DeadlySquad13 DeadlySquad13

Arch Install Guide 2025 - PART 1

Secure Boot and Encrypted Device

Precursor

This guide will install Arch Linux on a Secure Boot enabled drive using block level at-rest LUKS encryption with passwordless unlocking using TPM. TPM will issue an passkey if and only if Secure Boot is enabled and the system firmware has not been altered. We will also be creating a unified kernel image so that we can boot Linux directly in the EFI partition without requiring a boot loader.

We will also be creating a backup key to enable booting of the drive in case of BIOS upgrade or other event that may make TPM not serve the key. The code should obviously be stored securely elsewhere off system.

	local fmt = string.format

	-- Iterator that splits a string o a given delimiter
	local function split(str, delim)
	delim = delim or "%s"
	return string.gmatch(str, fmt('[^%s]+', delim))
	end

	-- Find the proper directory separator depending
	-- on lua installation or OS.

	// double click on a card, or select a card and press e, to edit it
	document.addEventListener('keyup', (e) => {
	if (e.key === 'e' && document.activeElement?.classList.contains('project-card')) {
	const buttons = document.activeElement.querySelectorAll('details button[role=menuitem]');
	for (const btn of buttons) {
	if (btn.textContent === 'Edit note') btn.click();
	}
	}
	});

	#!/bin/bash

	# Colors definitions
	RED='\033[0;31m'
	GREEN='\033[0;32m'
	NC='\033[0m' # No Color
	BOLD=$(tput bold)
	NORMAL=$(tput sgr0)

	# Check if necessary applications are installed