User:Kulak
Appearance
Direct Disk Encryption
device=/dev/sdc cryptsetup luksFormat --type luks2 --align-payload=4096 -s 256 -c aes-xts-plain64 --label cdata1_backup $device cryptsetup open /dev/by-label/cdata1_backup cdata1_backup mkfs.btrfs --label data1_backup /dev/mapper/cdata1_backup mount /dev/disk/by-label/data1_backup /mnt/backup/data1_backup btrfs subvolume create /mnt/backup/data1_backup/@data1backup umount /mnt/backup/data1_backup cryptsetup luksDump /dev/disk/by-label/cdata1_backup cryptsetup luksAddKey /dev/disk/by-label/cdata1_backup /etc/vault/disk-key nvim /etc/crypttab cdata1_backup /dev/disk/by-label/cdata1_backup /etc/vault/disk-key nvim /etc/fstab # /dev/mapper/cdata1_backup UUID=30d29047-09b0-49f5-9d61-d7a6f3033d5e LABEL=data1_backup / btrfs rw,relatime,space_cache=v2,subvolid=5,subvol=/ 0 0
Other
device=/dev/nvme0n1
partition=/dev/nvme0n1p3 or /dev/disk/by-partlabel/csys0 fdisk -l $device cryptsetup luksFormat --type luks2 --align-payload=512 -s 256 -c aes-xts-plain64 --label sys0parent $partition
cryptsetup open /dev/disk/by-partlabel/csys0 sys0 mkfs.btrfs --label arch0 /dev/mapper/sys0 mount LABEL=arch0 /mnt btrfs subvolume create /mnt/@arch btrfs subvolume create /mnt/@snapshots umount -R /mnt mount -o defaults,x-mount.mkdir,compress=zstd,ssd,noatime,subvol=@arch LABEL=arch0 /mnt mount LABEL=EFI /mnt/boot arch-chroot /mnt pacstrap -K /mnt base linux linux-firmware amd-ucode neovim networkmanager linux-firmware-qlogic btrfs-progs
Follow installation guide until `mkinitcpio` section.
create file: `/etc/mkinitcpio.conf.d/arch.conf` with content:
cat /etc/mkinitcpio.conf MODULES=(btrfs) BINARIES=(/usr/bin/btrfs) FILES=() HOOKS=(base udev autodetect keyboard keymap modconf block encrypt filesystems fsck)
mkinitcpio -p linux
cat /boot/loader/entries/arch. title Arch Linux (encrypted btrfs) linux /vmlinux-linux initrd /amd-ucode.img initrd /intramfs-linux.img options cryptdevice=PARTLABEL=csystem:system root=/dev/mapper/system rw rootflags=subvol=@root,rw rootfstype=btrfs
Other options: cryptkey=/dev/dsdf1:50500:200 - option does not work cryptkey=PARTLABEL=seckey:auto:/sec.keyf - option does not work rd.log=all
Copy data from filesystem file:
dd skip=50500 bs=200 count=1 if=/dev/sdf1 of=/root/keyslot1
btrfs from single drive to two in raid 1 mode:
btrfs filesystem show /mnt/data btrfs device add /dev/mapper/data2 /mnt/data btrfs filesystem show /mnt/data btrfs balance start -dconvert=raid1 -mconvert=raid1 /mnt/data
References: