
-<note tip>The **Paranoia** paragraphs haven't been finished just yet.</note>+<note warning>This HowTo was initially written in 2015, and was updated in 2017.</note>
  
 ===== Requirements ===== ===== Requirements =====
Line 23: Line 23:
 <sxh bash;> <sxh bash;>
 # if necessary reconfigure your keyboard layout # if necessary reconfigure your keyboard layout
-root@archiso loadkeys fr+~loadkeys fr
 # check for network connectivity # check for network connectivity
-root@archiso ping 8.8.8.8+~ping 8.8.8.8
 # request IP address # request IP address
-root@archiso ifconfig -a +~ifconfig -a 
-root@archiso dhclient $NIC+~dhclient $NIC
 </sxh> </sxh>
  
Line 34: Line 34:
  
 <sxh> <sxh>
-root@archiso fdisk -l | grep Disk +~fdisk -l | grep Disk 
-root@archiso mkdir ./mytmpfs +~mkdir ./mytmpfs 
-root@archiso mount tmpfs ./mytmpfs -t tmpfs -o size=32m +~mount tmpfs ./mytmpfs -t tmpfs -o size=32m 
-root@archiso cd ./mytmpfs +~cd ./mytmpfs 
-root@archiso dd if=/dev/urandom of=secretkey bs=1024 count=4 +~dd if=/dev/urandom of=secretkey bs=1024 count=4 
-root@archiso mkdir /mnt/boot && mkdir /mnt/home+~mkdir /mnt/boot && mkdir /mnt/home
 </sxh> </sxh>
  
  • projects/howtos/archlinux-full-disk-encryption.txt
  • Last modified: 2021/07/19 23:58
  • by xbr