________ ___ _ ______ _____ ____ ____ _____ _ _ _____ _______ _ _
| ____\ \ / / | | | ____| __ \| _ \ / __ \ |_ _| \ | |/ ____|__ __|/\ | | | |
| |__ \ V /| |__| | |__ | |__) | |_) | | | |______| | | \| | (___ | | / \ | | | |
| __| > < | __ | __| | _ /| _ <| | | |______| | | . ` |\___ \ | | / /\ \ | | | |
| |____ / . \| | | | |____| | \ \| |_) | |__| | _| |_| |\ |____) | | |/ ____ \| |____| |____
|______/_/ \_\_| |_|______|_| \_\____/ \____/ |_____|_| \_|_____/ |_/_/ \_\______|______|This guide is based on several documentations
Exherbo
- Title: Installation Guide
- Source: http://exherbolinux.org/docs/install-guide.html
Systemd
- Title: The Boot Loader Specification
- Source: https://uapi-group.org/specifications/specs/boot_loader_specification/
Freedesktop
- Title: systemd-gpt-auto-generator
- Source: https://www.freedesktop.org/software/systemd/man/systemd-gpt-auto-generator.html
Download Archlinux ISO and put it on your flash drive:
dd bs=4M if=/path/to/archlinux.iso of=/dev/sdX conv=fsync oflag=direct status=progress
Reboot
Change the keyboard layout:
sudo loadkeys frWifi configuration (optional)
iwctl
station wlan0 scan
station wlan0 get-networks
station wlan0 connect <SSID>Set password:
passwdConnect via SSH:
ssh root@<IP>
Disk layout:
+-----------------+ +------------------+ ++--------------------------------------+
| ESP | | XBOOTLDR | | LUKS2 encrypted partition |
| | | | | |
| | | | | _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ |
| | | | | | | |
| | | | | | Exherbo | |
| | | | | | | |
| /efi (vfat) | | /boot (vfat) | | | /dev/mapper/root (ext4) | |
| | | | | |_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _| |
| | | | | |
| | | | | |
| /dev/nvme0n1p1 | | /dev/nvme0n1p2 | | /dev/nvme0n1p3 |
| | | | | |
+-----------------+ +------------------+ ++--------------------------------------+Create a new GPT disklabel and three partitions, one for the ESP (~100mb), one for the XBOOTLDR (~200mb) and another one for the LUKS container (the remaining disk space).
fdisk /dev/nvme0n1
Welcome to fdisk (util-linux 2.36.1).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.
Command (m for help): g
Created a new GPT disklabel (GUID: AF3C933D-3C72-4342-8CBA-057327B4FD1A).
Command (m for help): n
Partition number (1-128, default 1):
First sector (2048-1000215182, default 2048):
Last sector, +/-sectors or +/-size{K,M,G,T,P} (2048-1000215182, default 1000215182): +100MB
Created a new partition 1 of type 'Linux filesystem' and of size 95 MiB.
Command (m for help): t
Selected partition 1
Partition type or alias (type L to list all): 1
Changed type of partition 'Linux filesystem' to 'EFI System'.
Command (m for help): n
Partition number (2-128, default 2):
First sector (196608-1000215182, default 196608):
Last sector, +/-sectors or +/-size{K,M,G,T,P} (196608-1000215182, default 1000215182): +200MB
Created a new partition 2 of type 'Linux filesystem' and of size 191 MiB.
Command (m for help): t
Partition number (1,2, default 2):
Partition type or alias (type L to list all): 48
Changed type of partition 'Linux filesystem' to 'Linux extended boot'.
Command (m for help): n
Partition number (3-128, default 3):
First sector (587776-1000215182, default 587776):
Last sector, +/-sectors or +/-size{K,M,G,T,P} (587776-1000215182, default 1000215182):
Created a new partition 3 of type 'Linux filesystem' and of size 476.7 GiB.
Command (m for help): p
Disk /dev/nvme0n1: 476.94 GiB, 512110190592 bytes, 1000215216 sectors
Disk model: WDC PC SN720 SDAQNTW-512G-1001
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: gpt
Disk identifier: AF3C933D-3C72-4342-8CBA-057327B4FD1A
Device Start End Sectors Size Type
/dev/nvme0n1p1 2048 196607 194560 95M EFI System
/dev/nvme0n1p2 196608 587775 391168 191M Linux extended boot
/dev/nvme0n1p3 587776 1000215182 999627407 476.7G Linux filesystem
Command (m for help): w
The partition table has been altered.
