From b6f024f50fc0b5708bcea0bd26f1bc5cee3e78fc Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Wed, 5 Jun 2019 14:32:37 +0000 Subject: initial system install on encrypted disk --- core/install.html | 101 +++++++++++++++++++++++++++++++++++------------------- 1 file changed, 65 insertions(+), 36 deletions(-) diff --git a/core/install.html b/core/install.html index dfe218a..65b9148 100644 --- a/core/install.html +++ b/core/install.html @@ -43,13 +43,14 @@

1.1.2. Prepare target

Prepare disk or target location where new system will - be installed. Follow steps describe how to create efi and - separate partitions such as; - bios grub, EFI, boot, root, var, usr, swap and home. + be installed. Follow steps describe how to create efi system, + for bios_boot systems is only needed the boot partition in + the beginning of the disk and can use ext4 file system for example. For more information about gpt partitions table read - devil-detail grub2 on gpt. - Script setup-target.sh - creates follow partitions;

+ devil-detail grub2 on gpt. Script setup-target.sh help to create partitions + scripts.

+ +

Create gpt label and set unit size to use;

@@ -93,14 +94,40 @@

/

+

There are different ways to achieve disk encryption, + the method described uses cryptosetup to create cryptodevice + with lvm inside containing + root and other partitions such as; + var, usr, swap and home. + + 

+        (parted) mkpart primary 1132 100%
+        (parted) set 4 lvm on
+
+ +

Create encrypted block for lvm;

+ + 
+        # modprobe dm-crypt
+        # cryptsetup luksFormat /dev/sda4
+        # cryptsetup luksOpen /dev/sda4 cryptlvm
+
+ +

Create physical group and volume group;

+ + 
+        # pvcreate /dev/mapper/cryptlvm
+        vgcreate vg_system /dev/mapper/cryptlvm
+
+

Core collection installation on root partition uses approximately 2G. Partition with 8G-20G is recommended for a server or desktop with dedicated ports partition or using only compiled packages. Partition size 20G;

+ 
-        (parted) mkpart primary ext4 1132 21132
-        (parted) name 4 root
+        # lvcreate -L 20G -n lv_root vg_system

/var

@@ -109,8 +136,7 @@ system is configured. Partition size 2G;

-        (parted) mkpart primary ext4 21132 23132
-        (parted) name 5 var
+        # lvcreate -L 2G -n lv_var vg_system

Swap (ram)

@@ -119,27 +145,19 @@ memory ram, ports system will be configured to build on ram. To build firefox is necessary at least 34G. Partition size 4G;

-

Is better to create swap partition later using - lvm.

- 
-        (parted) mkpart primary linux-swap 23132 27132
-        (parted) name 6 swap
+        # lvcreate -L 4G -n lv_swap vg_system

/home

-

Home partition on desktop fill the rest of disk - space while on server this partition can be unnecessary. +

On desktop fill the rest of disk space while on server + this partition can be replaced with /srv. Fill the rest of disk space;

-

Is better to create home partition later using - lvm.

- 
-        (parted) mkpart primary ext4 27132 100%
-        (parted) name 7 home
+        # lvcreate -L 120G -n lv_home vg_system

Create filesystems

@@ -147,10 +165,10 @@ 
         $ sudo mkfs.fat -F 32 /dev/sda2
         $ sudo mkfs.ext4      /dev/sda3
-        $ sudo mkfs.ext4      /dev/sda4
-        $ sudo mkfs.ext4      /dev/sda5
-        $ sudo mkswap	      /dev/sda6
-        $ sudo mkfs.ext4      /dev/sda7
+        $ sudo mkfs.ext4      /dev/vg_system/lv_root
+        $ sudo mkfs.ext4      /dev/vg_system/lv_var
+        $ sudo mkswap	      /dev/vg_system/lv_swap
+        $ sudo mkfs.ext4      /dev/vg_system/lv_home

1.1.3. Prepare Install

@@ -161,19 +179,19 @@ setup-core.sh configure host metadata and setup ports;

-

Export target root partition;

+

Export target root partition;

- 
-	$ export BLK_ROOT=/dev/sda
-
+ 
+        $ export BLK_ROOT=/dev/vg_system/lv_root
+
-

Export target root directory you want to install;

+

Export target root directory you want to install;

         $ export CHROOT=/mnt
-

If you are installing to a directory and not partitions you don't need to mount;

+

If you are installing to a directory and not partitions you don't need to mount;

         $ sudo mount $BLK_ROOT $CHROOT
@@ -192,11 +210,11 @@
         $ sudo mkdir -p $CHROOT/tmp
         $ sudo mkdir -p $CHROOT/proc
         $ sudo mkdir -p $CHROOT/sys
-
+ -

If partition layout is different or target is a directory is not necessary to mount, create only the directories;

+

If partition layout is different or target is a directory is not necessary to mount, create only the directories;

- 
+        
         $ sudo mount $BLK_BOOT $CHROOT/boot
         $ sudo mkdir -p $CHROOT/boot/efi
         $ sudo mount $BLK_EFI $CHROOT/boot/efi
@@ -297,6 +315,17 @@
         pkgadd /usr/ports/packages/efivar#*
         pkgadd /usr/ports/packages/efibootmgr#*
         pkgadd /usr/ports/packages/dosfstools#*
+        pkgadd /usr/ports/packages/ported#*
+        pkgadd /usr/ports/packages/libgcrypt#*
+        pkgadd /usr/ports/packages/cryptsetup#*
+        pkgadd /usr/ports/packages/popt#*
+        pkgadd /usr/ports/packages/libgpg-error#*
+        pkgadd /usr/ports/packages/libevent#*
+        pkgadd /usr/ports/packages/libtirpc#*
+        pkgadd /usr/ports/packages/git#*
+        pkgadd /usr/ports/packages/tmux#*
+        pkgadd /usr/ports/packages/prt-utils#*
+        pkgadd /usr/ports/packages/elfutils#*
         

 
         
@@ -344,7 +373,7 @@
 
         Core OS Index
         
This is part of the Hive System Documentation.
-        Copyright (C) 2018
+        Copyright (C) 2019
         Hive Team.
         See the file Gnu Free Documentation License
         for copying conditions.

-- 
cgit 1.4.1-2-gfad0