archinstall

ansible/roles/archinstall/tasks/main.yml

@@ -23,6 +23,8 @@
 # cryptdevice=UUID=device-UUID:root root=/dev/mapper/root rw
 
 # add efi to /etc/fstab
+# mkdir /mnt/mountpoint/etc
+# sudo genfstab -L /mnt/mountpoint >> /mnt/mountpoint/etc/fstab
 
 
 
@@ -39,7 +41,7 @@
 
 # pacstrap
 # pacstrap -K /mnt/root base linux-lts linux-firmware nano openssh bind bash efibootmgr reflector screen pv pinentry sudo man-db man-pages texinfo ufw nftables intel-ucode e2fsprogs dosfstools curl cryptsetup
-# sbctl sbsigntools fwupd fwupd-efi dmidecode udisks2 usbutils inetutils ethtool
+# sbctl sbsigntools fwupd fwupd-efi dmidecode udisks2 usbutils inetutils ethtool qemu-guest-agent arch-install-scripts lsof
 
 # gen fstab
 # genfstab -L /mnt/root >> /mnt/root/etc/fstab
@@ -70,8 +72,6 @@
   # locale-gen
   # echo LANG=en_US.UTF-8 > /etc/locale.conf
 
-  
-
   # uncomment wheel group in /etc/sudoers
   # sed -i 's/# %wheel ALL=(ALL:ALL) ALL/%wheel ALL=(ALL:ALL) ALL/g' /etc/sudoers
 
@@ -79,8 +79,9 @@
   # useradd -u 1000 -U -m -b /home/ -G wheel -s /bin/bash ladmin
   # set new user password
 
-  # disable root password
+  # disable root user
   # passwd -l root
+  # usermod -s /sbin/nologin root
 
   # create /etc/kernel/cmdline file
   # echo 'cryptdevice=dbbb9fb2-5509-4701-a2bb-5660934a5378:root root=/dev/mapper/root rw' > /etc/kernel/cmdline
@@ -93,7 +94,11 @@
   # enable ufw firewall
   # create ufw config to allow ssh port 22
 
-  # modify mkinitcpio for encryption
+  # modify mkinitcpio presets
+  # template file?
+  # output to default efi path ESP/efi/boot/bootx64.efi
+
+  # modify mkinitcpio.conf for encryption
   # old HOOKS=(base udev autodetect modconf kms keyboard keymap consolefont block filesystems fsck)
   # new HOOKS=(base systemd keyboard autodetect modconf kms block sd-encrypt filesystems fsck)
   # sed -i 's/^HOOKS=(base udev autodetect modconf block filesystems keyboard fsck)/HOOKS=(base udev autodetect modconf block encrypt filesystems keyboard fsck)/g' /etc/mkinitcpio.conf