1.2 KiB
1.2 KiB
Prepare Disks
You have different choices to setup encryption. This chapter describes LVM on LUKS with encrypted boot partition. Because we want to unlock all volumes at once.
List your disks with lsblk and run gdisk /dev/[your disk] e.g. gdisk /dev/nvme0n1. You can take a look at the
gdisk Arch Wiki en / de
It's crucial to use
gdiskbecause GPT is needed for UEFI boot.
Please create 4 partition like described in the Arch Wiki above with gdisk. Use the codes for the partition type.
Don't format the partitions at this time, we will do it later with the YubiKey.
The second partition contains the EFI System and must be of type FAT32. Format the second partition e.g. /dev/nvme0n1p2 with:
mkfs.fat -F32 /dev/[your disk partition 2]
The next chapter describes how to prepare the YubiKey.