Void Linux
2024-10-24
Install on encrypted Btrfs
Source: Void Linux Installation Guide
First, update xbps.
xbps-install -Syu xbps
Partition disk
Install gptfdisk
.
xbps-install -Sy gptfdisk
Run gdisk.
gdisk /dev/nvme1n1
Create the following partitions:
Partition Type | Size |
---|---|
EFI | +600M |
boot | +900M |
root | Remaining space |
Create the filesystems.
mkfs.vfat -nBOOT -F32 /dev/nvme1n1p1
mkfs.ext4 -L grub /dev/nvme1n1p2
cryptsetup luksFormat --type=luks -s=512 /dev/nvme1n1p3
cryptsetup open /dev/nvme1n1p3 cryptroot
mkfs.btrfs -L void /dev/mapper/cryptroot
Mount partitions and create Btrfs subvolumes.
mount -o defaults,compress=zstd:1 /dev/mapper/cryptroot /mnt
btrfs subvolume create /mnt/root
btrfs subvolume create /mnt/home
umount /mnt
mount -o defaults,compress=zstd:1,subvol=root /dev/mapper/cryptroot /mnt
mkdir /mnt/home
mount -o defaults,compress=zstd:1,subvol=home /dev/mapper/cryptroot /mnt/home
Create Btrfs subvolumes for parts of the filesystem to exclude from snapshots. Nested subvolumes are not included in snapshots.
mkdir -p /mnt/var/cache
btrfs subvolume create /mnt/var/cache/xbps
btrfs subvolume create /mnt/var/tmp
btrfs subvolume create /mnt/srv
btrfs subvolume create /mnt/var/swap
Mount EFI and boot partitions.
mkdir /mnt/efi
mount -o rw,noatime /dev/nvme1n1p1 /mnt/efi
mkdir /mnt/boot
mount -o rw,noatime /dev/nvme1n1p2 /mnt/boot
Base system installation
If using x86_64
:
REPO=https://mirrors.hyperreal.coffee/voidlinux/current
ARCH=x86_64
If using musl:
REPO=https://mirrors.hyperreal.coffee/voidlinux/current/musl
ARCH=x86_64-musl
Install the base system.
XBPS_ARCH=$ARCH xbps-install -S -R "$REPO" -r /mnt base-system base-devel btrfs-progs cryptsetup vim sudo dosfstools mtools void-repo-nonfree
chroot
Mount the pseudo filesystems for the chroot.
for dir in dev proc sys run; do mount --rbind /$dir /mnt/$dir; mount --make-rslave /mnt/$dir; done
Copy DNS configuration.
cp -v /etc/resolv.conf /mnt/etc/
Chroot.
PS1='(chroot) # ' chroot /mnt/ /bin/bash
Set hostname.
echo "hostname" > /etc/hostname
Set timezone.
ln -sf /usr/share/zoneinfo/America/Chicago /etc/localtime
Synchronize the hardware clock.
hwclock --systohc
If using glibc, uncomment en_US.UTF-8
from /etc/default/libc-locales
. Then run:
xbps-reconfigure -f glibc-locales
Set root password.
passwd root
Configure /etc/fstab
.
UEFI_UUID=$(blkid -s UUID -o value /dev/nvme1n1p1)
GRUB_UUID=$(blkid -s UUID -o value /dev/nvme1n1p2)
ROOT_UUID=$(blkid -s UUID -o value /dev/mapper/cryptroot)
cat << EOF > /etc/fstab
UUID=$ROOT_UUID / btrfs defaults,compress=zstd:1,subvol=root 0 1
UUID=$UEFI_UUID /efi vfat defaults,noatime 0 2
UUID=$GRUB_UUID /boot ext4 defaults,noatime 0 2
UUID=$ROOT_UUID /home btrfs defaults,compress=zstd:1,subvol=home 0 2
tmpfs /tmp tmpfs defaults,nosuid,nodev 0 0
EOF
Setup Dracut. A “hostonly” install means that Dracut will generate a lean initramfs with everything you need.
echo "hostonly=yes" >> /etc/dracut.conf
If you have an Intel CPU:
xbps-install -Syu intel-ucode
Install GRUB.
xbps-install -Syu grub-x86_64-efi os-prober
grub-install --target=x86_64-efi --efi-directory=/efi --bootloader-id="Void Linux"
If you are dual-booting with another OS:
echo "GRUB_DISABLE_OS_PROBER=0" >> /etc/default/grub
Setup encrypted swapfile.
truncate -s 0 /var/swap/swapfile
chattr +C /var/swap/swapfile
chmod 600 /var/swap/swapfile
dd if=/dev/zero of=/var/swap/swapfile bs=1G count=16 status=progress
mkswap /var/swap/swapfile
swapon /var/swap/swapfile
RESUME_OFFSET=$(btrfs inspect-internal map-swapfile -r /var/swap/swapfile)
cat << EOF >> /etc/default/grub
GRUB_CMDLINE_LINUX="resume=UUID-$ROOT_UUID resume_offset=$RESUME_OFFSET"
EOF
Regenerate configurations.
xbps-reconfigure -fa
Install Xorg and Xfce.
xbps-install -Syu xorg xfce4
If you have a recent Nvidia GPU:
xbps-install -Syu nvidia
Add user.
useradd -c "Jeffrey Serio" -m -s /usr/bin/zsh -U jas
passwd jas
echo "jas ALL=(ALL) NOPASSWD: ALL" | tee -a /etc/sudoers.d/jas
Enable system services.
for svc in "NetworkManager" "crond" "dbus" "lightdm" "ntpd" "snapperd" "sshd"; do
ln -sf /etc/sv/$svc /var/service;
done
Disable bitmap fonts.
ln -sf /usr/share/fontconfig/conf.avail/70-no-bitmaps.conf /etc/fonts/conf.d/
xbps-reconfigure -f fontconfig
Setup package repository.
echo "repository=https://mirrors.hyperreal.coffee/voidlinux/current" | tee /etc/xbps.d/00-repository-main.conf
# For musl
echo "repository=https://mirrors.hyperreal.coffee/voidlinux/current/musl" | tee /etc/xbps.d/00-repository-main.conf
Setup Pipewire for audio.
mkdir -p /etc/pipewire/pipewire.conf.d
ln -sf /usr/share/examples/wireplumber/10-wireplumber.conf /etc/pipewire/pipewire.conf.d/
ln -sf /usr/share/applications/pipewire.desktop /etc/xdg/autostart/
Generate configurations.
xbps-reconfigure -fa
Exit chroot, unmount disks, and reboot.
exit
umount -lR /mnt
reboot