Arch Install

tl;dr

Included in install:

Gnome Shell
Luks disk encryption w/ logical volumes
Systemd or Grub boot for EFI

Prepare / Boot

In live usb

Optionally increase terminal font

# sync package database
pacman -Syy
# install a font (terminus in this case)
pacman -S terminus-font
# enable
setfont ter-v32n
# or
setfont sun12x22

Sync the clock

timedatectl set-ntp true

Install

Network

Wifi

Use: iwctl

device list #to check the device name
station <device-name> scan #to scan the wifi
station <device-name> get-networks #to check the available networks
station <device-name> connect <wifi-name> #and then enter the password if there's any
exit #exit iwctl

ping archlinux.org

Optionally enable ssh & connect from remote machine

# set root password
passwd
# enable sshd
systemctl enable --now sshd

Update the System Clock

timedatectcl set-ntp true

Disk

Partition disk

EFI

# Size: 100M, Hex Code: ef00, Name: ESP
mkfs.vfat -F32 /dev/sda1

Linux

# Size: default (remaining space), Hex Code: default (8300), Name: Storage
# no need need to format

Encryption

Enable: modprobe dm-crypt
Replace /dev/sda2 with the appropriate partition

cryptsetup --cipher aes-xts-plain64 --key-size 512 --hash sha512 luksFormat /dev/sda2

Open it

cryptsetup luksOpen /dev/sda2 arch

Volumes and Mounts

Set up the root volume & swap

# Create volumes
pvcreate /dev/mapper/arch
vgcreate vol /dev/mapper/arch
lvcreate --size 16G vol --name swap
lvcreate -l +100%FREE vol --name root
# Format volumes
mkfs.ext4 /dev/mapper/vol-root
mkswap /dev/mapper/vol-swap
# mount it
mount /dev/mapper/vol-root /mnt
# boot
mkdir /mnt/boot
mount /dev/sda1 /mnt/boot
swapon /dev/mapper/vol-swap

Install the System

Retrieve the Latest Mirror List

cp /etc/pacman.d/mirrorlist /etc/pacman.d/mirrorlist.orig

reflector --latest 20 --protocol https --sort rate --save /etc/pacman.d/mirrorlist

Install

# Pacstrap system
pacstrap -i /mnt \
            base \
            base-devel \
            dialog \
            dhcpcd \
            efibootmgr
            git \
            gnome \
            intel-ucode \
            linux \
            linux-firmware \
            lvm2 \
            mkinitcpio \
            networkmanager \
            nm-connection-editor \
            network-manager-applet \
            vim \
            wpa_supplicant \
            zsh

# Generate fstab
genfstab -U /mnt >> /mnt/etc/fstab
# Confirm & make any changes
vim /mnt/etc/fstab

chroot into new system

# chroot into system
arch-chroot /mnt /bin/bash

In chroot

Clock

# Set timezone
ln  -sf /usr/share/zoneinfo/America/Los_Angeles /etc/localtime
timedatectl set-timezone America/Los_Angeles
# Sync clock
hwclock --systohc --utc

Hostname

# Set hostname
echo myhostname > /etc/hostname
hostnamectl set-hostname myhostname
echo "127.0.0.1 localhost" >> /etc/hosts
echo "::1       localhost" >> /etc/hosts
echo "127.0.1.1 myhostname" >> /etc/hosts

User

# Create a user
useradd -m -g users -G wheel -s /bin/zsh <USER>
passwd myuser

# Add user to sudoers (via wheel or whatever desired mechanism, recommended: `%wheel ALL=(ALL) ALL`)
# visudo
perl -i -pe 's/# (%wheel ALL=\(ALL\) ALL)/$1/' /etc/sudoers
# Set a rediculous password for root
passwd -l root

Locale

printf "LANG=en_US.UTF-8\nLANGUAGE=en_US" | tee /etc/locale.conf
sed -i '/\#en_US.UTF-8 UTF-8/{s/#//g;s/@/-at-/g;}' /etc/locale.gen
locale-gen