Calling ioctl() to re-read partition table.
Syncing disks.Format EFI Partition:
mkfs.vfat -F32 /dev/nvme0n1p1Format BOOT Partition:
mkfs.vfat -F32 /dev/nvme0n1p2Create the LUKS encrypted container and open it:
cryptsetup --cipher aes-xts-plain64 --hash sha512 --use-random --verify-passphrase luksFormat /dev/nvme0n1p3
cryptsetup open /dev/nvme0n1p3 rootFormat LUKS container
mkfs.ext4 /dev/mapper/rootMount everything:
mount /dev/mapper/root /mnt
mkdir /mnt/{boot,efi}
mount /dev/nvme0n1p1 /mnt/efi
mount /dev/nvme0n1p2 /mnt/boot
mount -o rbind /dev /mnt/dev/
mount -o bind /sys /mnt/sys/
mount -t proc none /mnt/proc/Get the latest automatically-built daily archive of Exherbo from Stages and verify the consistence of the file:
cd /mnt
curl -O https://stages.exherbolinux.org/x86_64-pc-linux-gnu/exherbo-x86_64-pc-linux-gnu-gcc-current.tar.xz
curl -O https://stages.exherbolinux.org/x86_64-pc-linux-gnu/exherbo-x86_64-pc-linux-gnu-gcc-current.tar.xz.sha256sum
sha256sum -c exherbo-x86_64-pc-linux-gnu-current.tar.xz.sha256sumExtract the stage:
tar xJpf exherbo*xz
Make sure the network can resolve DNS:
cp /etc/resolv.conf /mnt/etc/resolv.confChroot:
chroot /mnt /bin/bash
export PS1="(chroot) $PS1"
Sync all the trees – now it is safe to sync
cave sync
cave resolve world -cx
Create fstab:
vim /etc/fstab
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/disk/by-uuid/6CFA-E9A0 /efi vfat defaults 0 2
/dev/disk/by-uuid/6D44-3BB9 /boot vfat defaults 0 2
/dev/disk/by-uuid/6c7f4030-9559-41a0-b6d5-86d8218c14ec / ext4 defaults 0 1Create crypttab:
blkid | grep nvme0n1p3
/dev/nvme0n1p3: UUID="5a1558cc-0d27-4795-a2bc-64ffdfc04f8b" TYPE="crypto_LUKS" PARTUUID="c6d92a71-284e-1d41-a5c0-748cf21e53b8"
vim /etc/crypttab
root UUID=5a1558cc-0d27-4795-a2bc-64ffdfc04f8b none luks,cipher=aes-xts-plain64,discardRebuild systemd with efi and cryptsetup flag:
echo "sys-apps/systemd cryptsetup efi" >> /etc/paludis/options.conf
cave resolve -x sys-apps/systemd Install dracut and cryptsetup:
echo "sys-apps/coreutils xattr" >> /etc/paludis/options.conf
cave resolve -x dracut Configure dracut:
echo "compress=\"xz\"" > /etc/dracut.conf.d/compress.conf
echo "force=\"yes\"" > /etc/dracut.conf.d/force.conf
echo "hostonly=\"yes\"" > /etc/dracut.conf.d/hostonly.conf
echo "hostonly_mode=\"strict\"" >> /etc/dracut.conf.d/hostonly.conf
echo "dracutmodules=\"base bash crypt dm dracut-systemd fs-lib i18n kernel-modules rootfs-block systemd systemd-initrd terminfo udev-rules usrmount\"" > /etc/dracut.conf.d/modules.confConfigure console keymap:
echo KEYMAP=fr > /etc/vconsole.confInstall systemd-boot:
mount -t efivarfs efivarfs /sys/firmware/efi/efivars
bootctl --make-machine-id-directory=yes --esp-path=/efi --boot-path=/boot installDownload and extract the latest stable kernel from The Linux Kernel Archives.
