49 lines
1.5 KiB
Markdown
49 lines
1.5 KiB
Markdown
|
|
|
|
# manual install base
|
|
pacstrap: `pacstrap -K /mnt base base-devel linux-lts linux-firmware iwd vim e2fsprogs openssh git efibootmgr linux-lts-headers wpa_supplicant zsh`
|
|
command: `find /mnt -print0 | xargs -0 sha256sum | tee base-image.sha256sum`
|
|
- issues faced
|
|
- `/etc/kernel/cmdline:rd.luks.name=UUID=name` -- BOOT ERROR -- UUID is of superblock not LUKS container, should be correct in ansible
|
|
- `efibootmgr * --loader "PATH"` -- PATH INVALID ERROR -- PATH doesnt require mount name, oops, should be correct in ansible
|
|
history:
|
|
- me, a data horder? psshhh, nahhh
|
|
|
|
# manual install compare-to
|
|
|
|
- issues faced
|
|
- forgot to add user to sudoers, should be correct in ansible
|
|
- post gui (gnome + firefox)
|
|
- bitwarden
|
|
- gnome dark mode
|
|
|
|
# ansible install compare-three
|
|
|
|
## secrets
|
|
- bitwarden
|
|
- [x] complex password
|
|
- [ ] fingerprint / biometric phone login (==GOOGLE== make enough money for GrapheneOS)
|
|
- [ ] email (==GOOGLE EDUCATION -- UNCC email== this will be pain, make enough money for ProtonMail)
|
|
- gpg git repo
|
|
- encrypted using GPG key, commited into private git repo
|
|
- ansible_vault
|
|
- double check that default password file I created wasnt accidentally commited anywhere
|
|
- use gitBFG
|
|
|
|
## secureboot
|
|
- OEM Micro$oft leaked (lol) keys
|
|
- hashes:
|
|
- personal key
|
|
- fingerprint:
|
|
|
|
## luks / dm-crypt
|
|
- password
|
|
- backup encryption keyfile
|
|
|
|
## GPG key package signing
|
|
|
|
|
|
# other
|
|
- nebula
|
|
- pia_vpn
|