Encrypted Gentoo Install (LVM,LUKS,Plymouth)

##  MoJo's Gentoo install with LUKS, LVM and EFI

Video Tutorial:  https://youtu.be/IzUf-wFEirQ

### Disk Preparation ###

fdisk -l
parted -a optimal /dev/sda
rm (all)
	create:
	2M bios_grub
        set bios_grub on
	512M bootable
		set BOOT on
	Fill rest with LVM
		set lvm on
	Exit

mkfs.fat -F32 /dev/sda1

### LVM setup ###

cryptsetup -v -y -c aes-xts-plain64 -s 512 -h sha512 -i 5000 --use-random luksFormat /dev/sda3
type YES
Enter: passphrase
Verify

cryptsetup lucksDump /dev/sda3

cryptsetup luksOpen /dev/sda3 GentooPC
Enter passphrase

lvmdiskscan

pvcreate /dev/mapper/GentooPC

pvdisplay

vgcreate gentoo /dev/mapper/GentoPC

vgdisplay

lvcreate -C y -L 8G gentoo -n swap

lvcreate -L 50GB gentoo -n root

lvcreate -l +100%FREE gentoo -n home

lvdisplay

vgscan (may say running but disabled)

vgchange -ay (should say active now)

mkswap /dev/mapper/gentoo-swap
mkfs.ext4 /dev/mapper/gentoo-root
mkfs.ext4 /dev/mapper/gentoo-home

swapon /dev/mapper/gentoo-swap
mount /dev/mapper/gentoo-root /mnt/gentoo
mkdir /mnt/gentoo/boot
mkdir /mnt/gentoo/home
mount /dev/sda1 /mnt/boot
mount /dev/mapper/gentoo-home /mnt/gentoo/home

lsblk /dev/sda
	Should print out schematic of lvm

### Install Base System ###

cd /mnt/gentoo
links gentoo.org/main/en/mirrors.xml
	download Stage3 tarball

tar xvjpf stage3...

nano -w /mnt/gentoo/etc/portage/make.conf
	Set
		CFLAGS="-march=native..."
		ACCEPT_KEYWORDS="amd64"
		MAKE_OPTS="jXX"

		USE="cryptsetup crypt pulseaudio python icu networkmanager branding png jpeg bindist"

		VIDEO_CARDS=""
		ALSA_CARDS=""

		PORTAGE_NICENESS=10

		INPUT_DEVICES="evdev keyboard mouse"

mirrorselect -i -o >> /mnt/gentoo/etc/portage/make.conf

mkdir /mnt/gentoo/etc/portage/repos.conf
cp /mnt/gento/usr/share/portage/config/repos.conf /mnt/gentoo/etc/portage/repos.conf/gentoo.conf

cp -L /etc/resolve.conf /mnt/gentoo/etc/

mount -t proc none /mnt/gentoo/proc
mount --rbind /sys /mnt/gentoo/sys
mount --rbind /dev /mnt/gentoo/dev
mount --make-rslave /mnt/gentoo/sys
mount --make-rslave /mnt/gentoo/dev

## Prepare chroot environment with lvmetad service (needed for grub-mkconfig when using lvm)
mkdir /mnt/gentoo/hostrun
mount --bind /run /mnt/gentoo/hostrun/

chroot /mnt/gentoo /bin/bash

source /etc/profile
export PS1="(chroot) $PS1"

# Now mount lvmetad service for grub-mkconfig
mkdir /run/lvm
mount --bind /hostrun /run/lvm/

emerge-webrsync

emerge --sync

emerge profile list
emerge profile set X

emerge -av vim terminus-font

setfont ter-v24b

emerge -av gentoo-sources genkernel-next plymouth

vim /etc/fstab
	/dev/sda1						/boot	    ext2	noatime                     0 2
	/dev/mapper/gentoo-root			/			ext4	rw,relatime,data=ordered    0 1
	/dev/mapper/gentoo-home			/home		ext4	rw,relatime,data=ordered	0 2
	/dev/mapper/gentoo-swap			none		swap    defaults                    0 0

genkernel --makeopts=-j9 --menuconfig --lvm --luks all
    lvm requirements
    luks requirements (sha512,AES)

echo "sys-boot/grub mount device-mapper" > /etc/portage/package.use/grub

emerge -av grub gentoolkit

nano /etc/default/grub
	GRUB_PRELOAD_MODULES=lvm
	GRUB_ENABLE_CRYPTODISK=y
	GRUB_DEVICE=/dev/ram0
	GRUB_CMDLINE_LINUX="crypt_root=/dev/sda3 real_root=/dev/mapper/gentoo-root rootfstype=ext4 dolvm quiet splash"

grub-install --modules="linux crypto search_fs_uuid luks lvm" --recheck /dev/sda

if "could not prepare Boot variable: Read-only file system
    mount | grep efivars
        if ro,...
    mount efivars /sys/firmware/efi/efivars -o remount,rw

grub-mkconfig -o /boot/grub/grub.cfg

passwd

useradd -m -G users,wheel,audio,video -s /bin/bash msjche
passwd msjche

rm stage...

echo "4n4rch14" > /etc/hostname
vim /etc/hosts
    4n4rchia    localhost
    ""

emerge -av syslog-ng cronie dhcpcd
rc-update add syslog-ng default
rc-update add cronie default
rc-update add sshd default
rc-update add lvm boot

# Networking

emerge -av wireless-tools linux-firmware net-tools app-text/tree

tree /sys/class/net

zgrep 'IWLWIFI\|IWLDVM\|IWLMVM' /proc/config.gz
    * iwlwifi
    M iwldvm
    M iwlmvm

exit

umount -l /mnt/gentoo/dev{/shm,/pts,}
umount -R /mnt/gentoo

reboot

should see "Enter passphrase for /dev/sda2"

echo "SOLARIZED=TRUE" > /etc/eixrc/99-color
    SOLARIZED=true

## Updating Plymouth Theme

plymouth-set-default-theme --list
plymouth-set-default-theme set X

genkernel --luks --lvm initramfs
grub-mkconfig -o /boot/grub/grub.cfg