# Make appropriate changes to mkinitcpio
vim /etc/mkinitcpio.conf
## edit HOOKS
### e.g. `HOOKS=(base udev autodetect modconf block keymap keyboard encrypt lvm2 resume filesystems fsck)`
# save changes & run
mkinitcpio -p linux

# Install a couple patches (Not applicable for all razer systems)
cd /tmp/
chown -R myuser tmp/
su <USER> -
git clone https://aur.archlinux.org/aic94xx-firmware.git
git clone https://aur.archlinux.org/wd719x-firmware.git
cd aic94xx-firmware/
makepkg -sri
cd ../wd719x-firmware
makepkg -sri
# Install bootctl
mkinitcpio -p linux
# Enable dhcp + gdm
systemctl enable dhcpcd
systemctl enable NetworkManager
systemctl enable gdm

Configure Boot

Systemd

bootctl --path=/boot/ install
# Confirm & make any necessary changes to boot loader (use disk UUID)
blkid /dev/sda2
vim /boot/loader/loader.conf

Create arch entry

vim /boot/loader/entries/arch.conf

Add the following:

title   Arch Linux
linux   /vmlinuz-linux
initrd  /intel-ucode.img
initrd  /initramfs-linux.img
options cryptdevice=UUID=[uuid_of_root_partition]:vol resume=/dev/mapper/vol-swap root=/dev/mapper/vol-root quiet rw

Optionally, create a Windows entry:

vim /boot/loader/entries/windows.conf

title Windows
efi /EFI/Microsoft/Boot/bootmgfw.efi

bootctl --path=/boot install && \
bootctl --path=/boot update && \
bootctl list && \
bootctl

Grub

pacman -S grub
grub-install --target=x86_64-efi --efi-directory=/boot --recheck

Edit /etc/default/grub and set the line:

GRUB_CMDLINE_LINUX="cryptdevice=/dev/nvme0n1p3:vol:allow-discards"

Generate the Grub config

grub-mkconfig -o /boot/grub/grub.cfg

Cleanup & Reboot

# exit chroot
exit
# unmount stuffz
umount /mnt/boot
umount /mnt
swapoff -a

Cross your fingers...

reboot

Resources

Packages

Update database cache

pacman -Syy

Install paru

sudo pacman -S --needed base-devel
git clone https://aur.archlinux.org/paru.git
cd paru
makepkg -si

