arch_install_addendum.md

Extra packages:

dkms bc linux-headers lvm2 efibootmgr

Create encrypted partitions:

# cryptsetup luksFormat /dev/nvme0n1p3
# cryptsetup open /dev/nvme0n1p3 cryptlvm

pvcreate /dev/mapper/cryptlvm
vgcreate vg0 /dev/mapper/cryptlvm

lvcreate -L 8G -n swap vg0
lvcreate -l 100%FREE -n root vg0

mkswap /dev/mapper/vg0-swap
mkfs.btrfs /dev/mapper/vg0-root

GRUB configuration extra:

cryptdevice=UUID=<partition-uuid>:cryptlvm root=/dev/mapper/vg0-root

mkinitcpio extra:

HOOKS=(base udev autodetect microcode modconf kms keyboard block encrypt lvm2 filesystems fsck)

# mkinitcpio -P

Setup rtw8821ce wlan driver

$ git clone https://aur.archlinux.org/rtl8821ce-dkms-git
$ makepkg
$ sudo pacman -U <package>
$ sudo echo "blacklist rtw88_8821ce" >> /etc/modprobe.d/blacklist.conf

Setup dnscrypt

# pacman -Sy dnscrypt-proxy
# systemctl enable dnscrypt-proxy
# systemctl start dnscrypt-proxy
# echo > /etc/resolve.conf <<EOF
nameserver ::1
nameserver 127.0.0.1
options edns0
EOF
# chattr +i /etc/resolve.conf