Go to the kernel folder:
mkdir /usr/src/kernel && cd $_
wget https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.4.tar.xz
tar -xf linux-5.10.4.tar.xz && cd linux-5.10.4Device drivers
Device Drivers --->
NVME Support --->
<*> NVM Express block device
[*] Multiple devices driver support (RAID and LVM) --->
<*> Crypt target support
Graphics support --->
Frame buffer Devices --->
<*> Support for frame buffer devices --->
[*] EFI-based Framebuffer Support Cryptographic API:
[*] Cryptographic API --->
Length-preserving ciphers and modes --->
<*> XTS (XOR Encrypt XOR with ciphertext stealing)
Compression --->
<*> LZ4
<*> LZ4HC
<*> Zstd
Userspace interface --->
<*> Hash algorithms
<*> Symmetric key cipher algorithms
Accelerated Cryptographic Algorithms for CPU (x86) --->
<*> Ciphers: Triple DES EDE with modes: ECB, CBCSecurity options:
Security Options --->
[*] Diffie-Hellman operations on retained keysBuild and install kernel/initramfs:
eclectic installkernel set -2
make -j$(nproc)
make modules_install
make install
Configure your hostname:
echo "laptop" > /etc/hostnameConfigure hosts:
echo "127.0.0.1 laptop.local laptop localhost" > /etc/hosts
echo "::1 laptop.local laptop localhost" >> /etc/hostsAdditional kernel support (e.g. for an Intel wireless card):
cave resolve repository/hardware -x
cave resolve -x linux-firmwareLocales / LANG / timezone:
localedef -i en_US -f ISO-8859-1 en_US
echo LANG="en_US.UTF-8" > /etc/env.d/99locale
ln -s /usr/share/zoneinfo/Europe/Paris /etc/localtimeInstall iwd:
cave resolve -x iwdEnable service:
systemctl enable getty@ iwd dhcpcdSet root password:
passwd
🔪 + 🐐 + 🙏
Kernel config
To access locally to the config on exherbo, you can set:
You will have access to your kernel setting in /proc/config.gz
I also activated:
Troubleshooting
Reconnect in CHROOT
To validate or debug your installation, you can reconnect in CHROOT by:
Then replayed all commands of the step 3
Unavailable cave package
Whenever you encounter the error "item/package unavailable" with cave. This can be resovled with:
Show package will print you a repository name where you can fin your package.
Add the repository with:
Cannot proceed without: being reconfigured
If you encoutered the error:
Cannot proceed without: being reconfiguredwhen building cave packages:It means that currently sqlite is disbled for
dev-lang/python:3.8, to activate simply edit/etc/paludis/options.confby adding at the end of the file:This will activate sqlite for
dev-lang/python:3.8.Missing package option:
If you encoutered an error like:
It means you need to set
PYTHON_ABIS=2.7as a package paludis option (more information: https://paludis.exherbo.org/configuration/use.html):echo "dev-python/setuptools:2.7 python_abis: 2.7" >> /etc/paludis/options.conf
Use kernel crypto for cryptsetup
When boot exherbo and trying to open the encrypted partition, a "crypt unknown target type" error occured.
To reslove it, edit
/etc/paludis/options.conf:And swith cryptsetup to kernel instead of openssl by adding:
Recompile cryptsetup:
Finally recompile your linux kernel to apply this change:
Activate wireless networking after reboot
First of all check that the service
iwdis working on systemd:On my side I needed to activate one more kernel flag:
CONFIG_CRYPTO_HMAC.Once iwd is up an running, check if you have at least one internet device configured:
If
device listisn't empty, you can directly follow iwd documentation to connect to a network.In case it's empty, it means your wireless card is not ready to use. First find which card it is:
It will render something like:
Use https://linux-hardware.org/?view=search to find your card XXXX corresponds to vendor ID, and YYYY corresponds to device ID.
On linux-hardware you will find the kernel flag you need to activate for your device. Follow stricly https://wiki.gentoo.org/wiki/Iwlwifi#Kernel to correclty configure the kernel for iwlwifi:
Then don't forget to build the linux-firmware package:
Run kernel
make installat the end to update the boot:You can now reboot and follow iwd documentation to connect to a network!
Once this is done, if you have trouble to resolve, ensure the network can resolve DNS:
Install a GUI
To set up a GUI as KDE you can follow https://exherbo.org/docs/kde.html documentation:
If you encounters errors as:
You may miss the
kderepositoryRetry plasma:
Fix the errors, if you get:
This means you need to activate the wayland flag for the x11-dri/mesa lib:
If you get a second error message you need to be add the wayland flag to a second library: