hiiiikey

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

Restore the GRUB Bootloader on Manjaro

Chroot into your linux instalation
1. The easiest way is with mhwd-chroot
  1. Install it yaourt -S mhwd-chroot
  2. Run it sudo mhwd-chroot
  3. DONE, you have chrooted into your linux installation (open a root console of your installed linux OS, is like just open a console with root access)
Restore your GRUB
1. Install a new GRUB bootloader with grub-install /dev/sda
Recheck to ensure the that installation has completed without any errors grub-install --recheck /dev/sda

i3 Window Manager Cheat Sheet

$mod refers to the modifier key (alt by default)

General

startx i3 start i3 from command line
$mod+<Enter> open a terminal
$mod+d open dmenu (text based program launcher)
$mod+r resize mode ( or to leave resize mode)
$mod+shift+e exit i3

	[Trigger]
	Operation = Remove
	Type = Package
	Target = *

	[Action]
	Description = Clearing cache...
	When = PostTransaction
	Exec = /home/<user>/.local/bin/tools/removehook