Install lots o stuff :D

paru -S --needed alsa-firmware \
        alsa-utils \
        android-tools \
        ansible \
        asciidoc \
        atom \
        awesome-terminal-fonts \
        aws-cli \
        aws-session-manager-plugin \
        bash-completion \
        bc \
        bind-tools \
        bitwarden-bin \
        boostnote-bin \
        brave-bin \
        brother-mfc-j870dw \
        capitaine-cursors \
        chrome-gnome-shell \
        circleci-cli-bin \
        code \
        cups \
        cups-filters \
        dbeaver \
        debtap \
        deluge \
        dep \
        docker \
        docker-compose \
        firefox \
        flameshot \
        flat-remix-git \
        flatpak \
        fzf \
        gimp \
        gitkraken \
        gnome-common \
        gnome-extra \
        gnome-notes \
        gnome-shell-extension-dash-to-dock \
        gnome-shell-extension-emoji-selector-git \
        gnome-shell-extension-radio-git \
        gnome-shell-extension-topicons-plus \
        gnome-shell-extension-window-corner-preview-git \
        gnome-subtitles \
        gnome-system-log \
        gnome-tweaks \
        gnu-netcat \
        go \
        gobject-introspection \
        godep \
        goland \
        goland-jre \
        google-chrome \
        gparted \
        gpg-crypter \
        graphicsmagick \
        graphviz \
        gufw \
        hidapi \
        htop \
        http-parser \
        hub \
        insync \
        iotop \
        itstool \
        jetbrains-toolbox \
        jq \
        keybase \
        keybase-gui \
        kubectl-bin \
        libreoffice-fresh \
        lshw \
        lsof \
        mackup \
        neofetch \
        nerd-fonts-complete \
        networkmanager-openvpn \
        nmap \
        nodejs \
        notify-send.sh \
        noto-fonts \
        noto-fonts \
        noto-fonts-emoji \
        noto-fonts-extra \
        npm \
        openvpn \
        p7zip \
        packer \
        pinta \
        postman-bin \
        powerline-common \
        powerline-fonts \
        psensor \
        python-aws-mfa \
        python-pip \
        redshift \
        remake \
        rsync \
        ruby \
        rubygems \
        saw \
        screenfetch \
        shellcheck \
        spaceship-prompt-git \
        speedtest-cli \
        spotify \
        sublime-text-dev \
        tflint-bin \
        tilix \
        tmate \
        tmux \
        ttf-caladea \
        ttf-carlito \
        ttf-croscore \
        ttf-crosextra \
        ttf-dejavu \
        ttf-fira-mono \
        ttf-fira-sans \
        ttf-font-logos \
        ttf-google-fonts-git \
        ttf-inconsolata \
        ttf-input \
        ttf-liberation \
        ttf-merriweather \
        ttf-merriweather-sans \
        ttf-ms-fonts \
        ttf-openlogos-archupdate \
        ttf-opensans \
        ttf-oswald \
        ttf-quintessential \
        ttf-roboto \
        ttf-signika \
        ttf-ubuntu-font-family \
        ufw \
        ufw-extras \
        gufw \
        ufw-icon-bar \
        unrar \
        usbguard \
        wavebox-bin \
        wget \
        xclip \
        yamllint \
        yq \
        yubico-c \
        yubico-c-client \
        yubikey-manager \
        yubikey-personalization \
        zoom \
        zsh-pure-prompt

If grub is installed

paru -S grub-hook

Optional

Razer utils & drivers

paru -S openrazer \
    openrazer-meta \
    polychromatic \
    razergenie \
    chroma-feedback \
    razercommander

Terraform

git clone https://github.com/tfutils/tfenv.git ~/.tfenv
tfenv install latest

Battery

paru -S tlp

Dotfiles

Clone
Symlink to ~/.dotfiles
ln -s ~/.dotfiles/.mackup.cfg ~/.mackup.cfg
mackup restore

Security

See: Security - ArchWiki

Disable user from being listed at login

sudo vim /var/lib/accountsservice/users/<user>

Edit

SystemAccount=true

Firewall

Enable ufw

sudo systemctl enable --now ufw
sudo ufw enable

Enable PCSD for Yubikey

sudo systemctl enable pcscd.socket --now

Tweaks

Enable “Infinality mode” in plain vanilla freetype2

echo 'export FREETYPE_PROPERTIES="truetype:interpreter-version=38"' | sudo tee -a /etc/profile.d/freetype2.sh
cd /etc/fonts/conf.d
sudo ln -s ../conf.avail/10-hinting-slight.conf
sudo ln -s ../conf.avail/10-sub-pixel-rgb.conf
sudo ln -s ../conf.avail/11-lcdfilter-default.conf
cd ~

Tweaks

Keyboard shortcut for screen rotation

Sets ctrl + f8 to rotate the screen counter-clockwise

gsettings set org.gnome.mutter.keybindings rotate-monitor "['XF86RotateWindows', '<Control>F8']"

scottames/arch-install.md

Arch Install

tl;dr

Prepare / Boot

In live usb

Install

Network

Wifi

Update the System Clock

Disk

Encryption

Volumes and Mounts

Install the System

Retrieve the Latest Mirror List

Install

In chroot

Clock

Hostname

User

Locale

Configure Boot

Systemd

Grub

Cleanup & Reboot

Resources

Packages

Optional

Razer utils & drivers

Terraform

Battery

Dotfiles

Security

Disable user from being listed at login

Firewall

Tweaks

Tweaks