Manuelle Installation
~$ sudo fdisk /dev/sda
> g
> n
> (enter)
> (enter)
> +128M
> t
> 1
> n
> (enter)
> (enter)
> -8G
> n
> (enter)
> (enter)
> (enter)
> w
~$ sudo mkfs.vfat -F 32 -n SYSTEM /dev/sda1
~$ sudo mkfs.btrfs -L ROOT /dev/sda2
~$ sudo mkswap -L SWAP /dev/sda3
~$ sudo mount /dev/sda2 /mnt
~$ sudo btrfs subvolume create /mnt/debian
~$ sudo btrfs subvolume create /mnt/home
~$ sudo btrfs subvolume create /mnt/srv
~$ sudo umount /mnt
~$ sudo mount /dev/sda2 /mnt -o subvol=debian
~$ sudo debootstrap --variant=minbase trixie /mnt
~$ sudo mount --rbind /proc /mnt/proc
~$ sudo mount --rbind /sys /mnt/sys
~$ sudo mount --rbind /dev /mnt/dev
~$ sudo chroot /mnt
~# apt-get update
~# apt-get install nano vim linux-image-amd64 init net-tools isc-dhcp-client btrfs-progs grub-efi
~# nano /etc/fstab
LABEL=ROOT / btrfs rw,subvol=debian,auto 0 0
LABEL=ROOT /home btrfs rw,subvol=home,auto 0 0
LABEL=ROOT /srv btrfs rw,subvol=srv,auto 0 0
LABEL=ROOT /mnt/fsroot btrfs rw,auto 0 0
LABEL=SYSTEM /boot/efi vfat ro,auto 0 0
LABEL=SWAP swap swap auto 0 0
~# mkdir /mnt/fsroot /boot/efi
~# mount -a
~# mount -o remount,rw /boot/efi
~# grub-install
~# mount -o remount,ro /boot/efi
~# update-initramfs -u
~# update-grub
~# passwd
>
>
~# exit
Mit Full-Disk-Encryption
mkfs.btrfsnicht direkt aufsda2ausführen~# cryptsetup luksFormat --pbkdf pbkdf2 /dev/sda2~# cryptsetup luksOpen /dev/sda2 crypdisk~# mkfs.btrfs /dev/mapper/crypdisk- → btrfs einrichten wie bisher
In der
chroot-Umgebung- Pakete
cryptsetupundcryptsetup-initramfs /etc/default/grubGRUB_ENABLE_CRYPTODISK="y"
/etc/crypttabcrypdisk /dev/sdXX none luks,initramfs
- →
grub-installundupdate-initramfs -uwie bisher
- Pakete
Encrypted Home
~# apt-get install encfs libpam_encfs- →
/etc/pam.d/common-authwird automatsch eingerichtet - →
/etc/security/pam_encfs.confwird automatisch eingerichtet /etc/fuse.confuser_allow_other
- →
Encrypted Homes einmalig aufsetzen
~# mkdir /home/.enc~# mkdir -m 700 /home/.enc/USER~# chown USER:USER /home/.enc/USER- → als USER einloggen
~$ encfs /home/.enc/USER /home/USER- → Einrichtungsdialog