[arch-general] creating an archlinux usb key with persistence

[Mark Lee]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/13/2014 01:20 PM, Temlin Olivér wrote:
>>> My setup right now is this:
>>>
>>> 32GB usb3 drive
>>> |-sda1 (4G) - fat32
>>> |-sda1 (256M) - ext4 /boot
>>> |-sda2 (rest of drive) - luks - btrfs - subvolumes for root and home
> 
>> Sounds likea good setup.
>>
>> What tool are you using for partitioning? I don't remember luks/btrfs as
> an option in fdisk, admittedly I am coming from a debian perspective just
> switching to arch to try it out.
>> Sounds likea good setup.
> 
> Just make it whatever you want, it doesn't really matter in linux, where
> identification goes by magic numbers, not such things as this and
> extensions.
> You can easily follow the wiki with setting up dm-crypt/LUKS and btrfs
> subvolumes.
> Also, please append mesaages to the bottom, as to keep messages in a
> chronological order.
> 
> --Oliver Temlin
> 

Salutations,

I personally used gptfdisk, but gparted also does it. When it comes to
to creating a dm-crypt/LUKS partition, one needs to generate an
unformatted partition first and then encrypt it with dm-crypt and create
the file system in /dev/mapper/ (see
<https://wiki.archlinux.org/index.php/Dm-crypt/Drive_Preparation>).

Some quick and dirty commands;

# partition=</dev/sd* id of partition>; ## set the partition to format
# cryptname=<chosen name of luks container>;  ## set the name of the
decrypted container
# cryptsetup -t luksFormat $partition;  ## create luks/dm-crypt container
# cryptsetup open $partition $cryptname;  ## open the luks/dm-crypt
container
# mkfs.btrfs /dev/mapper/$cryptname;  ## format container with btrfs
# mount -o defaults,compress=lzo /dev/mapper/$cryptname <mount point>;
## mount container with compression

Regards,
Mark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlMiNb8ACgkQZ/Z80n6+J/ZwQgD/TV2GtbeJHVBtqVnYeIM2vjfR
MwsPXi3N2smxAVBloPMA/0OOgdw5QLg5bJdaf+5hvoz+LTESv3xcpGDzjvbCM+sc
=ghMp
-----END PGP SIGNATURE-----