Disk preparations

1. Create two partitions (for /boot and /):

   # fdisk /dev/sda
   

   • g - create a new empty GPT partition table
   • n - add a new partition
   • t - change a partition type

2. Create / initialize usable LUKS container (and accompanying volumes):

   # cryptsetup luksFormat /dev/sda2
   # cryptsetup open /dev/sda2 luks
   # pvcreate /dev/mapper/luks
   # vgcreate encrypted /dev/mapper/luks
   # lvcreate -l 100%FREE encrypted -n rootfs
   

3. Create filesystems and mount partitions:

   # mkfs.fat -F 32 /dev/sda1                                     # /boot
   # mkfs.btrfs /dev/mapper/encrypted-rootfs                      # /
   # mount /dev/mapper/encrypted-rootfs /mnt
   # btrfs subvolume create /mnt/@
   # btrfs subvolume create /mnt/@home
   # btrfs subvolume create /mnt/@snapshots
   # umount /mnt
   
   # mount -o subvol=@ /dev/mapper/encrypted-rootfs /mnt
   # mkdir -p /mnt/home /mnt/boot
   # mount -o subvol=@home /dev/mapper/encrypted-rootfs /mnt/home
   # mount /dev/sda1 /mnt/boot
   

Install Arch Linux

1. Ensure there’s internet connectivity:

• Wired:

  # dhclient <device_name>
  

• Wireless:

  # iwctl
  # [iwd]# device list
  # [iwd]# station <device_name> scan
  # [iwd]# station <device_name> get-networks
  # [iwd]# station <device_name> connect SSID
  

2. Install base system + desired packages:

   # pacman -Sy reflector
   # reflector --country=<country_name> > /etc/pacman.d/mirrorlist
   # pacman -Sy archlinux-keyring
   # pacstrap /mnt base linux linux-firmware intel-ucode <any_other_desired_package_name>
   # genfstab -U /mnt >> /mnt/etc/fstab
   # arch-chroot /mnt
   # ln -sf /usr/share/zoneinfo/<Region>/<City> /etc/localtime
   # hwclock --systohc
   # echo 'LANG=en_US.UTF-8' > /etc/locale.gen
   # locale-gen
   # echo '<DESIRED_HOSTNAME>' > /etc/hostname
   

3. Install & configure bootloader

   # bootctl --path=/boot install
   # cat <<EOF > /boot/loader/loader.conf
   > default arch.conf
   > timeout 0
   > EOF
   
   # cat <<EOF > /boot/loader/entries/arch.conf
   > title Arch Linux
   > linux /vmlinuz-linux
   > initrd /intel-ucode.img
   > initrd /initramfs-linux.img
   > options rd.luks.name=<UUID_OF_SDA2_FS>=luks root=/dev/mapper/encrypted-rootfs rootflags=subvol=@ rd.luks.options=discard ipv6.disable=1
   > EOF
   

4. Generate initramfs:

   # sed -i 's/^HOOKS=.*$/HOOKS=(base systemd autodetect modconf keyboard block sd-encrypt lvm2 filesystems fsck)/' /etc/mkinitcpio.conf
   # mkinitcpio -p linux
   

Final bits

1. User-specific commands.

   # useradd -m username -G wheel,audio,video
   # passwd username
   $ wal --theme base16-gruvbox-hard
   

2. Install desired files in /etc:

• /etc/fstab (add tmpfs & correct [f|d]mask of /boot)
• /etc/iptables/iptables.rules
• /etc/pacman.conf
• /etc/privoxy/config
• /etc/proxychains.conf
• /etc/resolv.conf
• /etc/sudoers
• /etc/systemd/network/10-wifi.link
• /etc/systemd/network/10-wifi.network
• /etc/systemd/network/10-wired.link
• /etc/systemd/network/10-wired.network
• /etc/systemd/resolved.conf
• /etc/tlp.conf
• /etc/wpa_supplicant/wpa_supplicant-<device_name>.conf

3. Manage unit files:

   # systemctl enable fstrim.timer
   # systemctl enable btrfs-scrub@-.timer
   # systemctl enable systemd-networkd.service
   # systemctl enable systemd-resolved.service
   # systemctl enable systemd-timesyncd.service
   # systemctl enable wpa_supplicant@<device_name>.service
   # systemctl enable iptables.service
   # systemctl enable privoxy.service
   # systemctl enable tlp.service
   # systemctl disable bluetooth.service