{"id":20992633,"url":"https://github.com/githubuseraccountamazing/artix-runit-hardened-kernel-encrypted-partitions","last_synced_at":"2026-05-18T03:04:10.744Z","repository":{"id":154563647,"uuid":"526457380","full_name":"GithubUserAccountAmazing/Artix-Runit-Hardened-Kernel-Encrypted-Partitions","owner":"GithubUserAccountAmazing","description":"My hand-written steps for setting up a very special Artix Linux","archived":false,"fork":false,"pushed_at":"2022-08-19T05:22:11.000Z","size":9,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-20T08:32:08.010Z","etag":null,"topics":["arch","artix","cryptsetup","cryptsetup-luks","linux"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GithubUserAccountAmazing.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-08-19T04:03:25.000Z","updated_at":"2022-08-19T05:12:51.000Z","dependencies_parsed_at":"2023-07-08T10:45:08.937Z","dependency_job_id":null,"html_url":"https://github.com/GithubUserAccountAmazing/Artix-Runit-Hardened-Kernel-Encrypted-Partitions","commit_stats":null,"previous_names":["githubuseraccountamazing/artix-runit-hardened-kernel-encrypted-partitions"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GithubUserAccountAmazing%2FArtix-Runit-Hardened-Kernel-Encrypted-Partitions","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GithubUserAccountAmazing%2FArtix-Runit-Hardened-Kernel-Encrypted-Partitions/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GithubUserAccountAmazing%2FArtix-Runit-Hardened-Kernel-Encrypted-Partitions/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GithubUserAccountAmazing%2FArtix-Runit-Hardened-Kernel-Encrypted-Partitions/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GithubUserAccountAmazing","download_url":"https://codeload.github.com/GithubUserAccountAmazing/Artix-Runit-Hardened-Kernel-Encrypted-Partitions/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243403899,"owners_count":20285467,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["arch","artix","cryptsetup","cryptsetup-luks","linux"],"created_at":"2024-11-19T07:11:48.498Z","updated_at":"2025-10-03T22:03:53.320Z","avatar_url":"https://github.com/GithubUserAccountAmazing.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"These are my (literal) hand-written steps for installing Artix linux. \u003cbr\u003e\nSome steps may be outdated or I may have mistakingly transcribed the step wrong.\n\u003cbr\u003e\n\nA few things to keep in mind before copy pasting everything here\n\u003cbr\u003e\n\n- This was written around the time artools-chroot became artix-chroot so it is a few years old.\u003cbr\u003e(logical volume parts are a slightly newer addition)\n- These steps assume you have already installed 'artix-base-runit-xxxxxx.iso' from https://artixlinux.org/download.php and have flashed the image to a usb and you are now at the process of installing artix onto a hard drive.\n- These steps also make some assumptions about your linux knowledge and doesn't hold your hand. If you don't know what a command does please consider looking it up :)\n- These steps were not made with the intention of sharing them online so it may seem like I skipped some things.\n- Next time I install a Artix on a new machine I will go over these steps to see if they are still valid (whenever that could be) and will document the steps fully at that time (and hopefully improve them).