How to install arch with FDE
#1
Hello, is there a way to install arch with FDE?
  Reply
#2
Full Disk Encryption?
  Reply
#3
(01-11-2024, 06:05 AM)SchizoPinePhone225 Wrote: Full Disk Encryption?

Yes, do you know how?
  Reply
#4
I believe it is is not officially supported. What is sure is that simply dd'ing the image onto microSD or eMMC storage (which is the recommended installation method) will not encrypt anything.

What should probably work is:
1. Install (dd) the image to a microSD card.
2. Copy a second copy of the image into the file system on the microSD card (an image inside the image, think Russian matryoshka dolls or Chinese boxes). The reason you want a second copy of the image is because it is a bad idea to copy a running system.
3. Boot the microSD card (i.e., the outer image) and use that to partition the eMMC with encrypted partitions. I guess you probably need an unencrypted /boot (because I do not think U-Boot can boot from LUKS partitions), but everything else can (or at least ought to be able to) be encrypted.
4. Mount the inner image on the microSD card:
Code:
sudo -i
xz -d -k $IMG.img.xz
mkdir -p /mnt/image
mount -o loop,offset=512000512 $IMG.img /mnt/image
mount -o loop,offset=32000000 $IMG.img /mnt/image/boot
5. Mount the encrypted (and unencrypted) partitions on the eMMC.
6. rsync the microSD contents to the eMMC. (The exact rsync command depends on how exactly it is partitioned, but you probably want at least the flags -aHAXr.)
7. Edit the system configuration on the eMMC (fstab, crypttab, etc.) to match how you partitioned it.
8. Remove the microSD, reboot, and hope that it works.

Someone somewhere might have script(s) to help you with that very manual procedure.
  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Updating Arch Linux _radv_ 8 249 02-20-2024, 09:35 AM
Last Post: _radv_
  PinePhone AND/OR PinePhone Pro Arch Complete Install and Setup mikehenson 2 1,831 01-14-2024, 08:43 AM
Last Post: shifras
  How to find software app, on Arch Phosh? general_lee 5 1,653 10-15-2023, 10:12 PM
Last Post: Kevin Kofler
  Arch auto mount usb example Lazy_one 2 2,697 10-06-2023, 09:36 AM
Last Post: luppivega
  Arch with FDE user641 1 774 07-29-2023, 08:27 AM
Last Post: alpineduck
  unable to install applications dln949 5 1,281 06-08-2023, 08:38 PM
Last Post: Conjada
  Latest update broke my install user641 8 3,330 02-22-2023, 05:54 AM
Last Post: gregb49
  new to pacman. Trying to install VIM, getting a 404 when it tries to download. willyray 1 1,030 12-24-2022, 11:00 PM
Last Post: shulamy
  No keyboard on Arch Plasma when entering password on document Chief 0 774 12-03-2022, 08:35 PM
Last Post: Chief
  Curious About Arch Ferriah 2 1,994 11-07-2022, 04:38 PM
Last Post: Ferriah

Forum Jump:


Users browsing this thread: 1 Guest(s)