• Arch Linux Installation

• https://www.archlinux.org/download

• https://wiki.archlinux.org/index.php/Installation_guide

• Repeat -b for every entry that appears with -v

efibootmgr -v

efibootmgr -b 0000 -B

efibootmgr -b 0001 -B

efibootmgr -O

• See hdparm Secure Erase for thorough erase
• Change /dev/sda to match environment
• Run the dd command for a few seconds or so just to wipe out any surviving disk/partition information at the beginning of the drive

lsblk

sgdisk --zap-all '/dev/sda'

dd if='/dev/zero' of='/dev/sda'

reboot

ping 'archlinux.org'

• iw dev is used to find the wireless interface name
• If single wireless interface exists, no need to specify it

iw dev

wifi-menu -o 'wlp3s0'

• Allows installation over SSH
• ifconfig shows the IP address
• Connect with the username root

ip addr

passwd

systemctl start 'sshd'

timedatectl set-ntp 'true'

• See Partitioning

• Uncomment the commented Server URLs

wget 'https://www.archlinux.org/mirrorlist/?country=US&protocol=https&ip_version=4' -O '/etc/pacman.d/mirrorlist'

nano '/etc/pacman.d/mirrorlist'

• Useful for copy/paste over SSH

wget 'https://www.archlinux.org/mirrorlist/?country=US&protocol=https&ip_version=4' -O '/tmp/mirrorlist' && sed -i 's/#Server/Server/g' '/tmp/mirrorlist' && mv '/tmp/mirrorlist' '/etc/pacman.d/mirrorlist'

pacstrap -i '/mnt' 'base' 'base-devel'

genfstab -L '/mnt' >> '/mnt/etc/fstab'

arch-chroot '/mnt'

ln -s '/usr/share/zoneinfo/America/New_York' '/etc/localtime'

hwclock --systohc --utc

• Uncomment en_US.UTF-8 UTF-8 in locale.gen

nano '/etc/locale.gen'

echo LANG='en_US.UTF-8' > '/etc/locale.conf'

• Useful for copy/paste over SSH
• This can be used instead of the two commands above

sed -i 's/#en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/g' '/etc/locale.gen' && echo LANG='en_US.UTF-8' > '/etc/locale.conf'

locale-gen

• Change x to desired hostname

echo 'x' > '/etc/hostname'

• Uncomment Color and TotalDownload
• Uncomment [multilib] and its following Include line on 64-bit installs if multilib is desired
• Add ILoveCandy under Misc options

nano '/etc/pacman.conf'

pacman -Syyuu

pacman -S 'networkmanager'

systemctl enable 'NetworkManager'

• If root partition is F2FS, this is mandatory

pacman -S 'f2fs-tools'

• This is needed for both the service and client

pacman -S 'openssh'

pacman -S 'intel-ucode'

passwd

• Change espionage724 to desired username

useradd -m -G 'wheel' -s '/bin/bash' 'espionage724'

passwd 'espionage724'

chfn 'espionage724'

pacman -S 'openssh'

nano '/etc/ssh/sshd_config'

PermitRootLogin no

systemctl enable 'sshd.socket'

• Uncomment %wheel ALL=(ALL) ALL

EDITOR='nano' visudo

%wheel ALL=(ALL) ALL

nano '/etc/sudoers.d/nano'

Defaults editor = /usr/bin/nano

• Useful for copy/paste over SSH

echo 'Defaults editor = /usr/bin/nano' > '/etc/sudoers.d/nano'

nano '/etc/nanorc'

set nowrap

• Useful for copy/paste over SSH

sed -i 's/# set nowrap/set nowrap/g' '/etc/nanorc'

• Modules line is needed only if root partition is F2FS
• Add lvm2 between block and filesystems hooks if using LVM
• Add encrypt between block and filesystems hooks, but before lvm2 for encrypted root partition
• Add COMPRESSION=cat to disable image compression

nano '/etc/mkinitcpio.conf'

MODULES="f2fs crc32 libcrc32c crc32c_generic crc32c-intel crc32-pclmul"

HOOKS="base udev autodetect modconf block encrypt lvm2 filesystems keyboard fsck"

COMPRESSION=cat

mkinitcpio -P

• For GPT/EFI set-ups

bootctl install

• Add cryptdevice=/dev/sda2:lvm to options if encrypted
• Change root= to /dev/mapper/arch-root if using LVM
• Remove initrd /intel-ucode.img if not using an Intel processor

nano '/boot/loader/entries/linux-kernel.conf'

title Arch Linux (linux-kernel)
linux /vmlinuz-linux
initrd /initramfs-linux.img
initrd /intel-ucode.img
options root=/dev/sda2 rw quiet

nano '/boot/loader/loader.conf'

timeout 2
default linux-kernel
editor 0

• For MBR/Legacy set-ups

pacman -S 'grub'

grub-install --target='i386-pc' '/dev/sda'

nano '/etc/default/grub'

GRUB_TIMEOUT 2

grub-mkconfig -o '/boot/grub/grub.cfg'

sync

exit

umount -R '/mnt'

poweroff

• Arch Linux (Plasma)

grep 'MHz' '/proc/cpuinfo'

watch -n 0.1 grep \'cpu MHz\' '/proc/cpuinfo'

df -hT

lsblk

hdparm -I '/dev/sda' | grep 'not'

hdparm --user-master u --security-set-pass 'x' '/dev/sda'

hdparm --user-master u --security-erase 'x' '/dev/sda'