\n- This is for education purposes only :) -\u003e use the offical guide https://wiki.artixlinux.org/Main/Installation\n\n\n---\n\n\u003cbr\u003e\n\u003cbr\u003e\n\n# Artix Runit Hardened-Kernel \u003cbr\u003eEncrypted Partitions and Logical Volume\n\n\u003cbr\u003e\n\nfdisk /dev/sdx #create partitions\n\n#--------------------if creating logical volume--------------------\u003cbr\u003e\nvgcreate [groupName] /dev/sdx# /dev/sdy#\u003cbr\u003e\nlvcreate -l 100%FREE -n [volName] [groupName]\u003cbr\u003e\n#-------------------------------------------------------------------------\n\ncryptsetup open --type plain -d /dev/urandom /dev/sdx# wipe#\u003cbr\u003e\ndd bs=1M if=/dev/urandom of=/dev/mapper/wipe# status=progress #overkill?\n\ncryptsetup -v --type luks2 -c aes-xts-plain64 -s 512 -h sha512 -i 5000 --use-random -y luksFormat /dev/sdx#\n\n#--------------------if creating logical volume--------------------\u003cbr\u003e\n#replace '/dev/sdx#' with '/dev/[groupName]/[volName]' \u003cbr\u003e\n#in the command above and below if using logical volume\u003cbr\u003e\n#-------------------------------------------------------------------------\n\ncryptsetup open /dev/sdx# [cryptvolume]\n\nmkfs.ext4 /dev/mapper/[cryptvolume]\nmkswap /dev/mapper/[cryptSwap]\nmkfs.fat -F32 /dev/[boot partition (sdx1)]\n\nswapon /dev/mapper/[cryptSwap]\u003cbr\u003e\nmount /dev/mapper/[cryptRoot] /mnt\u003cbr\u003e\nmkdir /mnt/home /mnt/boot\u003cbr\u003e\nmount /dev/mapper/[cryptHome] /mnt/home\u003cbr\u003e\nmount /dev/mapper[cryptOther] ...  #mount the rest\u003cbr\u003e\nmount /dev/sdx1 /mnt/boot\n\nbasestrap /mnt base base-devel runit linux-hardened linux-firmware elogind-runit networkmanager-runit cryptsetup-runit grub efibootmgr vim ranger \n\n#--------------------if creating logical volume--------------------\u003cbr\u003e\n#add lvm2 to the basestrap command\u003cbr\u003e\n#-------------------------------------------------------------------------\n\nfstabgen -U /mnt \u003e\u003e /mnt/etc/fstab\n\nsed -i \"s%quiet%quiet cryptdevice=/dev/disk/by-uuid/$(lsblk -o +UUID | grep sdx2 | awk '{print $NF}'):[cryptRoot]%g\" /mnt/etc/default/grub\n\necho -e \"[cryptSwap]\\tUUID=$=$(lsblk -o +UUID | grep [root partition (sdx2)] | awk '{print $NF}')\\t/etc/KeyFile\" \u003e\u003e /mnt/etc/crypttab\n\n#repeat the previous command with [cryptHome], [cryptOther] and associated paritions\n\nartix-chroot /mnt\n\nln -sf /usr/share/zoneinfo/[country]/[city] /etc/localtime\n\nhwclock --systohc\n\necho -e 'export LANG=\"en_US.UTF-8\"\\nexport LC_COLLATE=\"c\"' \u003e\u003e /etc/locale.conf\n\nsed -i s/#en_US/en_US/g /etc/locale-gen\n\nlocale-gen\n\necho \"[hostname]\" \u003e\u003e /etc/hostname\n\nvim /etc/hosts\n\n    127.0.0.1        localhost\n    ::1              localhost\n    127.0.0.1        [hostname].localdomain        [hostname]\n    \nvim /etc/mkinitcpio.conf\n\n    #add encrypt after udev\n    #if logical volume: add lvm2 after block\n\nmkinitcpio -p linux-hardened\n\ngrub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB\n\ngrub-mkconfig -o /boot/grub/grub.cfg\n\ndd bs=512 count=4 if=/dev/urandom of=/etc/KeyFile iflag=fullblock\n\nchmod 600 /etc/KeyFile\n\ncryptsetup luksAddKey /dev/[swap partition (sdx3)] /etc/KeyFile\u003cbr\u003e\n#(and [home partition (sdx4)] + cryptother)\n\nln -s /etc/runit/sv/NetworkManager/ /etc/runit/runsvdir/current\n\npasswd\n\nuseradd -m -G wheel [username]\n\npasswd [username]\n\nexit\u003cbr\u003e\nexit\u003cbr\u003e\npoweroff now\u003cbr\u003e\n#remove usb and turn on pc\u003cbr\u003e\n\n---\n  \n    \n\n\n\n\n\n\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgithubuseraccountamazing%2Fartix-runit-hardened-kernel-encrypted-partitions","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgithubuseraccountamazing%2Fartix-runit-hardened-kernel-encrypted-partitions","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgithubuseraccountamazing%2Fartix-runit-hardened-kernel-encrypted-partitions/lists"}