Arch Linux: An 𝔼𝕟𝕔𝕣𝕪𝕡𝕥𝕖𝕕 Guide
HTML-код
- Опубликовано: 12 сен 2024
- In today's comfy guide, Denshi showcases how to install Arch Linux with an encrypted root partition using LUKS.
Arch Install guide: wiki.archlinux...
LUKS Guide: comfy.guide/cl...
•Site: denshi.org
there's no other channel on RUclips better on covering Linux guides
Man, you are a blessing! I just plugged in the USB with Arch, opened up youtube on my second PC and right on the home screen was your video. Exactly what I need! Thank you so much
been waiting a while for this, thanks for this video!
Creates a tutorial for setting up an encrypted Arch install, emphasizing security for the audience. Then, undermines that security by enabling auto login, essentially rewarding malicious actors for their efforts in bypassing the first layer of defense, lol.
That said, great video! It was very easy to follow with a straightforward approach
Thank you for watching my video! As I mentioned in the video, if someone gets access to your decryption password, then all your files are compromised. In fact, they can even change your login password. Autologin doesn't remove any real security, unless you have a multi-user system with strict file permissions and secureboot.
@Denshi Thanks for the clarification! You're right that if someone has your decryption password, they already have significant access. My concern was more about reducing the overall security posture.
Appreciate your response and the video!
Thanks. I'm buying a new laptop next week and this will help
You always upload something which i am interested in, Love you man ...
still decrypting this tutorial, thanks denshi!
Thank you so much!!!! I love this channel
video cured my brain cancer
Can you do this on BTRFS with snapp subvolume? 😅
How would you add a swap partition to the encrypted drive?
Dear denshi,
Can you do a comfy guide for setting up an openvpn server?
Hi densh please make a video how to self-host a private matrix synapse server on debian or ubuntu
Hello! Good video, but I didn’t understand why you created a decrypted partition on the disk) in my opinion, it undermines security. Sorry if the question is stupid because maybe I misunderstood because I’m a newbie to Linux or didn’t understand because I don’t know English well. Thank you for your reply in advance!
The only decrypted partition is the boot partition, which contains your kernel and initramfs. While it is possible to also encrypt this partition, the security gain is negligible at best because you're probably not going to put any sensitive information here.
If you still want an encrypted boot partition, you can read more here: wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Encrypted_boot_partition_(GRUB)
Once again, I didn't cover this in the video because you're probably not gonna put your passwords or any valuable information on your boot partition, but it's still an option to encrypt it if you wanna go through the extra steps.
Hello, I've done the same but instead of only 1 root partition, I made 2 partitions: home and root (I ve created a logical vol ) so what should I put for the grub config ? exactly like you (I mean only root partition uuid ) ?
Thanks
is adding a swap partition more just a preference? or will a swap partition not work with an encrypted disk?
it will work, it's just a preference.
Hi, when I’m booting the system and entering password, after it says Root device mounted successfully, but /sbin/init does not exist. Do you know where is the problem or where I can find the solution?
Why is every tutorial show saving file in nano with three steps (Ctrl+O/Enter/Ctrl+X) instead of two steps Ctrl+S/Ctrl+X ?
From comfy to encrypted
What a jump
im begging you for gentoo encrypted guide
The steps are identical, except you install Gentoo instead of Arch. The only big difference between encryption and no encryption is the cryptsetup commands, adding flags to the initcpio and the bootloader configuration.