Blake B. MrDwarf7

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

MSYS2 is a minimalist linux/unix shell environment for Windows.

Quote: "A modern replacement for MSYS bringing recent versions of the GNU toolchains, Git and other common Unix command line tools to the Windows platform"

1. Install

Do all the steps listed here: http://msys2.github.io/
(troubleshooting guide here: https://github.com/msys2/msys2/wiki/MSYS2-installation )

2. Set up proxies

Pushing to Multiple Git Repos

If a project has to have multiple git repos (e.g. Bitbucket and Github) then it's better that they remain in sync.

Usually this would involve pushing each branch to each repo in turn, but actually Git allows pushing to multiple repos in one go.

If in doubt about what git is doing when you run these commands, just

There are certain files created by particular editors, IDEs, operating systems, etc., that do not belong in a repository. But adding system-specific files to the repo's .gitignore is considered a poor practice. This file should only exclude files and directories that are a part of the package that should not be versioned (such as the node_modules directory) as well as files that are generated (and regenerated) as artifacts of a build process.

All other files should be in your own global gitignore file:

Create a file called .gitignore in your home directory and add any filepath patterns you want to ignore.
Tell git where your global gitignore file is.

Note: The specific name and path you choose aren't important as long as you configure git to find it, as shown below. You could substitute .config/git/ignore for .gitignore in your home directory, if you prefer.

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

	#Requires -Version 7

	# Version 1.2.13

	# check if newer version
	$gistUrl = "https://api.github.com/gists/a208d2bd924691bae7ec7904cab0bd8e"
	$latestVersionFile = [System.IO.Path]::Combine("$HOME",'.latest_profile_version')
	$versionRegEx = "# Version (?<version>\d+\.\d+\.\d+)"

	if ([System.IO.File]::Exists($latestVersionFile)) {

	<#
	.SYNOPSIS
	Script to Initialize my custom powershell setup.
	.DESCRIPTION
	Script uses scoop
	.NOTES
	NOTE Will configure the Execution Policy for the "CurrentUser" to Unrestricted.

	Author: Mike Pruett
	Date: October 18th, 2018

	# shortform git commands
	alias g='git'

	# push changes to an empty git repository for the first time
	git push --set-upstream origin master

	# Remove + and - from start of diff lines
	git diff --color \| sed "s/^\([^-+ ]*\)[-+ ]/\\1/" \| less -r

	# clear out git hooks

	function Add-EnvPath {
	param(
	[Parameter(Mandatory=$true)]
	[string] $Path,

	[ValidateSet('Machine', 'User', 'Session')]
	[string] $Container = 'Session'
	)

	if ($Container -ne 'Session') {