tehabstract

Arch Linux Full-Disk Encryption Installation Guide

This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.

Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.

Preface

You will find most of this information pulled from the Arch Wiki and other resources linked thereof.

Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.

Installing Arch Linux with Full Disk Encryption

If you're aiming for a seamless Arch Linux installation in UEFI mode, follow along as this guide will walk you through the process step by step. We'll be using LUKS (Linux Unified Key Setup) and LVM (Logical Volume Manager) partitions on LUKS to achieve full disk encryption.

Note: I have updated this doc for UEFI mode. For those with BIOS/MBR systems, you can refer to the previous version, but keep in mind that it might be outdated and no longer accurate.

If you're only interested in installing Linux and not setting up dual boot with Windows, feel free to skip the Windows-related sections.

This is a comparison of the different formatting styles including with clang-format.

Generated via:

styles=( LLVM Google Chromium Mozilla WebKit )
for style in $styles
do
  clang-format -style=$style ChLcpIterativeAPGD.h > ChLcpIterativeAPGD.$style.h

done

	#include <stdio.h>

	#define STR2(x) #x
	#define STR(x) STR2(x)

	#ifdef _WIN32
	#define INCBIN_SECTION ".rdata, \"dr\""
	#else
	#define INCBIN_SECTION ".rodata"
	#endif

	namespace MyApp\ApiBundle\Serializer;

	use JMS\Serializer\Context;
	use JMS\Serializer\GraphNavigator;
	use JMS\Serializer\Handler\SubscribingHandlerInterface;
	use JMS\Serializer\VisitorInterface;
	use JMS\Serializer\XmlSerializationVisitor;

	class DoctrineProxyHandler implements SubscribingHandlerInterface
	{